$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1ADD/DFAD9A1CF13211EB8AB4D44AC4F9AE02/lUYNFYUCHTnq191bsrVTv0dKyUM.mft File: lUYNFYUCHTnq191bsrVTv0dKyUM.mft (raw, json) Hash identifier: gsoQXuBOu9Mjq5TFq7z+mKAqKxP3M9vLZp2FVI9WQuI= Subject key identifier: 6A:BC:28:A5:05:82:84:4F:92:DD:D3:66:02:FC:2C:9F:06:F0:2B:FD Authority key identifier: 95:46:0D:15:85:02:1D:39:EA:D7:DD:5B:B2:B5:53:BF:47:4A:C9:43 Certificate issuer: /CN=A91F1ADD/serialNumber=95460D1585021D39EAD7DD5BB2B553BF474AC943 Certificate serial: 049D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUYNFYUCHTnq191bsrVTv0dKyUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1ADD/DFAD9A1CF13211EB8AB4D44AC4F9AE02/lUYNFYUCHTnq191bsrVTv0dKyUM.mft Manifest number: 0492 Signing time: Wed 01 May 2024 01:58:59 +0000 Manifest this update: Wed 01 May 2024 01:58:58 +0000 Manifest next update: Wed 08 May 2024 01:58:58 +0000 Files and hashes: 1: lUYNFYUCHTnq191bsrVTv0dKyUM.crl (hash: eGOUOUoxQaAr7q/JgbiI2eDxnRIstbrq7Y935GL+YkE=) 2: 06729B36D8B011EEB5C9AD7AC4F9AE02.roa (hash: IcWvDvyoSVOByNJk3J7qEysmig3xjiTsoHpr6v9+elI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1ADD/DFAD9A1CF13211EB8AB4D44AC4F9AE02/lUYNFYUCHTnq191bsrVTv0dKyUM.crl rsync://rpki.apnic.net/member_repository/A91F1ADD/DFAD9A1CF13211EB8AB4D44AC4F9AE02/lUYNFYUCHTnq191bsrVTv0dKyUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUYNFYUCHTnq191bsrVTv0dKyUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 01:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1181 (0x49d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1ADD/serialNumber=95460D1585021D39EAD7DD5BB2B553BF474AC943 Validity Not Before: May 1 01:58:58 2024 GMT Not After : May 8 01:58:58 2024 GMT Subject: CN=6631a1e2-98db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:58:58:b3:b4:ea:a1:27:e5:0d:5d:f3:e9:bb: dd:5c:cd:17:b3:88:5c:5d:90:fd:8a:27:30:3d:39: 3e:56:9a:3c:c5:d2:bb:a6:0e:ca:64:cc:3a:d6:de: f2:69:8e:34:e6:89:00:5c:08:79:ea:ed:92:58:bb: b7:89:6b:00:83:30:f8:fb:05:07:b0:6a:f1:71:41: 20:12:6a:87:f8:f4:04:b2:47:f9:82:de:83:8b:98: b3:c6:a3:03:de:6f:4f:d3:dd:00:8e:ae:ae:16:cf: 25:78:a5:1b:e2:25:1e:7b:0b:69:7c:22:ab:dd:d1: 42:68:35:90:f1:27:d0:52:c4:b3:d8:8f:ba:6b:e9: c6:2c:72:5a:b9:32:b5:93:15:74:fa:79:2c:5c:4d: ad:4d:88:84:e2:49:29:5b:ec:c9:c7:33:05:5b:e6: a4:7b:9d:a3:76:89:42:e0:98:3c:2c:75:6c:f6:03: 9e:e9:ab:c5:fe:cc:7b:a4:64:2b:17:2f:77:fe:21: 39:c5:c5:59:cb:60:d4:16:e0:b8:da:f4:f3:27:70: 75:3c:df:4b:30:a4:89:08:e9:d8:a4:58:9e:b2:80: 02:a2:91:08:6c:94:dd:1d:87:f9:e7:a0:61:09:69: a7:83:e0:a8:38:ae:74:75:b3:59:35:c2:c7:79:cc: f5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:BC:28:A5:05:82:84:4F:92:DD:D3:66:02:FC:2C:9F:06:F0:2B:FD X509v3 Authority Key Identifier: keyid:95:46:0D:15:85:02:1D:39:EA:D7:DD:5B:B2:B5:53:BF:47:4A:C9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1ADD/DFAD9A1CF13211EB8AB4D44AC4F9AE02/lUYNFYUCHTnq191bsrVTv0dKyUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUYNFYUCHTnq191bsrVTv0dKyUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1ADD/DFAD9A1CF13211EB8AB4D44AC4F9AE02/lUYNFYUCHTnq191bsrVTv0dKyUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:23:47:41:8f:ac:0f:ab:7c:00:c8:6b:07:10:62:a5:1e:4d: 45:ec:10:64:6a:e2:bf:a3:95:52:4d:e7:aa:26:82:a7:bc:05: 28:3c:9a:d0:2d:fa:fa:bd:44:37:a4:f3:d6:25:08:68:31:5e: fe:a3:d7:df:b2:22:b8:70:e9:01:50:80:72:9b:f4:8a:d0:2a: 78:4d:c3:4f:ce:8c:db:0a:a1:7c:93:6a:c2:09:d4:4d:73:ef: 6c:c4:ba:7a:0e:49:93:ee:c1:b1:97:d1:7f:75:b2:48:c6:36: bf:5e:0f:33:16:6c:d1:c2:f2:af:19:ec:e3:26:a3:17:cb:aa: a4:14:30:8f:8a:c0:86:a0:15:48:76:0d:65:a0:68:ee:a0:c0: 70:32:05:64:e3:59:a7:90:d7:e8:cf:0f:a8:7b:40:18:c3:0b: 6e:f0:b0:d8:a5:ee:03:63:64:4b:c5:16:37:b4:7a:43:68:ea: 71:94:01:de:37:60:b4:07:5d:20:f2:6d:ee:04:85:2b:ca:c0: 98:46:eb:ae:93:85:4b:a6:d3:f3:f5:80:e8:7c:37:95:0c:8b: c8:e8:85:3f:2b:3e:9a:d9:55:ca:0e:bf:50:0c:db:f3:4f:ba: 64:48:da:11:e7:f3:9e:57:60:a0:53:11:dd:d7:20:84:71:96: 2c:b4:d6:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFBREQxMTAvBgNVBAUTKDk1NDYwRDE1ODUwMjFEMzlFQUQ3REQ1QkIyQjU1M0JG NDc0QUM5NDMwHhcNMjQwNTAxMDE1ODU4WhcNMjQwNTA4MDE1ODU4WjAYMRYwFAYD VQQDEw02NjMxYTFlMi05OGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlhYs7TqoSflDV3z6bvdXM0Xs4hcXZD9iicwPTk+Vpo8xdK7pg7KZMw61t7y aY405okAXAh56u2SWLu3iWsAgzD4+wUHsGrxcUEgEmqH+PQEskf5gt6Di5izxqMD 3m9P090Ajq6uFs8leKUb4iUeewtpfCKr3dFCaDWQ8SfQUsSz2I+6a+nGLHJauTK1 kxV0+nksXE2tTYiE4kkpW+zJxzMFW+ake52jdolC4Jg8LHVs9gOe6avF/sx7pGQr Fy93/iE5xcVZy2DUFuC42vTzJ3B1PN9LMKSJCOnYpFiesoACopEIbJTdHYf556Bh CWmng+CoOK50dbNZNcLHecz1NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGq8KKUF goRPkt3TZgL8LJ8G8Cv9MB8GA1UdIwQYMBaAFJVGDRWFAh056tfdW7K1U79HSslD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUFERC9ERkFEOUExQ0Yx MzIxMUVCOEFCNEQ0NEFDNEY5QUUwMi9sVVlORllVQ0hUbnExOTFic3JWVHYwZEt5 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xVWU5GWVVDSFRucTE5MWJzclZUdjBkS3lVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUFERC9ERkFEOUExQ0YxMzIxMUVCOEFCNEQ0NEFDNEY5QUUwMi9sVVlORllVQ0hU bnExOTFic3JWVHYwZEt5VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTI0dBj6wPq3wAyGsHEGKlHk1F7BBkauK/o5VSTeeqJoKnvAUoPJrQ Lfr6vUQ3pPPWJQhoMV7+o9ffsiK4cOkBUIBym/SK0Cp4TcNPzozbCqF8k2rCCdRN c+9sxLp6DkmT7sGxl9F/dbJIxja/Xg8zFmzRwvKvGezjJqMXy6qkFDCPisCGoBVI dg1loGjuoMBwMgVk41mnkNfozw+oe0AYwwtu8LDYpe4DY2RLxRY3tHpDaOpxlAHe N2C0B10g8m3uBIUrysCYRuuuk4VLptPz9YDofDeVDIvI6IU/Kz6a2VXKDr9QDNvz T7pkSNoR5/OeV2CgUxHd1yCEcZYstNbu -----END CERTIFICATE-----Generated at Wed May 1 03:20:37 2024 by rpki-client on console-fra.rpki-client.org