$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7E7/6B923544E6EA11EC99942667C4F9AE02/5luo-mVwW4879u3NnQ2xD9rcuRY.mft File: 5luo-mVwW4879u3NnQ2xD9rcuRY.mft (raw, json) Hash identifier: /nYtt3a8yxdThIlG2fIEmKpbkC/ZjRBY49W3CitoX+s= Subject key identifier: F6:F3:71:18:3C:C4:54:A7:57:20:12:2B:7A:DC:A3:1D:A6:3D:73:A3 Authority key identifier: E6:5B:A8:FA:65:70:5B:8F:3B:F6:ED:CD:9D:0D:B1:0F:DA:DC:B9:16 Certificate issuer: /CN=A913A7E7/serialNumber=E65BA8FA65705B8F3BF6EDCD9D0DB10FDADCB916 Certificate serial: 0218 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5luo-mVwW4879u3NnQ2xD9rcuRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A7E7/6B923544E6EA11EC99942667C4F9AE02/5luo-mVwW4879u3NnQ2xD9rcuRY.mft Manifest number: 0214 Signing time: Wed 01 May 2024 04:25:49 +0000 Manifest this update: Wed 01 May 2024 04:25:48 +0000 Manifest next update: Wed 08 May 2024 04:25:48 +0000 Files and hashes: 1: 5luo-mVwW4879u3NnQ2xD9rcuRY.crl (hash: iuWTjllu1G3yWfk77ArDfyP65uHvr3k50KzCS3O+wzE=) 2: 35C2303AE6FA11EC87D3034DC4F9AE02.roa (hash: vuVl4x8ODxXITMH7KKkyYBqXNY43fEyh4lQvP95MTPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A7E7/6B923544E6EA11EC99942667C4F9AE02/5luo-mVwW4879u3NnQ2xD9rcuRY.crl rsync://rpki.apnic.net/member_repository/A913A7E7/6B923544E6EA11EC99942667C4F9AE02/5luo-mVwW4879u3NnQ2xD9rcuRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5luo-mVwW4879u3NnQ2xD9rcuRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 536 (0x218) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A7E7/serialNumber=E65BA8FA65705B8F3BF6EDCD9D0DB10FDADCB916 Validity Not Before: May 1 04:25:48 2024 GMT Not After : May 8 04:25:48 2024 GMT Subject: CN=6631c44d-e7b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:43:6d:61:f5:ef:90:16:bd:47:c3:4d:42:34: f5:d7:d7:97:81:a6:33:6d:8e:15:89:87:3a:b3:8c: 63:6a:f5:97:fb:e4:87:02:3e:f8:bd:d0:17:fd:62: cd:fa:95:60:15:6f:fe:c8:f8:23:db:5c:db:c7:43: d9:d5:d2:d3:d9:08:f3:8b:27:b6:56:e7:6f:3d:30: 3b:c8:67:a3:c0:3e:02:40:10:10:e1:75:b5:fe:05: c9:66:7a:dc:e9:a0:8e:89:7d:05:ab:71:20:9a:44: f5:40:46:9c:0b:d4:0b:19:d4:3e:b0:27:53:44:a2: 01:80:e0:ad:01:b5:6f:c9:c9:34:37:49:6f:1f:27: 31:88:3e:57:bc:1c:16:40:e4:0d:94:33:be:19:f9: c2:48:e3:ba:e5:04:31:dc:47:4e:6d:f6:11:ad:e3: 1c:6d:a4:90:ce:f6:68:44:97:91:df:f3:a2:38:4b: 6b:97:ad:70:34:8f:88:d2:74:1d:4e:46:5c:c6:c7: 0d:ef:03:66:00:cf:c7:c8:13:54:d6:56:e6:d6:d8: 7c:c6:ba:d2:30:1a:c9:6a:80:6f:1a:10:1a:f5:8b: aa:75:df:15:c0:5b:17:85:85:78:35:dd:7e:64:5b: 2a:d9:50:18:f1:34:36:81:61:71:0a:99:26:f0:fa: 36:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F3:71:18:3C:C4:54:A7:57:20:12:2B:7A:DC:A3:1D:A6:3D:73:A3 X509v3 Authority Key Identifier: