$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft File: LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft (raw, json) Hash identifier: 9WyWH74QZATjsDmrzRR/B351DR4+E5GWnIdU6qhD3fY= Subject key identifier: 5C:B4:8A:F6:D2:E6:54:F4:67:C8:11:14:FA:EF:54:2E:2C:15:0B:6A Authority key identifier: 2E:A6:28:AB:55:D1:81:74:3E:F2:90:EF:82:49:98:0D:62:99:AF:A2 Certificate issuer: /CN=A91FF94F/serialNumber=2EA628AB55D181743EF290EF8249980D6299AFA2 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft Manifest number: 46 Signing time: Fri 17 May 2024 08:08:44 +0000 Manifest this update: Fri 17 May 2024 08:08:44 +0000 Manifest next update: Fri 24 May 2024 08:08:44 +0000 Files and hashes: 1: LqYoq1XRgXQ-8pDvgkmYDWKZr6I.crl (hash: wPMqn81HQTMlCxg5OIo7oh9i/ZEictycNS/sWNZ+eSM=) 2: F41E4608AD1511EE8FBA3458C4F9AE02.roa (hash: JrnLIqhM/bGGcDkqC/T47KoXDIHvgSVzcSDGWO1VDNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.crl rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:08:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF94F/serialNumber=2EA628AB55D181743EF290EF8249980D6299AFA2 Validity Not Before: May 17 08:08:44 2024 GMT Not After : May 24 08:08:44 2024 GMT Subject: CN=6647108c-6b54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:95:74:f9:51:1c:ca:2c:b3:0e:fe:04:18:f2: b3:c1:e4:a0:ec:6d:0a:b4:f7:32:c6:05:13:37:7f: 2e:10:32:48:c0:59:84:67:b4:1f:83:00:dc:98:a1: c3:e7:c9:9a:50:79:ad:4e:d2:94:b3:a4:93:ef:91: 08:b7:a5:a1:7d:ce:9a:2d:7d:2f:e9:15:cd:ec:34: 4b:92:f6:64:f9:24:e0:fb:37:a6:d8:03:f3:97:45: 57:ce:a8:f4:46:68:1c:7b:53:db:0e:6c:cd:0e:e6: 0d:2f:f8:81:49:7c:76:38:a2:e7:31:8e:11:d1:c8: 12:6e:ec:d4:5b:71:a0:55:63:93:fa:cf:ed:70:b8: 6a:8d:71:0d:d0:d0:a0:57:86:df:ae:91:18:8e:ec: a9:7e:7f:40:1b:0c:3b:d6:39:76:e2:54:53:48:46: d8:cf:52:2f:ef:34:37:a2:d5:0f:21:63:19:0f:af: 30:49:26:a4:e8:ec:af:7d:c2:27:d9:ef:c0:3f:3c: 2e:f4:b5:a3:f7:e1:20:f4:3e:e1:5a:1c:26:c2:ff: eb:fc:e5:09:02:d9:14:f1:1a:87:32:fd:6f:4c:48: 84:38:66:56:fc:75:f6:a0:ed:4f:dc:5b:d3:eb:07: cb:7f:eb:32:e8:47:fc:69:c1:9b:5e:c9:8d:79:bd: 3f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B4:8A:F6:D2:E6:54:F4:67:C8:11:14:FA:EF:54:2E:2C:15:0B:6A X509v3 Authority Key Identifier: keyid:2E:A6:28:AB:55:D1:81:74:3E:F2:90:EF:82:49:98:0D:62:99:AF:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:90:ed:f5:a3:e5:2b:d3:82:9d:13:01:5a:ad:24:2e:9c:4a: a3:81:bf:11:68:e4:3c:76:5d:43:76:61:92:be:2c:6a:b8:0e: 4a:cd:37:84:11:bd:55:6b:17:4d:9a:0b:47:a3:18:6a:1b:da: 9d:87:a2:63:0c:59:45:2a:79:94:38:51:33:ff:2c:e6:91:f2: 97:6a:1d:f2:7f:49:18:f0:72:10:cf:d7:2d:b0:a5:81:20:2e: 8f:34:ae:f9:4a:f9:c4:32:76:17:4d:1e:84:fd:bd:c2:dc:c2: dd:a8:3b:2f:11:ac:d0:c5:05:57:1b:eb:a5:95:e2:a2:c3:91: cd:b0:38:09:b5:7d:3d:4b:bf:a6:07:3a:e5:e7:cc:f0:81:fd: ab:4d:eb:c3:72:a3:53:4f:db:3d:cc:5f:f5:85:fa:28:35:41: e7:bb:25:9e:aa:9b:f4:1f:40:9c:ba:d0:18:19:1b:61:6c:d4: cb:77:14:07:16:11:68:49:6f:19:5e:8e:67:95:cd:5b:db:70: 04:97:0e:17:94:0e:6f:16:4a:61:90:f9:5c:4d:98:91:26:c1: b5:fb:17:13:40:88:8b:df:7a:30:0c:fb:b1:9c:41:01:72:c1: 41:4f:64:3f:a6:fe:ea:a5:30:d0:51:e9:39:19:bb:5a:cb:ee: be:f2:52:ba -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Rjk0RjExMC8GA1UEBRMoMkVBNjI4QUI1NUQxODE3NDNFRjI5MEVGODI0OTk4MEQ2 Mjk5QUZBMjAeFw0yNDA1MTcwODA4NDRaFw0yNDA1MjQwODA4NDRaMBgxFjAUBgNV BAMTDTY2NDcxMDhjLTZiNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUlXT5URzKLLMO/gQY8rPB5KDsbQq09zLGBRM3fy4QMkjAWYRntB+DANyYocPn yZpQea1O0pSzpJPvkQi3paF9zpotfS/pFc3sNEuS9mT5JOD7N6bYA/OXRVfOqPRG aBx7U9sObM0O5g0v+IFJfHY4oucxjhHRyBJu7NRbcaBVY5P6z+1wuGqNcQ3Q0KBX ht+ukRiO7Kl+f0AbDDvWOXbiVFNIRtjPUi/vNDei1Q8hYxkPrzBJJqTo7K99wifZ 78A/PC70taP34SD0PuFaHCbC/+v85QkC2RTxGocy/W9MSIQ4Zlb8dfag7U/cW9Pr B8t/6zLoR/xpwZteyY15vT+VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXLSK9tLm VPRnyBEU+u9ULiwVC2owHwYDVR0jBBgwFoAULqYoq1XRgXQ+8pDvgkmYDWKZr6Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGOTRGL0QzNDhGMkQwQUQx NDExRUVCMEI4MTEzOUM0RjlBRTAyL0xxWW9xMVhSZ1hRLThwRHZna21ZRFdLWnI2 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTHFZb3ExWFJnWFEtOHBEdmdrbVlEV0tacjZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG OTRGL0QzNDhGMkQwQUQxNDExRUVCMEI4MTEzOUM0RjlBRTAyL0xxWW9xMVhSZ1hR LThwRHZna21ZRFdLWnI2SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJGQ7fWj5SvTgp0TAVqtJC6cSqOBvxFo5Dx2XUN2YZK+LGq4DkrNN4QR vVVrF02aC0ejGGob2p2HomMMWUUqeZQ4UTP/LOaR8pdqHfJ/SRjwchDP1y2wpYEg Lo80rvlK+cQydhdNHoT9vcLcwt2oOy8RrNDFBVcb66WV4qLDkc2wOAm1fT1Lv6YH OuXnzPCB/atN68Nyo1NP2z3MX/WF+ig1Qee7JZ6qm/QfQJy60BgZG2Fs1Mt3FAcW EWhJbxlejmeVzVvbcASXDheUDm8WSmGQ+VxNmJEmwbX7FxNAiIvfejAM+7GcQQFy wUFPZD+m/uqlMNBR6TkZu1rL7r7yUro= -----END CERTIFICATE-----Generated at Fri May 17 10:10:54 2024 by rpki-client on console-fra.rpki-client.org