$ rpki-client -vvf rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft File: LS4sVp1LY5ln5litXEl8MxqriF8.mft (raw, json) Hash identifier: vovttAnbossW7jNz1qGQZeuEXsH3G8NMOdqU5rd0hHk= Subject key identifier: 3F:2D:A8:DC:48:99:83:B8:A3:A7:7D:E4:C3:D1:58:26:B4:60:2B:4F Authority key identifier: 2D:2E:2C:56:9D:4B:63:99:67:E6:58:AD:5C:49:7C:33:1A:AB:88:5F Certificate issuer: /CN=A9123431/serialNumber=2D2E2C569D4B639967E658AD5C497C331AAB885F Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LS4sVp1LY5ln5litXEl8MxqriF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft Manifest number: E4 Signing time: Wed 01 May 2024 06:10:19 +0000 Manifest this update: Wed 01 May 2024 06:10:19 +0000 Manifest next update: Wed 08 May 2024 06:10:19 +0000 Files and hashes: 1: LS4sVp1LY5ln5litXEl8MxqriF8.crl (hash: ERUJIU3lDpEKmflrZGISMm9HNKsWFC4SNq9M7jA866w=) 2: A7B59636ACCB11EDA8DAFF4AC4F9AE02.roa (hash: j0ChLZQYnt+8lZ/OeZVExebmUV2rXob/vuBqFbvGr0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.crl rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LS4sVp1LY5ln5litXEl8MxqriF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 06:10:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123431/serialNumber=2D2E2C569D4B639967E658AD5C497C331AAB885F Validity Not Before: May 1 06:10:19 2024 GMT Not After : May 8 06:10:19 2024 GMT Subject: CN=6631dccb-92d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c7:cb:70:bf:e1:39:21:79:82:0c:27:7d:d4: a4:ed:a3:d9:83:55:16:83:7c:e6:c9:bc:80:c4:8a: e5:d9:43:6e:e9:e6:00:7c:46:39:9f:11:36:0a:be: dc:5c:ac:55:08:55:60:bf:49:d4:77:78:fc:d4:ce: 45:6a:ce:ed:5b:89:b2:d0:c9:62:83:f7:82:ce:f6: ba:5a:1c:09:c0:d5:14:ba:dd:08:46:a4:f2:38:4d: 21:1f:e2:a8:22:36:11:34:d1:e9:74:ec:83:24:aa: e0:59:e0:ef:0d:2e:f9:d5:81:09:d6:12:38:79:8f: 78:e1:46:e9:c2:9f:fc:71:a5:9a:6c:e7:68:49:6c: 4c:f4:c3:81:5e:8f:98:1c:ca:96:4b:65:f5:2c:42: 18:44:73:d8:35:03:cf:cb:3a:b9:3d:5a:7c:4d:c4: 77:5c:8c:e6:67:35:01:b3:62:36:d5:e9:4d:62:4b: fb:95:f7:26:74:fb:de:f7:41:5f:21:78:73:68:43: b7:50:39:26:5e:d3:ba:e3:44:5b:23:21:6e:98:85: b2:52:44:e5:ef:6b:13:59:ae:91:f1:50:52:f5:ee: b6:c9:d8:20:6a:c4:4c:3f:04:c5:16:bd:71:17:3d: f5:e3:a6:58:db:0d:53:6d:37:50:67:30:1a:80:66: 2c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:2D:A8:DC:48:99:83:B8:A3:A7:7D:E4:C3:D1:58:26:B4:60:2B:4F X509v3 Authority Key Identifier: