$ rpki-client -vvf rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft File: 5LMs8qYR9wLf0JE-PqULT9YexXU.mft (raw, json) Hash identifier: L5l0Qlh9qQ7x7yxAAwYwhAIlmpefmkj43A9y7AFej4g= Subject key identifier: B7:55:19:9C:BA:4E:43:E3:CE:DD:92:6D:AB:9A:85:E4:58:94:FD:73 Authority key identifier: E4:B3:2C:F2:A6:11:F7:02:DF:D0:91:3E:3E:A5:0B:4F:D6:1E:C5:75 Certificate issuer: /CN=A914450B/serialNumber=E4B32CF2A611F702DFD0913E3EA50B4FD61EC575 Certificate serial: 06B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft Manifest number: 06B2 Signing time: Thu 02 May 2024 23:17:16 +0000 Manifest this update: Thu 02 May 2024 23:17:15 +0000 Manifest next update: Thu 09 May 2024 23:17:15 +0000 Files and hashes: 1: 5LMs8qYR9wLf0JE-PqULT9YexXU.crl (hash: wwezig5FBOz+FNRLyBpGTMRKKVAnCxMqEFzHLHY1BTA=) 2: 5B9B8A1213F311EBA7343351C4F9AE02.roa (hash: iS95q1vYvQ9GK5PWTHTUyaiVNGKgbYepd5g+adxRhJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.crl rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1719 (0x6b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914450B/serialNumber=E4B32CF2A611F702DFD0913E3EA50B4FD61EC575 Validity Not Before: May 2 23:17:15 2024 GMT Not After : May 9 23:17:15 2024 GMT Subject: CN=66341efc-584c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d1:fd:91:2f:20:75:5d:d5:4f:2d:b7:21:ee: 00:64:6d:09:40:4b:b0:bb:05:61:72:3c:4b:67:60: 47:14:b6:8a:c6:9f:7d:75:e1:1f:21:80:05:6c:bb: 75:21:96:22:b5:30:3a:b2:32:a8:70:50:f6:85:a2: f5:01:ff:1a:07:f2:f8:09:3e:df:b2:4f:31:ea:4e: 5e:0b:9e:28:9b:c0:5f:42:f9:87:6a:f6:f8:f7:93: 44:c3:cb:32:8f:3e:7f:a7:79:0d:74:c1:29:e2:9e: c8:1c:81:41:cb:7d:7e:d2:c7:ce:63:78:29:81:b4: 14:20:ae:e9:10:1e:cd:c1:b3:24:31:79:51:8f:00: 05:ce:48:55:4c:56:7b:de:26:91:97:d8:5b:f1:15: 12:b3:c0:3e:47:38:07:46:48:12:8f:2a:a6:24:c8: e7:e1:23:89:61:35:83:91:1c:8f:10:2b:c1:61:1b: 65:22:0f:3b:8e:2f:ac:d2:fb:e3:2f:09:ac:42:5b: 7d:34:dd:de:3b:73:b3:35:22:7c:b2:95:20:d3:c7: e4:3c:1f:4f:5f:76:87:35:34:55:d3:bb:4c:03:19: c9:a4:81:6f:d5:ea:8e:31:c7:87:ae:74:3a:9c:ec: a7:47:a2:6b:b3:0b:ce:eb:56:58:ff:3d:b3:4e:ff: 71:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:55:19:9C:BA:4E:43:E3:CE:DD:92:6D:AB:9A:85:E4:58:94:FD:73 X509v3 Authority Key Identifier: keyid:E4:B3:2C:F2:A6:11:F7:02:DF:D0:91:3E:3E:A5:0B:4F:D6:1E:C5:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:9d:71:1a:6d:9b:89:7e:92:6d:6e:d5:08:a1:51:4d:79:5e: d8:71:e2:4c:7c:49:93:bc:0c:4b:df:9e:a8:10:d3:32:ce:45: 93:97:2b:c7:22:f3:3f:f9:66:34:47:ef:75:ea:d4:ce:f2:86: f4:d8:28:2a:a8:99:55:b2:9e:27:d5:90:b7:10:bc:07:19:9f: c0:cc:73:8a:91:50:7a:c3:f1:38:b1:7a:b6:63:e9:13:aa:d6: 6c:22:97:b7:88:44:91:63:56:4f:81:9d:c2:8f:62:c0:2b:04: e0:2c:46:81:aa:eb:a9:09:2d:88:5f:3c:e1:6e:9d:b6:73:23: 98:d8:a2:9f:26:9d:f3:b4:ff:83:c1:1d:f2:1f:97:fb:20:30: 6c:5b:57:3f:b6:0f:0a:14:c1:a8:86:f6:3e:47:f7:f5:55:ad: 96:ff:77:89:95:f5:5f:e8:8b:bc:59:b0:93:9f:b3:77:a2:c5: f0:02:e5:d2:70:71:2f:46:f1:d0:78:39:a2:98:2f:12:33:8a: 75:87:b9:5d:9e:8b:d0:0d:87:0a:8a:7c:30:55:b7:32:aa:91: 4c:73:3b:a5:e9:7d:41:3d:2d:bf:03:1d:a7:f5:df:1c:d9:cc: da:28:b7:94:eb:17:13:e4:c8:56:a0:9e:e3:a4:53:a9:67:89: 88:1f:1b:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ1MEIxMTAvBgNVBAUTKEU0QjMyQ0YyQTYxMUY3MDJERkQwOTEzRTNFQTUwQjRG RDYxRUM1NzUwHhcNMjQwNTAyMjMxNzE1WhcNMjQwNTA5MjMxNzE1WjAYMRYwFAYD VQQDEw02NjM0MWVmYy01ODRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtH9kS8gdV3VTy23Ie4AZG0JQEuwuwVhcjxLZ2BHFLaKxp99deEfIYAFbLt1 IZYitTA6sjKocFD2haL1Af8aB/L4CT7fsk8x6k5eC54om8BfQvmHavb495NEw8sy jz5/p3kNdMEp4p7IHIFBy31+0sfOY3gpgbQUIK7pEB7NwbMkMXlRjwAFzkhVTFZ7 3iaRl9hb8RUSs8A+RzgHRkgSjyqmJMjn4SOJYTWDkRyPECvBYRtlIg87ji+s0vvj LwmsQlt9NN3eO3OzNSJ8spUg08fkPB9PX3aHNTRV07tMAxnJpIFv1eqOMceHrnQ6 nOynR6JrswvO61ZY/z2zTv9xpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdVGZy6 TkPjzt2SbauaheRYlP1zMB8GA1UdIwQYMBaAFOSzLPKmEfcC39CRPj6lC0/WHsV1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDUwQi9GN0I5RTMwQTEz RjExMUVCQjgxMjM5NTBDNEY5QUUwMi81TE1zOHFZUjl3TGYwSkUtUHFVTFQ5WWV4 WFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVMTXM4cVlSOXdMZjBKRS1QcVVMVDlZZXhYVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDUwQi9GN0I5RTMwQTEzRjExMUVCQjgxMjM5NTBDNEY5QUUwMi81TE1zOHFZUjl3 TGYwSkUtUHFVTFQ5WWV4WFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMnXEabZuJfpJtbtUIoVFNeV7YceJMfEmTvAxL356oENMyzkWTlyvH IvM/+WY0R+916tTO8ob02CgqqJlVsp4n1ZC3ELwHGZ/AzHOKkVB6w/E4sXq2Y+kT qtZsIpe3iESRY1ZPgZ3Cj2LAKwTgLEaBquupCS2IXzzhbp22cyOY2KKfJp3ztP+D wR3yH5f7IDBsW1c/tg8KFMGohvY+R/f1Va2W/3eJlfVf6Iu8WbCTn7N3osXwAuXS cHEvRvHQeDmimC8SM4p1h7ldnovQDYcKinwwVbcyqpFMczul6X1BPS2/Ax2n9d8c 2czaKLeU6xcT5MhWoJ7jpFOpZ4mIHxsx -----END CERTIFICATE-----Generated at Thu May 2 23:48:42 2024 by rpki-client on console-fra.rpki-client.org