$ rpki-client -vvf rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft File: L5rGimsA32BW9wq8WqxtuSCrGx0.mft (raw, json) Hash identifier: f95YkS2ZlmGR6oVUGNOkXm8tEyrLE6i98G35eyxP0qo= Subject key identifier: E5:83:DA:4D:FB:F3:68:6B:7A:09:37:FC:0C:2C:B8:2F:9B:0A:32:A5 Authority key identifier: 2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D Certificate issuer: /CN=A9144266/serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D Certificate serial: 0464 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft Manifest number: 045D Signing time: Sat 01 Jun 2024 02:53:32 +0000 Manifest this update: Sat 01 Jun 2024 02:53:31 +0000 Manifest next update: Sat 08 Jun 2024 02:53:31 +0000 Files and hashes: 1: L5rGimsA32BW9wq8WqxtuSCrGx0.crl (hash: VwBUgpPe8q5hSDrq7eg6WDt5XelaZpMfqOhKfED/gKE=) 2: 85EAFFD806F911EC9558C827C4F9AE02.roa (hash: wHbU+G09ph6l8bNV/0smNYx6q5+cqU3QanOLg7uQ2nI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.crl rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 02:53:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1124 (0x464) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144266/serialNumber=2F9AC68A6B00DF6056F70ABC5AAC6DB920AB1B1D Validity Not Before: Jun 1 02:53:31 2024 GMT Not After : Jun 8 02:53:31 2024 GMT Subject: CN=665a8d2c-a56e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a5:d2:db:62:c9:ac:27:c7:33:01:13:a9:6a: a7:17:3d:4b:16:99:e5:0a:16:1b:4c:f5:99:3b:18: 86:73:65:ae:e4:a7:62:dc:77:4a:1a:81:a8:67:87: 88:36:21:dd:3a:ea:b7:27:de:38:83:d0:5e:6a:c6: e7:f4:e7:56:80:ea:9e:9f:77:e1:fb:f7:72:99:3d: 6a:37:bd:9f:b7:1d:31:79:09:33:90:01:49:d4:40: 7a:26:32:51:21:98:9c:d0:50:8f:9d:89:e1:30:4a: 93:fd:e9:2a:40:6e:85:6d:e6:23:1f:10:d3:d5:e0: 82:9c:a3:f2:c1:21:8e:87:16:7c:90:4e:6f:45:e2: e3:52:2f:51:f1:cb:03:49:1f:f7:26:38:0d:5c:bc: dd:ad:ba:c9:27:a9:3f:99:85:24:96:20:6e:4e:32: 3b:e1:72:f3:01:6f:87:91:06:b3:c6:de:99:90:f1: 2c:69:4a:67:f4:21:4e:d4:16:b4:38:4e:a9:4e:8c: 15:8d:ff:a3:39:9d:68:60:d8:b5:91:f9:e4:48:fd: 61:60:c6:ba:72:09:f6:32:ee:c8:6c:ef:cc:6a:7a: 22:c6:1a:93:dc:7a:6e:2b:f1:86:99:a7:98:92:e1: 8b:b3:da:ce:bc:ea:95:35:7a:d9:25:b6:7e:57:a7: 3e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:83:DA:4D:FB:F3:68:6B:7A:09:37:FC:0C:2C:B8:2F:9B:0A:32:A5 X509v3 Authority Key Identifier: keyid:2F:9A:C6:8A:6B:00:DF:60:56:F7:0A:BC:5A:AC:6D:B9:20:AB:1B:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L5rGimsA32BW9wq8WqxtuSCrGx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144266/0E858E2806CB11EC99B0EA3BC4F9AE02/L5rGimsA32BW9wq8WqxtuSCrGx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:60:52:ca:f3:c2:56:c3:c9:9b:12:56:68:a3:8b:28:cc:81: