$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft File: L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft (raw, json) Hash identifier: 448d+7Fnwa3r6lMfUXEIFfmgh9DpHdCNtU/AW606tWc= Subject key identifier: 13:A7:2D:97:81:F2:A9:EF:89:59:A5:1E:85:23:3F:1B:E0:3B:30:20 Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Certificate serial: 01EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft Manifest number: 01DA Signing time: Sun 19 May 2024 04:22:34 +0000 Manifest this update: Sun 19 May 2024 04:22:34 +0000 Manifest next update: Sun 26 May 2024 04:22:34 +0000 Files and hashes: 1: L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl (hash: 0Qc/EONKnqdsxjdb4XGGNV8igD2GUCU39wTqFWQHs5Y=) 2: 5D4068C0E82411EE92612D7DC4F9AE02.roa (hash: p3i6Ay+o3E2OVSQm1vW2MA6Ty+h/wAo4/YH27AwdgTs=) 3: C8642118032511ED86C03C22C4F9AE02.roa (hash: OnsaNgjO8g3+wNoKD/TWUpjf3Jf4Zt5/oExQM+aBuRQ=) 4: 08889312032311EDBEC6B32CC4F9AE02.roa (hash: 7bjmRWRqgD5Lz6GwkqY/jivBtBSMAih3Czs5B8WoxEw=) 5: 07B587E2032311EDBEC6B32CC4F9AE02.roa (hash: I+der0h0w3ayTO8vG2U7xiGC+200e95IfrBwlG1bmCI=) 6: 73E1CE72FCA411EE88B23A71C4F9AE02.roa (hash: LovrQr0mUjcthPu/WYoue9gVRApOki+SAMOADrfZtvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Validity Not Before: May 19 04:22:34 2024 GMT Not After : May 26 04:22:34 2024 GMT Subject: CN=66497e8a-bb03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f3:07:6f:ab:68:0f:a5:71:dc:4b:12:fa:cf: c9:05:e2:59:2e:11:82:7b:b3:2f:7f:36:e2:11:8b: 6e:7f:5a:a4:9c:7b:df:d0:39:78:69:f0:47:8e:9b: fb:14:8c:b4:fc:55:d1:1d:92:fe:cf:ed:ee:f6:60: 7e:1a:18:44:4e:c3:e6:0d:ec:d9:56:da:24:5e:51: cc:ac:b6:7f:3f:94:3d:36:0a:74:46:30:7c:90:0a: b0:7f:74:33:63:ed:0d:f6:b5:2b:25:ae:fd:7a:68: 84:cb:b4:46:9f:4d:a4:88:a8:fc:3c:4d:fb:18:b3: ca:a2:5a:28:bb:cf:2a:d9:eb:bd:3c:a5:2f:fe:30: 86:a6:06:78:1b:d3:1e:98:dd:98:eb:f7:3a:22:83: ca:ea:c3:38:59:04:0b:32:a2:3e:9e:fb:bb:39:08: d6:3c:eb:eb:9c:7d:e9:94:1b:1d:e0:bf:4d:a8:30: cb:12:63:8b:a4:17:cb:44:44:d7:08:87:8f:77:ee: 9d:de:89:d3:4a:45:0d:8b:6f:fe:32:13:f8:49:01: 93:db:47:a3:5a:85:26:cd:1a:6e:cc:78:63:3d:6b: c6:2f:89:1c:cf:53:a6:50:15:6d:31:15:7a:65:c0: 50:86:63:4d:27:f0:af:da:00:dd:34:f3:05:6f:a6: 81:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A7:2D:97:81:F2:A9:EF:89:59:A5:1E:85:23:3F:1B:E0:3B:30:20 X509v3 Authority Key Identifier: keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:50:c1:37:83:00:6e:e5:39:74:01:68:8d:82:98:ad:c1:11: 