$ rpki-client -vvf rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft File: lTU3mXduubP_WHJemdAqplT7GgQ.mft (raw, json) Hash identifier: WGeFAIdZv7so4JvN3169pxVc28zoEMieUgWvim6TZRw= Subject key identifier: B5:59:AC:A6:BC:AE:72:EC:50:8E:1F:DD:D8:E9:2A:56:9C:E8:71:31 Authority key identifier: 95:35:37:99:77:6E:B9:B3:FF:58:72:5E:99:D0:2A:A6:54:FB:1A:04 Certificate issuer: /CN=A9113E15/serialNumber=95353799776EB9B3FF58725E99D02AA654FB1A04 Certificate serial: 04F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft Manifest number: 04F4 Signing time: Fri 31 May 2024 01:48:17 +0000 Manifest this update: Fri 31 May 2024 01:48:17 +0000 Manifest next update: Fri 07 Jun 2024 01:48:17 +0000 Files and hashes: 1: lTU3mXduubP_WHJemdAqplT7GgQ.crl (hash: RXfPhcSW+Ll7NqWm+mRQ9+hJ24Auc1aEWOupbRmXuKs=) 2: F9869896C8F411EBB460DB52C4F9AE02.roa (hash: s2/gefkjyAwATsY34TF6PruGFfbhsqeQU6X2SCeJSoc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.crl rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:48:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1272 (0x4f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113E15/serialNumber=95353799776EB9B3FF58725E99D02AA654FB1A04 Validity Not Before: May 31 01:48:17 2024 GMT Not After : Jun 7 01:48:17 2024 GMT Subject: CN=66592c61-ed70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:21:a4:a4:c6:4c:31:17:b6:99:52:16:35:9b: a7:22:1a:b3:f1:c1:c5:78:ff:05:f5:01:0c:ab:00: 54:6a:41:54:6c:e3:91:5b:94:66:5a:5b:15:18:63: e8:5d:ba:46:74:9c:3c:fa:e7:2b:7d:33:1f:08:8c: 92:23:21:20:75:31:1e:da:42:a2:dd:51:86:c1:21: 79:a9:23:8b:99:14:bd:9f:27:00:7d:6c:3a:53:70: 4c:26:04:a5:7d:f8:84:76:c3:cb:12:45:2d:8c:e9: dd:03:a5:45:5c:98:73:2c:0c:74:b8:8d:d5:05:33: 4f:86:15:a8:4f:08:5f:67:4a:2f:a0:e1:e8:a4:7d: d0:1e:20:1c:82:ab:f3:fa:d8:56:ca:30:f8:8b:95: 85:26:76:e3:8a:8a:25:3a:96:09:4e:e4:84:70:98: b9:ed:bf:f3:ba:ee:66:3f:05:be:79:33:83:08:76: f6:cc:cd:3f:8e:4d:10:1a:51:94:fc:3d:03:85:2b: a7:b1:15:5f:68:4e:82:71:41:48:77:71:a3:e9:1b: cf:6c:9e:75:4d:9e:84:32:6b:3a:01:f1:25:4d:45: 4e:d5:95:ba:0e:3b:8e:04:af:55:1d:7d:04:a4:ea: 74:a8:40:cc:72:84:b5:f7:42:54:11:a6:0c:03:74: a3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:59:AC:A6:BC:AE:72:EC:50:8E:1F:DD:D8:E9:2A:56:9C:E8:71:31 X509v3 Authority Key Identifier: keyid:95:35:37:99:77:6E:B9:B3:FF:58:72:5E:99:D0:2A:A6:54:FB:1A:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:20:3b:60:3a:77:51:e9:c6:4a:5b:70:85:64:1a:82:a7:1e: 