keyid:E6:5B:A8:FA:65:70:5B:8F:3B:F6:ED:CD:9D:0D:B1:0F:DA:DC:B9:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A7E7/6B923544E6EA11EC99942667C4F9AE02/5luo-mVwW4879u3NnQ2xD9rcuRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5luo-mVwW4879u3NnQ2xD9rcuRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7E7/6B923544E6EA11EC99942667C4F9AE02/5luo-mVwW4879u3NnQ2xD9rcuRY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:0b:73:e8:9e:a4:13:55:54:a3:24:f0:e1:35:aa:c2:a7:3a: 11:d6:4c:89:b6:c1:e2:c5:1b:95:dc:90:07:62:3d:fe:53:98: ea:c7:e6:7d:86:cd:9e:78:00:9c:03:a6:fc:ce:61:32:72:1f: 10:d8:5a:0b:08:f8:60:ae:c8:d1:9b:f5:16:b3:88:38:7e:d1: a3:10:4b:1d:a4:41:c0:bc:b8:48:ab:5f:5a:d2:f0:98:68:d2: 5c:54:1f:3e:b6:0b:63:e8:f0:6a:81:ab:9f:fd:e8:38:92:fe: d1:af:a3:03:86:13:05:8d:51:bd:5d:08:83:d2:16:64:62:cb: de:00:d1:1a:7b:1d:c7:88:c7:31:ba:57:17:e7:74:53:ae:13: 6a:03:5f:2c:25:eb:0c:9d:e6:f2:97:03:31:9e:1d:61:ec:40: f1:ef:89:a3:f3:c0:56:41:19:0c:2a:cc:41:2c:22:27:eb:a1: 16:98:76:b9:49:c9:ce:0d:01:80:1b:82:13:87:61:51:45:59: 62:59:d2:18:47:1f:55:50:c2:2d:9d:21:a8:a3:69:22:31:d5: bb:39:ad:51:1c:bc:9c:03:ac:7b:90:fc:61:8e:a8:34:d5:7f: 96:bd:ea:5e:d6:5b:9c:8f:48:f6:93:3a:66:d1:23:cd:65:7b: b7:18:4a:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E3RTcxMTAvBgNVBAUTKEU2NUJBOEZBNjU3MDVCOEYzQkY2RURDRDlEMERCMTBG REFEQ0I5MTYwHhcNMjQwNTAxMDQyNTQ4WhcNMjQwNTA4MDQyNTQ4WjAYMRYwFAYD VQQDEw02NjMxYzQ0ZC1lN2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0NtYfXvkBa9R8NNQjT119eXgaYzbY4ViYc6s4xjavWX++SHAj74vdAX/WLN +pVgFW/+yPgj21zbx0PZ1dLT2Qjziye2VudvPTA7yGejwD4CQBAQ4XW1/gXJZnrc 6aCOiX0Fq3EgmkT1QEacC9QLGdQ+sCdTRKIBgOCtAbVvyck0N0lvHycxiD5XvBwW QOQNlDO+GfnCSOO65QQx3EdObfYRreMcbaSQzvZoRJeR3/OiOEtrl61wNI+I0nQd TkZcxscN7wNmAM/HyBNU1lbm1th8xrrSMBrJaoBvGhAa9Yuqdd8VwFsXhYV4Nd1+ ZFsq2VAY8TQ2gWFxCpkm8Po2ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbzcRg8 xFSnVyASK3rcox2mPXOjMB8GA1UdIwQYMBaAFOZbqPplcFuPO/btzZ0NsQ/a3LkW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTdFNy82QjkyMzU0NEU2 RUExMUVDOTk5NDI2NjdDNEY5QUUwMi81bHVvLW1Wd1c0ODc5dTNOblEyeEQ5cmN1 UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVsdW8tbVZ3VzQ4Nzl1M05uUTJ4RDlyY3VSWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTdFNy82QjkyMzU0NEU2RUExMUVDOTk5NDI2NjdDNEY5QUUwMi81bHVvLW1Wd1c0 ODc5dTNOblEyeEQ5cmN1UlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFC3PonqQTVVSjJPDhNarCpzoR1kyJtsHixRuV3JAHYj3+U5jqx+Z9 hs2eeACcA6b8zmEych8Q2FoLCPhgrsjRm/UWs4g4ftGjEEsdpEHAvLhIq19a0vCY aNJcVB8+tgtj6PBqgauf/eg4kv7Rr6MDhhMFjVG9XQiD0hZkYsveANEaex3HiMcx ulcX53RTrhNqA18sJesMnebylwMxnh1h7EDx74mj88BWQRkMKsxBLCIn66EWmHa5 ScnODQGAG4ITh2FRRVliWdIYRx9VUMItnSGoo2kiMdW7Oa1RHLycA6x7kPxhjqg0 1X+Wvepe1lucj0j2kzpm0SPNZXu3GEp9 -----END CERTIFICATE-----Generated at Wed May 1 05:59:00 2024 by rpki-client on console-fra.rpki-client.org