$ rpki-client -vvf rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft File: lTU3mXduubP_WHJemdAqplT7GgQ.mft (raw, json) Hash identifier: 9yPLgaB2eOBub1bqUNxi5UHEAJ1YMEpBsp2I1HHiixM= Subject key identifier: 61:E4:FD:54:C2:85:F9:10:9A:17:31:A6:E5:C4:61:2E:3B:5E:C0:05 Authority key identifier: 95:35:37:99:77:6E:B9:B3:FF:58:72:5E:99:D0:2A:A6:54:FB:1A:04 Certificate issuer: /CN=A9113E15/serialNumber=95353799776EB9B3FF58725E99D02AA654FB1A04 Certificate serial: 04E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft Manifest number: 04E2 Signing time: Sat 27 Apr 2024 01:16:12 +0000 Manifest this update: Sat 27 Apr 2024 01:16:11 +0000 Manifest next update: Sat 04 May 2024 01:16:11 +0000 Files and hashes: 1: lTU3mXduubP_WHJemdAqplT7GgQ.crl (hash: VUZksX9/QDo87FB+ZPPSVcuH318MyP2wgM+zlc7lUdU=) 2: F9869896C8F411EBB460DB52C4F9AE02.roa (hash: UcP56G8V+DAbBbJhLRgKDsB/MFZbzo2VC4cqKlb9ybk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.crl rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 01:16:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1253 (0x4e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113E15/serialNumber=95353799776EB9B3FF58725E99D02AA654FB1A04 Validity Not Before: Apr 27 01:16:11 2024 GMT Not After : May 4 01:16:11 2024 GMT Subject: CN=662c51dc-b564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c1:2b:8d:3b:12:cc:ac:ac:f6:41:6b:9c:68: 53:eb:16:51:5f:21:b3:02:64:95:d5:10:c1:7d:1f: af:4e:02:11:33:b8:0a:94:40:ec:34:16:cb:c0:36: 95:1b:ac:65:66:65:69:8d:32:46:36:ed:7d:b5:97: 9c:fd:2c:2d:8f:b2:de:2a:25:70:3e:f7:56:ed:46: 20:d6:fe:e5:f2:41:65:0f:0d:5e:35:59:b3:45:53: f8:4f:33:8e:00:de:8d:89:01:1e:fb:d5:26:ef:e7: cd:98:81:b6:cf:be:a0:96:c8:cb:46:7e:3e:16:bd: 7d:65:07:7e:0d:58:12:ef:d2:3d:de:8b:a8:35:39: c2:12:1f:5c:e1:af:9f:26:03:0e:16:3b:1b:7f:10: 83:58:2a:a4:22:af:9d:c2:6e:32:bf:52:56:b0:3b: ed:95:2b:98:e1:e9:48:22:b8:a4:e2:5a:0b:31:01: 18:70:c5:f9:ed:2c:67:70:8c:6a:0d:0b:cd:f0:20: 64:ed:1a:a4:59:1a:10:19:43:12:8d:2b:92:4c:ad: e9:90:ef:69:4a:ca:7e:e3:bb:b0:ce:c4:b8:f9:8c: 16:24:16:62:82:b8:2c:7e:de:09:77:12:04:97:b3: 14:c6:08:bf:06:aa:21:bb:63:23:ff:15:ae:36:4e: 04:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:E4:FD:54:C2:85:F9:10:9A:17:31:A6:E5:C4:61:2E:3B:5E:C0:05 X509v3 Authority Key Identifier: keyid:95:35:37:99:77:6E:B9:B3:FF:58:72:5E:99:D0:2A:A6:54:FB:1A:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:c4:67:50:5e:cb:73:5e:9a:57:2d:b3:5e:04:7f:f2:a8:d5: 