$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft File: LnKDqP3Vzws9n6or6XQogZiRk6U.mft (raw, json) Hash identifier: YjaIjNSUF+IOVBp+MpSVeFtB+SwmMBPtNL6w4bobgjE= Subject key identifier: 9C:FE:FE:1C:21:A8:E0:DB:00:15:80:52:42:08:CD:0C:B1:BA:4C:8C Authority key identifier: 2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5 Certificate issuer: /CN=A91DFADF/serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5 Certificate serial: 08D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft Manifest number: 08CF Signing time: Sat 04 May 2024 21:36:00 +0000 Manifest this update: Sat 04 May 2024 21:35:59 +0000 Manifest next update: Sat 11 May 2024 21:35:59 +0000 Files and hashes: 1: LnKDqP3Vzws9n6or6XQogZiRk6U.crl (hash: bh95PyfmUV13z7lWgGIk4ZvVXnZIZ/2UVznzT7ft46w=) 2: 6C3807ACED3A11ECABFC542BC4F9AE02.roa (hash: BfYBsfYcVi5bfchEKl8di+/Q19eLkXQVEQQrecpfABY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2263 (0x8d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFADF/serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5 Validity Not Before: May 4 21:35:59 2024 GMT Not After : May 11 21:35:59 2024 GMT Subject: CN=6636aa40-c77e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:37:02:c9:06:e6:d6:d5:c1:3a:1a:23:77:b1: 1c:cc:df:2d:13:97:ba:e0:bc:20:32:fb:8f:91:a8: 15:3c:56:c4:84:cb:96:5e:06:a4:da:0d:21:13:8c: 49:42:d2:65:e7:8f:0e:5b:82:d7:82:7f:62:86:8a: c4:88:55:24:e5:87:40:0d:55:4b:bf:69:a3:aa:43: 4e:3d:64:15:80:8e:9f:d4:b8:1b:9f:7d:5b:98:28: 04:44:69:b9:24:ad:9e:96:0e:49:32:ab:10:97:20: 68:51:f1:2b:f6:70:a9:23:fc:d8:4f:9f:34:f2:f9: 7c:da:c2:f9:6a:5f:0f:b7:ae:ad:8a:ba:c9:d0:64: 07:b6:83:2f:05:8e:78:e5:b6:a5:db:2d:94:98:29: 3d:d6:29:2e:7c:4a:09:87:3e:82:d1:a5:07:82:b6: 55:23:96:2b:db:87:b3:af:b7:a0:d6:59:16:35:46: e2:ea:b3:65:e2:21:46:9a:63:8b:ab:45:5f:d5:47: ea:8b:22:21:95:b2:90:6e:fb:5a:ba:0d:48:ce:2a: 4f:95:2a:48:a7:69:39:92:31:f0:e9:59:a3:64:03: 71:26:a3:36:bc:5a:b8:f2:da:67:ae:b3:af:11:c8: 55:11:1c:17:db:41:33:35:b6:0e:a0:fd:a4:16:38: 30:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FE:FE:1C:21:A8:E0:DB:00:15:80:52:42:08:CD:0C:B1:BA:4C:8C X509v3 Authority Key Identifier: keyid:2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:55:1c:76:56:eb:49:fc:76:7e:c2:21:aa:f4:96:7f:58:40: 80:9e:6c:c6:13:b4:ad:e2:c8:5f:cf:5a:be:13:d3:32:f5:58: 08:ba:e3:bf:17:27:17:c5:ec:77:79:76:9e:c8:7e:68:04:41: 05:78:d4:60:df:ef:e2:9f:08:d2:85:2c:f5:f7:9f:0d:56:b3: 29:f8:fb:1b:96:a9:70:08:f5:02:c8:3e:33:d8:59:a1:18:7e: e6:48:89:70:ab:4d:b2:af:c5:80:88:e9:14:f5:3e:ba:ca:08: c9:23:0d:1f:f6:f1:5f:f7:20:7f:05:b8:4b:88:71:31:af:2a: a6:87:df:c2:57:8f:f3:76:ed:b3:65:d5:e2:c5:b7:b6:ca:b2: 7f:20:18:78:62:03:4a:17:b6:55:8e:01:ad:eb:e5:de:7b:9b: b4:1e:df:41:97:f1:4f:ea:3c:26:c6:9f:b4:ab:be:be:ac:bd: 9a:47:c7:c5:38:34:13:0c:e8:6a:c4:36:87:12:60:28:8a:24: 66:54:60:de:c5:d0:18:0c:26:46:e6:7e:c7:03:28:33:52:06: 3c:2f:5b:8e:0b:94:8c:13:ae:0a:00:48:8e:12:17:06:84:cd: 31:54:9c:f2:b8:f4:01:11:d7:4c:4c:ab:60:e4:7e:b5:40:c5: ee:29:48:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZBREYxMTAvBgNVBAUTKDJFNzI4M0E4RkRENUNGMEIzRDlGQUEyQkU5NzQyODgx OTg5MTkzQTUwHhcNMjQwNTA0MjEzNTU5WhcNMjQwNTExMjEzNTU5WjAYMRYwFAYD VQQDEw02NjM2YWE0MC1jNzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDcCyQbm1tXBOhojd7EczN8tE5e64LwgMvuPkagVPFbEhMuWXgak2g0hE4xJ QtJl548OW4LXgn9ihorEiFUk5YdADVVLv2mjqkNOPWQVgI6f1Lgbn31bmCgERGm5 JK2elg5JMqsQlyBoUfEr9nCpI/zYT5808vl82sL5al8Pt66tirrJ0GQHtoMvBY54 5bal2y2UmCk91ikufEoJhz6C0aUHgrZVI5Yr24ezr7eg1lkWNUbi6rNl4iFGmmOL q0Vf1UfqiyIhlbKQbvtaug1IzipPlSpIp2k5kjHw6VmjZANxJqM2vFq48tpnrrOv EchVERwX20EzNbYOoP2kFjgwXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJz+/hwh qODbABWAUkIIzQyxukyMMB8GA1UdIwQYMBaAFC5yg6j91c8LPZ+qK+l0KIGYkZOl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkFERi81ODUzMjBERThC RDgxMUVBOTVBQUVCODNDNEY5QUUwMi9MbktEcVAzVnp3czluNm9yNlhRb2daaVJr NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xuS0RxUDNWendzOW42b3I2WFFvZ1ppUms2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkFERi81ODUzMjBERThCRDgxMUVBOTVBQUVCODNDNEY5QUUwMi9MbktEcVAzVnp3 czluNm9yNlhRb2daaVJrNlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhVRx2VutJ/HZ+wiGq9JZ/WECAnmzGE7St4shfz1q+E9My9VgIuuO/ FycXxex3eXaeyH5oBEEFeNRg3+/inwjShSz1958NVrMp+PsblqlwCPUCyD4z2Fmh GH7mSIlwq02yr8WAiOkU9T66ygjJIw0f9vFf9yB/BbhLiHExryqmh9/CV4/zdu2z ZdXixbe2yrJ/IBh4YgNKF7ZVjgGt6+Xee5u0Ht9Bl/FP6jwmxp+0q76+rL2aR8fF ODQTDOhqxDaHEmAoiiRmVGDexdAYDCZG5n7HAygzUgY8L1uOC5SME64KAEiOEhcG hM0xVJzyuPQBEddMTKtg5H61QMXuKUj0 -----END CERTIFICATE-----Generated at Sun May 5 00:12:34 2024 by rpki-client on console-fra.rpki-client.org