5b:9c:1a:1e:e9:fa:c1:53:b5:fd:21:f6:72:e4:c9:87:f0:02: 5b:e9:1e:ff:0e:e3:1d:a6:23:db:5d:f4:73:20:5d:a1:dd:9a: 20:54:da:2b:1d:97:12:dc:83:dc:58:55:d4:31:39:55:9e:43: 21:b7:9c:df:56:ba:3c:1b:cc:c9:e6:7a:b3:82:30:28:89:bd: 1e:2f:aa:53:b0:82:00:3c:cd:f3:16:48:e9:f9:48:24:aa:6e: ad:8d:e3:3b:eb:89:a3:91:97:80:53:85:22:5f:76:05:f7:3c: ce:df:54:11:48:46:55:88:0c:9a:3d:7d:fd:4a:b6:13:af:a1: 48:ea:c9:e7:de:19:1c:3b:7f:d4:72:1b:00:d3:58:b7:a7:35: c5:d8:65:29:70:30:48:e8:f3:19:b0:70:99:59:56:40:c4:5c: 19:16:a3:df:a1:b9:02:4a:0a:b2:e0:42:bf:25:6d:38:01:1f: 7f:ad:77:03:56:b2:83:0c:dd:42:ae:55:3c:c0:48:ac:f8:76: 29:a3:0d:24:39:c3:70:13:43:39:c2:7d:f1:73:64:78:47:9e: 59:04:36:8e:fc:cf:25:ec:30:d8:eb:20:70:6f:df:1a:a3:7d: 3c:87:9c:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5OTkxMTAvBgNVBAUTKDJGNTMzRUEwRTQwODE5REY1NjNFM0Y3RkUzRkU4NzQy OEQ1MkEwRDUwHhcNMjQwNTE5MDQyMjM0WhcNMjQwNTI2MDQyMjM0WjAYMRYwFAYD VQQDEw02NjQ5N2U4YS1iYjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfMHb6toD6Vx3EsS+s/JBeJZLhGCe7MvfzbiEYtuf1qknHvf0Dl4afBHjpv7 FIy0/FXRHZL+z+3u9mB+GhhETsPmDezZVtokXlHMrLZ/P5Q9Ngp0RjB8kAqwf3Qz Y+0N9rUrJa79emiEy7RGn02kiKj8PE37GLPKoloou88q2eu9PKUv/jCGpgZ4G9Me mN2Y6/c6IoPK6sM4WQQLMqI+nvu7OQjWPOvrnH3plBsd4L9NqDDLEmOLpBfLRETX CIePd+6d3onTSkUNi2/+MhP4SQGT20ejWoUmzRpuzHhjPWvGL4kcz1OmUBVtMRV6 ZcBQhmNNJ/Cv2gDdNPMFb6aBMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOnLZeB 8qnviVmlHoUjPxvgOzAgMB8GA1UdIwQYMBaAFC9TPqDkCBnfVj4/f+P+h0KNUqDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9CMUMxQjBEQTAz MUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdkOVdQajlfNF82SFFvMVNv TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxTS1vT1FJR2Q5V1BqOV80XzZIUW8xU29OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk5OS9CMUMxQjBEQTAzMUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdk OVdQajlfNF82SFFvMVNvTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6UME3gwBu5Tl0AWiNgpitwRFbnBoe6frBU7X9IfZy5MmH8AJb6R7/ DuMdpiPbXfRzIF2h3ZogVNorHZcS3IPcWFXUMTlVnkMht5zfVro8G8zJ5nqzgjAo ib0eL6pTsIIAPM3zFkjp+Ugkqm6tjeM764mjkZeAU4UiX3YF9zzO31QRSEZViAya PX39SrYTr6FI6snn3hkcO3/UchsA01i3pzXF2GUpcDBI6PMZsHCZWVZAxFwZFqPf obkCSgqy4EK/JW04AR9/rXcDVrKDDN1CrlU8wEis+HYpow0kOcNwE0M5wn3xc2R4 R55ZBDaO/M8l7DDY6yBwb98ao308h5yh -----END CERTIFICATE-----Generated at Sun May 19 04:56:55 2024 by rpki-client on console-fra.rpki-client.org