1c:c7:49:c1:3d:3d:41:43:c8:97:59:21:00:be:87:2c:26:46: 9d:18:83:81:8a:2d:78:53:f5:54:c6:41:45:4e:db:d9:72:cc: b3:87:24:01:f9:b8:9c:cd:e8:1c:b8:9e:2f:9a:8d:b0:32:4b: 5b:52:73:2d:db:3b:fb:84:17:ba:54:0d:2f:de:6c:53:44:84: a4:3b:a5:81:26:dd:ba:f7:c3:09:0e:d8:97:1f:64:42:fb:a0: c3:78:82:18:6b:0e:86:e1:58:c1:b8:8f:0a:31:46:f9:4a:cf: 3c:04:dc:cf:91:2f:19:cc:75:28:4a:8f:42:b9:e9:e7:7f:f1: 42:41:4b:2d:c8:aa:5d:8c:d0:31:4c:f8:ad:94:d4:49:23:2f: 5f:51:f1:7d:6b:48:d5:d0:f4:0c:26:99:9c:5b:74:f5:5c:d1: 22:8e:3b:ee:27:8b:da:b5:b7:5c:51:8f:d0:71:13:96:b1:cd: 7d:3f:20:12:a0:55:72:12:6d:4c:63:86:54:7c:41:b0:0c:14: 32:97:b8:a1:85:5b:0b:46:4c:97:39:79:6c:24:9f:b3:f8:68: a7:b6:67:ec:17:1c:9b:46:bf:bb:da:06:a3:61:3b:d0:00:ed: 78:1a:62:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNFMTUxMTAvBgNVBAUTKDk1MzUzNzk5Nzc2RUI5QjNGRjU4NzI1RTk5RDAyQUE2 NTRGQjFBMDQwHhcNMjQwNDI3MDExNjExWhcNMjQwNTA0MDExNjExWjAYMRYwFAYD VQQDEw02NjJjNTFkYy1iNTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8ErjTsSzKys9kFrnGhT6xZRXyGzAmSV1RDBfR+vTgIRM7gKlEDsNBbLwDaV G6xlZmVpjTJGNu19tZec/Swtj7LeKiVwPvdW7UYg1v7l8kFlDw1eNVmzRVP4TzOO AN6NiQEe+9Um7+fNmIG2z76glsjLRn4+Fr19ZQd+DVgS79I93ouoNTnCEh9c4a+f JgMOFjsbfxCDWCqkIq+dwm4yv1JWsDvtlSuY4elIIrik4loLMQEYcMX57SxncIxq DQvN8CBk7RqkWRoQGUMSjSuSTK3pkO9pSsp+47uwzsS4+YwWJBZigrgsft4JdxIE l7MUxgi/Bqohu2Mj/xWuNk4EyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHk/VTC hfkQmhcxpuXEYS47XsAFMB8GA1UdIwQYMBaAFJU1N5l3brmz/1hyXpnQKqZU+xoE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0UxNS82NzBDMDk4MEM4 RjIxMUVCOEUzRkFENTBDNEY5QUUwMi9sVFUzbVhkdXViUF9XSEplbWRBcXBsVDdH Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUVTNtWGR1dWJQX1dISmVtZEFxcGxUN0dnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0UxNS82NzBDMDk4MEM4RjIxMUVCOEUzRkFENTBDNEY5QUUwMi9sVFUzbVhkdXVi UF9XSEplbWRBcXBsVDdHZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaxGdQXstzXppXLbNeBH/yqNUcx0nBPT1BQ8iXWSEAvocsJkadGIOB ii14U/VUxkFFTtvZcsyzhyQB+biczegcuJ4vmo2wMktbUnMt2zv7hBe6VA0v3mxT RISkO6WBJt2698MJDtiXH2RC+6DDeIIYaw6G4VjBuI8KMUb5Ss88BNzPkS8ZzHUo So9Cuennf/FCQUstyKpdjNAxTPitlNRJIy9fUfF9a0jV0PQMJpmcW3T1XNEijjvu J4vatbdcUY/QcROWsc19PyASoFVyEm1MY4ZUfEGwDBQyl7ihhVsLRkyXOXlsJJ+z +GintmfsFxybRr+72gajYTvQAO14GmKF -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:23 2024 by rpki-client on console-ams.rpki-client.org