$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft File: L0SuugpVRAZYiXBbwu8c2uEVgyU.mft (raw, json) Hash identifier: 88D/jFOdWBF9WuFHssfQBlCelj0H1Vao1fMRoXHwq0o= Subject key identifier: B3:F0:64:2B:74:0C:4F:4C:44:EF:26:6F:AB:DD:EB:89:82:4F:D3:74 Authority key identifier: 2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25 Certificate issuer: /CN=A912B600/serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325 Certificate serial: 33E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft Manifest number: 33D7 Signing time: Mon 06 May 2024 14:53:47 +0000 Manifest this update: Mon 06 May 2024 14:53:46 +0000 Manifest next update: Mon 13 May 2024 14:53:46 +0000 Files and hashes: 1: L0SuugpVRAZYiXBbwu8c2uEVgyU.crl (hash: BoayO2A/QGdmXTIikornlK6xBAL6t6K9OEmR0/BranI=) 2: 7D5F356C26FF11EBAC6E5B50C4F9AE02.roa (hash: rVr8fDzl2KEX5tDVrlnoCpdUHd/RFaYWSSzANu5f/8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.crl rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 14:53:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13288 (0x33e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B600/serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325 Validity Not Before: May 6 14:53:46 2024 GMT Not After : May 13 14:53:46 2024 GMT Subject: CN=6638eefa-e1d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:11:a1:7b:34:72:56:84:e5:6c:54:d2:12:8c: 37:b6:6c:5d:fa:5d:ac:63:a0:e8:14:f7:a9:6b:08: 16:f1:56:69:d5:f1:bd:10:82:c1:3e:f9:65:0d:6b: ae:2f:c1:e7:1e:3d:92:7c:ef:ed:b2:a7:b4:71:41: 66:d4:8c:56:76:a5:79:3b:96:e4:c5:70:bd:9d:c0: 7a:52:f8:b3:b0:34:49:ab:51:e6:9a:22:ae:2d:a0: 06:c2:f6:48:43:9f:3a:35:48:b6:5d:2b:1a:d4:e5: aa:35:0c:b3:73:fb:f4:34:19:5f:3d:04:e9:15:0c: 8a:79:3b:a2:4d:a1:9b:9a:e6:5a:fc:c1:f3:1b:ba: 2f:dd:45:9c:ec:8f:17:be:89:7d:11:08:a1:9b:b7: ea:6d:00:d3:53:af:9d:82:aa:12:7c:be:72:f0:18: 33:06:dc:9f:d8:47:ec:e5:f9:64:89:26:73:0b:26: d3:fa:2f:49:4a:14:75:dd:a6:7f:c6:7c:c4:27:bd: 77:11:4c:17:02:44:c4:87:f4:6c:70:44:a0:f7:0f: 0d:b3:1a:75:ff:1b:4c:0c:80:14:6e:e6:49:88:05: a5:de:53:b8:0c:56:cb:c6:1c:61:88:24:4b:37:e3: 1c:ce:9b:99:e6:a9:8f:77:7f:24:89:be:8d:d9:d0: 81:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F0:64:2B:74:0C:4F:4C:44:EF:26:6F:AB:DD:EB:89:82:4F:D3:74 X509v3 Authority Key Identifier: keyid:2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:46:1e:6a:54:20:a5:cc:49:9f:c9:38:23:85:17:0d:08:dc: 8a:71:98:7e:a1:02:26:ee:c9:aa:0a:46:a1:f6:bc:b8:17:16: 37:ab:c1:9d:c4:69:20:a6:0b:b8:64:9b:a2:35:38:e9:71:49: 8b:81:c4:8f:52:90:63:1a:6b:69:76:44:4a:e3:34:68:19:b3: 09:d7:f7:ec:16:89:70:4e:f7:26:81:f9:4c:f9:c1:b8:12:f4: c4:97:17:bc:36:8a:be:49:1b:37:e9:c3:4c:5c:a8:db:68:b0: 65:82:c1:3f:ce:74:18:d5:3c:70:c3:82:8e:25:35:6a:d1:8a: aa:fc:72:ef:08:ba:09:c3:8e:f2:a8:46:ad:bd:cd:0a:3a:dc: 91:33:32:33:89:34:c3:c4:c9:87:b1:a4:0e:25:62:64:8a:d5: 6c:0b:56:f1:81:29:e3:1b:19:85:68:04:ad:28:06:f5:6f:65: 50:20:3a:46:fb:45:de:9f:02:13:88:d1:fc:24:79:c2:15:9b: 94:1a:be:00:b4:00:a7:ce:6f:41:13:55:88:50:e9:45:2d:65: d6:24:7d:e9:32:12:7a:1c:8e:fb:77:f3:84:0c:60:c6:47:d1: 33:c4:59:e8:ce:c5:26:48:05:9d:7f:c2:38:18:4c:48:89:f5: 8e:53:8a:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2MDAxMTAvBgNVBAUTKDJGNDRBRUJBMEE1NTQ0MDY1ODg5NzA1QkMyRUYxQ0RB RTExNTgzMjUwHhcNMjQwNTA2MTQ1MzQ2WhcNMjQwNTEzMTQ1MzQ2WjAYMRYwFAYD VQQDEw02NjM4ZWVmYS1lMWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthGhezRyVoTlbFTSEow3tmxd+l2sY6DoFPepawgW8VZp1fG9EILBPvllDWuu L8HnHj2SfO/tsqe0cUFm1IxWdqV5O5bkxXC9ncB6UvizsDRJq1HmmiKuLaAGwvZI Q586NUi2XSsa1OWqNQyzc/v0NBlfPQTpFQyKeTuiTaGbmuZa/MHzG7ov3UWc7I8X vol9EQihm7fqbQDTU6+dgqoSfL5y8BgzBtyf2Efs5flkiSZzCybT+i9JShR13aZ/ xnzEJ713EUwXAkTEh/RscESg9w8Nsxp1/xtMDIAUbuZJiAWl3lO4DFbLxhxhiCRL N+MczpuZ5qmPd38kib6N2dCBJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPwZCt0 DE9MRO8mb6vd64mCT9N0MB8GA1UdIwQYMBaAFC9ErroKVUQGWIlwW8LvHNrhFYMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYwMC9BMzZBNjI2RTFE OTMxMUUyODYxNzVERjcwOEIwMkNEMi9MMFN1dWdwVlJBWllpWEJid3U4YzJ1RVZn eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wwU3V1Z3BWUkFaWWlYQmJ3dThjMnVFVmd5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjYwMC9BMzZBNjI2RTFEOTMxMUUyODYxNzVERjcwOEIwMkNEMi9MMFN1dWdwVlJB WllpWEJid3U4YzJ1RVZneVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1Rh5qVCClzEmfyTgjhRcNCNyKcZh+oQIm7smqCkah9ry4FxY3q8Gd xGkgpgu4ZJuiNTjpcUmLgcSPUpBjGmtpdkRK4zRoGbMJ1/fsFolwTvcmgflM+cG4 EvTElxe8Noq+SRs36cNMXKjbaLBlgsE/znQY1Txww4KOJTVq0Yqq/HLvCLoJw47y qEatvc0KOtyRMzIziTTDxMmHsaQOJWJkitVsC1bxgSnjGxmFaAStKAb1b2VQIDpG +0XenwITiNH8JHnCFZuUGr4AtACnzm9BE1WIUOlFLWXWJH3pMhJ6HI77d/OEDGDG R9EzxFnozsUmSAWdf8I4GExIifWOU4r1 -----END CERTIFICATE-----Generated at Mon May 6 17:35:35 2024 by rpki-client on console-fra.rpki-client.org