$ rpki-client -vvf rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft File: l5f3hScG7hxCxopeRQtXL47lCBg.mft (raw, json) Hash identifier: 5XeZrw2+gpcDDc8HJPOLPgyfj9A6ZhPAH7TH37LSks8= Subject key identifier: E0:65:62:09:C6:25:59:E2:56:55:BD:A6:CF:8B:00:49:51:52:EF:F2 Authority key identifier: 97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18 Certificate issuer: /CN=A9149063/serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818 Certificate serial: 0945 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft Manifest number: 093F Signing time: Thu 02 May 2024 21:39:52 +0000 Manifest this update: Thu 02 May 2024 21:39:51 +0000 Manifest next update: Thu 09 May 2024 21:39:51 +0000 Files and hashes: 1: l5f3hScG7hxCxopeRQtXL47lCBg.crl (hash: gQPPlvV1b1w7XyAj+cWiApdJBgOYaX3yM2fTaEostzQ=) 2: 1EDD32B274BE11EA97202132C4F9AE02.roa (hash: JqF51wPgFYJ7/1JQa4bjka146YP84yRB+gx/lfzcoqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2373 (0x945) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149063/serialNumber=9797F7852706EE1C42C68A5E450B572F8EE50818 Validity Not Before: May 2 21:39:51 2024 GMT Not After : May 9 21:39:51 2024 GMT Subject: CN=66340828-9339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a9:40:64:46:58:66:f8:63:c3:e7:0a:1a:00: ec:12:3b:4b:ae:cf:b8:44:ea:47:18:ee:7c:fd:01: 88:d1:6b:90:9f:b7:7a:a8:1b:37:93:23:76:f6:40: 57:38:c6:aa:34:72:f4:29:89:9a:3d:e0:a5:47:66: 1d:54:59:9b:b1:34:2f:5d:3d:fa:a0:ff:36:ce:53: 19:9f:b6:c1:8a:d5:eb:d0:8b:02:b6:01:23:e4:ca: 42:50:e8:26:a9:88:ba:9e:59:f3:31:55:e1:56:1f: 64:1e:17:ee:e6:da:25:b3:d7:6b:01:c6:16:ec:4c: f3:d9:4b:d8:7c:3f:de:00:49:e4:0b:02:8f:b0:88: ab:a0:4c:36:05:86:be:03:1e:57:c7:f7:da:63:46: 38:3a:9c:79:16:a9:9a:74:b6:e0:13:f6:99:b9:e6: bb:60:8c:87:92:62:90:08:88:08:71:ad:a5:31:32: 59:99:bf:f6:35:55:dc:4f:c1:ba:2c:26:ce:8c:16: 72:3d:18:8d:ec:8c:6c:7a:06:79:26:a8:b4:4c:85: 80:d3:1b:fa:69:7a:e1:72:7e:43:70:23:9a:a5:95: f8:d2:98:c0:33:cf:84:cf:96:fd:64:a4:0f:b4:58: a1:0a:d6:cf:14:1a:c9:f4:c4:57:44:30:8e:bb:88: 2c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:65:62:09:C6:25:59:E2:56:55:BD:A6:CF:8B:00:49:51:52:EF:F2 X509v3 Authority Key Identifier: keyid:97:97:F7:85:27:06:EE:1C:42:C6:8A:5E:45:0B:57:2F:8E:E5:08:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5f3hScG7hxCxopeRQtXL47lCBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149063/6889ADF274BC11EA95099D2BC4F9AE02/l5f3hScG7hxCxopeRQtXL47lCBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:09:a5:79:bb:b9:bf:8c:b4:72:66:bb:2f:9d:e3:de:41:bf: 