$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft File: ldziG17K3rBp3IG5JAXUdN5BwgY.mft (raw, json) Hash identifier: Z3Wu01vrtQw3kPG0Gn1PA54sZEcLioqauf7f6kdUdqE= Subject key identifier: 66:FC:79:D7:32:25:A3:64:B7:E4:4D:AD:25:39:36:19:22:42:1D:F2 Authority key identifier: 95:DC:E2:1B:5E:CA:DE:B0:69:DC:81:B9:24:05:D4:74:DE:41:C2:06 Certificate issuer: /CN=A91CD174/serialNumber=95DCE21B5ECADEB069DC81B92405D474DE41C206 Certificate serial: 0B67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft Manifest number: 0B5D Signing time: Sat 04 May 2024 19:46:57 +0000 Manifest this update: Sat 04 May 2024 19:46:56 +0000 Manifest next update: Sat 11 May 2024 19:46:56 +0000 Files and hashes: 1: ldziG17K3rBp3IG5JAXUdN5BwgY.crl (hash: DQkRF/w7GGFbrr6wmBTDsNjn+qk4tRJEFgVVFAgIPr8=) 2: 54AD60AE0C2E11EABBBFA158C4F9AE02.roa (hash: xVTFBNmOi1HL5rDX7+M+vUXncg1h8s61EzgOhvnvgE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.crl rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2919 (0xb67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD174/serialNumber=95DCE21B5ECADEB069DC81B92405D474DE41C206 Validity Not Before: May 4 19:46:56 2024 GMT Not After : May 11 19:46:56 2024 GMT Subject: CN=663690b0-eb2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:16:99:86:01:5d:7a:7a:02:e2:c3:61:a3:26: 71:42:03:4f:ca:fd:99:75:a5:71:74:46:c6:4f:36: 00:94:11:eb:30:03:b0:65:3e:29:3e:4c:22:6c:21: c0:3e:ce:03:ae:49:68:02:3a:d1:82:fa:bb:47:af: 24:5c:81:bc:9e:c4:33:0d:02:1b:24:53:3d:08:14: 05:9a:08:55:49:b1:c6:4d:29:34:0c:59:73:8d:33: c8:bf:a7:6d:cb:8a:ad:59:1e:c5:f1:37:b0:1c:01: 3e:f6:b6:af:86:e2:d7:24:6d:ae:14:79:38:69:f5: 64:67:20:d5:b0:85:c6:49:37:8a:b4:6c:7d:a3:6c: 98:18:b0:d7:a7:98:c6:ce:24:37:f9:f2:8d:b1:37: 35:a5:7b:ce:df:34:55:63:94:1d:1b:18:21:73:f9: d9:d3:f3:c7:1a:38:09:da:04:1c:91:e5:92:78:21: f2:78:7e:fd:98:04:6c:8a:1b:20:67:94:31:fa:a3: 04:d7:b6:7e:20:bd:c9:41:90:be:5f:00:4b:41:13: 44:30:02:fe:ce:dc:6c:7a:a3:13:ff:cc:77:4a:7c: 3f:12:ad:ab:42:c6:73:19:f0:15:28:96:17:c9:b2: 76:1b:4b:b0:42:03:8e:b3:27:8a:37:82:55:5b:96: e7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FC:79:D7:32:25:A3:64:B7:E4:4D:AD:25:39:36:19:22:42:1D:F2 X509v3 Authority Key Identifier: keyid:95:DC:E2:1B:5E:CA:DE:B0:69:DC:81:B9:24:05:D4:74:DE:41:C2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldziG17K3rBp3IG5JAXUdN5BwgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD174/51C3E5480B4D11EA92C28F20C4F9AE02/ldziG17K3rBp3IG5JAXUdN5BwgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:d7:0e:f6:ed:ed:5b:b4:13:ba:05:bf:db:1a:be:06:a7:48: 