06:50:6a:b0:1c:9a:d1:b2:68:65:a1:98:20:e5:4a:32:a1:8c: 38:52:98:ac:01:64:6c:c5:63:19:53:5e:24:a0:a4:6b:93:41: fb:ef:07:6c:5c:98:18:cf:a7:cd:02:c2:a1:4c:bf:6e:09:3d: 37:1e:8d:16:d2:0f:60:bc:d6:b4:cf:6f:86:a2:0c:cf:65:4a: 3e:33:23:97:17:43:bf:d7:bc:b1:43:7e:86:03:42:be:c8:15: 22:77:69:f7:10:0e:6e:95:fe:20:5e:0f:de:96:1f:0c:3b:4e: d0:4d:ce:d8:57:1b:90:c0:7a:7a:f4:77:9b:f5:c1:88:78:e2: 9d:b9:c9:f3:eb:42:83:bc:90:d2:65:49:99:f6:7b:e9:29:da: df:c0:5d:1e:17:8b:1b:aa:24:72:5a:0f:f9:a0:0e:f8:7b:c4: 46:d3:79:09:8a:b1:ca:bf:3a:76:ad:bd:8e:c8:05:a4:cf:d1: e7:63:18:d3:70:62:48:2c:9f:3e:c9:b4:78:46:f6:f0:07:e1: f8:23:d0:0d:c1:99:62:37:9b:6b:2e:ea:90:6e:3d:50:d5:32: 3f:bb:fb:ab:e0:38:db:8b:e3:ee:fd:9f:65:b5:06:84:ea:59: 2c:e4:2e:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNFMTUxMTAvBgNVBAUTKDk1MzUzNzk5Nzc2RUI5QjNGRjU4NzI1RTk5RDAyQUE2 NTRGQjFBMDQwHhcNMjQwNTMxMDE0ODE3WhcNMjQwNjA3MDE0ODE3WjAYMRYwFAYD VQQDEw02NjU5MmM2MS1lZDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyGkpMZMMRe2mVIWNZunIhqz8cHFeP8F9QEMqwBUakFUbOORW5RmWlsVGGPo XbpGdJw8+ucrfTMfCIySIyEgdTEe2kKi3VGGwSF5qSOLmRS9nycAfWw6U3BMJgSl ffiEdsPLEkUtjOndA6VFXJhzLAx0uI3VBTNPhhWoTwhfZ0ovoOHopH3QHiAcgqvz +thWyjD4i5WFJnbjioolOpYJTuSEcJi57b/zuu5mPwW+eTODCHb2zM0/jk0QGlGU /D0DhSunsRVfaE6CcUFId3Gj6RvPbJ51TZ6EMms6AfElTUVO1ZW6DjuOBK9VHX0E pOp0qEDMcoS190JUEaYMA3SjMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLVZrKa8 rnLsUI4f3djpKlac6HExMB8GA1UdIwQYMBaAFJU1N5l3brmz/1hyXpnQKqZU+xoE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0UxNS82NzBDMDk4MEM4 RjIxMUVCOEUzRkFENTBDNEY5QUUwMi9sVFUzbVhkdXViUF9XSEplbWRBcXBsVDdH Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUVTNtWGR1dWJQX1dISmVtZEFxcGxUN0dnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0UxNS82NzBDMDk4MEM4RjIxMUVCOEUzRkFENTBDNEY5QUUwMi9sVFUzbVhkdXVi UF9XSEplbWRBcXBsVDdHZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDIDtgOndR6cZKW3CFZBqCpx4GUGqwHJrRsmhloZgg5UoyoYw4Upis AWRsxWMZU14koKRrk0H77wdsXJgYz6fNAsKhTL9uCT03Ho0W0g9gvNa0z2+GogzP ZUo+MyOXF0O/17yxQ36GA0K+yBUid2n3EA5ulf4gXg/elh8MO07QTc7YVxuQwHp6 9Heb9cGIeOKducnz60KDvJDSZUmZ9nvpKdrfwF0eF4sbqiRyWg/5oA74e8RG03kJ irHKvzp2rb2OyAWkz9HnYxjTcGJILJ8+ybR4RvbwB+H4I9ANwZliN5trLuqQbj1Q 1TI/u/ur4Djbi+Pu/Z9ltQaE6lks5C74 -----END CERTIFICATE-----Generated at Fri May 31 02:50:43 2024 by rpki-client on console-fra.rpki-client.org