$ rpki-client -vvf rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft File: 5LMs8qYR9wLf0JE-PqULT9YexXU.mft (raw, json) Hash identifier: s+1ST606TEpKRVIvjp7OSxgQj1/ERPRBrFTymU8geEI= Subject key identifier: 52:5C:5A:17:64:80:5F:0F:BB:17:9F:E4:DD:97:C1:A6:A2:42:00:31 Authority key identifier: E4:B3:2C:F2:A6:11:F7:02:DF:D0:91:3E:3E:A5:0B:4F:D6:1E:C5:75 Certificate issuer: /CN=A914450B/serialNumber=E4B32CF2A611F702DFD0913E3EA50B4FD61EC575 Certificate serial: 06C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft Manifest number: 06C0 Signing time: Fri 31 May 2024 23:54:35 +0000 Manifest this update: Fri 31 May 2024 23:54:34 +0000 Manifest next update: Fri 07 Jun 2024 23:54:34 +0000 Files and hashes: 1: 5LMs8qYR9wLf0JE-PqULT9YexXU.crl (hash: 11T3dupiLoESfywn6XTb1RnpHgtstor0wXbVdtSTxbA=) 2: 5B9B8A1213F311EBA7343351C4F9AE02.roa (hash: iS95q1vYvQ9GK5PWTHTUyaiVNGKgbYepd5g+adxRhJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.crl rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 23:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1733 (0x6c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914450B/serialNumber=E4B32CF2A611F702DFD0913E3EA50B4FD61EC575 Validity Not Before: May 31 23:54:34 2024 GMT Not After : Jun 7 23:54:34 2024 GMT Subject: CN=665a633a-ece3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:56:d9:c6:85:04:d1:b7:d4:86:b5:dd:cf:8c: f1:b0:f9:ed:84:51:16:9f:92:ef:4c:a4:c7:ed:98: 2a:e3:31:d1:40:20:b6:5c:e1:f4:1a:43:bc:04:57: 41:e0:bb:49:0d:43:30:ef:83:62:99:c3:68:2c:94: f1:94:98:d4:df:18:10:1d:c8:bd:13:46:2b:7d:57: 4f:f1:60:84:3b:63:29:4a:44:de:fe:46:9b:44:dc: a6:a3:48:df:d9:ff:88:83:a7:15:b3:c4:f7:a5:9d: 1f:71:1b:6e:4a:cc:d8:af:89:ba:c9:f8:38:21:4a: d7:1c:bf:f9:b2:ee:9a:9c:c2:1a:b2:f2:ed:64:1f: b9:6e:15:b7:13:b6:d7:61:38:e5:c8:23:d3:df:85: fb:45:46:a7:cd:e9:20:b7:11:46:b7:bb:1d:df:6c: b8:bf:6d:a5:20:bf:d7:f6:a3:55:3b:3c:2e:b2:06: 5e:5e:2c:44:16:08:ae:ee:55:b8:eb:39:d2:4a:d4: a0:f3:ec:00:e8:cd:f0:f3:7e:50:42:60:45:4c:93: 3c:c3:f6:6d:90:1b:08:06:6b:d3:ef:61:80:57:16: 47:6d:0f:bf:e2:f5:66:5e:ab:1f:e3:6d:80:21:26: 4b:18:19:dd:69:73:7e:85:01:f9:75:a6:c3:37:fd: ca:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5C:5A:17:64:80:5F:0F:BB:17:9F:E4:DD:97:C1:A6:A2:42:00:31 X509v3 Authority Key Identifier: keyid:E4:B3:2C:F2:A6:11:F7:02:DF:D0:91:3E:3E:A5:0B:4F:D6:1E:C5:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:7a:00:f0:b4:c6:1f:0f:0a:bb:9a:9f:90:df:8d:12:2b:1e: 