$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft File: L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft (raw, json) Hash identifier: m7Yv+DRrHsmeo3yVBaLLtMvVXk79QYdoSYbR71HsDJs= Subject key identifier: B2:C5:B5:E5:C2:24:2E:D6:4D:EF:F0:1D:CD:88:67:5E:F6:A1:4C:A5 Authority key identifier: 2F:C4:60:19:EE:52:D1:E9:1B:B1:D1:D8:E1:7E:99:8A:71:5B:72:44 Certificate issuer: /CN=A9152D1E/serialNumber=2FC46019EE52D1E91BB1D1D8E17E998A715B7244 Certificate serial: 0329 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft Manifest number: 0329 Signing time: Fri 31 May 2024 03:36:21 +0000 Manifest this update: Fri 31 May 2024 03:36:21 +0000 Manifest next update: Fri 07 Jun 2024 03:36:21 +0000 Files and hashes: 1: L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl (hash: ro07gZRY5EUe9PdETK1vSXdj+mlxhp6mNe4WRRfzKtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 03:36:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 809 (0x329) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D1E/serialNumber=2FC46019EE52D1E91BB1D1D8E17E998A715B7244 Validity Not Before: May 31 03:36:21 2024 GMT Not After : Jun 7 03:36:21 2024 GMT Subject: CN=665945b5-ea9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:5d:ef:41:cb:19:0d:b6:af:e9:cc:b2:19:b5: 0e:20:2e:a3:c8:1d:5b:fb:c9:51:58:9a:ee:35:3f: 3b:b8:f1:7d:9a:c8:8a:cb:e2:44:cb:75:97:2f:de: ce:07:8b:3b:f0:6d:d2:37:3c:4b:53:6b:2f:f7:42: ef:f6:50:98:dc:d0:20:69:9b:5b:fd:db:6a:81:b4: a1:8e:14:f7:8d:22:13:0d:ea:61:a9:f1:e4:c5:9c: 95:10:ab:9b:ad:72:9c:51:2e:f7:69:e6:fe:a5:a7: 5d:bb:71:8e:7d:c3:b6:eb:fc:44:dd:48:46:21:6c: 9a:05:3f:61:26:92:c6:c9:3d:ac:42:18:38:bd:fb: 87:88:57:60:94:c6:f5:18:2f:47:cf:31:73:58:76: f3:c4:31:63:db:69:ba:ee:b2:2d:96:cc:b9:af:4e: 62:c7:3a:ce:6e:9d:62:3a:13:b6:dd:17:c2:a5:0c: dd:54:0c:ef:5f:c4:d1:07:b1:39:9e:c6:15:d8:c2: 5a:5b:6d:e4:60:a2:22:5b:76:af:27:ba:ab:db:70: 40:d8:9b:94:81:de:63:41:b1:c3:a4:0e:37:ca:58: 40:86:bc:93:9e:bc:8b:40:07:a3:0e:fe:d5:bc:f5: 41:c0:ec:06:f0:94:0a:e6:a7:38:07:b1:fb:48:47: ff:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C5:B5:E5:C2:24:2E:D6:4D:EF:F0:1D:CD:88:67:5E:F6:A1:4C:A5 X509v3 Authority Key Identifier: keyid:2F:C4:60:19:EE:52:D1:E9:1B:B1:D1:D8:E1:7E:99:8A:71:5B:72:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:de:ac:3a:67:46:34:ce:e6:4a:62:76:60:37:d3:87:9d:a8: 