keyid:2D:2E:2C:56:9D:4B:63:99:67:E6:58:AD:5C:49:7C:33:1A:AB:88:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LS4sVp1LY5ln5litXEl8MxqriF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123431/C17B7C64ACC311ED8EC42111C4F9AE02/LS4sVp1LY5ln5litXEl8MxqriF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:3f:fc:2a:ec:ee:e0:9f:d9:21:2c:1f:bd:4a:68:12:78:54: 9d:ef:69:b9:3f:ef:2f:3c:10:28:c9:6f:95:0d:3c:4f:91:3e: 86:6d:df:64:85:12:d7:52:5e:47:7d:8a:05:80:18:74:59:9d: 3f:46:0f:eb:38:d3:77:5f:09:09:a8:ea:05:39:c7:b3:84:85: e8:64:b1:9f:80:46:b8:0f:f3:7a:b1:86:a2:18:2a:f7:69:48: 1b:a1:1c:bd:1e:1f:26:a1:f5:05:ba:3e:7a:21:b4:dc:8f:db: 40:f8:8d:45:09:20:4f:97:ae:69:31:2d:21:ed:21:cb:b5:86: cb:5c:a0:1c:79:06:0a:4c:4a:69:73:78:01:95:16:00:1d:9c: bf:ac:87:4e:98:38:7a:90:a4:9a:d7:93:ec:f1:4e:ba:54:b2: b6:ec:3e:6b:6c:9d:8c:5a:2d:5d:18:c0:fb:64:e0:c1:64:a8: a9:8b:53:a9:ff:17:4b:f7:cf:1c:e8:6b:a8:b1:a7:a6:ba:e2: 6b:70:98:70:0d:3e:f8:6b:05:2e:6e:10:4c:56:22:20:21:78: c2:c5:65:e8:54:14:5d:ae:47:5b:07:49:85:26:4e:c8:7c:b5: 97:9e:9d:82:6b:92:98:83:b9:6d:66:d5:96:1c:80:5d:25:ed: 49:ee:66:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM0MzExMTAvBgNVBAUTKDJEMkUyQzU2OUQ0QjYzOTk2N0U2NThBRDVDNDk3QzMz MUFBQjg4NUYwHhcNMjQwNTAxMDYxMDE5WhcNMjQwNTA4MDYxMDE5WjAYMRYwFAYD VQQDEw02NjMxZGNjYi05MmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcfLcL/hOSF5ggwnfdSk7aPZg1UWg3zmybyAxIrl2UNu6eYAfEY5nxE2Cr7c XKxVCFVgv0nUd3j81M5Fas7tW4my0Mlig/eCzva6WhwJwNUUut0IRqTyOE0hH+Ko IjYRNNHpdOyDJKrgWeDvDS751YEJ1hI4eY944Ubpwp/8caWabOdoSWxM9MOBXo+Y HMqWS2X1LEIYRHPYNQPPyzq5PVp8TcR3XIzmZzUBs2I21elNYkv7lfcmdPve90Ff IXhzaEO3UDkmXtO640RbIyFumIWyUkTl72sTWa6R8VBS9e62ydggasRMPwTFFr1x Fz3146ZY2w1TbTdQZzAagGYsAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD8tqNxI mYO4o6d95MPRWCa0YCtPMB8GA1UdIwQYMBaAFC0uLFadS2OZZ+ZYrVxJfDMaq4hf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzQzMS9DMTdCN0M2NEFD QzMxMUVEOEVDNDIxMTFDNEY5QUUwMi9MUzRzVnAxTFk1bG41bGl0WEVsOE14cXJp RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xTNHNWcDFMWTVsbjVsaXRYRWw4TXhxcmlGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzQzMS9DMTdCN0M2NEFDQzMxMUVEOEVDNDIxMTFDNEY5QUUwMi9MUzRzVnAxTFk1 bG41bGl0WEVsOE14cXJpRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACP/wq7O7gn9khLB+9SmgSeFSd72m5P+8vPBAoyW+VDTxPkT6Gbd9k hRLXUl5HfYoFgBh0WZ0/Rg/rONN3XwkJqOoFOcezhIXoZLGfgEa4D/N6sYaiGCr3 aUgboRy9Hh8mofUFuj56IbTcj9tA+I1FCSBPl65pMS0h7SHLtYbLXKAceQYKTEpp c3gBlRYAHZy/rIdOmDh6kKSa15Ps8U66VLK27D5rbJ2MWi1dGMD7ZODBZKipi1Op /xdL988c6GuosaemuuJrcJhwDT74awUubhBMViIgIXjCxWXoVBRdrkdbB0mFJk7I fLWXnp2Ca5KYg7ltZtWWHIBdJe1J7mZ7 -----END CERTIFICATE-----Generated at Wed May 1 07:06:27 2024 by rpki-client on console-fra.rpki-client.org