$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft File: LE5bBUJzo8HuQWpC354jYiY3OWE.mft (raw, json) Hash identifier: ZecE6zvv/Y0C7Vi7RwL0KKf+d5yRKr+b7kShr3Um6rI= Subject key identifier: 1F:DC:FA:0A:8B:92:15:59:79:14:52:85:1D:C7:EC:32:68:AC:65:02 Authority key identifier: 2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 Certificate issuer: /CN=A9134CDB/serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Certificate serial: 075C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft Manifest number: 074E Signing time: Sat 18 May 2024 22:20:08 +0000 Manifest this update: Sat 18 May 2024 22:20:07 +0000 Manifest next update: Sat 25 May 2024 22:20:07 +0000 Files and hashes: 1: LE5bBUJzo8HuQWpC354jYiY3OWE.crl (hash: YE0bfk3l58Mt83niQk5qH577zviKqQ92buEA01EfU6A=) 2: 4583DDACDAEA11EA8773CC58C4F9AE02.roa (hash: tgiKpA5/VOirxpzZclo5SCNNUmu09Z28SHd+MFyd0UE=) 3: 448119B0DAEA11EA8773CC58C4F9AE02.roa (hash: n8qFcHxdOC/HNtBruhuEeiEtGy0dZxWyfWu4yIA24vg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1884 (0x75c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134CDB/serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Validity Not Before: May 18 22:20:07 2024 GMT Not After : May 25 22:20:07 2024 GMT Subject: CN=66492997-8546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ea:17:bf:ea:f9:1b:fb:63:3c:50:0d:b7:27: 64:5e:5e:88:0e:d1:1c:aa:ec:47:2b:64:59:d1:bd: 82:54:c2:9a:36:7e:4e:43:0c:bc:2b:77:e1:55:12: df:4a:d2:57:d4:e2:18:0a:39:18:6e:5a:35:b5:2a: 83:1a:de:80:01:1e:5b:50:d9:87:a3:df:5a:11:d9: 18:73:20:e5:a6:45:95:0b:78:46:f3:fc:14:68:50: 71:44:24:ad:48:ec:7f:c5:54:de:10:3d:70:49:a8: 43:f5:e7:3c:70:ba:08:e2:39:46:1a:04:b8:ac:69: 47:c3:ed:0c:e0:4a:0e:c7:dc:1f:fd:c3:41:45:0b: 02:e6:cc:f0:7a:18:20:6e:2b:fa:be:b8:c9:a8:e8: 03:3b:eb:6c:18:ca:8b:90:59:62:34:3a:11:9d:73: 31:49:dc:4d:fc:86:cf:40:5e:19:14:6d:38:fb:6f: 49:87:77:03:2e:44:3f:60:93:f2:a4:33:fc:f2:d4: d7:fc:d7:59:b6:f3:1d:8d:2e:4e:60:6c:85:89:1b: 68:09:02:08:6b:8f:b9:5c:a2:5d:52:eb:33:40:3b: 79:5c:62:9a:7f:8a:4f:2c:0c:d8:21:e1:ef:aa:07: 0f:6c:e1:e1:5e:73:4f:97:3b:f0:09:c0:fd:82:0f: c9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:DC:FA:0A:8B:92:15:59:79:14:52:85:1D:C7:EC:32:68:AC:65:02 X509v3 Authority Key Identifier: keyid:2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:3e:31:60:4e:9e:1a:9d:16:48:bc:eb:50:63:4a:8c:4e:f6: c5:ad:05:c4:c4:80:b4:c7:6a:cd:aa:97:cf:4f:67:23:3e:55: df:a7:71:d8:19:72:e4:04:5d:85:33:dc:e3:6a:70:38:73:b5: a1:db:e8:56:67:12:14:4e:e8:c9:67:ec:b4:82:41:7d:cd:3c: a8:d3:83:39:be:5b:99:ed:90:c7:cf:af:40:b6:e4:e5:1a:c2: 41:99:99:f6:b8:69:84:10:57:31:f3:37:bc:87:d5:65:dc:03: ac:f6:1d:35:7b:cd:1e:a4:4a:0c:51:94:33:f5:50:bf:54:6e: d8:5a:50:74:b8:34:91:a5:0f:69:04:ba:4c:2a:b6:7a:8b:9c: 7a:fe:01:36:3f:8f:35:b8:75:18:5b:b4:4e:16:dc:ea:48:bc: 99:ac:bf:d7:bb:94:98:88:24:88:68:3d:b4:3a:8b:52:73:d6: d7:98:f9:c5:55:aa:6e:11:bf:04:ce:e2:b0:b8:eb:4f:ac:96: 98:df:f1:04:b4:8c:ba:8c:15:d5:0b:58:0c:ff:94:54:b8:01: 70:2f:a9:9d:1b:2a:2e:8b:77:fb:74:fe:38:4f:b4:1d:d0:dc: 31:ae:2e:1e:12:11:9e:6d:19:21:06:86:41:3f:8c:e2:e2:ad: ce:0f:d7:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDREIxMTAvBgNVBAUTKDJDNEU1QjA1NDI3M0EzQzFFRTQxNkE0MkRGOUUyMzYy MjYzNzM5NjEwHhcNMjQwNTE4MjIyMDA3WhcNMjQwNTI1MjIyMDA3WjAYMRYwFAYD VQQDEw02NjQ5Mjk5Ny04NTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzeoXv+r5G/tjPFANtydkXl6IDtEcquxHK2RZ0b2CVMKaNn5OQwy8K3fhVRLf StJX1OIYCjkYblo1tSqDGt6AAR5bUNmHo99aEdkYcyDlpkWVC3hG8/wUaFBxRCSt SOx/xVTeED1wSahD9ec8cLoI4jlGGgS4rGlHw+0M4EoOx9wf/cNBRQsC5szwehgg biv6vrjJqOgDO+tsGMqLkFliNDoRnXMxSdxN/IbPQF4ZFG04+29Jh3cDLkQ/YJPy pDP88tTX/NdZtvMdjS5OYGyFiRtoCQIIa4+5XKJdUuszQDt5XGKaf4pPLAzYIeHv qgcPbOHhXnNPlzvwCcD9gg/JDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/c+gqL khVZeRRShR3H7DJorGUCMB8GA1UdIwQYMBaAFCxOWwVCc6PB7kFqQt+eI2ImNzlh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNENEQi9CREFGNjBFNERB RTUxMUVBOEEyNTVBNERDNEY5QUUwMi9MRTViQlVKem84SHVRV3BDMzU0allpWTNP V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFNWJCVUp6bzhIdVFXcEMzNTRqWWlZM09XRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NENEQi9CREFGNjBFNERBRTUxMUVBOEEyNTVBNERDNEY5QUUwMi9MRTViQlVKem84 SHVRV3BDMzU0allpWTNPV0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxPjFgTp4anRZIvOtQY0qMTvbFrQXExIC0x2rNqpfPT2cjPlXfp3HY GXLkBF2FM9zjanA4c7Wh2+hWZxIUTujJZ+y0gkF9zTyo04M5vluZ7ZDHz69AtuTl GsJBmZn2uGmEEFcx8ze8h9Vl3AOs9h01e80epEoMUZQz9VC/VG7YWlB0uDSRpQ9p BLpMKrZ6i5x6/gE2P481uHUYW7ROFtzqSLyZrL/Xu5SYiCSIaD20OotSc9bXmPnF VapuEb8EzuKwuOtPrJaY3/EEtIy6jBXVC1gM/5RUuAFwL6mdGyoui3f7dP44T7Qd 0Nwxri4eEhGebRkhBoZBP4zi4q3OD9cw -----END CERTIFICATE-----Generated at Sun May 19 00:16:12 2024 by rpki-client on console-fra.rpki-client.org