$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft File: l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft (raw, json) Hash identifier: mbN37Z1jjswzfZzgzU3X5FJU35x4IcC6HSV+GhP0WDY= Subject key identifier: 9C:6D:86:0D:6D:38:B4:C0:F9:BB:E6:3D:DB:24:91:64:5F:DA:26:84 Authority key identifier: 97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 Certificate issuer: /CN=A91FE40B/serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Certificate serial: 0B7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft Manifest number: 0B76 Signing time: Thu 02 May 2024 19:30:24 +0000 Manifest this update: Thu 02 May 2024 19:30:24 +0000 Manifest next update: Thu 09 May 2024 19:30:24 +0000 Files and hashes: 1: l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl (hash: dgb6W/Hwx5Ie1T5za1By7vw5iMdQPp+P+x0zGveq7/0=) 2: 993EC4A6053A11EAAC92336CC4F9AE02.roa (hash: 3AmLDN9kUO0iJK4FUY7YrIWCTP4KQL12FC5b5uIw/po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 19:30:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2939 (0xb7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE40B/serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Validity Not Before: May 2 19:30:24 2024 GMT Not After : May 9 19:30:24 2024 GMT Subject: CN=6633e9d0-3e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c1:06:e9:22:9c:4d:77:a7:00:86:94:08:60: 3a:bc:18:27:28:40:30:79:53:22:97:8d:84:f3:bc: 69:f3:de:d1:10:93:dc:23:75:da:64:4b:61:4c:73: 12:5f:44:8e:aa:31:39:65:c8:59:0a:5d:d1:e0:bf: 3d:fb:11:6c:0f:8a:f7:73:17:0f:a4:c1:63:04:1f: 0d:fe:87:38:09:c8:3a:ff:b7:19:e2:5a:21:a5:e4: d2:83:9b:81:78:a6:2e:0f:46:4a:84:4e:fc:ba:0c: b9:7d:4f:58:60:b1:7e:40:fd:74:1a:cc:ac:76:e5: c1:43:e9:16:13:ef:ea:1c:65:27:bc:e5:3c:0a:8d: 0a:89:2c:08:8d:0b:a6:88:ba:0d:6c:fc:6a:67:7b: 03:3d:c5:98:0a:4c:7d:fc:93:bb:85:cf:f4:39:1f: c6:40:56:b5:e6:04:b1:0d:06:31:8c:05:56:60:c0: 10:bc:3e:8b:e0:60:3c:41:e0:28:68:96:fe:05:74: 1b:fc:96:50:7a:01:58:2b:3e:9a:be:32:e3:d7:51: 5e:48:e5:4f:2a:48:66:4d:16:d0:64:a7:b3:56:67: 8d:76:49:c8:14:58:9a:fb:80:7d:56:e3:b9:39:0c: d3:82:5c:84:0e:b3:08:34:ad:34:ed:f8:b0:39:a8: 04:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:6D:86:0D:6D:38:B4:C0:F9:BB:E6:3D:DB:24:91:64:5F:DA:26:84 X509v3 Authority Key Identifier: keyid:97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:68:ac:71:eb:e0:d3:74:4a:b6:89:b3:51:f6:0d:81:0b:94: c1:83:5d:cb:73:9d:e7:39:f7:c9:1c:9f:fb:fe:c8:17:b7:10: 66:1f:5c:4f:7a:47:34:ca:d0:0c:fd:01:f3:21:ca:00:80:e5: 20:3f:2d:50:b1:38:52:d8:0b:36:48:43:60:5f:a7:78:1c:5b: 7b:33:52:a9:fa:5f:e9:b5:fb:a4:a6:83:f8:40:bc:80:84:f3: 3d:0e:3b:60:64:fe:40:31:1a:d3:9a:aa:5d:1c:19:d9:36:b1: a2:34:4c:3a:cc:2c:96:bb:bd:07:c6:fe:1b:dd:9f:2d:b3:fc: 35:f3:5d:97:74:65:53:a2:46:9d:34:6f:7d:e9:a2:ba:5a:ff: 19:ab:78:49:26:2b:21:3c:7c:50:cb:94:7b:c8:cf:78:9d:0b: 54:5c:36:6c:a8:80:25:49:6b:98:d6:d5:d2:ad:36:f0:01:a5: 48:29:4f:41:fd:19:44:23:cb:3a:20:8b:eb:b1:28:2b:59:73: 91:f1:62:23:f1:2b:ef:2a:63:22:ca:e0:a3:1a:06:cb:cd:df: 63:c0:4d:46:1a:ff:db:2b:de:a7:2b:f6:55:52:5e:9c:cc:34: 61:fc:e1:84:c8:5a:49:12:f1:e3:3d:cf:c8:70:18:24:7e:49: c3:e8:3c:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU0MEIxMTAvBgNVBAUTKDk3NjU1RTFGNDUzODNGOTUzOEFEQjE1MThBMzQ4NkE0 NjAyQkVENDQwHhcNMjQwNTAyMTkzMDI0WhcNMjQwNTA5MTkzMDI0WjAYMRYwFAYD VQQDEw02NjMzZTlkMC0zZTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlsEG6SKcTXenAIaUCGA6vBgnKEAweVMil42E87xp897REJPcI3XaZEthTHMS X0SOqjE5ZchZCl3R4L89+xFsD4r3cxcPpMFjBB8N/oc4Ccg6/7cZ4lohpeTSg5uB eKYuD0ZKhE78ugy5fU9YYLF+QP10GsysduXBQ+kWE+/qHGUnvOU8Co0KiSwIjQum iLoNbPxqZ3sDPcWYCkx9/JO7hc/0OR/GQFa15gSxDQYxjAVWYMAQvD6L4GA8QeAo aJb+BXQb/JZQegFYKz6avjLj11FeSOVPKkhmTRbQZKezVmeNdknIFFia+4B9VuO5 OQzTglyEDrMINK007fiwOagEOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxthg1t OLTA+bvmPdskkWRf2iaEMB8GA1UdIwQYMBaAFJdlXh9FOD+VOK2xUYo0hqRgK+1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTQwQi9EQzVGMUFDQTA1 MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1VTRyYkZSaWpTR3BHQXI3 VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wyVmVIMFU0UDVVNHJiRlJpalNHcEdBcjdVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTQwQi9EQzVGMUFDQTA1MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1 VTRyYkZSaWpTR3BHQXI3VVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjaKxx6+DTdEq2ibNR9g2BC5TBg13Lc53nOffJHJ/7/sgXtxBmH1xP ekc0ytAM/QHzIcoAgOUgPy1QsThS2As2SENgX6d4HFt7M1Kp+l/ptfukpoP4QLyA hPM9DjtgZP5AMRrTmqpdHBnZNrGiNEw6zCyWu70Hxv4b3Z8ts/w1812XdGVTokad NG996aK6Wv8Zq3hJJishPHxQy5R7yM94nQtUXDZsqIAlSWuY1tXSrTbwAaVIKU9B /RlEI8s6IIvrsSgrWXOR8WIj8SvvKmMiyuCjGgbLzd9jwE1GGv/bK96nK/ZVUl6c zDRh/OGEyFpJEvHjPc/IcBgkfknD6DyZ -----END CERTIFICATE-----Generated at Thu May 2 22:28:59 2024 by rpki-client on console-ams.rpki-client.org