$ rpki-client -vvf rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft File: LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft (raw, json) Hash identifier: fBjTX5lpuH0MYyTEY30tgrMxNx25Rt9hXrcqNmcFbZQ= Subject key identifier: E1:A4:2E:60:45:EF:AA:66:7D:88:FD:44:E4:6C:53:C0:85:7E:C5:CF Authority key identifier: 2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 Certificate issuer: /CN=A912B129/serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft Manifest number: 5C Signing time: Sat 01 Jun 2024 09:12:30 +0000 Manifest this update: Sat 01 Jun 2024 09:12:29 +0000 Manifest next update: Sat 08 Jun 2024 09:12:29 +0000 Files and hashes: 1: LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl (hash: XN+VQCTnB5vAnIPK20EPJrAV1Wu7BoGtZtxLOV7b63o=) 2: A5F4A536933D11EEA6B4A653C4F9AE02.roa (hash: NSX7uy6kvdyVzGTyrP4PPaT7WlKhSTJwrok/K4pBKV0=) 3: A591C4A2933D11EEA6B4A653C4F9AE02.roa (hash: bfNhwGImovVkJ2nMHJxM6MVKJiq0HIzj8jV7cX6C1l4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B129/serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Validity Not Before: Jun 1 09:12:29 2024 GMT Not After : Jun 8 09:12:29 2024 GMT Subject: CN=665ae5fd-6550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b4:6b:70:3b:1d:a0:d2:9d:0c:ea:01:ae:3d: 21:64:00:d7:60:25:07:19:a1:3d:f2:82:46:97:dc: 4f:ea:ab:a6:f1:e1:aa:61:67:1e:e9:3f:5e:e4:93: 8e:86:8c:cb:80:6e:7b:30:86:16:1f:fb:c2:b5:d1: da:a9:15:16:fb:43:d0:6a:86:57:7a:6c:4b:c3:48: 2a:e0:58:26:6f:a5:f0:05:92:39:a8:04:64:1d:4a: 9c:be:12:76:31:ee:76:92:45:8f:6a:04:9e:b3:02: 4d:50:7f:f9:be:18:2d:f4:ad:ec:26:1a:5c:2a:c0: 52:6b:c8:0a:5e:8d:b8:64:41:69:a8:9b:d3:0e:a8: de:88:55:d3:37:fc:0d:39:42:b0:15:6b:b9:42:a4: a9:41:c8:0b:d8:b1:91:dd:1c:a3:9e:5f:88:10:8f: 73:04:da:2e:7a:2e:f2:84:6a:17:8c:fe:9f:74:67: 0b:34:93:c0:81:32:48:31:98:ce:39:8f:b2:d7:a0: 7e:74:cc:8f:cf:28:5c:b6:82:a7:64:63:8d:bf:08: af:fa:95:39:16:75:a0:f7:1f:29:b0:4b:49:3b:09: f0:78:08:a1:4c:84:9a:a4:5a:1c:7b:06:80:bc:37: 01:c6:13:51:fb:68:70:4e:10:d1:05:5f:73:1d:14: 45:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A4:2E:60:45:EF:AA:66:7D:88:FD:44:E4:6C:53:C0:85:7E:C5:CF X509v3 Authority Key Identifier: keyid:2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:a9:c7:5d:8b:f8:0a:f4:e5:47:2f:22:fb:a6:30:26:2e:33: 56:b9:5f:3d:83:9b:3e:7e:37:2f:55:5b:2b:4a:8f:b7:df:c5: 