$ rpki-client -vvf rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft File: _LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft (raw, json) Hash identifier: 2EP8h37MZ6lXh2ZATwhHrsX0GN0LFi0iRIy9yE31Cu0= Subject key identifier: 45:A9:D9:D6:B5:44:25:37:5B:EB:83:7E:CB:A2:E3:54:57:8D:86:8B Authority key identifier: FC:B2:3C:7B:F5:F1:93:56:27:5B:AC:F5:7C:DB:55:BF:D6:0E:04:AC Certificate issuer: /CN=A91D599B/serialNumber=FCB23C7BF5F19356275BACF57CDB55BFD60E04AC Certificate serial: 1418 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft Manifest number: 1411 Signing time: Tue 30 Apr 2024 17:37:27 +0000 Manifest this update: Tue 30 Apr 2024 17:37:26 +0000 Manifest next update: Tue 07 May 2024 17:37:26 +0000 Files and hashes: 1: _LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl (hash: 3r2jMMF8uGWHCcIQN5YgqdYcdzyxs5hgX56JFIKwODE=) 2: 1BFCE1E0554F11E8A5C82D57C4F9AE02.roa (hash: VSZF4pfvX3hNmiEIQb+Zju7e+lRhTIy0RpGZEc7WBnA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 17:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5144 (0x1418) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D599B/serialNumber=FCB23C7BF5F19356275BACF57CDB55BFD60E04AC Validity Not Before: Apr 30 17:37:26 2024 GMT Not After : May 7 17:37:26 2024 GMT Subject: CN=66312c56-c19f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:54:a9:9f:12:d3:9c:97:68:89:c4:6b:c2:f8: 96:24:86:df:82:51:e2:48:10:89:d5:17:07:78:19: fb:aa:c2:71:34:1f:98:d9:8c:90:a1:ec:1c:ce:2d: 21:2b:f6:91:66:f0:c8:4b:50:2e:12:f2:41:16:c6: ad:05:dd:d0:57:3e:62:12:b3:2b:30:ca:38:6d:21: d6:9e:78:c3:ae:72:72:91:37:8d:2e:5b:8b:89:c5: a4:db:c8:d2:97:26:26:12:0d:80:7e:55:85:31:8f: 34:2a:b6:63:f3:45:31:31:76:aa:16:b9:ba:00:9b: 16:0a:3b:ed:72:da:d5:ac:d9:71:bc:03:ba:10:4b: ea:1e:85:04:91:dc:cf:31:2e:53:84:24:c1:c1:de: 31:d4:90:a1:ee:2d:88:44:d2:9f:db:24:c2:9a:d3: 66:ec:8b:de:fa:21:24:9b:c7:83:1e:b1:7d:6d:19: 0a:b7:d1:06:a6:65:7b:9b:98:70:78:0f:6b:aa:36: 3b:6e:fb:f2:c4:16:02:3f:45:47:2d:53:8a:b1:57: 15:67:5f:2c:76:fa:8d:0c:7c:7b:eb:38:08:42:cd: d9:1d:96:1f:09:11:d7:a8:8d:37:58:58:64:f8:d3: 83:2d:3d:9f:6c:57:f1:d7:5b:ca:e7:54:8b:65:b8: 15:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A9:D9:D6:B5:44:25:37:5B:EB:83:7E:CB:A2:E3:54:57:8D:86:8B X509v3 Authority Key Identifier: keyid:FC:B2:3C:7B:F5:F1:93:56:27:5B:AC:F5:7C:DB:55:BF:D6:0E:04:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:b7:d9:62:16:29:fa:1b:c3:04:cd:49:b5:92:9a:ad:08:08: 