$ rpki-client -vvf rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft File: l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft (raw, json) Hash identifier: 8J2dervJY1gf8dFMARFnk20jyMVCpavtlia/8mINs8U= Subject key identifier: 79:42:F5:26:C7:EA:EE:55:92:34:4A:86:E1:C1:05:F7:64:61:88:5A Authority key identifier: 97:95:8F:FF:E6:96:D8:0C:57:63:65:24:A4:6E:18:23:41:76:FB:C1 Certificate issuer: /CN=A91309C9/serialNumber=97958FFFE696D80C57636524A46E18234176FBC1 Certificate serial: 0349 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft Manifest number: 0345 Signing time: Sun 19 May 2024 02:56:29 +0000 Manifest this update: Sun 19 May 2024 02:56:28 +0000 Manifest next update: Sun 26 May 2024 02:56:28 +0000 Files and hashes: 1: l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl (hash: iRjENmfZ2TZsvpBwX/yOGYkiqwR4BBVnOarpx4qKqXo=) 2: 46BFB17C739711ECAD333D27C4F9AE02.roa (hash: 1BjaF0PIJUeRsWgCz8ap+0AREIp4x4SUHakrLcEndy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 841 (0x349) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91309C9/serialNumber=97958FFFE696D80C57636524A46E18234176FBC1 Validity Not Before: May 19 02:56:28 2024 GMT Not After : May 26 02:56:28 2024 GMT Subject: CN=66496a5c-4815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:46:2b:66:37:6c:d9:c2:b4:3a:6e:90:f6:66: 24:aa:cb:d1:08:d7:f9:35:19:7a:a6:63:f2:83:71: 1e:ec:3c:0c:f7:32:4e:57:07:37:a9:59:75:4b:61: 86:2c:e2:41:7e:a6:0f:fe:16:b9:8d:9c:11:af:4d: ac:c2:6d:d5:39:31:b6:4e:30:07:f2:da:55:22:3e: a5:19:a7:4c:e0:45:9c:be:c6:35:19:a2:0e:c1:90: 74:a7:a7:c7:05:67:19:29:d9:83:fe:d3:de:27:65: 6d:b2:55:ee:78:80:e7:e9:fc:b1:50:af:1e:1d:7e: a1:50:33:99:99:e0:8a:b4:08:a7:4d:38:fc:5c:5e: d3:f8:de:cb:ac:74:39:74:ed:b5:c0:0f:53:7c:ec: 41:ef:d3:3b:48:36:2d:64:c6:20:8f:19:eb:63:db: 32:24:c4:08:4f:3a:69:e3:9b:50:df:db:61:ad:2a: 58:d4:27:02:71:20:d3:88:a3:49:d2:56:4c:bd:75: ce:93:a6:2d:10:fa:60:68:ac:a5:49:15:6c:5f:d7: b4:42:e8:92:63:b9:5c:be:5d:e1:60:72:e9:29:f7: 65:85:0f:c0:25:4d:22:09:21:4d:b4:83:c0:b6:ea: 7e:b1:bd:1a:dc:3c:40:94:d9:0b:70:45:b3:c4:f3: 80:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:42:F5:26:C7:EA:EE:55:92:34:4A:86:E1:C1:05:F7:64:61:88:5A X509v3 Authority Key Identifier: keyid:97:95:8F:FF:E6:96:D8:0C:57:63:65:24:A4:6E:18:23:41:76:FB:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:3e:35:eb:43:3c:1b:fc:3e:07:ed:87:96:b8:94:b8:be:72: 