$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft File: lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft (raw, json) Hash identifier: 9iDpeSxVX0dYi0QZd1wW++9i6d+/UbOh5g1hjObhoSQ= Subject key identifier: 53:59:23:A3:68:62:93:2B:32:E9:6D:F5:92:65:D9:89:40:F3:F1:32 Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 Certificate issuer: /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Certificate serial: 0A4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft Manifest number: 0A41 Signing time: Thu 02 May 2024 20:32:36 +0000 Manifest this update: Thu 02 May 2024 20:32:36 +0000 Manifest next update: Thu 09 May 2024 20:32:36 +0000 Files and hashes: 1: lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl (hash: OItdrTJCn576LXqZ259sYe+Nh7YD5CD44cdlhUoQz30=) 2: 20E6F554419F11EA8B12587CC4F9AE02.roa (hash: 8FQorrwuxwF2eygC7qO63/pm3u484VEiKF+vz5iOBv0=) 3: 1FF145B4419F11EA8B12587CC4F9AE02.roa (hash: YYRZccfDeXuQXXuLT7sfmIy2XVYNm8yW1UQMFyY/kVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2635 (0xa4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Validity Not Before: May 2 20:32:36 2024 GMT Not After : May 9 20:32:36 2024 GMT Subject: CN=6633f864-1239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1e:69:e0:12:fd:14:94:4b:eb:35:dc:9a:99: b1:ae:3e:6c:0f:d1:ed:10:13:62:d1:1d:3a:98:e0: d7:35:bb:d1:0e:cb:49:34:55:c1:a8:e9:45:b7:0c: d9:6e:db:18:f0:0c:9f:0f:96:82:52:26:a3:39:30: e2:a0:35:a0:a3:ad:e3:77:c0:c8:f6:ed:db:19:87: 65:85:9e:ed:54:6c:1c:5a:fe:e9:bc:dd:93:c3:b7: 81:4f:0b:26:12:75:89:4f:6b:2f:13:d8:2c:d1:c3: 88:51:41:0e:d1:a3:1b:c6:22:5f:f6:0b:50:06:2f: 73:ef:a0:6c:c2:23:52:16:b1:bd:49:b8:b0:b6:a8: 63:01:74:57:c8:41:b6:02:5c:66:8d:9d:79:e1:7d: 45:c7:c5:63:86:8f:f3:2b:66:5f:49:1a:59:5a:23: c2:39:e1:60:af:c2:7c:07:ce:a0:db:64:54:97:8b: 6d:a6:33:2b:f6:96:69:59:cd:c6:9a:87:30:8d:37: 7e:00:7b:2e:82:7e:f7:3a:11:c8:3d:9a:e1:51:f5: d7:59:b5:91:8c:d2:9b:ae:a4:0b:db:11:be:e0:d0: 2e:15:64:7b:16:ca:a8:b8:ca:8a:85:fb:6a:c1:b6: f3:e5:1f:87:2a:c0:04:ac:fc:48:ff:9d:a1:25:1c: 47:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:59:23:A3:68:62:93:2B:32:E9:6D:F5:92:65:D9:89:40:F3:F1:32 X509v3 Authority Key Identifier: keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ca:4e:d0:d2:58:78:ab:d7:bc:45:46:2c:28:e6:61:41:10: 57:ed:33:42:86:43:20:a8:ae:e5:7c:1e:97:9a:60:d1:67:d7: 07:af:55:46:dc:14:ad:93:dc:3f:3b:f5:28:3d:c1:3a:f1:fd: 1c:76:67:0d:fb:02:0f:ae:d0:4b:c9:62:0f:03:97:6d:5d:d9: 99:a6:0a:dc:32:42:e4:c1:7e:a6:2c:a3:02:bd:7c:ac:a7:48: f6:e8:aa:9e:92:f6:2e:d4:a1:0d:4e:1d:72:66:c1:e0:35:c2: 69:a0:c6:c9:d4:49:8a:57:5d:66:85:2d:e5:d9:d3:9e:cc:53: f3:41:03:5d:5c:85:5a:1f:49:c0:6c:6f:cf:11:d4:e3:e0:cb: a8:2f:02:c4:fa:a5:c9:8d:c0:0b:2e:1f:cc:55:d1:90:87:86: 10:ec:c5:dd:8a:ef:ba:de:ff:92:51:e1:f8:08:e3:01:01:e2: 24:1d:4f:e8:04:91:91:a3:b2:a0:c8:b2:e3:96:ee:51:b3:d1: b0:fd:f5:fa:dd:e6:9b:c3:a0:5c:e6:54:ca:9a:0c:cd:d0:b3: 8e:57:8c:61:a2:c2:22:c0:0b:30:f8:bc:b6:3e:22:71:c7:4d: 86:cf:18:ae:14:59:22:20:f0:d7:24:fa:d8:57:d9:e5:e1:62: c8:cb:88:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCNUIxMTAvBgNVBAUTKDk1QzEzQTNDQzdFQzI3MEI3RTVGMTlGM0NENEYzQjUw REZERjYyRTQwHhcNMjQwNTAyMjAzMjM2WhcNMjQwNTA5MjAzMjM2WjAYMRYwFAYD VQQDEw02NjMzZjg2NC0xMjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2B5p4BL9FJRL6zXcmpmxrj5sD9HtEBNi0R06mODXNbvRDstJNFXBqOlFtwzZ btsY8AyfD5aCUiajOTDioDWgo63jd8DI9u3bGYdlhZ7tVGwcWv7pvN2Tw7eBTwsm EnWJT2svE9gs0cOIUUEO0aMbxiJf9gtQBi9z76BswiNSFrG9SbiwtqhjAXRXyEG2 AlxmjZ154X1Fx8Vjho/zK2ZfSRpZWiPCOeFgr8J8B86g22RUl4ttpjMr9pZpWc3G mocwjTd+AHsugn73OhHIPZrhUfXXWbWRjNKbrqQL2xG+4NAuFWR7FsqouMqKhftq wbbz5R+HKsAErPxI/52hJRxH/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNZI6No YpMrMult9ZJl2YlA8/EyMB8GA1UdIwQYMBaAFJXBOjzH7CcLfl8Z881PO1Df32Lk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkI1Qi8yOURFNzQ4QTQx OUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3dC1YeG56elU4N1VOX2ZZ dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xjRTZQTWZzSnd0LVh4bnp6VTg3VU5fZll1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkI1Qi8yOURFNzQ4QTQxOUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3 dC1YeG56elU4N1VOX2ZZdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOyk7Q0lh4q9e8RUYsKOZhQRBX7TNChkMgqK7lfB6XmmDRZ9cHr1VG 3BStk9w/O/UoPcE68f0cdmcN+wIPrtBLyWIPA5dtXdmZpgrcMkLkwX6mLKMCvXys p0j26KqekvYu1KENTh1yZsHgNcJpoMbJ1EmKV11mhS3l2dOezFPzQQNdXIVaH0nA bG/PEdTj4MuoLwLE+qXJjcALLh/MVdGQh4YQ7MXdiu+63v+SUeH4COMBAeIkHU/o BJGRo7KgyLLjlu5Rs9Gw/fX63eabw6Bc5lTKmgzN0LOOV4xhosIiwAsw+Ly2PiJx x02GzxiuFFkiIPDXJPrYV9nl4WLIy4h6 -----END CERTIFICATE-----Generated at Thu May 2 22:28:59 2024 by rpki-client on console-ams.rpki-client.org