$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft File: lOm8GmUoujSTw55syskzb1S5A5Y.mft (raw, json) Hash identifier: rBBEQkPM7uVBZBqq8ALXyBdffYa6gBjkjRvtNLUWIbI= Subject key identifier: 6B:D1:62:A5:98:5A:DD:53:D5:E2:DD:74:73:C5:32:41:CA:29:7D:85 Authority key identifier: 94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96 Certificate issuer: /CN=A91EF420/serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396 Certificate serial: 0674 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft Manifest number: 0674 Signing time: Thu 02 May 2024 23:35:50 +0000 Manifest this update: Thu 02 May 2024 23:35:49 +0000 Manifest next update: Thu 09 May 2024 23:35:49 +0000 Files and hashes: 1: lOm8GmUoujSTw55syskzb1S5A5Y.crl (hash: Kr+/e4gev8+RCcRzpBzfD/5TUCH+YVWC3kzQZKn1TlY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1652 (0x674) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF420/serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396 Validity Not Before: May 2 23:35:49 2024 GMT Not After : May 9 23:35:49 2024 GMT Subject: CN=66342356-8974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7b:2e:f5:d9:22:9e:18:e7:4e:5e:92:f5:7b: b8:20:a2:9f:af:43:e8:db:ec:f0:db:3d:3c:e0:97: 61:37:16:85:14:06:f6:82:61:58:30:32:54:3a:bc: 38:5b:9a:e8:f1:77:a5:dd:62:16:9d:7b:0c:81:f0: ea:dc:79:95:50:2e:0c:7e:f1:57:35:95:50:39:75: 47:20:b4:bd:6a:b7:de:01:ba:82:4c:71:52:ce:27: cb:bd:71:2a:ec:04:67:e2:0f:c6:ef:4a:a7:cc:e5: 10:28:a8:82:d3:75:ca:cc:5a:b6:95:fa:44:e2:f5: 2f:25:46:03:24:3b:dd:d9:25:a5:94:ef:5a:f1:c0: 53:09:ec:46:5f:fd:e4:b6:eb:cb:6b:33:89:43:28: 17:9e:14:87:4c:76:15:d2:3a:14:71:42:bb:01:ea: ed:28:ea:7b:31:06:07:9e:97:4e:1f:78:0f:42:4e: 1e:6e:ff:cc:d0:92:3a:3e:32:1f:3b:f7:1c:8a:f0: 44:22:85:c3:a7:45:94:c1:93:6e:5e:a2:2b:9a:73: 1e:ba:ca:4c:02:f8:51:28:1a:29:80:7a:8a:1c:e5: b2:70:70:1a:f3:c9:f1:cb:07:49:83:5f:3f:16:6e: f7:42:4f:54:8c:66:7e:2c:25:df:f0:7c:9c:33:16: a2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D1:62:A5:98:5A:DD:53:D5:E2:DD:74:73:C5:32:41:CA:29:7D:85 X509v3 Authority Key Identifier: keyid:94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:ed:28:9b:10:c7:79:2f:32:3b:24:57:1f:d8:89:9c:94:cc: d7:e3:5b:3a:e8:ff:3b:b7:8d:ba:9b:a2:8c:68:e8:79:f3:ab: c9:9c:b8:82:34:2c:d9:11:92:4a:3b:4b:5a:d4:b5:6f:37:4d: 8d:85:c9:93:3c:7c:cb:19:a7:7a:13:07:1f:3a:30:02:55:fb: d7:97:15:6e:c3:07:da:29:f9:fd:09:2f:eb:f5:88:c5:60:5c: 1a:cc:22:8e:3b:19:de:2b:5e:2d:f8:c9:8a:24:ba:b5:4c:29: b5:e6:24:2b:4e:b8:af:54:f1:34:52:2c:4d:2a:6c:07:af:75: f5:01:24:d6:05:be:ba:87:98:e4:fe:a1:54:9a:d8:79:7a:0a: 59:83:dd:97:b3:2b:3e:1e:5e:d3:b4:55:b3:77:df:f2:e0:c8: c5:72:c7:62:48:fa:84:e7:bd:44:14:dc:a4:e1:37:82:f5:ea: ce:00:bd:89:20:d7:d1:a2:e4:13:9a:33:47:6b:7a:05:e9:3d: 9e:5b:9f:4d:27:2a:0a:4f:fd:c7:3e:00:28:f5:03:74:2a:3a: c9:56:30:cc:50:db:32:e7:18:84:34:1f:28:d1:3c:ac:24:c6: 5a:dc:dd:36:e4:24:ee:f7:f1:82:fb:4e:a0:88:ba:1e:a4:91: 2a:b3:b7:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY0MjAxMTAvBgNVBAUTKDk0RTlCQzFBNjUyOEJBMzQ5M0MzOUU2Q0NBQzkzMzZG NTRCOTAzOTYwHhcNMjQwNTAyMjMzNTQ5WhcNMjQwNTA5MjMzNTQ5WjAYMRYwFAYD VQQDEw02NjM0MjM1Ni04OTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunsu9dkinhjnTl6S9Xu4IKKfr0Po2+zw2z084JdhNxaFFAb2gmFYMDJUOrw4 W5ro8Xel3WIWnXsMgfDq3HmVUC4MfvFXNZVQOXVHILS9arfeAbqCTHFSzifLvXEq 7ARn4g/G70qnzOUQKKiC03XKzFq2lfpE4vUvJUYDJDvd2SWllO9a8cBTCexGX/3k tuvLazOJQygXnhSHTHYV0joUcUK7AertKOp7MQYHnpdOH3gPQk4ebv/M0JI6PjIf O/ccivBEIoXDp0WUwZNuXqIrmnMeuspMAvhRKBopgHqKHOWycHAa88nxywdJg18/ Fm73Qk9UjGZ+LCXf8HycMxaiRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGvRYqWY Wt1T1eLddHPFMkHKKX2FMB8GA1UdIwQYMBaAFJTpvBplKLo0k8OebMrJM29UuQOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjQyMC9GMTRERUUzNDJB NDUxMUVCQjM5REVBNUJDNEY5QUUwMi9sT204R21Vb3VqU1R3NTVzeXNremIxUzVB NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xPbThHbVVvdWpTVHc1NXN5c2t6YjFTNUE1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjQyMC9GMTRERUUzNDJBNDUxMUVCQjM5REVBNUJDNEY5QUUwMi9sT204R21Vb3Vq U1R3NTVzeXNremIxUzVBNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA27SibEMd5LzI7JFcf2ImclMzX41s66P87t426m6KMaOh586vJnLiC NCzZEZJKO0ta1LVvN02NhcmTPHzLGad6EwcfOjACVfvXlxVuwwfaKfn9CS/r9YjF YFwazCKOOxneK14t+MmKJLq1TCm15iQrTrivVPE0UixNKmwHr3X1ASTWBb66h5jk /qFUmth5egpZg92Xsys+Hl7TtFWzd9/y4MjFcsdiSPqE571EFNyk4TeC9erOAL2J INfRouQTmjNHa3oF6T2eW59NJyoKT/3HPgAo9QN0KjrJVjDMUNsy5xiENB8o0Tys JMZa3N025CTu9/GC+06giLoepJEqs7fY -----END CERTIFICATE-----Generated at Fri May 3 00:07:14 2024 by rpki-client on console-ams.rpki-client.org