89:ca:0a:be:86:e1:90:f7:f6:03:a0:8d:ee:bd:79:17:5d:08: 9d:33:e2:28:6d:89:ad:32:d8:76:c1:d5:38:fa:f2:3d:e5:2a: 6b:13:0e:de:c7:c1:81:cf:5f:9e:1d:23:0b:16:49:ed:57:b7: a2:8b:df:d8:2a:26:2d:e4:a7:6f:e3:b5:a0:96:3b:ea:d5:21: 75:aa:9b:8d:44:cf:1f:af:39:b9:8f:44:d5:d2:8c:22:e4:06: e7:b1:ac:80:e3:f1:d9:6e:03:58:b5:10:1c:9b:1d:e6:73:dd: 8e:ca:56:8a:7c:64:2b:75:3f:0e:a0:c1:5d:d7:6c:a7:7f:03: 10:fb:cd:b9:50:d0:da:47:33:c7:1c:ae:a1:70:bf:82:17:9f: 72:61:06:3e:3d:3e:ff:eb:f9:50:73:1a:ca:56:83:9c:2d:ae: e6:ac:17:cf:20:45:fe:99:8d:e0:c0:65:98:84:b5:c6:4b:74: db:c0:2d:fc:fc:18:6d:37:5e:bd:36:9f:08:2c:55:e7:76:38: 58:73:f4:96:bb:92:b3:92:63:b4:10:2a:9b:9d:8e:c3:bd:a1: 94:8b:81:2c:5a:ce:0d:b9:c1:c7:73:46:6d:9d:8d:95:b0:16: 2e:26:70:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA5QzkxMTAvBgNVBAUTKDk3OTU4RkZGRTY5NkQ4MEM1NzYzNjUyNEE0NkUxODIz NDE3NkZCQzEwHhcNMjQwNTE5MDI1NjI4WhcNMjQwNTI2MDI1NjI4WjAYMRYwFAYD VQQDEw02NjQ5NmE1Yy00ODE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUYrZjds2cK0Om6Q9mYkqsvRCNf5NRl6pmPyg3Ee7DwM9zJOVwc3qVl1S2GG LOJBfqYP/ha5jZwRr02swm3VOTG2TjAH8tpVIj6lGadM4EWcvsY1GaIOwZB0p6fH BWcZKdmD/tPeJ2VtslXueIDn6fyxUK8eHX6hUDOZmeCKtAinTTj8XF7T+N7LrHQ5 dO21wA9TfOxB79M7SDYtZMYgjxnrY9syJMQITzpp45tQ39thrSpY1CcCcSDTiKNJ 0lZMvXXOk6YtEPpgaKylSRVsX9e0QuiSY7lcvl3hYHLpKfdlhQ/AJU0iCSFNtIPA tup+sb0a3DxAlNkLcEWzxPOAHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlC9SbH 6u5VkjRKhuHBBfdkYYhaMB8GA1UdIwQYMBaAFJeVj//mltgMV2NlJKRuGCNBdvvB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDlDOS80NkQ3MkRFMjcz NjYxMUVDODk4MkJFMEFDNEY5QUUwMi9sNVdQXy1hVzJBeFhZMlVrcEc0WUkwRjIt OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w1V1BfLWFXMkF4WFkyVWtwRzRZSTBGMi04RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDlDOS80NkQ3MkRFMjczNjYxMUVDODk4MkJFMEFDNEY5QUUwMi9sNVdQXy1hVzJB eFhZMlVrcEc0WUkwRjItOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOPjXrQzwb/D4H7YeWuJS4vnKJygq+huGQ9/YDoI3uvXkXXQidM+Io bYmtMth2wdU4+vI95SprEw7ex8GBz1+eHSMLFkntV7eii9/YKiYt5Kdv47Wgljvq 1SF1qpuNRM8frzm5j0TV0owi5AbnsayA4/HZbgNYtRAcmx3mc92OylaKfGQrdT8O oMFd12ynfwMQ+825UNDaRzPHHK6hcL+CF59yYQY+PT7/6/lQcxrKVoOcLa7mrBfP IEX+mY3gwGWYhLXGS3TbwC38/BhtN169Np8ILFXndjhYc/SWu5KzkmO0ECqbnY7D vaGUi4EsWs4NucHHc0ZtnY2VsBYuJnAs -----END CERTIFICATE-----Generated at Sun May 19 03:48:51 2024 by rpki-client on console-fra.rpki-client.org