$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft File: lTUaGSeo8Q660c48bEpaxGUVynA.mft (raw, json) Hash identifier: 5R156LIRw1h5th4Gx45iKKB4cMdEIHu82qV6cf20aps= Subject key identifier: 2C:2E:CE:FA:C1:C2:6D:4E:FC:83:0B:F4:80:7E:B9:A2:48:0A:77:90 Authority key identifier: 95:35:1A:19:27:A8:F1:0E:BA:D1:CE:3C:6C:4A:5A:C4:65:15:CA:70 Certificate issuer: /CN=A91D4E15/serialNumber=95351A1927A8F10EBAD1CE3C6C4A5AC46515CA70 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft Manifest number: B7 Signing time: Wed 01 May 2024 06:48:35 +0000 Manifest this update: Wed 01 May 2024 06:48:34 +0000 Manifest next update: Wed 08 May 2024 06:48:34 +0000 Files and hashes: 1: lTUaGSeo8Q660c48bEpaxGUVynA.crl (hash: G+NXDISPhMvk442M7RBWtRnNR9sLPLFMa0nENldkxZA=) 2: 90F09734F1B311EDA789BB57C4F9AE02.roa (hash: Io05Xb6ZXfWkbsW3AUpyVHZN7Vux4hW/DUhHHTSTn6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.crl rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 06:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4E15/serialNumber=95351A1927A8F10EBAD1CE3C6C4A5AC46515CA70 Validity Not Before: May 1 06:48:34 2024 GMT Not After : May 8 06:48:34 2024 GMT Subject: CN=6631e5c2-9f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a3:76:d9:14:8e:f2:54:2a:6f:ae:14:e6:43: dd:60:63:da:b9:99:43:5b:93:83:40:8f:4f:d8:da: 0e:62:53:d1:5c:79:54:8f:07:14:f2:2b:c2:a7:56: 69:55:08:8f:63:9b:8d:16:21:74:27:2e:cb:6b:2f: 8f:80:17:e0:c4:54:a2:a3:36:65:aa:8c:4f:0f:1d: 9f:1c:93:1a:5d:7b:21:6f:5d:f2:05:fe:79:49:5e: 43:6e:9a:b6:06:ea:bd:c1:1c:15:f4:f6:88:d6:53: 88:27:f2:ec:39:1e:57:f6:f8:ce:0a:52:6b:c4:e8: 3e:29:b0:e1:e4:06:d4:52:4c:33:29:b7:b3:fc:54: c2:25:be:6b:48:aa:29:8e:c6:57:a7:6e:67:cb:27: f5:a4:6a:dc:d9:1f:25:78:e4:14:4c:c3:ee:71:50: 5d:f7:27:db:1b:5f:29:33:e7:9b:17:bb:d8:6c:b3: a7:f8:22:e9:fa:8a:15:ef:57:44:2e:a5:4e:de:13: ec:f9:eb:ab:6e:90:81:8c:fb:c1:c9:01:8f:69:c3: 2c:e1:a9:57:2b:66:cb:6d:b4:c6:08:aa:07:97:7f: 06:98:e4:b6:46:3d:c4:3d:f1:f8:98:ad:bd:04:cb: 83:4b:f2:7a:18:93:e7:4d:89:39:10:e7:ba:62:4b: 09:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2E:CE:FA:C1:C2:6D:4E:FC:83:0B:F4:80:7E:B9:A2:48:0A:77:90 X509v3 Authority Key Identifier: keyid:95:35:1A:19:27:A8:F1:0E:BA:D1:CE:3C:6C:4A:5A:C4:65:15:CA:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:2a:83:b8:0d:ec:e1:82:8f:31:1d:38:08:07:e3:0b:95:2b: 