9c:a3:1f:0c:42:fd:b7:31:6e:36:f6:e6:86:d0:53:e0:ed:c1: ec:8f:b4:db:c2:8a:8f:bd:d9:de:c8:9c:eb:c6:23:47:37:58: 29:5c:ca:04:04:55:0a:12:21:99:f3:34:18:aa:e5:9f:b6:f9: 8a:fa:58:c5:43:da:53:75:92:19:d4:85:a4:3d:3c:b2:7a:79: f0:07:a3:f5:6d:5b:b2:a5:df:57:58:37:36:0a:9c:85:64:50: 6e:31:28:23:eb:f3:d7:5e:35:9a:a2:a0:04:3a:94:6f:3f:d4: 70:0f:31:0a:a1:d8:fc:8c:d8:8c:60:bd:77:55:4d:36:1b:f1: 33:06:f5:24:29:6c:d2:ed:98:28:00:f9:f9:1a:ee:d1:79:39: 92:b3:ca:34:4c:25:ed:c3:dc:c8:8f:63:ab:f1:c0:6d:f2:f6: a5:4a:26:0b:b6:4e:63:d1:ca:3f:7c:28:2f:94:45:7b:fc:a8: 52:a8:e5:16:c7:2c:1c:cd:ca:8b:c6:49:61:07:c6:ac:ea:ad: 1e:9e:f0:5a:c5:97:c7:6c:90:c7:38:c3:6d:cb:9a:f2:c6:c7: 45:d1:4d:8a:5a:d0:94:0e:cf:34:9a:05:f3:55:65:64:9e:46: 39:40:99:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxNzQxMTAvBgNVBAUTKDk1RENFMjFCNUVDQURFQjA2OURDODFCOTI0MDVENDc0 REU0MUMyMDYwHhcNMjQwNTA0MTk0NjU2WhcNMjQwNTExMTk0NjU2WjAYMRYwFAYD VQQDEw02NjM2OTBiMC1lYjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxaZhgFdenoC4sNhoyZxQgNPyv2ZdaVxdEbGTzYAlBHrMAOwZT4pPkwibCHA Ps4DrkloAjrRgvq7R68kXIG8nsQzDQIbJFM9CBQFmghVSbHGTSk0DFlzjTPIv6dt y4qtWR7F8TewHAE+9ravhuLXJG2uFHk4afVkZyDVsIXGSTeKtGx9o2yYGLDXp5jG ziQ3+fKNsTc1pXvO3zRVY5QdGxghc/nZ0/PHGjgJ2gQckeWSeCHyeH79mARsihsg Z5Qx+qME17Z+IL3JQZC+XwBLQRNEMAL+ztxseqMT/8x3Snw/Eq2rQsZzGfAVKJYX ybJ2G0uwQgOOsyeKN4JVW5bnsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGb8edcy JaNkt+RNrSU5NhkiQh3yMB8GA1UdIwQYMBaAFJXc4hteyt6wadyBuSQF1HTeQcIG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDE3NC81MUMzRTU0ODBC NEQxMUVBOTJDMjhGMjBDNEY5QUUwMi9sZHppRzE3SzNyQnAzSUc1SkFYVWRONUJ3 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkemlHMTdLM3JCcDNJRzVKQVhVZE41QndnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDE3NC81MUMzRTU0ODBCNEQxMUVBOTJDMjhGMjBDNEY5QUUwMi9sZHppRzE3SzNy QnAzSUc1SkFYVWRONUJ3Z1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC1w727e1btBO6Bb/bGr4Gp0icox8MQv23MW429uaG0FPg7cHsj7Tb woqPvdneyJzrxiNHN1gpXMoEBFUKEiGZ8zQYquWftvmK+ljFQ9pTdZIZ1IWkPTyy ennwB6P1bVuypd9XWDc2CpyFZFBuMSgj6/PXXjWaoqAEOpRvP9RwDzEKodj8jNiM YL13VU02G/EzBvUkKWzS7ZgoAPn5Gu7ReTmSs8o0TCXtw9zIj2Or8cBt8valSiYL tk5j0co/fCgvlEV7/KhSqOUWxywczcqLxklhB8as6q0envBaxZfHbJDHOMNty5ry xsdF0U2KWtCUDs80mgXzVWVknkY5QJl6 -----END CERTIFICATE-----Generated at Sat May 4 21:19:32 2024 by rpki-client on console-ams.rpki-client.org