$ rpki-client -vvf rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft File: luWqcIJLjRPdz-YfzJogytZeYME.mft (raw, json) Hash identifier: LgCozwgTj7Do8LwzQL7uMK6XBYeYx7zYzo2q8RTOyjo= Subject key identifier: 06:2F:8C:84:C3:46:83:45:EF:F9:27:5B:24:62:33:F8:E7:8F:D5:22 Authority key identifier: 96:E5:AA:70:82:4B:8D:13:DD:CF:E6:1F:CC:9A:20:CA:D6:5E:60:C1 Certificate issuer: /CN=A9155688/serialNumber=96E5AA70824B8D13DDCFE61FCC9A20CAD65E60C1 Certificate serial: 05A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft Manifest number: 059E Signing time: Fri 03 May 2024 00:31:12 +0000 Manifest this update: Fri 03 May 2024 00:31:12 +0000 Manifest next update: Fri 10 May 2024 00:31:12 +0000 Files and hashes: 1: luWqcIJLjRPdz-YfzJogytZeYME.crl (hash: 1XCzG3m12LaffPDK77CLW+HK/SzMAhvzCbPIaWG1eG4=) 2: 6656B366814C11EB913AEC78C4F9AE02.roa (hash: 1SLFE0qnXhzMWp508BSvW25KNRqWfMvK7tRODXuYoxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.crl rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1445 (0x5a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155688/serialNumber=96E5AA70824B8D13DDCFE61FCC9A20CAD65E60C1 Validity Not Before: May 3 00:31:12 2024 GMT Not After : May 10 00:31:12 2024 GMT Subject: CN=66343050-b3fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:57:32:e8:9a:66:34:bd:13:cd:db:e2:d0:4c: ad:90:06:a6:0f:9c:6f:d1:b7:57:d4:30:51:06:37: 24:f8:0b:cf:69:19:42:8f:9c:a7:ac:90:68:c7:53: a4:b2:2a:0f:7a:4d:bc:07:ed:5f:a8:04:b7:2a:56: 50:ae:d3:31:66:22:1f:ac:88:da:59:c5:a0:b8:bc: 09:34:00:a8:c4:d7:22:76:41:51:d6:f9:55:8a:0e: 18:79:c7:8d:99:0f:0b:e0:01:09:8e:2d:41:e7:a3: 37:8a:18:71:0c:16:6b:ab:73:5f:08:7b:62:c8:8d: 4a:70:96:ad:96:a0:f4:59:ce:5c:10:4f:94:5f:5b: a5:69:28:16:4e:85:06:30:88:bb:27:6b:f7:5f:49: c7:7f:a9:26:86:0e:1b:36:fc:ef:3a:f1:c5:72:07: ea:1b:90:09:e9:96:ae:09:49:e9:c1:bd:41:0e:0e: 7e:10:f4:ec:bf:a9:a7:8c:2c:5c:ee:37:27:5f:eb: 5f:13:2d:51:24:72:e4:2d:89:4a:1f:26:f7:73:47: 49:94:74:75:04:93:4f:c9:9c:d3:22:c1:bf:e9:19: 68:a4:79:3e:bb:a5:c2:c5:69:79:9f:09:d6:77:b2: c5:96:37:be:22:24:24:12:7d:45:ed:6e:02:97:72: a1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:2F:8C:84:C3:46:83:45:EF:F9:27:5B:24:62:33:F8:E7:8F:D5:22 X509v3 Authority Key Identifier: keyid:96:E5:AA:70:82:4B:8D:13:DD:CF:E6:1F:CC:9A:20:CA:D6:5E:60:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:47:56:ab:ba:83:ba:f7:4f:0f:3b:8d:e0:b3:c3:5e:76:6a: 