$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft File: L-bMC5qdlV4-LFnV2fjukZcYAG8.mft (raw, json) Hash identifier: M27mlm+DEEose69gvuUPPnM/8rAivjRrPkaLMM1hyFw= Subject key identifier: AC:CB:B9:FB:B3:B6:11:DC:C8:FF:BE:A7:43:D9:F0:44:68:AA:61:4D Authority key identifier: 2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F Certificate issuer: /CN=A91FAC84/serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft Manifest number: 9A Signing time: Fri 17 May 2024 06:57:20 +0000 Manifest this update: Fri 17 May 2024 06:57:19 +0000 Manifest next update: Fri 24 May 2024 06:57:19 +0000 Files and hashes: 1: L-bMC5qdlV4-LFnV2fjukZcYAG8.crl (hash: Jq3AEKNxHHX97b4ZXi6ldRyaANRdU1FoyXoYlia7ddg=) 2: 6C89F05A2B8F11EE8BCDDC6CC4F9AE02.roa (hash: K1RWcCLEGDrDNc6x1Bn06vdSsg9FOSkJcIRgTGwUnlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAC84/serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Validity Not Before: May 17 06:57:19 2024 GMT Not After : May 24 06:57:19 2024 GMT Subject: CN=6646ffcf-56e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:eb:09:b3:c8:27:06:4f:9e:53:0e:5f:30:26: ee:5c:c7:2a:e6:5a:7c:14:e8:e2:43:be:2b:03:f6: 14:19:b8:7e:20:51:4b:a3:10:47:7f:37:41:b3:df: b8:f6:00:e2:7a:fb:a9:83:c3:d6:f2:d9:f7:74:e2: 9f:d3:c4:d5:15:bd:d1:62:b2:62:f3:2e:e7:15:32: 48:db:db:7f:6a:d3:ea:00:8d:cf:48:2f:96:08:d4: f3:9a:9f:3d:94:ed:0f:12:f9:e5:d0:2b:4a:f7:20: 7a:20:42:7b:c9:43:f3:14:96:16:f1:e8:36:6f:df: 43:31:1e:e9:68:23:00:92:8e:63:b0:10:11:27:ea: 8c:eb:2c:37:a0:35:d2:fb:64:06:fb:82:af:80:70: e3:74:bd:15:6b:7e:2e:28:e6:5c:16:21:15:17:1b: b2:68:82:a4:11:46:c7:c3:3d:9b:ac:7c:65:d3:5a: 52:2b:f9:3b:d9:27:44:19:5e:71:70:f0:e3:e3:05: ba:70:35:c0:89:38:2c:19:01:e4:58:23:89:5f:67: 27:dd:0b:b3:9d:6c:35:e6:d8:8b:2d:5f:c3:96:44: 5b:d0:09:b9:d4:4d:4b:2f:06:50:08:0d:34:53:18: 4c:cd:20:55:82:ec:bf:8b:7a:28:0e:89:5f:04:7a: 61:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:CB:B9:FB:B3:B6:11:DC:C8:FF:BE:A7:43:D9:F0:44:68:AA:61:4D X509v3 Authority Key Identifier: keyid:2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:69:26:55:e0:30:87:6b:1c:cc:0d:03:76:a2:a4:51:59:41: af:01:d7:8b:4b:67:15:e7:ee:6b:41:c0:b1:a8:a4:37:4c:8d: 93:c3:2a:fc:8f:9c:55:7e:51:60:29:0c:6a:85:cd:91:d4:9b: c0:88:58:e7:ac:02:ef:e8:33:c9:85:f0:10:5b:21:74:bc:93: 29:61:13:24:5f:be:cb:42:60:ea:10:2a:59:c9:6f:32:5f:d1: 54:42:d0:b1:07:32:37:10:d5:77:d6:c3:ce:76:3f:10:cf:10: ad:cd:5d:ae:d3:ed:b2:5a:9d:48:12:49:44:3a:47:ab:5f:73: ed:fc:22:0f:4f:8e:9e:7a:25:54:0b:b2:4e:39:1e:5d:dc:f6: f5:1d:21:bd:66:c1:45:f8:98:0c:f6:ff:43:04:25:4e:2a:9f: 28:f7:d5:0a:64:9f:8f:7a:99:bc:27:48:c5:15:1e:3b:02:d8: 35:f9:0d:30:8b:35:c3:c5:62:db:a4:92:67:26:50:d7:b9:00: 75:28:76:46:02:0c:c9:78:57:0e:cb:9f:62:f8:8c:27:97:3b: 95:79:de:81:e0:b3:5b:17:fd:d4:b7:99:4f:0d:04:44:e6:cd: 51:67:11:f2:eb:59:e3:ca:7e:d0:0f:ca:1b:3b:bc:77:33:d6: 50:e1:ba:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFDODQxMTAvBgNVBAUTKDJGRTZDQzBCOUE5RDk1NUUzRTJDNTlENUQ5RjhFRTkx OTcxODAwNkYwHhcNMjQwNTE3MDY1NzE5WhcNMjQwNTI0MDY1NzE5WjAYMRYwFAYD VQQDEw02NjQ2ZmZjZi01NmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsesJs8gnBk+eUw5fMCbuXMcq5lp8FOjiQ74rA/YUGbh+IFFLoxBHfzdBs9+4 9gDievupg8PW8tn3dOKf08TVFb3RYrJi8y7nFTJI29t/atPqAI3PSC+WCNTzmp89 lO0PEvnl0CtK9yB6IEJ7yUPzFJYW8eg2b99DMR7paCMAko5jsBARJ+qM6yw3oDXS +2QG+4KvgHDjdL0Va34uKOZcFiEVFxuyaIKkEUbHwz2brHxl01pSK/k72SdEGV5x cPDj4wW6cDXAiTgsGQHkWCOJX2cn3QuznWw15tiLLV/DlkRb0Am51E1LLwZQCA00 UxhMzSBVguy/i3ooDolfBHph/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKzLufuz thHcyP++p0PZ8ERoqmFNMB8GA1UdIwQYMBaAFC/mzAuanZVePixZ1dn47pGXGABv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUM4NC9ERDVDOUVCQzJC ODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxWNC1MRm5WMmZqdWtaY1lB RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wtYk1DNXFkbFY0LUxGblYyZmp1a1pjWUFHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUM4NC9ERDVDOUVCQzJCODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxW NC1MRm5WMmZqdWtaY1lBRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAaSZV4DCHaxzMDQN2oqRRWUGvAdeLS2cV5+5rQcCxqKQ3TI2Twyr8 j5xVflFgKQxqhc2R1JvAiFjnrALv6DPJhfAQWyF0vJMpYRMkX77LQmDqECpZyW8y X9FUQtCxBzI3ENV31sPOdj8QzxCtzV2u0+2yWp1IEklEOkerX3Pt/CIPT46eeiVU C7JOOR5d3Pb1HSG9ZsFF+JgM9v9DBCVOKp8o99UKZJ+Pepm8J0jFFR47Atg1+Q0w izXDxWLbpJJnJlDXuQB1KHZGAgzJeFcOy59i+IwnlzuVed6B4LNbF/3Ut5lPDQRE 5s1RZxHy61njyn7QD8obO7x3M9ZQ4bqF -----END CERTIFICATE-----Generated at Fri May 17 08:52:57 2024 by rpki-client on console-ams.rpki-client.org