$ rpki-client -vvf rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft File: 0LR5KL_bnbNR4dQlatArZyj5XPU.mft (raw, json) Hash identifier: tU0M8TSHkLvROWZawHybdp8vizczSAqqUU4cC34Ebto= Subject key identifier: 88:79:92:B0:A9:15:62:F6:E2:A6:FD:40:66:88:46:E8:31:84:D3:C7 Authority key identifier: D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5 Certificate issuer: /CN=A9174306/serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft Manifest number: 4B Signing time: Sun 19 May 2024 07:59:09 +0000 Manifest this update: Sun 19 May 2024 07:59:08 +0000 Manifest next update: Sun 26 May 2024 07:59:08 +0000 Files and hashes: 1: 0LR5KL_bnbNR4dQlatArZyj5XPU.crl (hash: m85ypbkfX2f52qTlaLVNYafP+zc/PeeIqx/garB7DXs=) 2: 511C5136A2F011EEBBE10D80C4F9AE02.roa (hash: 6ft6dsVj7UbQ7Mjkn5/fW3MnMF0FwPcl1hK+5TV+RKw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174306/serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5 Validity Not Before: May 19 07:59:08 2024 GMT Not After : May 26 07:59:08 2024 GMT Subject: CN=6649b14d-4bb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:79:3b:c2:6e:f4:6f:ae:c2:7b:f4:0e:5f:ae: fb:c7:b4:89:73:f1:cb:49:d2:7b:aa:30:b5:34:fd: 4e:bb:9e:31:4b:8f:31:b1:07:06:14:5e:cd:e6:68: 24:d6:29:6f:dc:42:79:c2:02:df:40:00:82:dc:5a: 52:9f:a6:7d:04:23:38:c0:35:61:37:ec:d9:bb:ec: 69:70:21:03:5c:ce:14:ed:a2:db:e0:f5:6a:39:49: 8b:8a:20:53:a0:5f:1e:7d:34:ed:b0:51:aa:44:d8: f1:24:88:1b:d2:21:26:f0:a0:89:f4:ac:a7:5c:28: 93:c7:fa:34:42:59:1d:7b:f8:26:fd:bc:e4:2d:74: 15:28:79:9c:f6:22:c4:93:99:db:da:d2:d9:ff:86: 9a:00:a6:da:35:26:3e:9c:42:de:b6:9a:0e:b3:1f: 93:bf:20:4f:75:ff:5e:97:4e:bc:96:bb:dc:38:84: 8b:6a:bb:1c:36:f2:2b:93:f5:91:8a:29:c5:f7:c1: 0e:99:8d:fc:43:47:11:5c:51:a9:18:bc:f3:a8:65: d9:47:8e:6c:67:c5:61:9d:5b:de:52:00:bf:35:42: a8:ea:10:b5:f6:58:86:f3:b9:2e:7b:38:36:8a:fc: ae:76:e0:b5:66:0b:e3:29:67:ad:10:98:0b:e7:6a: 7a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:79:92:B0:A9:15:62:F6:E2:A6:FD:40:66:88:46:E8:31:84:D3:C7 X509v3 Authority Key Identifier: keyid:D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:2b:96:5a:70:5b:3f:8a:72:d7:4a:d0:f3:ea:b4:5d:d4:c0: de:d5:21:61:cc:23:a2:f8:80:48:ce:a8:73:ba:4c:18:38:6b: 37:38:07:58:07:62:7f:bd:38:b2:58:5c:4e:1a:0f:58:30:54: 92:df:90:d2:e8:a0:27:64:c6:e8:d4:4c:d4:cf:5f:6b:85:fc: b1:cf:8c:4b:8b:bf:ee:e4:20:f9:05:5d:c3:1d:3e:56:48:cd: 52:21:09:79:2d:06:7e:e2:28:27:4d:5a:d5:b2:c9:27:cc:72: 40:06:d5:2a:7a:8f:2c:42:03:e1:90:58:9c:51:55:f5:89:28: 6a:5d:8f:09:0a:90:cf:77:dc:c6:d9:85:dc:55:be:31:e3:9e: a6:ef:2c:00:60:ad:3e:24:22:49:a3:27:7f:4b:b8:38:f0:6b: bd:6c:54:92:f3:91:46:f6:d0:41:66:5c:92:3f:b5:23:f2:e1: 8e:6d:b8:56:e9:c6:05:41:13:c2:4c:56:de:7b:0b:c6:2f:71: 2f:ce:bc:b1:0d:82:94:8f:12:1c:c1:5d:7e:d1:b8:de:d8:ab: 8c:a0:59:a7:b8:8d:fc:cb:be:e0:10:42:19:25:74:ed:8a:b9: a0:40:0a:bc:3a:40:12:20:a3:26:f5:1b:a9:2e:22:c9:46:15: ec:26:ff:2c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NDMwNjExMC8GA1UEBRMoRDBCNDc5MjhCRkRCOURCMzUxRTFENDI1NkFEMDJCNjcy OEY5NUNGNTAeFw0yNDA1MTkwNzU5MDhaFw0yNDA1MjYwNzU5MDhaMBgxFjAUBgNV BAMTDTY2NDliMTRkLTRiYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjeTvCbvRvrsJ79A5frvvHtIlz8ctJ0nuqMLU0/U67njFLjzGxBwYUXs3maCTW KW/cQnnCAt9AAILcWlKfpn0EIzjANWE37Nm77GlwIQNczhTtotvg9Wo5SYuKIFOg Xx59NO2wUapE2PEkiBvSISbwoIn0rKdcKJPH+jRCWR17+Cb9vOQtdBUoeZz2IsST mdva0tn/hpoApto1Jj6cQt62mg6zH5O/IE91/16XTryWu9w4hItquxw28iuT9ZGK KcX3wQ6ZjfxDRxFcUakYvPOoZdlHjmxnxWGdW95SAL81QqjqELX2WIbzuS57ODaK /K524LVmC+MpZ60QmAvnanqxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiHmSsKkV Yvbipv1AZohG6DGE08cwHwYDVR0jBBgwFoAU0LR5KL/bnbNR4dQlatArZyj5XPUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0MzA2LzJCNUFFQzcwQTJF RTExRUVBNjM1NEY1RUM0RjlBRTAyLzBMUjVLTF9ibmJOUjRkUWxhdEFyWnlqNVhQ VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMExSNUtMX2JuYk5SNGRRbGF0QXJaeWo1WFBVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0 MzA2LzJCNUFFQzcwQTJFRTExRUVBNjM1NEY1RUM0RjlBRTAyLzBMUjVLTF9ibmJO UjRkUWxhdEFyWnlqNVhQVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABArllpwWz+KctdK0PPqtF3UwN7VIWHMI6L4gEjOqHO6TBg4azc4B1gH Yn+9OLJYXE4aD1gwVJLfkNLooCdkxujUTNTPX2uF/LHPjEuLv+7kIPkFXcMdPlZI zVIhCXktBn7iKCdNWtWyySfMckAG1Sp6jyxCA+GQWJxRVfWJKGpdjwkKkM933MbZ hdxVvjHjnqbvLABgrT4kIkmjJ39LuDjwa71sVJLzkUb20EFmXJI/tSPy4Y5tuFbp xgVBE8JMVt57C8YvcS/OvLENgpSPEhzBXX7RuN7Yq4ygWae4jfzLvuAQQhkldO2K uaBACrw6QBIgoyb1G6kuIslGFewm/yw= -----END CERTIFICATE-----Generated at Sun May 19 08:26:43 2024 by rpki-client on console-fra.rpki-client.org