62:79:71:30:39:3a:20:c8:fe:0a:43:40:04:4e:48:c2:ed:b8: b2:e1:f7:93:3a:d8:a1:69:af:f4:6b:38:45:a7:85:a1:38:71: ca:3b:83:9c:c9:f2:bb:37:6b:69:91:ce:2d:ed:62:14:31:38: 02:52:b3:ca:e9:db:3e:f6:9a:f4:95:1a:55:2a:7e:f6:3b:82: d9:6a:15:06:0a:82:9c:bc:ad:56:30:bb:66:ed:98:71:e2:91: 55:70:21:1d:cf:d4:d5:83:b8:e3:53:55:ed:95:cc:c1:47:f7: 81:b5:32:ee:ff:34:b6:01:64:1b:5d:04:43:c0:86:53:56:d3: 37:e4:92:d4:e2:ca:08:bf:2e:c8:3b:a4:7c:a7:b9:a8:74:c0: 5f:6b:47:0a:14:e8:9c:e8:95:13:73:ec:5c:34:d3:42:b2:db: 05:3d:06:dd:eb:b1:fe:67:c1:58:63:f5:9d:25:92:28:7e:f8: 31:82:27:ec:8d:e7:fc:1d:cd:f3:65:ff:74:a4:94:6d:8d:37: c6:7e:e6:bf:77:f0:06:7f:fb:93:c8:53:1a:79:12:b2:08:06: a2:d6:9b:1c:d1:90:af:30:92:f0:7b:5b:67:5f:2a:c9:a1:74: 3b:8c:75:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU2ODgxMTAvBgNVBAUTKDk2RTVBQTcwODI0QjhEMTNERENGRTYxRkNDOUEyMENB RDY1RTYwQzEwHhcNMjQwNTAzMDAzMTEyWhcNMjQwNTEwMDAzMTEyWjAYMRYwFAYD VQQDEw02NjM0MzA1MC1iM2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA31cy6JpmNL0Tzdvi0EytkAamD5xv0bdX1DBRBjck+AvPaRlCj5ynrJBox1Ok sioPek28B+1fqAS3KlZQrtMxZiIfrIjaWcWguLwJNACoxNcidkFR1vlVig4YeceN mQ8L4AEJji1B56M3ihhxDBZrq3NfCHtiyI1KcJatlqD0Wc5cEE+UX1ulaSgWToUG MIi7J2v3X0nHf6kmhg4bNvzvOvHFcgfqG5AJ6ZauCUnpwb1BDg5+EPTsv6mnjCxc 7jcnX+tfEy1RJHLkLYlKHyb3c0dJlHR1BJNPyZzTIsG/6RlopHk+u6XCxWl5nwnW d7LFlje+IiQkEn1F7W4Cl3Kh3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAYvjITD RoNF7/knWyRiM/jnj9UiMB8GA1UdIwQYMBaAFJblqnCCS40T3c/mH8yaIMrWXmDB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY4OC85RDU2MjlBMDgx NDIxMUVCQkQ4QzQyODRDNEY5QUUwMi9sdVdxY0lKTGpSUGR6LVlmekpvZ3l0WmVZ TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x1V3FjSUpMalJQZHotWWZ6Sm9neXRaZVlNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTY4OC85RDU2MjlBMDgxNDIxMUVCQkQ4QzQyODRDNEY5QUUwMi9sdVdxY0lKTGpS UGR6LVlmekpvZ3l0WmVZTUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZR1aruoO6908PO43gs8NedmpieXEwOTogyP4KQ0AETkjC7biy4feT Otihaa/0azhFp4WhOHHKO4OcyfK7N2tpkc4t7WIUMTgCUrPK6ds+9pr0lRpVKn72 O4LZahUGCoKcvK1WMLtm7Zhx4pFVcCEdz9TVg7jjU1XtlczBR/eBtTLu/zS2AWQb XQRDwIZTVtM35JLU4soIvy7IO6R8p7modMBfa0cKFOic6JUTc+xcNNNCstsFPQbd 67H+Z8FYY/WdJZIofvgxgifsjef8Hc3zZf90pJRtjTfGfua/d/AGf/uTyFMaeRKy CAai1psc0ZCvMJLwe1tnXyrJoXQ7jHU6 -----END CERTIFICATE-----Generated at Fri May 3 01:30:24 2024 by rpki-client on console-fra.rpki-client.org