$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft File: lWVe5y4XegIJbAy2BnaqHmaa5-A.mft (raw, json) Hash identifier: 5pPBZja735L2HyU0QoWcAgE6yT7dQaVq9b7cd7WfOlg= Subject key identifier: 8D:A5:89:99:3C:DF:AD:BA:0C:24:80:55:13:2A:E4:77:9C:DE:8A:66 Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0 Certificate issuer: /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0 Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft Manifest number: 04ED Signing time: Sun 19 May 2024 01:45:34 +0000 Manifest this update: Sun 19 May 2024 01:45:33 +0000 Manifest next update: Sun 26 May 2024 01:45:33 +0000 Files and hashes: 1: lWVe5y4XegIJbAy2BnaqHmaa5-A.crl (hash: ROUgSPPkgIP/uFgIWOr6fechYf0tJr1m96xby/rTosE=) 2: A6CB4672ADF011EEB35AC80FC4F9AE02.roa (hash: uXnA9Pei6SgPijrZ1wYtqwss+0OS0D1AnCW0EPushxc=) 3: 1A40A6645DED11EE931C6684C4F9AE02.roa (hash: 9zTUmeWonacN4aNIcVpqM25WMamq3UP1yH/1NeK1lt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0 Validity Not Before: May 19 01:45:33 2024 GMT Not After : May 26 01:45:33 2024 GMT Subject: CN=664959be-a05c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b7:4b:16:e7:73:3c:d1:be:85:93:13:3f:83: c4:10:c6:d2:8b:94:0b:e0:04:48:5a:5e:e7:a1:d9: 22:b6:be:54:1d:60:61:14:14:be:9b:b7:42:90:0f: 3b:d6:6e:32:51:8d:9d:97:f2:0f:ef:12:d1:8a:7b: 94:16:c7:af:f4:14:98:54:1a:18:f4:05:a9:d7:be: 39:7c:1c:f3:60:62:bc:de:41:33:23:19:f7:03:56: 30:ff:20:80:c2:c6:dc:d2:85:7b:8e:dc:ad:00:ff: 32:44:ef:9c:6b:04:b6:5e:5e:e8:12:58:a9:d9:48: a2:df:db:13:9b:31:18:87:36:d1:98:4a:95:d6:34: 94:a4:2d:a8:f7:bc:fe:f7:61:cc:ad:02:76:8f:a2: d0:cf:53:c9:1c:05:3b:4d:5b:e3:0b:f5:00:75:67: af:69:9a:b3:a4:ee:6c:8d:77:3e:07:76:5b:7e:c5: 7c:2f:76:e9:67:b4:75:cb:4c:1f:e4:15:62:a5:9f: d3:36:76:31:6b:cc:e7:41:d0:b0:1f:82:03:a7:21: 77:15:1a:ad:69:7b:bc:a3:2e:05:bc:b2:ba:77:67: b4:59:37:7b:83:91:9f:83:2c:c0:bd:dd:c3:8a:78: 44:33:6b:f3:52:b3:4f:45:81:fe:37:12:36:22:71: ed:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A5:89:99:3C:DF:AD:BA:0C:24:80:55:13:2A:E4:77:9C:DE:8A:66 X509v3 Authority Key Identifier: keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:4f:01:21:8a:40:4a:f0:48:66:8d:0a:03:df:88:53:4f:7b: 54:f0:9f:82:16:14:e6:14:54:06:f3:df:aa:8d:09:52:80:6b: 94:2c:b8:7e:2f:70:d4:e0:8e:bc:e0:75:01:1e:fb:96:77:02: 29:bb:bb:69:42:ea:1c:fb:02:ca:92:23:6f:c9:b0:06:9e:29: 68:89:48:9d:69:42:6c:ae:e8:67:b6:f1:5c:45:fd:4d:da:de: 6d:ef:6b:2b:df:6d:05:f5:9f:06:75:a9:93:b8:ad:03:3b:92: 72:cb:56:3e:ea:e0:92:da:05:6b:3e:d6:8b:24:fc:97:79:a1: f7:c0:06:87:fb:ea:de:2d:14:64:2b:f4:60:e5:92:39:69:f5: 07:14:e2:f7:fe:8a:2f:15:ad:6b:0b:30:4f:b6:74:2f:97:85: f9:de:cb:42:56:2b:76:8c:0c:a6:e1:bd:e1:18:52:2f:6a:4a: 32:a3:b5:ee:ec:fe:27:e3:d9:23:68:9b:bd:a5:7d:b7:0b:ff: f4:08:5c:d0:40:b4:41:1b:dd:71:42:0e:2e:5f:85:e7:e1:75: f5:04:8d:23:01:5d:ce:30:ef:be:1c:94:29:8b:9b:44:89:56: 85:5c:d9:37:20:0f:9a:44:c5:76:e7:3b:d7:e5:f3:fe:e1:8f: 86:f0:ee:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc4OTgxMTAvBgNVBAUTKDk1NjU1RUU3MkUxNzdBMDIwOTZDMENCNjA2NzZBQTFF NjY5QUU3RTAwHhcNMjQwNTE5MDE0NTMzWhcNMjQwNTI2MDE0NTMzWjAYMRYwFAYD VQQDEw02NjQ5NTliZS1hMDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnrdLFudzPNG+hZMTP4PEEMbSi5QL4ARIWl7nodkitr5UHWBhFBS+m7dCkA87 1m4yUY2dl/IP7xLRinuUFsev9BSYVBoY9AWp1745fBzzYGK83kEzIxn3A1Yw/yCA wsbc0oV7jtytAP8yRO+cawS2Xl7oElip2Uii39sTmzEYhzbRmEqV1jSUpC2o97z+ 92HMrQJ2j6LQz1PJHAU7TVvjC/UAdWevaZqzpO5sjXc+B3ZbfsV8L3bpZ7R1y0wf 5BVipZ/TNnYxa8znQdCwH4IDpyF3FRqtaXu8oy4FvLK6d2e0WTd7g5GfgyzAvd3D inhEM2vzUrNPRYH+NxI2InHt0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2liZk8 3626DCSAVRMq5Hec3opmMB8GA1UdIwQYMBaAFJVlXucuF3oCCWwMtgZ2qh5mmufg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzg5OC8yMDY5RjVGQ0ZD MEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9sV1ZlNXk0WGVnSUpiQXkyQm5hcUhtYWE1 LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xXVmU1eTRYZWdJSmJBeTJCbmFxSG1hYTUtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Nzg5OC8yMDY5RjVGQ0ZDMEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9sV1ZlNXk0WGVn SUpiQXkyQm5hcUhtYWE1LUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMTwEhikBK8EhmjQoD34hTT3tU8J+CFhTmFFQG89+qjQlSgGuULLh+ L3DU4I684HUBHvuWdwIpu7tpQuoc+wLKkiNvybAGniloiUidaUJsruhntvFcRf1N 2t5t72sr320F9Z8GdamTuK0DO5Jyy1Y+6uCS2gVrPtaLJPyXeaH3wAaH++reLRRk K/Rg5ZI5afUHFOL3/oovFa1rCzBPtnQvl4X53stCVit2jAym4b3hGFIvakoyo7Xu 7P4n49kjaJu9pX23C//0CFzQQLRBG91xQg4uX4Xn4XX1BI0jAV3OMO++HJQpi5tE iVaFXNk3IA+aRMV25zvX5fP+4Y+G8O5V -----END CERTIFICATE-----Generated at Sun May 19 02:39:35 2024 by rpki-client on console-fra.rpki-client.org