$ rpki-client -vvf rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft File: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft (raw, json) Hash identifier: QQEzwWiVqknQkKljrrO242f0jMAx2vcSM86FdzyoKLI= Subject key identifier: 44:3C:CC:30:CB:79:60:2E:BF:72:BA:81:4C:14:C5:1F:D5:F1:0A:A2 Authority key identifier: 2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 Certificate issuer: /CN=A9192EE9/serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Certificate serial: 073E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft Manifest number: 0734 Signing time: Sat 18 May 2024 22:28:34 +0000 Manifest this update: Sat 18 May 2024 22:28:34 +0000 Manifest next update: Sat 25 May 2024 22:28:34 +0000 Files and hashes: 1: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl (hash: BXANGNKKtcwrLKz0Md8BOPkZ6EwYvJKWCqnSieAaqdE=) 2: A29A7DF20E2011EB81D90E2EC4F9AE02.roa (hash: pfugRimMJGCWOXNZgq9UTqeisGRXQ9LeEcuowqu0sWo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1854 (0x73e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192EE9/serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Validity Not Before: May 18 22:28:34 2024 GMT Not After : May 25 22:28:34 2024 GMT Subject: CN=66492b92-4f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:1a:4a:3f:56:b7:c5:48:1e:56:d3:21:c2:f3: 12:d9:c1:62:01:a8:39:bd:62:0c:9b:4a:4c:5f:bd: 7a:d0:32:d9:65:87:d1:95:b1:47:cf:d9:0f:63:ac: bb:9e:92:fd:39:e7:b9:15:8f:52:ae:e9:17:c6:cf: 81:f1:ae:41:78:25:16:f8:2a:83:d8:52:c0:33:a6: 45:77:5a:ea:92:ba:3e:00:74:36:54:ac:ad:ef:b2: 25:f0:97:94:f6:a5:ad:31:e1:d5:85:20:31:9c:d7: 38:39:ea:37:6f:be:8d:4b:e9:82:2f:40:2e:84:0b: c9:84:da:ca:8e:46:7b:e6:6c:6b:15:67:cf:7b:33: b9:14:0f:c5:78:1c:d2:62:98:c2:2a:d8:b8:95:11: 09:80:9f:b3:e3:5b:33:f1:e3:41:a5:e5:f3:75:ae: 40:d8:29:2b:99:58:f5:44:6b:b6:51:5f:53:2d:de: bc:7c:fa:52:3d:ca:2d:01:34:fb:d4:dd:53:4b:c1: bc:2a:72:74:6f:96:74:3f:f7:69:8e:40:d4:1f:65: f0:c5:66:70:a3:6d:3d:1d:be:1d:fc:63:a8:b5:6d: 05:e1:70:05:8a:54:a7:e8:06:58:b1:b1:02:76:89: 11:51:b4:98:c3:8d:89:1c:b5:80:c1:38:70:f2:b5: f7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3C:CC:30:CB:79:60:2E:BF:72:BA:81:4C:14:C5:1F:D5:F1:0A:A2 X509v3 Authority Key Identifier: keyid:2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:29:a5:6f:05:d2:b1:f1:4d:41:2d:a2:bd:7f:4b:f2:c7:c2: bb:84:1d:d2:5b:61:63:7d:c9:92:60:d9:c2:fd:ac:93:b6:30: 36:ee:f6:04:a9:0c:71:aa:d9:f2:3d:ed:4c:9e:86:18:7d:88: 7b:73:e0:69:39:7d:34:fa:ec:fb:4e:64:3d:fc:40:a6:17:0b: 6a:7e:e9:6c:c0:02:ad:eb:38:02:ac:1f:34:ed:dd:07:41:65: 09:39:6d:c6:c2:a4:c0:fa:ae:26:ef:c0:1f:d5:84:6d:06:ea: 39:38:c8:dd:cb:84:fd:b2:1d:73:1a:bc:7f:02:ad:76:b0:14: 3a:7c:cb:f0:d1:7f:47:99:06:9f:13:66:92:e8:85:88:83:b0: f2:12:32:af:cc:d3:21:52:c3:48:62:05:f1:b5:ec:2a:7f:25: 93:0b:dd:21:a5:86:64:fd:2d:d0:05:61:0e:f3:5a:74:91:ca: 2b:c3:aa:6f:c4:cc:26:94:e8:f9:f3:59:0e:b5:83:6d:72:7a: 72:ea:c2:21:ad:ea:6d:85:80:48:43:50:27:cd:22:3b:bd:c1: 28:f1:0d:c4:f4:1c:42:d3:54:53:42:01:81:ad:2b:c2:f5:66: 51:7a:83:7b:fd:0f:54:fe:aa:6b:5b:d8:1c:b3:08:4b:b6:e4: b1:53:e1:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJFRTkxMTAvBgNVBAUTKDJGN0FFQkRDNzAxNzlENzE2OTRGQzY5OUQ1RjNFNDBF NTg0QUIzNjkwHhcNMjQwNTE4MjIyODM0WhcNMjQwNTI1MjIyODM0WjAYMRYwFAYD VQQDEw02NjQ5MmI5Mi00ZjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5RpKP1a3xUgeVtMhwvMS2cFiAag5vWIMm0pMX7160DLZZYfRlbFHz9kPY6y7 npL9Oee5FY9SrukXxs+B8a5BeCUW+CqD2FLAM6ZFd1rqkro+AHQ2VKyt77Il8JeU 9qWtMeHVhSAxnNc4Oeo3b76NS+mCL0AuhAvJhNrKjkZ75mxrFWfPezO5FA/FeBzS YpjCKti4lREJgJ+z41sz8eNBpeXzda5A2CkrmVj1RGu2UV9TLd68fPpSPcotATT7 1N1TS8G8KnJ0b5Z0P/dpjkDUH2XwxWZwo209Hb4d/GOotW0F4XAFilSn6AZYsbEC dokRUbSYw42JHLWAwThw8rX35wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQ8zDDL eWAuv3K6gUwUxR/V8QqiMB8GA1UdIwQYMBaAFC9669xwF51xaU/GmdXz5A5YSrNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkVFOS8zMjQ4NDFGNEU2 RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5YRnBUOGFaMWZQa0RsaEtz MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzcnIzSEFYblhGcFQ4YVoxZlBrRGxoS3Myay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkVFOS8zMjQ4NDFGNEU2RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5Y RnBUOGFaMWZQa0RsaEtzMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSKaVvBdKx8U1BLaK9f0vyx8K7hB3SW2FjfcmSYNnC/ayTtjA27vYE qQxxqtnyPe1MnoYYfYh7c+BpOX00+uz7TmQ9/ECmFwtqfulswAKt6zgCrB807d0H QWUJOW3GwqTA+q4m78Af1YRtBuo5OMjdy4T9sh1zGrx/Aq12sBQ6fMvw0X9HmQaf E2aS6IWIg7DyEjKvzNMhUsNIYgXxtewqfyWTC90hpYZk/S3QBWEO81p0kcorw6pv xMwmlOj581kOtYNtcnpy6sIhrepthYBIQ1AnzSI7vcEo8Q3E9BxC01RTQgGBrSvC 9WZReoN7/Q9U/qprW9gcswhLtuSxU+EB -----END CERTIFICATE-----Generated at Sun May 19 00:30:19 2024 by rpki-client on console-ams.rpki-client.org