$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft File: ll15uIln4ofmpRU6EE_BTsEYWxE.mft (raw, json) Hash identifier: sKiLIi1AjkirWwqh7uOXRsRDjgnBrcVp78qWl26RJPU= Subject key identifier: 5D:A1:D1:D2:61:55:F6:4D:05:7A:BD:6B:52:78:CD:2D:BB:C1:7E:17 Authority key identifier: 96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11 Certificate issuer: /CN=A91DF859/serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11 Certificate serial: 02A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft Manifest number: 02A3 Signing time: Sun 05 May 2024 03:42:19 +0000 Manifest this update: Sun 05 May 2024 03:42:19 +0000 Manifest next update: Sun 12 May 2024 03:42:19 +0000 Files and hashes: 1: ll15uIln4ofmpRU6EE_BTsEYWxE.crl (hash: fwUUHlOIcWFcQrTQ3iM80wl6D8EU3zryi61n2C0r0m8=) 2: 1CDBD11CAE3711ECB61BED46C4F9AE02.roa (hash: zGIyzjPBuEDhf2OzmQ6rtFRt471DV3Hf1yGdazrEdOQ=) 3: 1C43D57EAE3711ECB61BED46C4F9AE02.roa (hash: t2UGHo9OQTn2mHMxsEAQ7RhkaLUbop3gw10i2QNxP4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 681 (0x2a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF859/serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11 Validity Not Before: May 5 03:42:19 2024 GMT Not After : May 12 03:42:19 2024 GMT Subject: CN=6637001b-f3bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ae:77:5d:ed:94:cc:3b:8b:5b:3c:19:54:40: b7:50:f7:bc:f6:f7:75:7e:1b:87:34:13:ef:f2:52: cb:e0:95:f0:09:97:82:a9:c3:8f:b4:35:db:82:91: ff:8d:f5:73:b7:af:b7:0a:7b:4e:30:8b:f7:af:fb: 03:36:7b:e7:8d:cf:03:2d:be:d1:37:34:af:7e:11: c9:17:96:b5:15:a9:e2:6e:d8:ff:e0:23:22:c1:44: b6:16:bf:e5:89:4b:74:65:20:60:12:7d:db:aa:bd: 15:d3:ae:1e:20:e6:6f:aa:9e:46:b4:01:60:14:51: 8e:05:a3:1e:32:ec:16:8b:96:13:d1:71:e0:93:7b: 12:61:83:39:91:7c:2b:04:d0:1a:9c:e1:b0:ce:ac: 54:0c:c9:e3:b0:e4:12:10:ba:72:11:0e:e0:ed:b4: ca:00:1b:08:61:02:ba:f3:46:b7:f0:f0:a2:31:63: 41:14:34:c5:ed:42:2a:66:e1:54:48:1e:97:62:61: f9:77:90:e9:53:21:5d:7d:06:b0:88:10:f3:c8:47: 5a:b9:5c:c4:e2:17:b4:53:4a:8e:a5:c6:10:f8:03: b9:6f:33:32:98:c9:c5:51:70:16:e0:34:66:0e:90: 3e:e9:70:6c:dc:10:c0:27:44:92:32:47:0c:5e:4c: 58:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A1:D1:D2:61:55:F6:4D:05:7A:BD:6B:52:78:CD:2D:BB:C1:7E:17 X509v3 Authority Key Identifier: keyid:96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:fd:fc:c8:02:df:1a:5e:1d:c0:41:ae:ba:51:a8:08:90:ff: a5:18:96:0b:1c:f7:e9:d7:5f:f4:5f:92:e4:24:4c:84:e2:1d: cf:44:0a:08:e5:c1:ce:2e:18:83:46:67:7d:15:f0:dc:0a:ef: 3e:85:32:ee:5d:c8:c1:43:e8:4d:87:bf:07:c8:0a:8c:3c:8a: bd:4a:e8:fa:d0:6f:d9:4c:50:dd:91:6f:da:9d:25:87:82:4c: a5:6e:0b:8e:fa:e5:4c:94:b5:c5:3e:d3:1e:d3:c6:a4:da:45: d8:64:6b:5e:0d:94:d8:1e:48:3d:0b:fd:c9:e4:c9:00:33:a2: d6:cf:d0:fa:4a:74:46:ed:c7:fd:81:41:89:6b:71:24:f7:34: 01:65:3f:a5:07:3a:38:27:75:2a:1a:a3:3c:ed:94:45:89:ec: 1b:80:e0:96:dc:84:2a:f1:92:bc:a3:5e:1a:d9:0b:48:b7:01: 7e:41:7a:08:5b:48:1b:68:4b:dc:fe:ee:f0:9f:a0:ec:d2:62: 88:4e:06:53:a8:22:fa:be:05:09:d5:cc:c2:b5:d2:f5:94:4e: ea:e9:69:6f:bd:a8:2d:08:e4:a1:d1:23:e9:7a:2e:df:5f:57: b1:f9:2c:35:bd:c9:0c:58:96:c8:b8:a8:87:c4:c5:72:4f:fd: 92:b2:41:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NTkxMTAvBgNVBAUTKDk2NUQ3OUI4ODk2N0UyODdFNkE1MTUzQTEwNEZDMTRF QzExODVCMTEwHhcNMjQwNTA1MDM0MjE5WhcNMjQwNTEyMDM0MjE5WjAYMRYwFAYD VQQDEw02NjM3MDAxYi1mM2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqK53Xe2UzDuLWzwZVEC3UPe89vd1fhuHNBPv8lLL4JXwCZeCqcOPtDXbgpH/ jfVzt6+3CntOMIv3r/sDNnvnjc8DLb7RNzSvfhHJF5a1Fanibtj/4CMiwUS2Fr/l iUt0ZSBgEn3bqr0V064eIOZvqp5GtAFgFFGOBaMeMuwWi5YT0XHgk3sSYYM5kXwr BNAanOGwzqxUDMnjsOQSELpyEQ7g7bTKABsIYQK680a38PCiMWNBFDTF7UIqZuFU SB6XYmH5d5DpUyFdfQawiBDzyEdauVzE4he0U0qOpcYQ+AO5bzMymMnFUXAW4DRm DpA+6XBs3BDAJ0SSMkcMXkxYZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2h0dJh VfZNBXq9a1J4zS27wX4XMB8GA1UdIwQYMBaAFJZdebiJZ+KH5qUVOhBPwU7BGFsR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg1OS9DMTRGNTVDRUFF MzMxMUVDOUZBNjBGNDNDNEY5QUUwMi9sbDE1dUlsbjRvZm1wUlU2RUVfQlRzRVlX eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xsMTV1SWxuNG9mbXBSVTZFRV9CVHNFWVd4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg1OS9DMTRGNTVDRUFFMzMxMUVDOUZBNjBGNDNDNEY5QUUwMi9sbDE1dUlsbjRv Zm1wUlU2RUVfQlRzRVlXeEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZ/fzIAt8aXh3AQa66UagIkP+lGJYLHPfp11/0X5LkJEyE4h3PRAoI 5cHOLhiDRmd9FfDcCu8+hTLuXcjBQ+hNh78HyAqMPIq9Suj60G/ZTFDdkW/anSWH gkylbguO+uVMlLXFPtMe08ak2kXYZGteDZTYHkg9C/3J5MkAM6LWz9D6SnRG7cf9 gUGJa3Ek9zQBZT+lBzo4J3UqGqM87ZRFiewbgOCW3IQq8ZK8o14a2QtItwF+QXoI W0gbaEvc/u7wn6Ds0mKITgZTqCL6vgUJ1czCtdL1lE7q6WlvvagtCOSh0SPpei7f X1ex+Sw1vckMWJbIuKiHxMVyT/2SskHv -----END CERTIFICATE-----Generated at Sun May 5 04:34:57 2024 by rpki-client on console-fra.rpki-client.org