$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft File: lY1wluouaxa8JKHQRXGdLsUUSX4.mft (raw, json) Hash identifier: 5VjNkslsve5LiQcrhnrJq4mUg5ZBU9OoBq+gFrz4qkA= Subject key identifier: 23:11:8A:D4:71:E9:72:40:72:3D:14:A5:8B:09:F5:8F:9F:9D:DD:F8 Authority key identifier: 95:8D:70:96:EA:2E:6B:16:BC:24:A1:D0:45:71:9D:2E:C5:14:49:7E Certificate issuer: /CN=A91E28D8/serialNumber=958D7096EA2E6B16BC24A1D045719D2EC514497E Certificate serial: 019D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft Manifest number: 019B Signing time: Sat 01 Jun 2024 05:53:57 +0000 Manifest this update: Sat 01 Jun 2024 05:53:56 +0000 Manifest next update: Sat 08 Jun 2024 05:53:56 +0000 Files and hashes: 1: lY1wluouaxa8JKHQRXGdLsUUSX4.crl (hash: LDKhW/xWjbq5Lb5IIXk6kB7p56/DzSddYSyGD2d84es=) 2: 01109D481B9011EDBC68484CC4F9AE02.roa (hash: XYJv/djd/EKB3NaqsMK4PZiCiDbxp97yFlXAShuQpEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.crl rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 05:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28D8/serialNumber=958D7096EA2E6B16BC24A1D045719D2EC514497E Validity Not Before: Jun 1 05:53:56 2024 GMT Not After : Jun 8 05:53:56 2024 GMT Subject: CN=665ab775-dd93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:90:1e:39:25:bc:98:4f:97:35:9c:57:16:af: 5c:2a:fa:d5:c7:05:99:c2:92:96:e2:9a:c2:2c:59: b9:10:64:79:b1:8e:f1:d3:40:a4:f6:40:26:35:12: 70:fb:8a:58:64:dd:f8:a6:98:d3:a3:c2:c9:8c:4b: ad:81:0f:6d:f9:18:7e:8b:68:7e:2a:2b:cd:ce:85: 8b:4d:54:7e:bc:2b:66:0e:08:48:06:fb:00:93:8e: 36:2c:4a:48:67:ac:db:f6:31:e7:cd:0d:f7:ae:b6: 12:a3:67:f7:06:78:17:a8:19:9b:d8:ac:f2:5c:51: 4e:07:42:ec:45:1d:2c:75:38:d2:8e:4d:da:78:d7: f0:de:66:7c:ce:cc:8b:2b:9f:a4:73:74:ed:a0:38: 95:01:f7:c5:57:d2:d0:df:e3:26:11:0a:62:87:8d: 68:12:9b:af:d9:6b:8c:6f:1f:35:3a:8a:d7:fd:89: 0a:6b:57:c2:05:e1:f8:7b:6a:b7:9b:2c:98:7b:94: e0:9b:1a:37:55:fc:4c:6f:e9:30:c1:22:ff:9e:15: 3c:37:7b:76:62:04:70:c0:3f:d8:79:75:38:92:da: 30:0a:b8:b9:88:32:c2:91:3c:fd:e2:7e:d0:3c:b7: 67:fa:5f:f3:f0:1c:42:74:c8:b5:e7:c3:17:d0:38: 9a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:11:8A:D4:71:E9:72:40:72:3D:14:A5:8B:09:F5:8F:9F:9D:DD:F8 X509v3 Authority Key Identifier: keyid:95:8D:70:96:EA:2E:6B:16:BC:24:A1:D0:45:71:9D:2E:C5:14:49:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:93:15:b1:be:a1:3b:a7:5f:b8:81:e8:27:2c:00:a6:3a:89: d8:06:0d:1c:18:a2:07:e7:d4:a0:df:1f:ef:d2:8e:9f:a3:69: 95:c1:f7:10:7e:4b:33:16:22:c8:6a:7b:8b:cf:11:11:ba:01: d3:4d:cf:60:3f:ea:41:83:eb:fa:55:ac:93:e5:74:d4:38:33: a1:42:84:a3:38:41:69:d6:b8:b9:25:96:b0:55:56:0e:1a:9a: a7:75:c0:7b:d0:95:d6:42:62:61:57:fb:45:a5:94:15:6a:c1: b9:fd:b7:a8:26:33:cd:47:2e:45:a8:f7:25:1d:25:f5:4d:ce: 88:97:97:2d:2f:62:c9:55:9f:ef:bc:56:4b:2d:ea:0e:4f:f6: b8:4b:9f:75:96:32:c1:fb:d0:eb:62:53:f9:ec:7c:92:81:2e: ef:1d:48:cf:6e:71:23:cd:0c:89:17:95:a2:e4:0f:0a:34:fd: ae:3d:f1:ae:dc:72:24:0a:d1:4b:e0:07:e6:c1:19:d8:47:ec: 33:df:eb:3f:df:f0:28:99:05:4c:9d:01:ad:48:bd:b3:4f:e0: 0a:b3:67:68:f2:7d:0d:33:4e:72:46:c4:92:8c:d2:3b:a7:26: 0d:14:f9:bf:80:af:4d:c0:de:ca:7d:f6:21:36:70:2e:cc:3e: df:aa:6c:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4RDgxMTAvBgNVBAUTKDk1OEQ3MDk2RUEyRTZCMTZCQzI0QTFEMDQ1NzE5RDJF QzUxNDQ5N0UwHhcNMjQwNjAxMDU1MzU2WhcNMjQwNjA4MDU1MzU2WjAYMRYwFAYD VQQDEw02NjVhYjc3NS1kZDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5AeOSW8mE+XNZxXFq9cKvrVxwWZwpKW4prCLFm5EGR5sY7x00Ck9kAmNRJw +4pYZN34ppjTo8LJjEutgQ9t+Rh+i2h+KivNzoWLTVR+vCtmDghIBvsAk442LEpI Z6zb9jHnzQ33rrYSo2f3BngXqBmb2KzyXFFOB0LsRR0sdTjSjk3aeNfw3mZ8zsyL K5+kc3TtoDiVAffFV9LQ3+MmEQpih41oEpuv2WuMbx81OorX/YkKa1fCBeH4e2q3 myyYe5Tgmxo3VfxMb+kwwSL/nhU8N3t2YgRwwD/YeXU4ktowCri5iDLCkTz94n7Q PLdn+l/z8BxCdMi158MX0DiadwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMRitRx 6XJAcj0UpYsJ9Y+fnd34MB8GA1UdIwQYMBaAFJWNcJbqLmsWvCSh0EVxnS7FFEl+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhEOC82QjI0QkNDMjFB QkYxMUVEQjVCNENDNENDNEY5QUUwMi9sWTF3bHVvdWF4YThKS0hRUlhHZExzVVVT WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xZMXdsdW91YXhhOEpLSFFSWEdkTHNVVVNYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhEOC82QjI0QkNDMjFBQkYxMUVEQjVCNENDNENDNEY5QUUwMi9sWTF3bHVvdWF4 YThKS0hRUlhHZExzVVVTWDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMkxWxvqE7p1+4gegnLACmOonYBg0cGKIH59Sg3x/v0o6fo2mVwfcQ fkszFiLIanuLzxERugHTTc9gP+pBg+v6VayT5XTUODOhQoSjOEFp1ri5JZawVVYO GpqndcB70JXWQmJhV/tFpZQVasG5/beoJjPNRy5FqPclHSX1Tc6Il5ctL2LJVZ/v vFZLLeoOT/a4S591ljLB+9DrYlP57HySgS7vHUjPbnEjzQyJF5Wi5A8KNP2uPfGu 3HIkCtFL4AfmwRnYR+wz3+s/3/AomQVMnQGtSL2zT+AKs2do8n0NM05yRsSSjNI7 pyYNFPm/gK9NwN7KffYhNnAuzD7fqmxY -----END CERTIFICATE-----Generated at Sat Jun 1 07:08:29 2024 by rpki-client on console-ams.rpki-client.org