58:a9:d7:65:08:1f:bf:90:e5:65:dd:19:7e:8f:29:3d:df:c5: 2a:db:79:b2:ff:72:61:de:dc:d8:98:e2:8c:ab:16:53:1b:4b: 73:0c:63:32:26:40:37:9e:59:57:d3:c2:41:84:a3:60:d7:05: 42:60:51:72:ab:87:32:88:65:a7:af:77:8d:d7:54:50:cf:78: 82:8f:97:6a:57:dd:5e:05:7a:7f:9b:19:f9:1c:7d:9d:fc:db: 3a:39:80:0b:bf:58:f9:cc:cb:c9:9d:b2:c7:57:a6:39:b0:4f: bd:1d:60:a1:b6:f7:33:4f:ca:dc:f7:5d:08:4d:a8:dc:5e:4f: 69:cb:14:17:7f:22:25:52:fa:f8:e7:81:3a:30:18:bf:57:10: d4:a6:de:3f:e0:5c:83:d8:20:e9:f7:ab:96:02:ba:66:9a:d2: b2:e7:39:a6:88:2e:1e:1d:ee:ca:8d:f5:f3:0e:a7:ff:e4:00: 50:6e:21:e8:03:27:36:b3:bf:94:fd:a6:32:8f:d9:87:10:6c: 20:17:ae:da:98:0d:3b:64:a5:6b:f7:05:4c:8a:b7:25:dd:6a: a6:45:c8:58:ab:13:d1:cb:d8:97:86:7d:e7:d7:84:cb:4e:b3: a3:51:c0:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRFMTUxMTAvBgNVBAUTKDk1MzUxQTE5MjdBOEYxMEVCQUQxQ0UzQzZDNEE1QUM0 NjUxNUNBNzAwHhcNMjQwNTAxMDY0ODM0WhcNMjQwNTA4MDY0ODM0WjAYMRYwFAYD VQQDEw02NjMxZTVjMi05ZjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6N22RSO8lQqb64U5kPdYGPauZlDW5ODQI9P2NoOYlPRXHlUjwcU8ivCp1Zp VQiPY5uNFiF0Jy7Lay+PgBfgxFSiozZlqoxPDx2fHJMaXXshb13yBf55SV5Dbpq2 Buq9wRwV9PaI1lOIJ/LsOR5X9vjOClJrxOg+KbDh5AbUUkwzKbez/FTCJb5rSKop jsZXp25nyyf1pGrc2R8leOQUTMPucVBd9yfbG18pM+ebF7vYbLOn+CLp+ooV71dE LqVO3hPs+eurbpCBjPvByQGPacMs4alXK2bLbbTGCKoHl38GmOS2Rj3EPfH4mK29 BMuDS/J6GJPnTYk5EOe6YksJGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwuzvrB wm1O/IML9IB+uaJICneQMB8GA1UdIwQYMBaAFJU1GhknqPEOutHOPGxKWsRlFcpw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEUxNS81RERCNDQ0MEYx QUMxMUVEQTNEMUI3NEZDNEY5QUUwMi9sVFVhR1NlbzhRNjYwYzQ4YkVwYXhHVVZ5 bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUVWFHU2VvOFE2NjBjNDhiRXBheEdVVnluQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEUxNS81RERCNDQ0MEYxQUMxMUVEQTNEMUI3NEZDNEY5QUUwMi9sVFVhR1NlbzhR NjYwYzQ4YkVwYXhHVVZ5bkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALKoO4Dezhgo8xHTgIB+MLlStYqddlCB+/kOVl3Rl+jyk938Uq23my /3Jh3tzYmOKMqxZTG0tzDGMyJkA3nllX08JBhKNg1wVCYFFyq4cyiGWnr3eN11RQ z3iCj5dqV91eBXp/mxn5HH2d/Ns6OYALv1j5zMvJnbLHV6Y5sE+9HWChtvczT8rc 910ITajcXk9pyxQXfyIlUvr454E6MBi/VxDUpt4/4FyD2CDp96uWArpmmtKy5zmm iC4eHe7KjfXzDqf/5ABQbiHoAyc2s7+U/aYyj9mHEGwgF67amA07ZKVr9wVMircl 3WqmRchYqxPRy9iXhn3n14TLTrOjUcCS -----END CERTIFICATE-----Generated at Wed May 1 07:55:43 2024 by rpki-client on console-fra.rpki-client.org