$ rpki-client -vvf rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft File: L__8o-ZL11oIXmx2cyYl8iTHRDI.mft (raw, json) Hash identifier: ZK36xaxGtwwBByw8ay/EJVhdjGavd+y2j/0Vs3S/XrE= Subject key identifier: F8:FA:13:99:91:55:9A:78:CA:AD:40:04:47:91:2F:85:02:20:EC:C4 Authority key identifier: 2F:FF:FC:A3:E6:4B:D7:5A:08:5E:6C:76:73:26:25:F2:24:C7:44:32 Certificate issuer: /CN=A9193604/serialNumber=2FFFFCA3E64BD75A085E6C76732625F224C74432 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft Manifest number: 4D Signing time: Sun 19 May 2024 07:58:03 +0000 Manifest this update: Sun 19 May 2024 07:58:02 +0000 Manifest next update: Sun 26 May 2024 07:58:02 +0000 Files and hashes: 1: L__8o-ZL11oIXmx2cyYl8iTHRDI.crl (hash: LoufzEo7UlHJjnvq7hqAmVftzorANIMV+X1gHZsDvyc=) 2: 4578BBA89F4E11EEB293B87EC4F9AE02.roa (hash: OXrFUVRlCUypfbLs5hm3cE5ycOXJ9vF5Rzr0DVn8pyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.crl rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193604/serialNumber=2FFFFCA3E64BD75A085E6C76732625F224C74432 Validity Not Before: May 19 07:58:02 2024 GMT Not After : May 26 07:58:02 2024 GMT Subject: CN=6649b10b-3e56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:82:ec:c1:1b:7d:95:70:78:00:c1:d6:54:fb: 0a:cc:32:f4:fc:f9:df:23:6f:91:0c:50:a4:cb:bf: 3c:d7:38:c6:12:69:f6:d4:5d:d9:0f:a9:33:65:44: d7:e6:c6:51:24:db:70:23:56:c7:18:d0:e8:fe:ff: f9:75:7a:be:34:bf:12:bd:bb:22:10:ce:ef:5d:6b: 98:f4:b4:d0:c1:34:35:00:95:67:2f:9c:7e:4c:dc: f8:a1:b0:91:fd:f9:94:86:aa:43:bd:2f:8c:a8:af: 25:09:1b:ad:ba:a9:57:a5:35:a8:42:02:01:cf:a5: bb:c6:19:26:a4:07:44:73:9e:2d:6a:37:10:ad:c9: 9a:4a:cf:04:03:08:25:90:cd:b9:5b:71:fa:68:87: 4a:60:a5:1b:ab:d0:25:ce:d7:c0:0b:b6:0c:66:84: 49:62:b8:08:f3:99:d3:c0:a5:18:fe:14:e8:94:5f: 35:42:7b:c2:a7:39:1c:23:c2:f7:34:dc:07:05:c3: cf:a1:de:01:16:ce:90:98:e9:a8:4d:da:9b:73:4b: 23:bc:02:00:7a:19:29:36:51:40:7c:83:8a:69:75: b6:e9:b7:2c:8e:5b:69:be:3e:88:85:cd:fb:45:a2: 46:d7:6a:3e:47:62:8d:4a:13:89:36:11:8c:aa:e4: a9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:FA:13:99:91:55:9A:78:CA:AD:40:04:47:91:2F:85:02:20:EC:C4 X509v3 Authority Key Identifier: keyid:2F:FF:FC:A3:E6:4B:D7:5A:08:5E:6C:76:73:26:25:F2:24:C7:44:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:ef:a1:fb:b3:9b:2c:89:5f:d0:a2:2c:73:a1:65:e5:6c:72: 