5b:bb:d4:9b:08:8a:50:38:d7:8c:5b:93:b4:f8:1f:80:3e:2a: 0e:ba:b1:26:f3:ef:00:4a:7d:0c:50:11:7e:4c:11:b5:a7:b4: c2:99:c8:22:42:a5:e4:92:52:e8:02:8e:ee:80:97:a8:b5:3a: 00:c5:05:e2:48:1c:2c:e7:46:1a:51:48:66:73:1a:f0:62:fa: 0f:56:a4:2f:5e:50:74:fe:ea:ee:d0:9a:3c:8b:35:d2:76:44: 3f:41:fb:1d:78:e6:71:44:fb:d0:24:04:88:a6:d9:b9:f1:10: f7:b7:b1:85:47:ea:4d:e5:cf:d5:ea:d1:41:29:55:0d:28:05: a2:9f:af:52:f7:a5:27:86:77:9e:31:00:93:78:f2:bd:7e:ea: 1c:93:ec:ed:27:d5:bd:57:7d:2a:b0:74:2d:e5:8a:b0:73:4c: 09:31:21:6c:59:a2:79:1e:0b:f3:55:ab:be:95:21:0c:93:6c: bf:9d:88:9e:46:68:fc:25:46:bd:db:ac:11:c3:6e:11:95:30: 9f:a7:0e:67:68:89:e8:c9:fc:07:e0:a6:f2:73:ef:54:dc:9a: 8d:79:0b:90:c5:b4:15:28:06:88:e4:b0:62:05:07:cc:80:92: b2:e7:8e:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ1MEIxMTAvBgNVBAUTKEU0QjMyQ0YyQTYxMUY3MDJERkQwOTEzRTNFQTUwQjRG RDYxRUM1NzUwHhcNMjQwNTMxMjM1NDM0WhcNMjQwNjA3MjM1NDM0WjAYMRYwFAYD VQQDEw02NjVhNjMzYS1lY2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnlbZxoUE0bfUhrXdz4zxsPnthFEWn5LvTKTH7Zgq4zHRQCC2XOH0GkO8BFdB 4LtJDUMw74NimcNoLJTxlJjU3xgQHci9E0YrfVdP8WCEO2MpSkTe/kabRNymo0jf 2f+Ig6cVs8T3pZ0fcRtuSszYr4m6yfg4IUrXHL/5su6anMIasvLtZB+5bhW3E7bX YTjlyCPT34X7RUanzekgtxFGt7sd32y4v22lIL/X9qNVOzwusgZeXixEFgiu7lW4 6znSStSg8+wA6M3w835QQmBFTJM8w/ZtkBsIBmvT72GAVxZHbQ+/4vVmXqsf422A ISZLGBndaXN+hQH5dabDN/3KCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJcWhdk gF8Puxef5N2XwaaiQgAxMB8GA1UdIwQYMBaAFOSzLPKmEfcC39CRPj6lC0/WHsV1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDUwQi9GN0I5RTMwQTEz RjExMUVCQjgxMjM5NTBDNEY5QUUwMi81TE1zOHFZUjl3TGYwSkUtUHFVTFQ5WWV4 WFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVMTXM4cVlSOXdMZjBKRS1QcVVMVDlZZXhYVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDUwQi9GN0I5RTMwQTEzRjExMUVCQjgxMjM5NTBDNEY5QUUwMi81TE1zOHFZUjl3 TGYwSkUtUHFVTFQ5WWV4WFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdegDwtMYfDwq7mp+Q340SKx5bu9SbCIpQONeMW5O0+B+APioOurEm 8+8ASn0MUBF+TBG1p7TCmcgiQqXkklLoAo7ugJeotToAxQXiSBws50YaUUhmcxrw YvoPVqQvXlB0/uru0Jo8izXSdkQ/QfsdeOZxRPvQJASIptm58RD3t7GFR+pN5c/V 6tFBKVUNKAWin69S96UnhneeMQCTePK9fuock+ztJ9W9V30qsHQt5Yqwc0wJMSFs WaJ5HgvzVau+lSEMk2y/nYieRmj8JUa926wRw24RlTCfpw5naInoyfwH4Kbyc+9U 3JqNeQuQxbQVKAaI5LBiBQfMgJKy545N -----END CERTIFICATE-----Generated at Sat Jun 1 02:01:12 2024 by rpki-client on console-ams.rpki-client.org