$ rpki-client -vvf rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft File: lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft (raw, json) Hash identifier: ZUAHLNfA7gFpm0VgZVOPzpgKYY19yVVUxMGV7zSE3xc= Subject key identifier: 5E:36:2A:5D:8A:FB:E4:FC:22:2D:5E:E0:E5:2B:0D:6E:88:D3:7F:A6 Authority key identifier: 94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8 Certificate issuer: /CN=A9174F24/serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft Manifest number: 60 Signing time: Fri 17 May 2024 07:51:12 +0000 Manifest this update: Fri 17 May 2024 07:51:11 +0000 Manifest next update: Fri 24 May 2024 07:51:11 +0000 Files and hashes: 1: lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl (hash: WrWuBmQJA4vJHUihNxtuy2W+saZuHXZQ3D0z1/i9+0I=) 2: F7C7803489F311EE9AD0D13CC4F9AE02.roa (hash: 1La2YjR8695Kv+ENKHdPNPLlVQUHdNzlGYNxYnnCBUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:51:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174F24/serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8 Validity Not Before: May 17 07:51:11 2024 GMT Not After : May 24 07:51:11 2024 GMT Subject: CN=66470c70-7e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6b:06:72:8a:d5:a1:e4:07:5b:68:bd:84:30: 7c:8f:1d:d5:80:91:e5:54:03:24:7e:8a:69:ca:ee: 63:75:b9:c3:06:d7:7f:76:49:17:20:35:8a:dc:44: 11:41:ef:eb:b3:0a:98:30:74:41:2f:c2:54:87:a2: 10:a1:85:b3:7f:b8:9f:11:94:a3:d5:9a:4e:69:b1: 25:49:a8:5b:29:41:0e:3f:44:e9:46:a8:df:a2:58: 40:8e:92:d5:e5:a9:de:a1:06:73:98:33:10:75:f4: 00:cc:7a:b5:18:9a:d8:1c:0c:ae:96:ec:91:ac:b4: 97:70:d5:06:bb:10:f7:19:a0:ba:92:f2:fd:24:74: 27:7c:5e:90:23:64:e0:f6:55:66:eb:52:bc:60:fc: 7f:e5:b1:af:54:e3:9f:91:1c:a8:01:a5:c0:4d:fe: a4:80:5a:59:ae:39:bf:ef:26:5f:d4:f8:83:f9:ba: cf:13:3d:34:fb:7e:ee:92:1b:5e:18:3c:59:2b:7b: 16:c1:8c:2c:71:0b:98:00:f4:d9:af:53:34:5c:53: f4:1e:f9:fd:89:7f:0e:82:35:bf:6a:38:c7:f0:37: b4:84:ba:66:e8:c8:59:bb:a2:6b:94:fa:7a:6c:2c: 01:08:3d:68:a0:16:4a:88:57:e1:5a:b7:e8:41:40: fa:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:36:2A:5D:8A:FB:E4:FC:22:2D:5E:E0:E5:2B:0D:6E:88:D3:7F:A6 X509v3 Authority Key Identifier: keyid:94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:0f:5f:39:72:94:b8:bd:89:e6:fb:8c:04:d0:64:2c:84:64: f1:56:32:ef:bf:df:6f:de:95:0a:47:6a:19:b0:13:30:55:b9: a8:8f:e0:cd:3a:f2:64:ca:87:12:a3:83:ba:7b:a4:cc:23:b2: 32:15:fd:b2:19:8e:24:36:f6:19:c8:fe:84:9f:2e:42:07:f9: c7:fc:f4:06:cf:90:3e:d9:89:27:5e:9a:3d:ca:4e:12:57:29: d3:dc:ff:56:fb:e8:2a:e3:80:33:45:0f:db:68:10:20:a7:2e: e9:e3:51:cb:4c:f8:9c:cf:c4:60:20:b5:40:7b:48:d0:a0:c8: c7:0a:56:46:6d:21:7a:d8:5f:c5:c8:5d:ac:80:aa:1c:cd:07: 66:78:67:ac:fb:55:3c:16:9d:82:e6:f4:4c:bb:bd:f6:ec:5a: c3:74:72:e3:b5:9b:f8:a2:06:6a:e8:cb:29:2b:95:de:c3:b1: 79:fa:1d:35:00:f0:0e:6d:ce:a3:3a:c3:51:34:01:aa:8e:1a: 5e:a1:ca:a3:cc:ae:d1:e1:ca:af:cc:d3:71:44:2f:27:2a:77: 55:12:21:24:92:bf:63:8b:ac:32:01:42:25:71:b2:1b:7a:ec: 7c:6f:04:7a:11:3f:46:0e:cd:d9:f0:4d:a5:93:85:18:50:97: 19:9f:9b:f4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NEYyNDExMC8GA1UEBRMoOTRDNDFGMUFBNjBFRDY1MEUwRkQ3QTdBOEQyMzdBMkQ0 NkIxQjFGODAeFw0yNDA1MTcwNzUxMTFaFw0yNDA1MjQwNzUxMTFaMBgxFjAUBgNV BAMTDTY2NDcwYzcwLTdlNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCawZyitWh5AdbaL2EMHyPHdWAkeVUAyR+imnK7mN1ucMG1392SRcgNYrcRBFB 7+uzCpgwdEEvwlSHohChhbN/uJ8RlKPVmk5psSVJqFspQQ4/ROlGqN+iWECOktXl qd6hBnOYMxB19ADMerUYmtgcDK6W7JGstJdw1Qa7EPcZoLqS8v0kdCd8XpAjZOD2 VWbrUrxg/H/lsa9U45+RHKgBpcBN/qSAWlmuOb/vJl/U+IP5us8TPTT7fu6SG14Y PFkrexbBjCxxC5gA9NmvUzRcU/Qe+f2Jfw6CNb9qOMfwN7SEumboyFm7omuU+nps LAEIPWigFkqIV+Fat+hBQPotAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXjYqXYr7 5PwiLV7g5SsNbojTf6YwHwYDVR0jBBgwFoAUlMQfGqYO1lDg/Xp6jSN6LUaxsfgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0RjI0LzZGRDdFQkYwODlG MzExRUVCRjdGQzQxRkM0RjlBRTAyL2xNUWZHcVlPMWxEZ19YcDZqU042TFVheHNm Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbE1RZkdxWU8xbERnX1hwNmpTTjZMVWF4c2ZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0 RjI0LzZGRDdFQkYwODlGMzExRUVCRjdGQzQxRkM0RjlBRTAyL2xNUWZHcVlPMWxE Z19YcDZqU042TFVheHNmZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK4PXzlylLi9ieb7jATQZCyEZPFWMu+/32/elQpHahmwEzBVuaiP4M06 8mTKhxKjg7p7pMwjsjIV/bIZjiQ29hnI/oSfLkIH+cf89AbPkD7ZiSdemj3KThJX KdPc/1b76CrjgDNFD9toECCnLunjUctM+JzPxGAgtUB7SNCgyMcKVkZtIXrYX8XI XayAqhzNB2Z4Z6z7VTwWnYLm9Ey7vfbsWsN0cuO1m/iiBmroyykrld7DsXn6HTUA 8A5tzqM6w1E0AaqOGl6hyqPMrtHhyq/M03FELycqd1USISSSv2OLrDIBQiVxsht6 7HxvBHoRP0YOzdnwTaWThRhQlxmfm/Q= -----END CERTIFICATE-----Generated at Fri May 17 08:52:49 2024 by rpki-client on console-ams.rpki-client.org