$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft File: lrZQExL54S6xmmT2IuF81Ced8M8.mft (raw, json) Hash identifier: Czcw7UUzSCM8el3aszGDgLRW1Z6OzRt+acJ+KOV5X5E= Subject key identifier: C1:76:FF:EF:66:18:5F:DE:E0:D7:8C:1B:13:12:D1:CC:3F:41:43:8A Authority key identifier: 96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF Certificate issuer: /CN=A91FBE5E/serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft Manifest number: 4D Signing time: Sun 15 Sep 2024 09:42:21 +0000 Manifest this update: Sun 15 Sep 2024 09:42:20 +0000 Manifest next update: Sun 22 Sep 2024 09:42:20 +0000 Files and hashes: 1: lrZQExL54S6xmmT2IuF81Ced8M8.crl (hash: 9+JwYYDmPApZSCJJ5d1NAnoyoTvJgrp9wdWLMEB0W/Q=) 2: 78A6163A03A111EF8B02B62AC4F9AE02.roa (hash: 2Jk6NkRGMZVyLJ5lD/V9WaUiK9h9DfnBbBByEKgktvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBE5E/serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF Validity Not Before: Sep 15 09:42:20 2024 GMT Not After : Sep 22 09:42:20 2024 GMT Subject: CN=66e6abfc-98e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:53:aa:c4:fe:fc:58:f7:7a:8c:1e:0e:66:7d: 85:e8:a4:a8:c4:d9:49:a9:8f:d9:9d:ce:32:23:3c: 4f:c9:5e:0d:70:a5:f5:64:ae:1d:3e:e1:7b:d0:ce: d1:25:43:d0:15:ad:42:3c:10:0a:0a:07:02:59:b9: 83:b9:67:25:ce:24:03:da:98:70:a2:70:a0:1f:a3: 8b:ac:d7:b4:b5:96:d7:b0:cf:53:f5:1a:56:23:47: 9b:ff:1e:14:39:71:c3:8a:f0:01:ac:f4:89:05:2b: a6:d1:19:cd:2e:63:62:5e:f1:40:7b:3e:d7:fd:08: 9f:0c:d5:ad:fe:55:9c:42:7e:ad:8c:c3:a2:b1:7c: a2:d8:33:b9:86:ac:2f:13:d0:ea:5e:22:d2:f7:e8: 15:15:a7:66:72:29:38:43:5d:6f:b9:6f:65:54:85: 35:dc:a6:f5:3b:cf:e2:35:59:db:a9:04:35:e1:aa: 75:a9:64:d6:65:e7:33:a2:3f:75:06:f7:c4:3c:ce: 47:22:a1:c6:4c:80:ff:36:09:ce:b6:6e:8e:f9:b9: b9:97:ab:26:4d:12:38:db:bd:fe:df:46:15:6f:86: 9f:be:ec:3b:52:b2:56:de:05:8d:bf:d7:45:ef:95: d0:e9:52:16:0d:63:e6:c9:f3:fe:e2:1a:da:83:6d: 71:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:76:FF:EF:66:18:5F:DE:E0:D7:8C:1B:13:12:D1:CC:3F:41:43:8A X509v3 Authority Key Identifier: keyid:96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:85:7d:d0:a1:31:26:77:c2:19:10:ef:d9:3e:a8:84:6b:6a: a6:fa:a1:ce:70:1a:91:a9:a6:77:49:d2:7f:f5:73:44:8e:10: 17:03:b2:69:76:f2:78:ad:48:21:c6:d6:4a:aa:63:78:32:ae: