$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft File: L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft (raw, json) Hash identifier: tRDp9TrTynalNo1LsFGfkbUaI5WPC+dCe9CsWlG4OWA= Subject key identifier: D1:A4:61:59:E1:F7:3E:D9:75:5D:DE:7C:B3:3C:E7:7B:42:9B:A5:0B Authority key identifier: 2F:C4:60:19:EE:52:D1:E9:1B:B1:D1:D8:E1:7E:99:8A:71:5B:72:44 Certificate issuer: /CN=A9152D1E/serialNumber=2FC46019EE52D1E91BB1D1D8E17E998A715B7244 Certificate serial: 031C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft Manifest number: 031C Signing time: Fri 03 May 2024 03:08:18 +0000 Manifest this update: Fri 03 May 2024 03:08:17 +0000 Manifest next update: Fri 10 May 2024 03:08:17 +0000 Files and hashes: 1: L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl (hash: PSJNoBqw+rjj9LYxC4MHyeJ1XtWUMmPFU0rtDJVAlLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 796 (0x31c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D1E/serialNumber=2FC46019EE52D1E91BB1D1D8E17E998A715B7244 Validity Not Before: May 3 03:08:17 2024 GMT Not After : May 10 03:08:17 2024 GMT Subject: CN=66345522-d148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f2:ae:ce:a9:29:de:92:ff:a0:f2:fc:79:8a: 82:04:d0:74:6c:24:43:a0:b3:3f:ca:b8:51:73:56: 08:42:59:bb:c3:21:02:9b:da:39:9b:58:2b:f4:ce: 8d:c5:93:a5:c2:22:2e:1e:a9:5e:13:45:66:e5:69: 3c:d5:e7:a0:fd:b2:36:53:ca:43:7f:d3:89:88:26: c1:19:37:49:49:27:8b:7a:73:71:fd:ff:c1:3c:ff: 75:48:9f:f8:3c:02:c2:e9:c2:04:9d:c2:ba:45:b4: 9d:71:66:de:99:61:b6:36:75:c3:ca:1f:e1:82:ab: c1:67:1c:91:d1:20:83:9d:5c:5f:35:a3:58:cb:2e: 36:b4:e7:5f:96:30:25:cc:1a:85:03:4a:cc:b5:ec: b4:75:f6:1e:3a:a0:2d:dc:7a:d9:6e:ca:d7:cc:08: 1b:ac:0b:7e:37:5d:a9:bb:c8:87:af:54:a4:80:62: 4c:4c:6e:5c:4b:06:e6:38:0f:70:52:9f:01:b6:8c: ee:87:37:aa:7c:47:da:47:2f:bf:49:a3:dd:90:cd: 2b:1a:f3:11:46:ef:56:85:89:03:60:db:6e:4a:64: f1:83:36:20:af:3c:42:4f:75:a5:4e:70:da:6a:aa: 95:4a:6d:ce:90:68:c7:f7:d2:d2:4c:a1:30:e1:2e: d4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A4:61:59:E1:F7:3E:D9:75:5D:DE:7C:B3:3C:E7:7B:42:9B:A5:0B X509v3 Authority Key Identifier: keyid:2F:C4:60:19:EE:52:D1:E9:1B:B1:D1:D8:E1:7E:99:8A:71:5B:72:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:42:73:cc:10:17:00:58:be:63:cc:e0:95:6a:64:44:8a:ca: 93:88:b3:48:b9:b0:12:04:6b:69:8c:54:bc:8e:3e:d6:28:5e: db:2d:42:63:af:43:8e:dd:7b:d8:65:6a:11:f7:f2:d2:51:e1: bb:88:de:96:7e:a7:f0:db:5d:44:bb:50:fd:cd:1e:eb:2b:77: 68:67:bd:81:dc:7e:9e:e0:13:6c:47:49:3f:66:28:ad:fc:22: 53:46:6d:05:ea:e1:ea:9c:8b:0d:37:bd:98:de:31:e9:42:62: 16:41:ae:9b:04:48:e6:d9:2c:d6:71:30:6a:7a:2a:3b:a0:b7: 93:88:16:77:7c:5b:e6:a8:7a:d9:ad:68:5e:45:0a:38:04:af: 7e:b9:d9:a3:53:6b:6f:b7:c7:40:c1:bd:39:dd:b7:f1:9e:ab: 19:f4:9a:ee:d8:89:d8:f8:3e:d0:fb:7c:df:8b:8b:27:f6:53: a8:bf:6f:ea:91:4c:70:9c:c8:0c:55:2c:93:6b:a7:79:46:34: 58:46:e7:24:59:f1:4b:55:57:b5:c7:c9:9e:70:43:dc:bb:cb: f2:8a:49:d8:4c:20:fb:5a:ca:15:91:aa:56:93:3a:19:f2:d7: 2f:4c:5f:2a:a4:b8:f4:9d:91:59:75:62:5d:ee:ef:48:6d:5d: 91:d1:da:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMUUxMTAvBgNVBAUTKDJGQzQ2MDE5RUU1MkQxRTkxQkIxRDFEOEUxN0U5OThB NzE1QjcyNDQwHhcNMjQwNTAzMDMwODE3WhcNMjQwNTEwMDMwODE3WjAYMRYwFAYD VQQDEw02NjM0NTUyMi1kMTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPKuzqkp3pL/oPL8eYqCBNB0bCRDoLM/yrhRc1YIQlm7wyECm9o5m1gr9M6N xZOlwiIuHqleE0Vm5Wk81eeg/bI2U8pDf9OJiCbBGTdJSSeLenNx/f/BPP91SJ/4 PALC6cIEncK6RbSdcWbemWG2NnXDyh/hgqvBZxyR0SCDnVxfNaNYyy42tOdfljAl zBqFA0rMtey0dfYeOqAt3HrZbsrXzAgbrAt+N12pu8iHr1SkgGJMTG5cSwbmOA9w Up8BtozuhzeqfEfaRy+/SaPdkM0rGvMRRu9WhYkDYNtuSmTxgzYgrzxCT3WlTnDa aqqVSm3OkGjH99LSTKEw4S7UDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNGkYVnh 9z7ZdV3efLM853tCm6ULMB8GA1UdIwQYMBaAFC/EYBnuUtHpG7HR2OF+mYpxW3JE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQxRS9DN0MwQzFEQTdE NjAxMUVDQUQ5NjUwMzBDNEY5QUUwMi9MOFJnR2U1UzBla2JzZEhZNFg2WmluRmJj a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w4UmdHZTVTMGVrYnNkSFk0WDZaaW5GYmNrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQxRS9DN0MwQzFEQTdENjAxMUVDQUQ5NjUwMzBDNEY5QUUwMi9MOFJnR2U1UzBl a2JzZEhZNFg2WmluRmJja1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeQnPMEBcAWL5jzOCVamREisqTiLNIubASBGtpjFS8jj7WKF7bLUJj r0OO3XvYZWoR9/LSUeG7iN6Wfqfw211Eu1D9zR7rK3doZ72B3H6e4BNsR0k/Ziit /CJTRm0F6uHqnIsNN72Y3jHpQmIWQa6bBEjm2SzWcTBqeio7oLeTiBZ3fFvmqHrZ rWheRQo4BK9+udmjU2tvt8dAwb053bfxnqsZ9Jru2InY+D7Q+3zfi4sn9lOov2/q kUxwnMgMVSyTa6d5RjRYRuckWfFLVVe1x8mecEPcu8vyiknYTCD7WsoVkapWkzoZ 8tcvTF8qpLj0nZFZdWJd7u9IbV2R0dq9 -----END CERTIFICATE-----Generated at Fri May 3 04:36:47 2024 by rpki-client on console-ams.rpki-client.org