59:8f:5d:38:a7:6f:8f:19:05:2e:8a:01:e7:dd:8a:42:1d:7d: 90:91:f1:45:c4:d1:d7:e4:c8:04:47:81:cd:b7:c6:2f:cb:fb: 39:f4:f8:02:f2:63:fb:ca:9e:bc:b8:f6:41:c3:24:0d:e0:48: 59:84:6d:f9:68:cb:f0:3c:d7:1e:13:43:29:9d:5f:6d:46:a0: 99:ad:1c:e8:6f:32:cb:26:4f:bb:13:57:2b:15:ee:38:a9:a7: d7:51:5f:e1:14:6c:05:db:c3:2f:96:78:03:12:dd:7f:cb:6d: f9:25:03:9a:bd:84:51:4d:74:a3:9d:d7:67:90:c6:fe:96:f0: 36:4e:3b:17:75:b7:3d:9e:e3:c0:e5:2f:3e:a4:69:dd:90:71: f2:d5:17:e4:1f:9f:6b:c3:9f:27:fd:00:71:d8:44:36:fb:81: 17:be:b0:55:82:28:62:f1:35:32:6f:e7:12:51:c4:64:18:09: 14:bd:23:d2:09:32:2c:f0:d3:5c:89:6f:2c:21:f7:7e:39:87: 93:9d:cc:9b:f0:1a:2c:62:b1:06:e1:de:60:4f:2a:e6:ab:b3: f6:0b:a9:be -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QjEyOTExMC8GA1UEBRMoMkM4RDFBNTgwNTZFRDE4OEZFODU4MEU3MEQxREU1MEY0 QzNEQTI3MDAeFw0yNDA2MDEwOTEyMjlaFw0yNDA2MDgwOTEyMjlaMBgxFjAUBgNV BAMTDTY2NWFlNWZkLTY1NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4tGtwOx2g0p0M6gGuPSFkANdgJQcZoT3ygkaX3E/qq6bx4aphZx7pP17kk46G jMuAbnswhhYf+8K10dqpFRb7Q9Bqhld6bEvDSCrgWCZvpfAFkjmoBGQdSpy+EnYx 7naSRY9qBJ6zAk1Qf/m+GC30rewmGlwqwFJryApejbhkQWmom9MOqN6IVdM3/A05 QrAVa7lCpKlByAvYsZHdHKOeX4gQj3ME2i56LvKEaheM/p90Zws0k8CBMkgxmM45 j7LXoH50zI/PKFy2gqdkY42/CK/6lTkWdaD3HymwS0k7CfB4CKFMhJqkWhx7BoC8 NwHGE1H7aHBOENEFX3MdFEVvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4aQuYEXv qmZ9iP1E5GxTwIV+xc8wHwYDVR0jBBgwFoAULI0aWAVu0Yj+hYDnDR3lD0w9onAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCMTI5LzRCM0NFRUI0OTMz RDExRUU4QTk1MDI1M0M0RjlBRTAyL0xJMGFXQVZ1MFlqLWhZRG5EUjNsRDB3OW9u QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTEkwYVdBVnUwWWotaFlEbkRSM2xEMHc5b25BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC MTI5LzRCM0NFRUI0OTMzRDExRUU4QTk1MDI1M0M0RjlBRTAyL0xJMGFXQVZ1MFlq LWhZRG5EUjNsRDB3OW9uQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHGpx12L+Ar05UcvIvumMCYuM1a5Xz2Dmz5+Ny9VWytKj7ffxVmPXTin b48ZBS6KAefdikIdfZCR8UXE0dfkyARHgc23xi/L+zn0+ALyY/vKnry49kHDJA3g SFmEbfloy/A81x4TQymdX21GoJmtHOhvMssmT7sTVysV7jipp9dRX+EUbAXbwy+W eAMS3X/LbfklA5q9hFFNdKOd12eQxv6W8DZOOxd1tz2e48DlLz6kad2QcfLVF+Qf n2vDnyf9AHHYRDb7gRe+sFWCKGLxNTJv5xJRxGQYCRS9I9IJMizw01yJbywh9345 h5OdzJvwGixisQbh3mBPKuars/YLqb4= -----END CERTIFICATE-----Generated at Sat Jun 1 11:14:26 2024 by rpki-client on console-fra.rpki-client.org