da:79:ea:75:00:c7:11:af:33:3a:b5:02:97:35:45:c4:e6:ba: b9:f8:1f:82:de:9e:3a:36:c9:e6:4c:52:4c:53:cc:d9:c2:73: b7:b9:26:77:29:23:1e:57:37:c6:4a:18:22:4d:c1:c0:88:e9: d2:bd:2c:bd:e0:19:4b:12:75:30:d1:a1:4a:f5:af:0e:a8:78: 0f:dd:93:17:e7:f5:8a:65:a6:35:0f:81:84:3c:fc:a7:84:a3: 12:93:2a:94:a8:f6:5d:38:27:7e:e2:61:3c:24:83:1c:88:02: 63:f8:aa:86:72:43:c5:dd:1d:26:0d:98:64:b5:11:3a:6a:fb: 1e:53:cf:41:5c:74:aa:cd:23:39:d2:83:c0:88:8f:98:21:11: 5a:85:83:74:d3:db:33:35:25:e6:1b:75:1f:95:9b:5d:68:f8: a4:ac:5b:31:c4:da:26:f6:34:f5:18:73:20:3e:7f:78:ea:04: 1c:72:17:08:25:d5:d6:d4:28:6f:e3:f6:7b:19:55:6b:ef:14: a1:5e:aa:01:f6:89:b4:fc:24:74:de:22:ce:ed:04:6e:6d:96: 2d:0c:17:7b:a5:fb:ea:30:f6:ee:e1:4f:c9:2a:2c:c9:8c:0e: 9c:2a:a4:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQyNjYxMTAvBgNVBAUTKDJGOUFDNjhBNkIwMERGNjA1NkY3MEFCQzVBQUM2REI5 MjBBQjFCMUQwHhcNMjQwNjAxMDI1MzMxWhcNMjQwNjA4MDI1MzMxWjAYMRYwFAYD VQQDEw02NjVhOGQyYy1hNTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2KXS22LJrCfHMwETqWqnFz1LFpnlChYbTPWZOxiGc2Wu5Kdi3HdKGoGoZ4eI NiHdOuq3J944g9Beasbn9OdWgOqen3fh+/dymT1qN72ftx0xeQkzkAFJ1EB6JjJR IZic0FCPnYnhMEqT/ekqQG6FbeYjHxDT1eCCnKPywSGOhxZ8kE5vReLjUi9R8csD SR/3JjgNXLzdrbrJJ6k/mYUkliBuTjI74XLzAW+HkQazxt6ZkPEsaUpn9CFO1Ba0 OE6pTowVjf+jOZ1oYNi1kfnkSP1hYMa6cgn2Mu7IbO/ManoixhqT3HpuK/GGmaeY kuGLs9rOvOqVNXrZJbZ+V6c+1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWD2k37 82hregk3/AwsuC+bCjKlMB8GA1UdIwQYMBaAFC+axoprAN9gVvcKvFqsbbkgqxsd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDI2Ni8wRTg1OEUyODA2 Q0IxMUVDOTlCMEVBM0JDNEY5QUUwMi9MNXJHaW1zQTMyQlc5d3E4V3F4dHVTQ3JH eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w1ckdpbXNBMzJCVzl3cThXcXh0dVNDckd4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDI2Ni8wRTg1OEUyODA2Q0IxMUVDOTlCMEVBM0JDNEY5QUUwMi9MNXJHaW1zQTMy Qlc5d3E4V3F4dHVTQ3JHeDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+YFLK88JWw8mbElZoo4sozIHaeep1AMcRrzM6tQKXNUXE5rq5+B+C 3p46NsnmTFJMU8zZwnO3uSZ3KSMeVzfGShgiTcHAiOnSvSy94BlLEnUw0aFK9a8O qHgP3ZMX5/WKZaY1D4GEPPynhKMSkyqUqPZdOCd+4mE8JIMciAJj+KqGckPF3R0m DZhktRE6avseU89BXHSqzSM50oPAiI+YIRFahYN009szNSXmG3UflZtdaPikrFsx xNom9jT1GHMgPn946gQcchcIJdXW1Chv4/Z7GVVr7xShXqoB9om0/CR03iLO7QRu bZYtDBd7pfvqMPbu4U/JKizJjA6cKqT5 -----END CERTIFICATE-----Generated at Sat Jun 1 04:59:01 2024 by rpki-client on console-fra.rpki-client.org