71:42:ea:f8:38:6e:a9:ab:4d:77:b1:0f:3e:77:c5:45:d7:54: b0:c5:8d:20:39:76:73:f6:b4:f9:d1:81:7f:3a:80:36:1f:ff: ba:ce:e2:be:86:38:cf:79:e6:06:5d:f8:26:95:3f:72:44:c1: a3:c9:46:f2:5e:c2:6c:c0:89:7e:7d:44:4c:71:cb:25:e0:b4: 35:b7:5d:c8:87:1b:3c:c9:57:81:28:e5:98:65:7b:43:ff:f0: 80:7d:4f:11:58:81:5f:9d:ce:81:5e:0d:a8:93:e3:b5:81:4d: 6f:7e:de:e7:85:5d:e6:9d:94:59:28:69:b6:b7:26:9c:9d:05: b8:89:1d:92:a6:9a:2d:e6:e4:82:17:b5:da:2c:52:b4:27:61: aa:28:0f:98:5a:44:51:bf:78:ab:de:ab:e4:a2:eb:88:cd:c0: 6f:0f:61:c4:78:42:d2:83:c5:ab:38:e3:53:75:13:2f:a8:a3: b8:0f:d3:56:09:4e:3b:6d:c6:0d:8b:e8:68:5c:10:45:03:0b: e3:35:fd:99:1f:7d:51:98:f8:33:9b:43:59:e7:82:26:15:9f: 89:f8:9a:6a:38:c2:19:b3:ea:d9:ef:5c:af:9a:c1:d3:db:99: 5f:c1:dd:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMUUxMTAvBgNVBAUTKDJGQzQ2MDE5RUU1MkQxRTkxQkIxRDFEOEUxN0U5OThB NzE1QjcyNDQwHhcNMjQwNTMxMDMzNjIxWhcNMjQwNjA3MDMzNjIxWjAYMRYwFAYD VQQDEw02NjU5NDViNS1lYTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA813vQcsZDbav6cyyGbUOIC6jyB1b+8lRWJruNT87uPF9msiKy+JEy3WXL97O B4s78G3SNzxLU2sv90Lv9lCY3NAgaZtb/dtqgbShjhT3jSITDephqfHkxZyVEKub rXKcUS73aeb+paddu3GOfcO26/xE3UhGIWyaBT9hJpLGyT2sQhg4vfuHiFdglMb1 GC9HzzFzWHbzxDFj22m67rItlsy5r05ixzrObp1iOhO23RfCpQzdVAzvX8TRB7E5 nsYV2MJaW23kYKIiW3avJ7qr23BA2JuUgd5jQbHDpA43ylhAhryTnryLQAejDv7V vPVBwOwG8JQK5qc4B7H7SEf/MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLLFteXC JC7WTe/wHc2IZ172oUylMB8GA1UdIwQYMBaAFC/EYBnuUtHpG7HR2OF+mYpxW3JE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQxRS9DN0MwQzFEQTdE NjAxMUVDQUQ5NjUwMzBDNEY5QUUwMi9MOFJnR2U1UzBla2JzZEhZNFg2WmluRmJj a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w4UmdHZTVTMGVrYnNkSFk0WDZaaW5GYmNrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQxRS9DN0MwQzFEQTdENjAxMUVDQUQ5NjUwMzBDNEY5QUUwMi9MOFJnR2U1UzBl a2JzZEhZNFg2WmluRmJja1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCu3qw6Z0Y0zuZKYnZgN9OHnahxQur4OG6pq013sQ8+d8VF11SwxY0g OXZz9rT50YF/OoA2H/+6zuK+hjjPeeYGXfgmlT9yRMGjyUbyXsJswIl+fURMccsl 4LQ1t13Ihxs8yVeBKOWYZXtD//CAfU8RWIFfnc6BXg2ok+O1gU1vft7nhV3mnZRZ KGm2tyacnQW4iR2Sppot5uSCF7XaLFK0J2GqKA+YWkRRv3ir3qvkouuIzcBvD2HE eELSg8WrOONTdRMvqKO4D9NWCU47bcYNi+hoXBBFAwvjNf2ZH31RmPgzm0NZ54Im FZ+J+JpqOMIZs+rZ71yvmsHT25lfwd31 -----END CERTIFICATE-----Generated at Fri May 31 06:49:12 2024 by rpki-client on console-ams.rpki-client.org