93:1e:7a:c9:81:43:fb:35:b2:e4:6f:05:ba:f4:ac:90:bd:a3: 85:ee:55:e1:49:52:1a:d7:8d:75:df:89:bf:54:e9:ab:5f:10: ac:53:a7:2c:74:c9:9a:ca:ca:2d:f6:84:d2:71:24:f0:82:2d: b5:77:72:65:7d:16:f5:9e:b8:bc:65:cf:87:af:a7:96:df:43: 5f:e3:7f:ed:0f:4a:c1:8d:0a:18:71:68:21:0e:3e:8b:66:f9: 2f:29:ca:94:63:79:93:85:83:bb:ed:aa:10:d0:62:03:9f:55: 0e:e3:06:8b:63:ef:c9:1d:8e:a4:8d:ea:7a:5e:90:92:61:ff: 41:d5:37:17:17:be:ff:ca:7f:7f:5e:aa:45:ee:eb:48:f2:a7: 4a:30:25:ab:a4:4d:cd:5e:ea:ea:fc:d8:83:f1:19:16:69:bf: c7:6c:a1:d8:1b:a3:35:d4:d8:bf:e1:c9:99:e7:ae:2b:5b:5b: 35:00:be:34:38:3f:1d:dc:ae:0b:56:67:a6:33:02:c4:73:3c: 00:8d:59:09:94:ff:d7:2e:b8:82:37:8e:a5:68:d8:85:52:ff: 27:23:d7:7e:5e:3e:54:54:50:fa:88:7c:79:22:e8:ed:c7:f8: 45:d9:12:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU5OUIxMTAvBgNVBAUTKEZDQjIzQzdCRjVGMTkzNTYyNzVCQUNGNTdDREI1NUJG RDYwRTA0QUMwHhcNMjQwNDMwMTczNzI2WhcNMjQwNTA3MTczNzI2WjAYMRYwFAYD VQQDEw02NjMxMmM1Ni1jMTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6VSpnxLTnJdoicRrwviWJIbfglHiSBCJ1RcHeBn7qsJxNB+Y2YyQoewczi0h K/aRZvDIS1AuEvJBFsatBd3QVz5iErMrMMo4bSHWnnjDrnJykTeNLluLicWk28jS lyYmEg2AflWFMY80KrZj80UxMXaqFrm6AJsWCjvtctrVrNlxvAO6EEvqHoUEkdzP MS5ThCTBwd4x1JCh7i2IRNKf2yTCmtNm7Ive+iEkm8eDHrF9bRkKt9EGpmV7m5hw eA9rqjY7bvvyxBYCP0VHLVOKsVcVZ18sdvqNDHx76zgIQs3ZHZYfCRHXqI03WFhk +NODLT2fbFfx11vK51SLZbgVnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWp2da1 RCU3W+uDfsui41RXjYaLMB8GA1UdIwQYMBaAFPyyPHv18ZNWJ1us9XzbVb/WDgSs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTk5Qi9ENzIyNEZGMjU0 QjIxMUU4OEU2OUU5MDlDNEY5QUUwMi9fTEk4ZV9YeGsxWW5XNnoxZk50VnY5WU9C S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19MSThlX1h4azFZblc2ejFmTnRWdjlZT0JLdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTk5Qi9ENzIyNEZGMjU0QjIxMUU4OEU2OUU5MDlDNEY5QUUwMi9fTEk4ZV9YeGsx WW5XNnoxZk50VnY5WU9CS3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyt9liFin6G8MEzUm1kpqtCAiTHnrJgUP7NbLkbwW69KyQvaOF7lXh SVIa141134m/VOmrXxCsU6csdMmaysot9oTScSTwgi21d3JlfRb1nri8Zc+Hr6eW 30Nf43/tD0rBjQoYcWghDj6LZvkvKcqUY3mThYO77aoQ0GIDn1UO4waLY+/JHY6k jep6XpCSYf9B1TcXF77/yn9/XqpF7utI8qdKMCWrpE3NXurq/NiD8RkWab/HbKHY G6M11Ni/4cmZ564rW1s1AL40OD8d3K4LVmemMwLEczwAjVkJlP/XLriCN46laNiF Uv8nI9d+Xj5UVFD6iHx5Iujtx/hF2RKB -----END CERTIFICATE-----Generated at Tue Apr 30 18:57:40 2024 by rpki-client on console-fra.rpki-client.org