$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft File: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft (raw, json) Hash identifier: Cq0JIaVxgyuvXGMqRIiL1rs4CuVe8XAr+6eKctZzkFA= Subject key identifier: D1:D6:33:B4:A6:E5:44:21:5E:C0:1F:54:C3:52:B7:85:76:C1:1F:61 Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C Certificate issuer: /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Certificate serial: 0352 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft Manifest number: 0340 Signing time: Fri 03 May 2024 03:04:02 +0000 Manifest this update: Fri 03 May 2024 03:04:02 +0000 Manifest next update: Fri 10 May 2024 03:04:02 +0000 Files and hashes: 1: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl (hash: Ljhq9jiltfrilkMjxpD0OEa+AUCwsL7pr7TudN+p1FM=) 2: 0252B276D10711EE80DDFA5FC4F9AE02.roa (hash: ljpVfhGkQcqyCyy6QYs7XJYkpqPOcl6hX7xoxsXnqVs=) 3: A8827568116911EEBB241C32C4F9AE02.roa (hash: Qc67Zl9xH5UQVVuJaiSmRCShgX4fnvxw7leOq59EYpg=) 4: 8BA87150D10711EE8A757976C4F9AE02.roa (hash: HQ8PoKA7J1OoTe2Ioi360r/95b+SHPxrvwIHfzaOrgo=) 5: A6FA9A4A116911EEBB241C32C4F9AE02.roa (hash: qtIjXGWFBwLcXf/7DCnDMfdtxosWwEooU8YqRW4JUKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:04:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 850 (0x352) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Validity Not Before: May 3 03:04:02 2024 GMT Not After : May 10 03:04:02 2024 GMT Subject: CN=66345422-e754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:08:88:fe:04:02:b2:17:82:be:6f:4c:48:7c: eb:77:f5:4a:b7:26:78:ce:ff:44:d1:82:10:5e:1c: 0f:4e:1e:90:ed:2a:db:07:80:18:57:96:59:05:aa: 65:51:53:c7:4f:25:ae:da:81:9b:df:84:5b:30:e0: d8:9f:94:90:b4:e3:d4:b2:05:5a:06:ab:6b:6d:a9: 99:ac:42:0f:13:ef:c2:fe:39:29:17:69:65:66:64: 30:60:33:45:f1:b5:02:45:0e:8c:4d:bf:d3:91:71: 14:1e:6a:cf:19:98:93:e0:ac:d2:af:bf:4b:7d:08: b0:57:72:d1:8a:1b:2b:af:e3:e2:58:71:12:a6:d0: e4:0c:19:ac:cd:8e:8f:d0:71:16:b9:a3:f3:bd:73: 40:bc:7b:c2:01:ef:89:5e:54:18:54:40:56:b5:df: fc:45:bf:2d:97:3f:fa:14:3b:4f:00:d3:07:72:64: 81:9b:0d:51:6c:fc:f2:2e:5e:f2:84:76:b5:ec:07: 00:ea:99:fa:2e:e4:60:e2:84:3b:ba:04:cd:db:21: f4:fa:84:9f:ca:a6:9f:66:31:52:21:bb:71:91:5b: f8:a1:41:be:b0:4c:11:80:d9:10:28:6a:8e:61:f7: 36:5b:ba:69:63:60:4c:eb:cd:bd:1a:14:6e:2e:dd: e3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D6:33:B4:A6:E5:44:21:5E:C0:1F:54:C3:52:B7:85:76:C1:1F:61 X509v3 Authority Key Identifier: keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:82:6b:c8:f4:a1:57:58:0c:cc:73:51:28:13:9d:8c:c0:20: 92:03:9e:04:d9:38:1e:aa:2d:c7:28:49:65:76:66:6e:87:58: 4a:72:9b:38:8e:0f:00:0d:73:b1:5f:68:82:b8:31:3f:69:13: 30:ed:35:bd:1a:66:ec:4b:2e:3d:a8:f6:80:80:7d:19:91:b2: 51:27:2e:1a:92:e1:52:97:cd:cf:d9:be:25:a9:95:9c:bd:be: 9e:43:98:66:3e:d8:54:34:51:34:c6:a5:47:b7:34:f6:bc:4f: d7:a6:a1:a5:30:75:ed:10:2d:44:d5:94:56:56:69:30:35:d6: 21:c2:0c:5d:ba:24:78:f8:6b:0f:4e:19:e5:d4:fe:a0:60:75: 86:48:8a:9d:ff:8a:2a:ce:e0:52:b4:a4:e4:20:22:2b:77:39: b1:e8:47:69:23:c5:16:0b:48:2b:2c:5b:31:a4:32:40:15:90: 30:56:35:07:30:bd:ee:c9:46:9f:70:74:ca:6c:73:8b:5f:66: 3a:b1:2d:02:ff:16:24:9d:03:d9:e1:17:0b:73:65:f3:b1:5e: 44:f6:d1:50:d4:5b:9b:49:94:c4:53:3e:6d:40:7f:f9:e7:16: 8a:92:f5:b7:b1:25:6b:f9:d1:21:d0:11:5e:f7:8c:0f:97:f0: 7b:5f:4c:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBDOEUxMTAvBgNVBAUTKDk1MzVENzYxMTBCM0MwMjlDNTg1NUI0QzE3NDUwNUFG NjExOUYzMEMwHhcNMjQwNTAzMDMwNDAyWhcNMjQwNTEwMDMwNDAyWjAYMRYwFAYD VQQDEw02NjM0NTQyMi1lNzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3giI/gQCsheCvm9MSHzrd/VKtyZ4zv9E0YIQXhwPTh6Q7SrbB4AYV5ZZBapl UVPHTyWu2oGb34RbMODYn5SQtOPUsgVaBqtrbamZrEIPE+/C/jkpF2llZmQwYDNF 8bUCRQ6MTb/TkXEUHmrPGZiT4KzSr79LfQiwV3LRihsrr+PiWHESptDkDBmszY6P 0HEWuaPzvXNAvHvCAe+JXlQYVEBWtd/8Rb8tlz/6FDtPANMHcmSBmw1RbPzyLl7y hHa17AcA6pn6LuRg4oQ7ugTN2yH0+oSfyqafZjFSIbtxkVv4oUG+sEwRgNkQKGqO Yfc2W7ppY2BM6829GhRuLt3jAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNHWM7Sm 5UQhXsAfVMNSt4V2wR9hMB8GA1UdIwQYMBaAFJU112EQs8ApxYVbTBdFBa9hGfMM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEM4RS8wMzJFNTdCODc0 MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendDbkZoVnRNRjBVRnIyRVo4 d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUWFhZUkN6d0NuRmhWdE1GMFVGcjJFWjh3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEM4RS8wMzJFNTdCODc0MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendD bkZoVnRNRjBVRnIyRVo4d3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6gmvI9KFXWAzMc1EoE52MwCCSA54E2Tgeqi3HKElldmZuh1hKcps4 jg8ADXOxX2iCuDE/aRMw7TW9GmbsSy49qPaAgH0ZkbJRJy4akuFSl83P2b4lqZWc vb6eQ5hmPthUNFE0xqVHtzT2vE/XpqGlMHXtEC1E1ZRWVmkwNdYhwgxduiR4+GsP Thnl1P6gYHWGSIqd/4oqzuBStKTkICIrdzmx6EdpI8UWC0grLFsxpDJAFZAwVjUH ML3uyUafcHTKbHOLX2Y6sS0C/xYknQPZ4RcLc2XzsV5E9tFQ1FubSZTEUz5tQH/5 5xaKkvW3sSVr+dEh0BFe94wPl/B7X0wa -----END CERTIFICATE-----Generated at Fri May 3 04:36:54 2024 by rpki-client on console-ams.rpki-client.org