9a:7c:33:70:44:03:f2:c0:48:61:72:4d:ca:d4:41:c6:e7:69: 8c:b8:31:4d:9e:3c:71:b0:af:30:03:ac:38:59:2b:bf:1f:10: 5f:67:b8:55:a9:e7:2c:19:7a:80:d3:57:cb:32:fe:dc:2c:6f: e0:c3:ed:bb:34:f8:98:4c:38:3f:38:6b:d9:a8:66:03:42:89: 5f:ab:ba:80:12:30:ea:2e:6d:a2:35:5b:55:ef:d3:35:19:e2: 8c:ff:bf:dd:11:dc:59:dd:e8:8e:95:82:67:c9:29:31:c0:b6: 97:97:37:87:d8:93:25:eb:ee:be:75:81:d7:ae:f4:47:7f:9f: 4a:7f:c4:c3:76:d0:fa:55:37:58:6f:4a:81:5a:7d:71:39:2d: fd:f5:dc:3e:43:18:30:e4:bd:a4:c7:67:eb:d2:0f:1f:b4:7f: 3f:d6:5f:9f:90:41:12:96:6c:1f:d3:ae:98:72:a7:74:f1:86: 5f:49:57:c8:25:86:76:2e:17:95:54:ab:ad:8d:de:78:eb:43: 1e:b0:b9:fe:cd:a4:20:2a:e9:94:21:f9:7a:0a:0c:de:95:a7: e7:26:7b:f3:e5:31:6d:e8:97:b9:83:07:e8:38:d6:68:2e:87: 28:28:2b:d7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MzYwNDExMC8GA1UEBRMoMkZGRkZDQTNFNjRCRDc1QTA4NUU2Qzc2NzMyNjI1RjIy NEM3NDQzMjAeFw0yNDA1MTkwNzU4MDJaFw0yNDA1MjYwNzU4MDJaMBgxFjAUBgNV BAMTDTY2NDliMTBiLTNlNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfguzBG32VcHgAwdZU+wrMMvT8+d8jb5EMUKTLvzzXOMYSafbUXdkPqTNlRNfm xlEk23AjVscY0Oj+//l1er40vxK9uyIQzu9da5j0tNDBNDUAlWcvnH5M3PihsJH9 +ZSGqkO9L4yoryUJG626qVelNahCAgHPpbvGGSakB0Rzni1qNxCtyZpKzwQDCCWQ zblbcfpoh0pgpRur0CXO18ALtgxmhEliuAjzmdPApRj+FOiUXzVCe8KnORwjwvc0 3AcFw8+h3gEWzpCY6ahN2ptzSyO8AgB6GSk2UUB8g4ppdbbptyyOW2m+PoiFzftF okbXaj5HYo1KE4k2EYyq5KmpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+PoTmZFV mnjKrUAER5EvhQIg7MQwHwYDVR0jBBgwFoAUL//8o+ZL11oIXmx2cyYl8iTHRDIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzNjA0L0I1OTVGREEyOUY0 RDExRUU4NERCMEY3REM0RjlBRTAyL0xfXzhvLVpMMTFvSVhteDJjeVlsOGlUSFJE SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTF9fOG8tWkwxMW9JWG14MmN5WWw4aVRIUkRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz NjA0L0I1OTVGREEyOUY0RDExRUU4NERCMEY3REM0RjlBRTAyL0xfXzhvLVpMMTFv SVhteDJjeVlsOGlUSFJESS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGfvofuzmyyJX9CiLHOhZeVscpp8M3BEA/LASGFyTcrUQcbnaYy4MU2e PHGwrzADrDhZK78fEF9nuFWp5ywZeoDTV8sy/twsb+DD7bs0+JhMOD84a9moZgNC iV+ruoASMOoubaI1W1Xv0zUZ4oz/v90R3Fnd6I6VgmfJKTHAtpeXN4fYkyXr7r51 gdeu9Ed/n0p/xMN20PpVN1hvSoFafXE5Lf313D5DGDDkvaTHZ+vSDx+0fz/WX5+Q QRKWbB/Trphyp3Txhl9JV8glhnYuF5VUq62N3njrQx6wuf7NpCAq6ZQh+XoKDN6V p+cme/PlMW3ol7mDB+g41mguhygoK9c= -----END CERTIFICATE-----Generated at Sun May 19 08:26:43 2024 by rpki-client on console-fra.rpki-client.org