$ rpki-client -vvf rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft File: LByXEgCqxo6oRewP3YfsjFAS8pw.mft (raw, json) Hash identifier: zznNtl2QPexxOLF1ER4zOEDoJN91Nyb3lnO2O/wYBxU= Subject key identifier: 75:0E:6A:74:E2:8E:E3:A1:52:69:DC:4A:81:30:5F:3B:8A:EF:CA:17 Authority key identifier: 2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C Certificate issuer: /CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C Certificate serial: 0A68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft Manifest number: 0A5C Signing time: Sat 18 May 2024 20:22:28 +0000 Manifest this update: Sat 18 May 2024 20:22:27 +0000 Manifest next update: Sat 25 May 2024 20:22:27 +0000 Files and hashes: 1: LByXEgCqxo6oRewP3YfsjFAS8pw.crl (hash: XgUfVZ7ffWbGOtWurbyhDqUHCDHpO7/6rWqRJ35bKn8=) 2: 27247D7C0C6811EF85698B81C4F9AE02.roa (hash: Zc1vo2vpAqhVct1lvDryMei9NILBbRSaCpt0tk9m7fY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2664 (0xa68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C Validity Not Before: May 18 20:22:27 2024 GMT Not After : May 25 20:22:27 2024 GMT Subject: CN=66490e03-b52e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ff:76:e4:f9:f7:6e:fe:22:be:f4:0d:1d:66: 46:6d:5a:3e:e7:7f:18:45:05:ab:cd:96:fd:92:4b: a2:3b:16:02:24:d3:16:02:d9:d4:9a:0b:eb:46:22: 52:6e:93:6b:c4:cc:2a:e0:69:55:df:13:ec:f6:0c: 13:52:c2:a7:f2:05:ed:3c:37:a6:5d:a5:07:4f:34: 65:02:5b:4d:40:22:84:90:6f:89:b5:fd:9b:4a:f0: 6c:dc:f4:ac:f2:12:56:d2:8b:56:70:10:50:db:ba: ea:b6:a5:85:d0:38:58:7e:67:74:e6:d6:a1:0c:8f: df:c6:ac:1c:2c:d9:61:21:a0:a9:6c:6a:57:f3:55: 95:14:9b:1c:ed:f6:58:e2:48:4d:da:ea:96:ca:30: 84:28:32:d9:54:09:21:c4:90:5c:1e:40:e8:f6:40: ec:eb:6a:df:18:8c:a7:d7:8a:62:12:a3:f8:2a:16: 81:e8:85:d7:53:8e:90:f2:30:0c:e4:63:ea:06:a8: c8:cb:a1:c4:fe:36:16:cd:b3:0b:c3:53:ba:6b:94: 18:d5:ec:7b:13:30:37:01:3a:f5:34:bd:b0:08:57: 60:b1:93:18:4a:82:a1:3d:97:2b:92:c1:96:7b:38: 2e:95:81:87:da:23:c4:31:18:37:f3:1b:27:2e:f2: cc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:0E:6A:74:E2:8E:E3:A1:52:69:DC:4A:81:30:5F:3B:8A:EF:CA:17 X509v3 Authority Key Identifier: keyid:2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:a1:a2:ed:aa:ee:9b:d4:3e:6a:a0:18:47:14:aa:eb:89:8e: 19:3b:0c:d8:b5:40:6f:07:9a:50:cf:e2:72:79:63:6d:24:5b: 79:89:0e:00:5f:ed:81:eb:2d:7f:fd:91:af:94:43:ea:0f:da: c9:68:76:7d:e3:84:2a:53:62:8a:26:93:b5:f1:28:6e:30:e3: a8:3d:ff:f4:87:7e:1a:c6:d2:43:85:91:60:66:73:45:71:c1: 83:4b:ba:eb:0d:64:bb:45:c9:24:29:31:a1:da:f0:3e:dc:65: 8b:1b:7b:43:dc:44:04:c5:16:68:29:84:aa:b0:e7:16:ab:73: 0a:10:05:09:e7:83:e0:da:19:e8:ae:66:e1:cb:56:e1:84:58: 6a:85:30:53:b8:ff:09:d6:44:16:aa:0b:03:54:ad:17:8f:44: cc:0c:e5:2d:c0:c6:f6:8f:b1:18:5b:84:0e:ed:04:3e:63:1a: b8:84:06:4a:c1:5f:3d:cd:bd:04:a0:d1:26:22:ea:18:86:a5: 5b:a2:8c:c9:ad:8f:d3:b4:aa:76:ad:c1:37:58:44:58:f2:0f: 78:6a:6a:19:71:65:16:15:62:2d:63:6a:39:bb:7e:b8:79:02: 93:23:af:b5:5a:6d:f6:52:63:41:ed:18:a9:e6:19:6b:5b:9b: d7:d7:1e:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyOTAxMTAvBgNVBAUTKDJDMUM5NzEyMDBBQUM2OEVBODQ1RUMwRkREODdFQzhD NTAxMkYyOUMwHhcNMjQwNTE4MjAyMjI3WhcNMjQwNTI1MjAyMjI3WjAYMRYwFAYD VQQDEw02NjQ5MGUwMy1iNTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwP925Pn3bv4ivvQNHWZGbVo+538YRQWrzZb9kkuiOxYCJNMWAtnUmgvrRiJS bpNrxMwq4GlV3xPs9gwTUsKn8gXtPDemXaUHTzRlAltNQCKEkG+Jtf2bSvBs3PSs 8hJW0otWcBBQ27rqtqWF0DhYfmd05tahDI/fxqwcLNlhIaCpbGpX81WVFJsc7fZY 4khN2uqWyjCEKDLZVAkhxJBcHkDo9kDs62rfGIyn14piEqP4KhaB6IXXU46Q8jAM 5GPqBqjIy6HE/jYWzbMLw1O6a5QY1ex7EzA3ATr1NL2wCFdgsZMYSoKhPZcrksGW ezgulYGH2iPEMRg38xsnLvLMuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUOanTi juOhUmncSoEwXzuK78oXMB8GA1UdIwQYMBaAFCwclxIAqsaOqEXsD92H7IxQEvKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTI5MC9CRUY0NTkwMjNG NkIxMUVBQjdCOUM1NkVDNEY5QUUwMi9MQnlYRWdDcXhvNm9SZXdQM1lmc2pGQVM4 cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCeVhFZ0NxeG82b1Jld1AzWWZzakZBUzhwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTI5MC9CRUY0NTkwMjNGNkIxMUVBQjdCOUM1NkVDNEY5QUUwMi9MQnlYRWdDcXhv Nm9SZXdQM1lmc2pGQVM4cHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5oaLtqu6b1D5qoBhHFKrriY4ZOwzYtUBvB5pQz+JyeWNtJFt5iQ4A X+2B6y1//ZGvlEPqD9rJaHZ944QqU2KKJpO18ShuMOOoPf/0h34axtJDhZFgZnNF ccGDS7rrDWS7RckkKTGh2vA+3GWLG3tD3EQExRZoKYSqsOcWq3MKEAUJ54Pg2hno rmbhy1bhhFhqhTBTuP8J1kQWqgsDVK0Xj0TMDOUtwMb2j7EYW4QO7QQ+Yxq4hAZK wV89zb0EoNEmIuoYhqVboozJrY/TtKp2rcE3WERY8g94amoZcWUWFWItY2o5u364 eQKTI6+1Wm32UmNB7Rip5hlrW5vX1x6V -----END CERTIFICATE-----Generated at Sat May 18 21:31:29 2024 by rpki-client on console-ams.rpki-client.org