fe:c1:b3:33:6e:00:e5:a8:f9:38:e6:cb:ff:77:a4:73:70:77: ed:ab:7f:12:96:a6:09:63:63:76:9c:76:5f:e2:c3:45:b3:01: 31:28:0c:f6:f8:e9:fc:13:01:03:de:24:ec:86:e2:6b:4f:5a: a3:a0:16:19:87:bf:35:4f:20:02:81:1a:ce:d4:b5:ef:5e:0c: e2:32:bb:cc:4c:a0:3d:82:9a:74:52:bd:c1:44:f3:12:aa:01: 3d:1a:40:60:38:0a:eb:ed:d6:9c:59:67:43:f4:13:cc:9c:ec: 8e:35:d6:d9:81:0a:bc:06:29:99:9a:65:38:cc:e9:74:ae:eb: bd:84:ea:e9:97:e8:ca:3b:1b:56:f1:b6:44:11:78:fc:92:ef: e5:77:ea:d8:3e:a8:dd:9f:3a:e2:62:b0:00:53:17:8d:60:67: 70:5f:ce:c1:1c:44:cf:49:8e:27:3c:ab:7b:d3:82:7b:09:a0: 5d:f3:95:db:e2:c1:b6:87:3b:e2:16:9b:52:63:58:77:21:1e: f5:a7:3e:09 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QkU1RTExMC8GA1UEBRMoOTZCNjUwMTMxMkY5RTEyRUIxOUE2NEY2MjJFMTdDRDQy NzlERjBDRjAeFw0yNDA5MTUwOTQyMjBaFw0yNDA5MjIwOTQyMjBaMBgxFjAUBgNV BAMTDTY2ZTZhYmZjLTk4ZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoU6rE/vxY93qMHg5mfYXopKjE2Umpj9mdzjIjPE/JXg1wpfVkrh0+4XvQztEl Q9AVrUI8EAoKBwJZuYO5ZyXOJAPamHCicKAfo4us17S1ltewz1P1GlYjR5v/HhQ5 ccOK8AGs9IkFK6bRGc0uY2Je8UB7Ptf9CJ8M1a3+VZxCfq2Mw6KxfKLYM7mGrC8T 0OpeItL36BUVp2ZyKThDXW+5b2VUhTXcpvU7z+I1WdupBDXhqnWpZNZl5zOiP3UG 98Q8zkciocZMgP82Cc62bo75ubmXqyZNEjjbvf7fRhVvhp++7DtSslbeBY2/10Xv ldDpUhYNY+bJ8/7iGtqDbXEtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwXb/72YY X97g14wbExLRzD9BQ4owHwYDVR0jBBgwFoAUlrZQExL54S6xmmT2IuF81Ced8M8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCRTVFLzgzQjg3MkY0MDM5 RjExRUY5MEY2NjIyN0M0RjlBRTAyL2xyWlFFeEw1NFM2eG1tVDJJdUY4MUNlZDhN OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbHJaUUV4TDU0UzZ4bW1UMkl1RjgxQ2VkOE04LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC RTVFLzgzQjg3MkY0MDM5RjExRUY5MEY2NjIyN0M0RjlBRTAyL2xyWlFFeEw1NFM2 eG1tVDJJdUY4MUNlZDhNOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABeFfdChMSZ3whkQ79k+qIRraqb6oc5wGpGppndJ0n/1c0SOEBcDsml2 8nitSCHG1kqqY3gyrv7BszNuAOWo+Tjmy/93pHNwd+2rfxKWpgljY3acdl/iw0Wz ATEoDPb46fwTAQPeJOyG4mtPWqOgFhmHvzVPIAKBGs7Ute9eDOIyu8xMoD2CmnRS vcFE8xKqAT0aQGA4Cuvt1pxZZ0P0E8yc7I411tmBCrwGKZmaZTjM6XSu672E6umX 6Mo7G1bxtkQRePyS7+V36tg+qN2fOuJisABTF41gZ3BfzsEcRM9Jjic8q3vTgnsJ oF3zldviwbaHO+IWm1JjWHchHvWnPgk= -----END CERTIFICATE-----Generated at Sun Sep 15 10:45:14 2024 by rpki-client on console-fra.rpki-client.org