$ rpki-client -vvf rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft File: lMPujMByTro8sQMk-e24G6yFAyA.mft (raw, json) Hash identifier: AgTTKGfiRaSlG4+Sc7MPsyCLA9CgNuXSD94vb9ak2Mg= Subject key identifier: 2E:B8:74:11:83:85:9A:05:C3:73:9D:5D:F9:B7:40:20:66:63:E2:D4 Authority key identifier: 94:C3:EE:8C:C0:72:4E:BA:3C:B1:03:24:F9:ED:B8:1B:AC:85:03:20 Certificate issuer: /CN=A9197DD5/serialNumber=94C3EE8CC0724EBA3CB10324F9EDB81BAC850320 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMPujMByTro8sQMk-e24G6yFAyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft Manifest number: 60 Signing time: Sun 19 May 2024 07:38:46 +0000 Manifest this update: Sun 19 May 2024 07:38:45 +0000 Manifest next update: Sun 26 May 2024 07:38:45 +0000 Files and hashes: 1: lMPujMByTro8sQMk-e24G6yFAyA.crl (hash: x3CuNPtfvjreQ5yxIKG2k4Q1OS0PRbnu0eB3nJAM2Ak=) 2: 5E3ADA8C81CF11EE9AB1F360C4F9AE02.roa (hash: pbdOn1wwWQQMR5dF92uPTMRV6xEjd17wB+lzl55HYGU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.crl rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMPujMByTro8sQMk-e24G6yFAyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197DD5/serialNumber=94C3EE8CC0724EBA3CB10324F9EDB81BAC850320 Validity Not Before: May 19 07:38:45 2024 GMT Not After : May 26 07:38:45 2024 GMT Subject: CN=6649ac86-8421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:27:ed:79:b0:c5:0e:ee:06:21:00:46:5e:f1: 8d:a4:5d:ce:31:f6:1d:a2:75:fd:48:1b:8e:38:a4: 53:a6:25:3c:9c:7c:b9:b3:10:7c:46:b8:48:77:cf: 47:d6:6f:81:8d:2a:a5:b6:a8:88:b5:dd:d2:27:33: a7:3d:e5:54:98:87:17:a1:c2:d6:c6:b6:26:eb:c0: 9b:8e:8e:e0:41:10:92:8b:ca:b2:ae:38:63:bf:84: f1:23:0d:4a:7f:ae:bf:f2:99:e2:a8:06:27:0d:92: 5b:b3:fb:49:ca:7f:c5:1d:f2:87:94:ca:73:dc:8c: 83:4d:6d:be:47:1c:eb:aa:43:f1:d2:b6:12:b3:1a: 7c:c0:ba:9a:0d:5a:03:44:e6:b1:0f:8e:93:a9:fa: 53:25:56:80:55:7b:21:a8:8b:c9:77:a5:40:6f:8d: af:48:0b:83:6e:35:37:bd:16:bf:6f:a8:30:32:81: 67:41:42:a8:b6:ab:13:d8:46:78:bd:a8:04:65:d8: 2e:0f:f0:0d:ce:1c:f1:28:50:a1:8f:1a:e2:5b:3a: c6:b1:3b:f9:df:23:41:80:40:ee:e2:47:27:c6:e3: 89:c5:22:53:fa:e4:81:ab:fd:1c:b7:52:e7:60:0f: 48:71:0e:db:ad:91:26:f0:c6:bf:4b:5a:b2:33:1a: 36:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B8:74:11:83:85:9A:05:C3:73:9D:5D:F9:B7:40:20:66:63:E2:D4 X509v3 Authority Key Identifier: keyid:94:C3:EE:8C:C0:72:4E:BA:3C:B1:03:24:F9:ED:B8:1B:AC:85:03:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMPujMByTro8sQMk-e24G6yFAyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197DD5/16D4B0DC81CF11EEBC152F60C4F9AE02/lMPujMByTro8sQMk-e24G6yFAyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:00:5c:6a:c0:ef:47:10:94:53:e8:58:7a:77:d0:d3:a0:02: cc:b9:c9:53:a6:98:bf:0f:e2:46:66:e3:e1:ad:e6:6c:fa:49: 94:60:7e:93:c5:1b:68:69:03:e7:f8:6c:8c:e8:7a:af:33:81: 05:f7:21:43:99:f7:bb:90:2c:73:7c:8c:73:cb:93:2e:a3:b9: 31:38:b5:76:26:a0:cd:bd:cd:34:73:ee:83:25:82:9c:1f:e1: f6:f0:03:ea:04:20:0f:86:20:61:88:9b:21:19:79:ab:ce:a9: c1:fc:2d:db:5c:3f:23:d0:e6:8d:62:76:96:f1:49:3c:4d:e5: b7:97:eb:09:ce:30:6a:84:41:ee:a9:d1:f7:26:f2:c5:0d:33: a6:9b:7b:53:40:8d:4a:29:aa:f3:81:f5:20:0b:2e:e0:56:2a: b1:19:49:b3:4d:6d:93:da:b6:ff:a6:20:24:ef:84:ab:03:e8: f3:27:8e:4f:78:fe:a7:08:33:a3:4e:a8:a1:1e:c9:67:b4:26: b1:9c:50:38:30:44:65:2f:38:45:70:d6:c8:b5:17:b0:77:d9: 94:99:b3:a0:d9:ca:a3:af:27:30:c5:d4:d6:82:eb:36:c5:a7: 13:c1:6f:56:57:03:28:40:f1:00:be:aa:37:95:88:76:35:00: 22:43:5b:f8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 N0RENTExMC8GA1UEBRMoOTRDM0VFOENDMDcyNEVCQTNDQjEwMzI0RjlFREI4MUJB Qzg1MDMyMDAeFw0yNDA1MTkwNzM4NDVaFw0yNDA1MjYwNzM4NDVaMBgxFjAUBgNV BAMTDTY2NDlhYzg2LTg0MjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1J+15sMUO7gYhAEZe8Y2kXc4x9h2idf1IG444pFOmJTycfLmzEHxGuEh3z0fW b4GNKqW2qIi13dInM6c95VSYhxehwtbGtibrwJuOjuBBEJKLyrKuOGO/hPEjDUp/ rr/ymeKoBicNkluz+0nKf8Ud8oeUynPcjINNbb5HHOuqQ/HSthKzGnzAupoNWgNE 5rEPjpOp+lMlVoBVeyGoi8l3pUBvja9IC4NuNTe9Fr9vqDAygWdBQqi2qxPYRni9 qARl2C4P8A3OHPEoUKGPGuJbOsaxO/nfI0GAQO7iRyfG44nFIlP65IGr/Ry3Uudg D0hxDtutkSbwxr9LWrIzGjbrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULrh0EYOF mgXDc51d+bdAIGZj4tQwHwYDVR0jBBgwFoAUlMPujMByTro8sQMk+e24G6yFAyAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3REQ1LzE2RDRCMERDODFD RjExRUVCQzE1MkY2MEM0RjlBRTAyL2xNUHVqTUJ5VHJvOHNRTWstZTI0RzZ5RkF5 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbE1QdWpNQnlUcm84c1FNay1lMjRHNnlGQXlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3 REQ1LzE2RDRCMERDODFDRjExRUVCQzE1MkY2MEM0RjlBRTAyL2xNUHVqTUJ5VHJv OHNRTWstZTI0RzZ5RkF5QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFYAXGrA70cQlFPoWHp30NOgAsy5yVOmmL8P4kZm4+Gt5mz6SZRgfpPF G2hpA+f4bIzoeq8zgQX3IUOZ97uQLHN8jHPLky6juTE4tXYmoM29zTRz7oMlgpwf 4fbwA+oEIA+GIGGImyEZeavOqcH8LdtcPyPQ5o1idpbxSTxN5beX6wnOMGqEQe6p 0fcm8sUNM6abe1NAjUopqvOB9SALLuBWKrEZSbNNbZPatv+mICTvhKsD6PMnjk94 /qcIM6NOqKEeyWe0JrGcUDgwRGUvOEVw1si1F7B32ZSZs6DZyqOvJzDF1NaC6zbF pxPBb1ZXAyhA8QC+qjeViHY1ACJDW/g= -----END CERTIFICATE-----Generated at Sun May 19 08:26:44 2024 by rpki-client on console-fra.rpki-client.org