$ rpki-client -vvf rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft File: 0LR5KL_bnbNR4dQlatArZyj5XPU.mft (raw, json) Hash identifier: E7bEK+4TZSXAj2Z4fWdfjbqBe6dI1K8fGKVhZPLUe5U= Subject key identifier: CE:16:A8:DE:3B:2B:E1:6E:08:45:BC:A4:40:9E:41:1D:AE:C7:75:3D Authority key identifier: D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5 Certificate issuer: /CN=A9174306/serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft Manifest number: 4A Signing time: Fri 17 May 2024 08:05:15 +0000 Manifest this update: Fri 17 May 2024 08:05:14 +0000 Manifest next update: Fri 24 May 2024 08:05:14 +0000 Files and hashes: 1: 0LR5KL_bnbNR4dQlatArZyj5XPU.crl (hash: B3iQOywSkCYru4YmrjwkbUx280wNYPKQEktHtyuxqo8=) 2: 511C5136A2F011EEBBE10D80C4F9AE02.roa (hash: 6ft6dsVj7UbQ7Mjkn5/fW3MnMF0FwPcl1hK+5TV+RKw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174306/serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5 Validity Not Before: May 17 08:05:14 2024 GMT Not After : May 24 08:05:14 2024 GMT Subject: CN=66470fba-7ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:56:7d:c2:9e:62:79:d2:9d:19:b3:f2:f3:9a: 43:61:2b:f9:e4:6a:7e:41:a8:b4:3b:22:ac:18:9c: a1:64:4c:72:ef:28:84:7d:76:4a:2d:50:a6:11:f6: 9e:4a:ec:62:25:d9:8b:0c:14:ab:f3:f5:a2:b9:cb: d9:b4:31:5c:3a:09:b5:54:ff:26:99:d9:3e:13:4d: cd:26:b2:de:02:7d:60:7b:ae:cc:8b:7d:f6:f2:42: cc:25:76:40:3b:49:ab:1a:52:f3:47:ee:96:23:4c: 11:2a:5a:5b:10:7a:16:41:b6:bb:59:b9:fc:5c:b2: 63:0d:3c:73:bd:b1:ef:11:03:d2:02:26:db:24:cf: 21:c2:3e:a7:9d:76:5a:31:f2:d6:b6:b9:f9:e0:81: 16:25:96:85:91:14:07:eb:a8:ae:bb:29:a7:a1:5e: 3a:00:48:78:c5:1a:d2:cf:0d:e2:5d:ba:e0:82:f5: de:7f:6c:ed:07:8e:8c:ed:24:10:e8:56:7d:10:58: 05:e9:34:82:9c:4a:ce:d8:c6:49:5c:28:a0:73:db: 22:a7:c3:97:3d:cd:68:82:67:8d:99:85:5d:43:15: bb:2d:88:d1:f6:0d:e9:2a:f1:65:42:53:12:9e:c3: 25:1d:0a:22:ab:73:d0:44:14:83:9b:bd:b4:f7:9a: 30:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:16:A8:DE:3B:2B:E1:6E:08:45:BC:A4:40:9E:41:1D:AE:C7:75:3D X509v3 Authority Key Identifier: keyid:D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:96:21:1e:be:16:5e:1d:79:3d:7b:f0:2f:82:c7:fe:67:78: f2:dd:a7:ee:00:5c:5b:bb:12:3c:d1:c9:bd:32:c8:83:14:60: 70:01:3a:30:62:52:92:f6:48:b3:07:02:90:89:3d:ac:49:a4: 8d:55:ce:34:5d:d9:a3:74:ed:13:27:d2:5a:7f:a7:71:aa:20: 0a:06:9f:26:80:d4:45:e0:a9:5d:4e:9f:71:eb:8f:c0:c4:0c: ad:6c:27:8d:f4:0e:df:ac:d8:6f:9d:9f:39:44:0e:d3:af:79: d5:af:8c:d0:8a:1f:49:7d:f5:7b:dc:67:ea:b7:99:47:99:ac: 15:ba:f7:3b:ac:e9:a8:0f:79:2e:43:00:54:37:f3:0d:a1:8b: 74:53:a8:a8:7e:90:3c:b8:af:89:49:cf:7f:35:29:35:1d:e5: 05:f2:46:04:8e:19:ab:9b:25:b3:63:90:92:4d:43:d5:8f:9b: 88:92:4a:37:74:dc:b1:c3:6a:46:51:fd:13:50:8a:da:24:23: b3:7d:b2:c8:b7:17:57:8e:26:c8:43:8c:15:71:b2:64:2b:b3: fc:2b:04:76:0d:91:62:2f:aa:45:32:4e:67:e1:4a:94:3e:ee: 2e:f4:c0:42:44:9d:f5:38:2f:34:ff:46:b8:13:47:4b:cf:e6: c5:14:24:e6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NDMwNjExMC8GA1UEBRMoRDBCNDc5MjhCRkRCOURCMzUxRTFENDI1NkFEMDJCNjcy OEY5NUNGNTAeFw0yNDA1MTcwODA1MTRaFw0yNDA1MjQwODA1MTRaMBgxFjAUBgNV BAMTDTY2NDcwZmJhLTdmZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHVn3CnmJ50p0Zs/LzmkNhK/nkan5BqLQ7IqwYnKFkTHLvKIR9dkotUKYR9p5K 7GIl2YsMFKvz9aK5y9m0MVw6CbVU/yaZ2T4TTc0mst4CfWB7rsyLffbyQswldkA7 SasaUvNH7pYjTBEqWlsQehZBtrtZufxcsmMNPHO9se8RA9ICJtskzyHCPqeddlox 8ta2ufnggRYlloWRFAfrqK67KaehXjoASHjFGtLPDeJduuCC9d5/bO0HjoztJBDo Vn0QWAXpNIKcSs7YxklcKKBz2yKnw5c9zWiCZ42ZhV1DFbstiNH2Dekq8WVCUxKe wyUdCiKrc9BEFIObvbT3mjA1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzhao3jsr 4W4IRbykQJ5BHa7HdT0wHwYDVR0jBBgwFoAU0LR5KL/bnbNR4dQlatArZyj5XPUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0MzA2LzJCNUFFQzcwQTJF RTExRUVBNjM1NEY1RUM0RjlBRTAyLzBMUjVLTF9ibmJOUjRkUWxhdEFyWnlqNVhQ VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMExSNUtMX2JuYk5SNGRRbGF0QXJaeWo1WFBVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0 MzA2LzJCNUFFQzcwQTJFRTExRUVBNjM1NEY1RUM0RjlBRTAyLzBMUjVLTF9ibmJO UjRkUWxhdEFyWnlqNVhQVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKyWIR6+Fl4deT178C+Cx/5nePLdp+4AXFu7EjzRyb0yyIMUYHABOjBi UpL2SLMHApCJPaxJpI1VzjRd2aN07RMn0lp/p3GqIAoGnyaA1EXgqV1On3Hrj8DE DK1sJ430Dt+s2G+dnzlEDtOvedWvjNCKH0l99XvcZ+q3mUeZrBW69zus6agPeS5D AFQ38w2hi3RTqKh+kDy4r4lJz381KTUd5QXyRgSOGaubJbNjkJJNQ9WPm4iSSjd0 3LHDakZR/RNQitokI7N9ssi3F1eOJshDjBVxsmQrs/wrBHYNkWIvqkUyTmfhSpQ+ 7i70wEJEnfU4LzT/RrgTR0vP5sUUJOY= -----END CERTIFICATE-----Generated at Fri May 17 08:52:49 2024 by rpki-client on console-ams.rpki-client.org