3a:20:33:a7:61:4c:72:2b:c7:dd:f5:d0:e2:b2:f5:22:1e:e1: 7a:e4:7c:02:ad:60:ed:46:f0:80:35:99:74:53:19:fd:cc:d8: 21:65:52:64:ce:dc:d3:05:b2:4e:5f:0e:ae:9b:2a:a1:bc:c5: 47:4e:d4:2d:96:c6:37:27:a6:39:7d:c1:06:52:ca:c5:89:1b: e3:aa:2b:3f:31:cd:a5:8a:31:12:31:4f:81:23:42:66:ef:a8: d8:20:90:a3:de:4c:e2:41:85:05:05:83:7a:a7:cb:a3:b4:62: 44:4a:4f:fd:f0:90:0e:ab:b7:c5:d4:99:a7:16:72:8a:76:99: 0b:56:39:32:4b:14:3d:90:54:cc:2f:89:a6:21:78:56:f5:4b: 9f:26:d3:6f:ea:e3:f6:55:0e:29:3a:f2:4c:79:b6:2e:04:46: 2b:16:44:57:1a:44:3c:0f:67:f3:16:bb:e9:42:94:d0:35:92: fd:2c:f2:00:c4:cc:1d:2d:09:55:bc:1d:44:31:34:2c:99:91: 9f:85:f2:d0:ed:8e:28:3b:0f:57:6b:b6:51:ea:04:74:54:2b: 40:37:e2:4f:06:8a:b2:b0:e0:84:bf:ae:44:78:e2:1f:b1:ab: d5:ff:af:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkwNjMxMTAvBgNVBAUTKDk3OTdGNzg1MjcwNkVFMUM0MkM2OEE1RTQ1MEI1NzJG OEVFNTA4MTgwHhcNMjQwNTAyMjEzOTUxWhcNMjQwNTA5MjEzOTUxWjAYMRYwFAYD VQQDEw02NjM0MDgyOC05MzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqlAZEZYZvhjw+cKGgDsEjtLrs+4ROpHGO58/QGI0WuQn7d6qBs3kyN29kBX OMaqNHL0KYmaPeClR2YdVFmbsTQvXT36oP82zlMZn7bBitXr0IsCtgEj5MpCUOgm qYi6nlnzMVXhVh9kHhfu5tols9drAcYW7Ezz2UvYfD/eAEnkCwKPsIiroEw2BYa+ Ax5Xx/faY0Y4Opx5FqmadLbgE/aZuea7YIyHkmKQCIgIca2lMTJZmb/2NVXcT8G6 LCbOjBZyPRiN7IxsegZ5Jqi0TIWA0xv6aXrhcn5DcCOapZX40pjAM8+Ez5b9ZKQP tFihCtbPFBrJ9MRXRDCOu4gsDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBlYgnG JVniVlW9ps+LAElRUu/yMB8GA1UdIwQYMBaAFJeX94UnBu4cQsaKXkULVy+O5QgY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTA2My82ODg5QURGMjc0 QkMxMUVBOTUwOTlEMkJDNEY5QUUwMi9sNWYzaFNjRzdoeEN4b3BlUlF0WEw0N2xD QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w1ZjNoU2NHN2h4Q3hvcGVSUXRYTDQ3bENCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTA2My82ODg5QURGMjc0QkMxMUVBOTUwOTlEMkJDNEY5QUUwMi9sNWYzaFNjRzdo eEN4b3BlUlF0WEw0N2xDQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADCaV5u7m/jLRyZrsvnePeQb86IDOnYUxyK8fd9dDisvUiHuF65HwC rWDtRvCANZl0Uxn9zNghZVJkztzTBbJOXw6umyqhvMVHTtQtlsY3J6Y5fcEGUsrF iRvjqis/Mc2lijESMU+BI0Jm76jYIJCj3kziQYUFBYN6p8ujtGJESk/98JAOq7fF 1JmnFnKKdpkLVjkySxQ9kFTML4mmIXhW9UufJtNv6uP2VQ4pOvJMebYuBEYrFkRX GkQ8D2fzFrvpQpTQNZL9LPIAxMwdLQlVvB1EMTQsmZGfhfLQ7Y4oOw9Xa7ZR6gR0 VCtAN+JPBoqysOCEv65EeOIfsavV/6+Q -----END CERTIFICATE-----Generated at Thu May 2 22:28:49 2024 by rpki-client on console-ams.rpki-client.org