$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft File: lGqi80z6-eS9bjRboJqd6bnC0U0.mft (raw, json) Hash identifier: EHw7LDynB2ZVa0dvYGk0IH7WwzdmWcr25hpzCpL/ZXY= Subject key identifier: 72:23:9F:57:FC:DF:AF:2E:56:13:C3:2F:C8:A0:F9:29:7F:4B:73:06 Authority key identifier: 94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D Certificate issuer: /CN=A91CAA69/serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D Certificate serial: 0D91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft Manifest number: 0D83 Signing time: Thu 02 May 2024 18:38:51 +0000 Manifest this update: Thu 02 May 2024 18:38:50 +0000 Manifest next update: Thu 09 May 2024 18:38:50 +0000 Files and hashes: 1: lGqi80z6-eS9bjRboJqd6bnC0U0.crl (hash: P7pfeY5GIor2inbgUtV/sN+YuEGzr44AJBSWFzzi8kY=) 2: 1FAB60EE9EB111E99ED10D84C4F9AE02.roa (hash: Ro2TBCoOvqNYKcY9yM3cP6moWqnC6oV3HDt4ZFiaByw=) 3: DECBB040985611ECBE7ED328C4F9AE02.roa (hash: 9idr4hMEjqRY5wM+deucWAwZdEbuhbDvaDiXQBgXJls=) 4: DF5D49F6985611ECBE7ED328C4F9AE02.roa (hash: Jye8x95uFjD/OaUFMn6lb2ErVEwMFKU3iECzbKAX1vQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3473 (0xd91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAA69/serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D Validity Not Before: May 2 18:38:50 2024 GMT Not After : May 9 18:38:50 2024 GMT Subject: CN=6633ddba-2ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f2:e1:1d:c9:b0:9e:ae:00:db:73:5c:cf:14: 42:43:d7:6b:d8:dc:82:e3:aa:f0:58:f0:3f:dc:fd: 96:bf:9f:29:98:5e:1e:5c:83:69:86:cc:0a:15:36: 4e:a9:c1:27:d5:97:93:f1:d1:1d:45:97:de:f1:80: 60:b9:38:44:f3:5c:80:aa:f8:72:6b:9a:f5:6c:c5: e4:8e:1b:f4:f1:db:70:44:9a:6d:f2:fb:72:a7:70: db:97:a4:3f:ea:b1:a2:f3:d5:0b:3a:27:3a:42:1b: 11:81:91:27:70:76:72:99:32:5b:18:e1:51:d7:b6: ca:ba:57:18:dc:6e:03:5a:53:70:8a:41:d0:ee:59: 76:40:5e:66:4e:08:c3:a8:d6:df:6a:65:6c:e0:47: 65:9e:17:93:5e:63:67:2c:8f:d4:55:7f:f0:62:9d: 76:b5:b9:ea:10:37:e5:a1:4e:c4:32:13:f2:b9:f6: 2a:f6:8b:0c:e5:20:4f:9a:e6:a7:56:2d:0f:f6:73: 25:fe:02:f8:fd:52:ec:aa:a4:de:2d:87:94:4e:3c: 54:30:3f:90:9a:6f:9f:bd:4a:17:f9:05:e9:df:c8: 88:ae:c4:5c:fd:a5:14:68:bf:97:70:ab:0d:26:e5: 62:06:bb:df:00:8b:22:18:30:23:31:49:38:13:d9: 54:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:23:9F:57:FC:DF:AF:2E:56:13:C3:2F:C8:A0:F9:29:7F:4B:73:06 X509v3 Authority Key Identifier: keyid:94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:b2:98:06:de:91:92:c3:a6:c9:bd:c8:58:c4:9a:5d:17:3e: 48:43:59:f1:16:27:a8:36:6e:cf:73:87:e5:69:8a:f9:84:0e: c5:18:fe:bb:dc:e4:6a:2f:70:4b:2b:1f:e0:72:5d:1b:cb:f3: f0:34:62:02:90:56:78:b2:da:73:55:b2:fa:5d:a0:db:80:65: f9:4b:45:e2:49:32:83:2e:38:7c:8b:1c:f3:2f:90:81:55:98: ff:dc:af:f1:9f:72:35:1c:7e:64:60:01:19:ae:ee:b7:b1:b2: d1:d0:ab:5b:64:5f:95:b2:76:d7:42:18:6f:71:b1:80:35:70: fe:15:ee:2e:ba:fe:b8:07:8e:b0:bf:57:c8:08:0d:c9:69:ed: dd:bc:b0:0e:30:b0:1c:1d:25:72:eb:5b:03:fb:89:fe:33:92: 18:e8:cc:76:71:04:82:e9:d1:ab:bb:85:fa:5e:c9:5e:de:5f: 9b:a2:38:f4:7a:91:3b:75:5e:52:76:67:e4:eb:2a:94:2e:7b: 19:e9:f8:51:7f:eb:78:0a:9d:9e:c1:3a:4d:aa:89:dc:50:f0: bb:e9:d9:14:db:d0:17:9b:b6:60:ef:87:bc:f2:cb:cf:24:36: 14:56:0f:e0:e2:4f:28:ae:64:ab:57:03:a5:dd:6d:7f:e8:94: fa:4b:b0:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FBNjkxMTAvBgNVBAUTKDk0NkFBMkYzNENGQUY5RTRCRDZFMzQ1QkEwOUE5REU5 QjlDMkQxNEQwHhcNMjQwNTAyMTgzODUwWhcNMjQwNTA5MTgzODUwWjAYMRYwFAYD VQQDEw02NjMzZGRiYS0yY2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PLhHcmwnq4A23NczxRCQ9dr2NyC46rwWPA/3P2Wv58pmF4eXINphswKFTZO qcEn1ZeT8dEdRZfe8YBguThE81yAqvhya5r1bMXkjhv08dtwRJpt8vtyp3Dbl6Q/ 6rGi89ULOic6QhsRgZEncHZymTJbGOFR17bKulcY3G4DWlNwikHQ7ll2QF5mTgjD qNbfamVs4EdlnheTXmNnLI/UVX/wYp12tbnqEDfloU7EMhPyufYq9osM5SBPmuan Vi0P9nMl/gL4/VLsqqTeLYeUTjxUMD+Qmm+fvUoX+QXp38iIrsRc/aUUaL+XcKsN JuViBrvfAIsiGDAjMUk4E9lUNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHIjn1f8 368uVhPDL8ig+Sl/S3MGMB8GA1UdIwQYMBaAFJRqovNM+vnkvW40W6Canem5wtFN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUE2OS80MEUxRkM5QzlF QjAxMUU5QjA3RTdBODJDNEY5QUUwMi9sR3FpODB6Ni1lUzlialJib0pxZDZibkMw VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xHcWk4MHo2LWVTOWJqUmJvSnFkNmJuQzBVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUE2OS80MEUxRkM5QzlFQjAxMUU5QjA3RTdBODJDNEY5QUUwMi9sR3FpODB6Ni1l UzlialJib0pxZDZibkMwVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKspgG3pGSw6bJvchYxJpdFz5IQ1nxFieoNm7Pc4flaYr5hA7FGP67 3ORqL3BLKx/gcl0by/PwNGICkFZ4stpzVbL6XaDbgGX5S0XiSTKDLjh8ixzzL5CB VZj/3K/xn3I1HH5kYAEZru63sbLR0KtbZF+VsnbXQhhvcbGANXD+Fe4uuv64B46w v1fICA3Jae3dvLAOMLAcHSVy61sD+4n+M5IY6Mx2cQSC6dGru4X6Xsle3l+bojj0 epE7dV5Sdmfk6yqULnsZ6fhRf+t4Cp2ewTpNqoncUPC76dkU29AXm7Zg74e88svP JDYUVg/g4k8ormSrVwOl3W1/6JT6S7C5 -----END CERTIFICATE-----Generated at Thu May 2 20:04:59 2024 by rpki-client on console-ams.rpki-client.org