$ rpki-client -vvf rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft File: sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft (raw, json) Hash identifier: GPgjrBo9IbyJDV+C9/LsPn3smTTT1yKzDpDabBTviMU= Subject key identifier: 97:B9:1B:C1:F9:B4:68:E9:ED:36:C6:5A:35:A2:C1:C2:BD:B3:2A:FA Authority key identifier: B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2 Certificate issuer: /CN=A91C90F3/serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2 Certificate serial: 07A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft Manifest number: 07A0 Signing time: Thu 02 May 2024 22:18:30 +0000 Manifest this update: Thu 02 May 2024 22:18:29 +0000 Manifest next update: Thu 09 May 2024 22:18:29 +0000 Files and hashes: 1: sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl (hash: uPUT9Eq6UwmiwSYjU4FxhHF/br0DRWnKWJqDYKfZFR8=) 2: E67EF1B25F0311ECBB273637C4F9AE02.roa (hash: 4oBxKLYesM3sWZKVveFALJuU9Ca/e2wCq6dTaipkUsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1959 (0x7a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C90F3/serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2 Validity Not Before: May 2 22:18:29 2024 GMT Not After : May 9 22:18:29 2024 GMT Subject: CN=66341135-d416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:65:1c:65:ae:0c:b1:d5:ce:53:b3:7c:77:ab: 0f:d6:d3:57:19:c4:5f:1a:e7:a6:a7:8e:4b:17:f1: 3e:4a:4a:96:b4:55:eb:bf:df:8f:68:d8:46:a5:41: fd:de:fc:63:43:f4:55:c5:cc:98:c0:72:74:92:34: c4:00:d4:5f:31:d7:a2:50:cd:5a:d0:5a:a5:d2:69: 53:89:cc:c1:f3:68:db:c0:6f:b6:d8:55:2e:fb:45: 27:54:e4:db:a6:76:88:41:12:0b:03:93:96:91:fc: 06:d4:9b:91:01:7d:4f:65:d9:59:d7:5c:5b:c9:9b: 26:3f:e2:fe:06:51:11:4e:c4:90:5b:1f:3f:e1:3a: e9:36:76:e2:1f:ef:d6:41:66:87:62:5b:c8:07:48: 0f:27:8f:0f:d7:55:a3:a9:03:4f:ab:8b:f5:bd:c7: 01:e4:36:18:6e:eb:06:24:59:a8:f7:f1:1d:f2:d9: c3:a0:dd:02:6c:48:01:60:f8:df:81:aa:3f:2d:42: 79:26:34:ec:41:a8:96:93:31:14:d5:f0:7f:89:db: 83:44:bb:ae:e7:21:f9:0a:0a:da:96:21:a3:6e:49: a6:95:24:fc:b8:8b:9b:f8:e9:ad:40:f4:d2:69:c3: 28:cc:8b:36:d1:85:40:78:09:bc:f3:f5:43:4f:5c: 02:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B9:1B:C1:F9:B4:68:E9:ED:36:C6:5A:35:A2:C1:C2:BD:B3:2A:FA X509v3 Authority Key Identifier: keyid:B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:96:e5:2f:30:ce:f9:94:ed:25:0b:18:b1:d6:d9:b3:e9:cf: c7:d4:3a:1a:0d:8d:ec:f0:b3:d1:b3:bc:56:21:45:90:cf:4d: 89:c8:b6:c1:ca:e7:5c:ae:36:46:30:0e:7d:67:aa:0a:f0:af: 4f:5e:cb:83:66:99:b1:7f:6f:c1:7c:64:35:23:b2:4d:2c:06: 45:e8:b8:80:7c:9f:a8:f6:35:31:b0:32:f6:01:9d:fa:c1:ff: 92:fa:8e:28:c2:db:62:23:0f:c9:64:bd:13:b9:82:2c:5b:80: 35:4c:16:cc:19:36:8e:26:e4:d9:34:95:23:22:c4:47:6f:03: 6a:9e:af:b1:0e:b2:cf:e5:0a:0b:31:4e:41:7a:ca:5a:99:af: 7e:1c:f1:b3:c3:8d:aa:41:f0:b3:1f:7b:93:dd:fb:8a:5c:4a: 90:e7:44:4a:df:51:cb:20:54:65:2c:7c:f4:e9:b0:b9:cf:8b: 0c:39:a1:59:e0:ac:b7:92:35:ef:df:8d:69:ab:38:6f:51:1f: 6d:66:80:f1:9a:84:1a:2d:03:cd:80:d1:34:67:4a:fa:32:e4: 71:cb:43:c7:cb:f2:1a:75:62:e7:01:ad:81:aa:9b:e1:e5:c0: 46:67:79:36:35:f9:4e:67:4a:3a:97:48:93:0f:03:9e:c3:52: fe:b7:c3:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkwRjMxMTAvBgNVBAUTKEIwQjQwMDc2NTJGQjNEMTQzMjg4MTNCM0U1N0VFRkYx Nzc1OUNGRjIwHhcNMjQwNTAyMjIxODI5WhcNMjQwNTA5MjIxODI5WjAYMRYwFAYD VQQDEw02NjM0MTEzNS1kNDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnmUcZa4MsdXOU7N8d6sP1tNXGcRfGuemp45LF/E+SkqWtFXrv9+PaNhGpUH9 3vxjQ/RVxcyYwHJ0kjTEANRfMdeiUM1a0Fql0mlTiczB82jbwG+22FUu+0UnVOTb pnaIQRILA5OWkfwG1JuRAX1PZdlZ11xbyZsmP+L+BlERTsSQWx8/4TrpNnbiH+/W QWaHYlvIB0gPJ48P11WjqQNPq4v1vccB5DYYbusGJFmo9/Ed8tnDoN0CbEgBYPjf gao/LUJ5JjTsQaiWkzEU1fB/iduDRLuu5yH5CgraliGjbkmmlST8uIub+OmtQPTS acMozIs20YVAeAm88/VDT1wCwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJe5G8H5 tGjp7TbGWjWiwcK9syr6MB8GA1UdIwQYMBaAFLC0AHZS+z0UMogTs+V+7/F3Wc/y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTBGMy84RTFDMUU3NkM1 NUExMUVBQTkyMzFGNjdDNEY5QUUwMi9zTFFBZGxMN1BSUXlpQk96NVg3djhYZFp6 X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NMUUFkbEw3UFJReWlCT3o1WDd2OFhkWnpfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTBGMy84RTFDMUU3NkM1NUExMUVBQTkyMzFGNjdDNEY5QUUwMi9zTFFBZGxMN1BS UXlpQk96NVg3djhYZFp6X0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2luUvMM75lO0lCxix1tmz6c/H1DoaDY3s8LPRs7xWIUWQz02JyLbB yudcrjZGMA59Z6oK8K9PXsuDZpmxf2/BfGQ1I7JNLAZF6LiAfJ+o9jUxsDL2AZ36 wf+S+o4owttiIw/JZL0TuYIsW4A1TBbMGTaOJuTZNJUjIsRHbwNqnq+xDrLP5QoL MU5Bespama9+HPGzw42qQfCzH3uT3fuKXEqQ50RK31HLIFRlLHz06bC5z4sMOaFZ 4Ky3kjXv341pqzhvUR9tZoDxmoQaLQPNgNE0Z0r6MuRxy0PHy/IadWLnAa2Bqpvh 5cBGZ3k2NflOZ0o6l0iTDwOew1L+t8OK -----END CERTIFICATE-----Generated at Thu May 2 23:19:02 2024 by rpki-client on console-ams.rpki-client.org