$ rpki-client -vvf rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft File: ljP2L_shhnbryT8cN2lknAxdhN8.mft (raw, json) Hash identifier: gV5Krj/iDXR/faPClwVO5VO+3USfUg0TPgV/Nhx5Emo= Subject key identifier: 73:AB:4E:6A:8D:9B:06:02:2B:2D:FA:09:17:F9:8A:22:1B:B1:C2:42 Authority key identifier: 96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF Certificate issuer: /CN=A91F20F8/serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft Manifest number: A5 Signing time: Fri 17 May 2024 06:48:18 +0000 Manifest this update: Fri 17 May 2024 06:48:18 +0000 Manifest next update: Fri 24 May 2024 06:48:18 +0000 Files and hashes: 1: ljP2L_shhnbryT8cN2lknAxdhN8.crl (hash: TkIgf6HWtm94Gh05Q7eX9KD600NPEPvgUQ7f0W0xQAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:48:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F20F8/serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF Validity Not Before: May 17 06:48:18 2024 GMT Not After : May 24 06:48:18 2024 GMT Subject: CN=6646fdb2-9fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8b:c8:52:90:d3:ee:0d:d3:bc:0f:e7:eb:1c: 69:19:09:ec:c3:d7:96:53:58:d5:d0:b8:38:17:6b: 8b:06:c7:a7:90:01:07:19:b5:0a:77:b1:94:b3:1d: 62:8b:b6:12:e2:ee:d8:4f:42:68:b9:5c:1b:95:b8: 94:7e:07:7e:99:ec:7c:f2:93:e8:3d:1a:e5:48:ab: 0d:55:91:39:81:5a:6a:36:6d:72:70:70:c0:27:41: 20:56:35:4b:db:91:1a:a2:ce:55:0b:c2:91:da:d2: ef:91:bd:9c:f4:b5:78:e3:42:4d:d5:e7:01:17:c2: 1a:8b:28:7d:cf:bb:ff:d4:ba:6d:89:33:83:42:8b: f1:73:1e:43:17:18:17:23:20:7a:72:b6:33:53:84: fd:37:10:f1:1f:94:7c:90:d8:9e:c0:ef:01:de:4f: 78:f7:d0:79:71:c8:4c:41:89:f8:e4:c7:5d:d6:a8: 9e:f3:49:fe:9e:e6:16:7d:03:e9:90:88:ff:00:1c: 82:9f:7b:e3:66:95:bb:e0:fb:37:ce:73:ca:e4:fe: b7:10:3c:2d:a4:44:bb:fd:a7:cc:bb:93:49:d3:93: 7d:c9:9c:04:c3:ec:3d:c4:66:9f:97:3b:9c:47:78: 2d:52:9e:23:d5:22:00:68:a5:40:84:51:f9:eb:4c: b6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:AB:4E:6A:8D:9B:06:02:2B:2D:FA:09:17:F9:8A:22:1B:B1:C2:42 X509v3 Authority Key Identifier: keyid:96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:d9:40:9e:9c:fe:50:ad:3c:d1:ed:dc:32:87:b0:13:fc:26: 63:56:7c:ca:63:9f:70:ba:c6:dc:49:b8:46:f1:f6:7e:d3:53: 6c:39:cd:f6:da:98:c4:f1:3d:20:74:50:2c:77:a2:b6:08:35: 10:e0:7e:7f:4e:40:1e:d2:ed:a1:73:9a:f1:1a:8a:a3:98:9a: 2b:da:cb:94:91:fb:44:a8:ca:6d:f8:31:77:53:42:21:dc:4f: 09:1c:6b:78:6a:41:ce:30:1d:d3:63:30:e4:33:ff:6a:62:1e: 8a:df:84:b8:05:49:7f:c3:f7:d5:ab:d9:17:bb:8c:ad:b5:57: e2:91:57:3a:5f:0b:09:41:15:7d:6e:38:2c:f8:52:49:8a:5c: c8:0a:f0:d2:19:89:2f:62:6d:f9:8c:f6:b1:16:42:7e:e5:32: aa:68:9f:19:c2:84:0d:df:1c:3d:51:ca:83:72:98:93:bb:56: f2:5a:e2:c4:39:47:3f:e8:73:22:9f:7c:b7:01:0f:39:e3:e3: a8:6a:f9:f9:e2:f7:6c:65:e8:e0:01:d3:22:6f:c9:59:db:ed: 5f:fc:3f:a1:2d:f0:52:06:5e:26:76:af:67:1f:2f:c2:fa:bb: db:1c:e3:53:a7:2a:96:fb:0d:4d:df:11:98:e9:13:f5:18:da: 31:36:e9:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIwRjgxMTAvBgNVBAUTKDk2MzNGNjJGRkIyMTg2NzZFQkM5M0YxQzM3Njk2NDlD MEM1RDg0REYwHhcNMjQwNTE3MDY0ODE4WhcNMjQwNTI0MDY0ODE4WjAYMRYwFAYD VQQDEw02NjQ2ZmRiMi05ZmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvovIUpDT7g3TvA/n6xxpGQnsw9eWU1jV0Lg4F2uLBsenkAEHGbUKd7GUsx1i i7YS4u7YT0JouVwblbiUfgd+mex88pPoPRrlSKsNVZE5gVpqNm1ycHDAJ0EgVjVL 25Eaos5VC8KR2tLvkb2c9LV440JN1ecBF8Iaiyh9z7v/1LptiTODQovxcx5DFxgX IyB6crYzU4T9NxDxH5R8kNiewO8B3k9499B5cchMQYn45Mdd1qie80n+nuYWfQPp kIj/AByCn3vjZpW74Ps3znPK5P63EDwtpES7/afMu5NJ05N9yZwEw+w9xGaflzuc R3gtUp4j1SIAaKVAhFH560y2RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOrTmqN mwYCKy36CRf5iiIbscJCMB8GA1UdIwQYMBaAFJYz9i/7IYZ268k/HDdpZJwMXYTf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjBGOC9CMDZGQUUyRTE5 N0MxMUVFQkQyMUJCNENDNEY5QUUwMi9salAyTF9zaGhuYnJ5VDhjTjJsa25BeGRo TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xqUDJMX3NoaG5icnlUOGNOMmxrbkF4ZGhOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjBGOC9CMDZGQUUyRTE5N0MxMUVFQkQyMUJCNENDNEY5QUUwMi9salAyTF9zaGhu YnJ5VDhjTjJsa25BeGRoTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA52UCenP5QrTzR7dwyh7AT/CZjVnzKY59wusbcSbhG8fZ+01NsOc32 2pjE8T0gdFAsd6K2CDUQ4H5/TkAe0u2hc5rxGoqjmJor2suUkftEqMpt+DF3U0Ih 3E8JHGt4akHOMB3TYzDkM/9qYh6K34S4BUl/w/fVq9kXu4yttVfikVc6XwsJQRV9 bjgs+FJJilzICvDSGYkvYm35jPaxFkJ+5TKqaJ8ZwoQN3xw9UcqDcpiTu1byWuLE OUc/6HMin3y3AQ854+Ooavn54vdsZejgAdMib8lZ2+1f/D+hLfBSBl4mdq9nHy/C +rvbHONTpyqW+w1N3xGY6RP1GNoxNumh -----END CERTIFICATE-----Generated at Fri May 17 08:13:55 2024 by rpki-client on console-fra.rpki-client.org