$ rpki-client -vvf rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft File: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft (raw, json) Hash identifier: cj3GNWCHTFxFRuL09E8Ef2j5C8I9kQ4CeJEi2N33GGQ= Subject key identifier: E7:FE:1D:F8:C3:00:4C:7E:C7:BF:F0:A6:88:86:7E:B2:F2:CD:7A:17 Authority key identifier: 2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 Certificate issuer: /CN=A9183496/serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Certificate serial: 0B48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft Manifest number: 0B42 Signing time: Thu 02 May 2024 19:48:17 +0000 Manifest this update: Thu 02 May 2024 19:48:17 +0000 Manifest next update: Thu 09 May 2024 19:48:17 +0000 Files and hashes: 1: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl (hash: WwhS1RRy1dSVzXGBTszxhVwHvdBI5dOi7CdmfmHpBjY=) 2: 68A35F78831411EC90E07C19C4F9AE02.roa (hash: RX9XImzeHJvvGD5M13COi0aJ/cfhHPWbi3Gh+JPZeoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 19:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2888 (0xb48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183496/serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Validity Not Before: May 2 19:48:17 2024 GMT Not After : May 9 19:48:17 2024 GMT Subject: CN=6633ee01-ada7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:96:21:8b:1f:52:a6:d5:8d:49:a0:71:e1:f0: 52:90:28:e8:9e:d4:38:77:fe:cd:93:45:d7:08:c8: e9:bd:3b:17:cf:a1:2f:2e:0c:b3:9d:ed:f0:ab:8a: b5:11:c7:c5:ba:9b:31:b4:6e:24:72:fd:7a:25:e9: de:f3:70:2b:31:a7:66:94:1e:7b:03:b4:57:51:e5: 76:fb:99:15:21:87:22:bb:a5:30:61:f1:48:b6:f1: a0:8f:92:4b:f5:82:48:7e:60:d5:2b:70:22:db:72: 72:ae:c3:a5:68:81:7c:d9:12:fa:ea:6e:51:27:eb: 6d:88:dc:ea:ff:95:f1:0a:1f:fc:d8:48:4a:56:b5: 87:9b:37:b2:b8:53:ab:17:fe:9a:eb:87:67:b5:ff: 37:f2:77:80:c7:fa:c1:d0:94:0d:1b:4a:8b:20:63: 24:15:e8:b5:38:dd:48:fc:01:54:cd:3f:cf:05:3a: 3d:8b:1d:ab:73:fd:8a:48:c4:f4:4b:be:b1:17:57: 1d:66:0a:f4:cb:1b:6e:5d:96:ef:75:e9:01:cc:8f: 33:2b:9f:cc:23:86:cd:55:85:32:08:81:05:04:e7: be:ec:21:04:6b:4a:be:b9:55:8f:ba:46:f7:07:c7: 4f:ad:59:a5:89:32:90:ac:67:12:1f:27:66:ef:29: ae:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:FE:1D:F8:C3:00:4C:7E:C7:BF:F0:A6:88:86:7E:B2:F2:CD:7A:17 X509v3 Authority Key Identifier: keyid:2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:2e:68:3c:c1:c5:17:3d:f3:c3:ef:bd:dc:f9:54:93:f2:b1: da:8c:4c:9a:aa:36:1f:19:6d:5d:a5:c5:de:3b:c8:b9:f6:a8: 3b:59:29:70:93:b8:a5:11:11:b2:d8:7a:51:27:d3:63:69:f9: 7f:1c:3a:d6:e4:af:e8:16:eb:f6:71:d7:5d:7d:82:dd:68:a2: 0c:e9:c2:89:27:33:65:66:07:fd:ec:e0:1a:d2:13:ce:aa:63: ea:4a:00:b2:05:1d:08:75:18:fe:82:a3:0c:9e:8f:53:c4:9c: 98:b5:cd:8d:bf:d0:1b:e8:ff:9c:3d:1d:1a:59:f6:7c:12:fb: dd:8e:64:d6:12:cb:26:1f:55:54:07:15:28:0d:84:cc:db:fd: 46:01:2f:d6:8a:17:d8:75:dd:15:c9:3f:2d:a8:03:fc:68:cb: 76:94:fe:da:65:0b:fb:c9:4a:ac:33:0d:15:a5:8b:32:6a:6d: ab:25:9c:db:5f:7c:85:ff:dc:3b:59:51:be:fb:db:03:47:3f: 93:6d:8d:95:21:89:e4:b0:b0:c1:78:d7:87:d2:fb:94:7b:6f: 6c:43:f7:94:e8:f9:ea:3d:20:06:80:c5:1e:69:2d:d0:ac:c8: 1c:23:d0:30:1f:fd:26:51:76:41:c7:b8:e7:89:88:46:9b:c5: d2:23:f1:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM0OTYxMTAvBgNVBAUTKDJGN0ExQzFERDI3RUE3ODE1OENFMjFBOTREQkJGQjkw NzJGQjE3MzQwHhcNMjQwNTAyMTk0ODE3WhcNMjQwNTA5MTk0ODE3WjAYMRYwFAYD VQQDEw02NjMzZWUwMS1hZGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5Yhix9SptWNSaBx4fBSkCjontQ4d/7Nk0XXCMjpvTsXz6EvLgyzne3wq4q1 EcfFupsxtG4kcv16Jene83ArMadmlB57A7RXUeV2+5kVIYciu6UwYfFItvGgj5JL 9YJIfmDVK3Ai23JyrsOlaIF82RL66m5RJ+ttiNzq/5XxCh/82EhKVrWHmzeyuFOr F/6a64dntf838neAx/rB0JQNG0qLIGMkFei1ON1I/AFUzT/PBTo9ix2rc/2KSMT0 S76xF1cdZgr0yxtuXZbvdekBzI8zK5/MI4bNVYUyCIEFBOe+7CEEa0q+uVWPukb3 B8dPrVmliTKQrGcSHydm7ymuWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOf+HfjD AEx+x7/wpoiGfrLyzXoXMB8GA1UdIwQYMBaAFC96HB3SfqeBWM4hqU27+5By+xc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzQ5Ni8yMzQxQTU2NjBG NkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0Rll6aUdwVGJ2N2tITDdG elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzb2NIZEotcDRGWXppR3BUYnY3a0hMN0Z6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzQ5Ni8yMzQxQTU2NjBGNkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0 Rll6aUdwVGJ2N2tITDdGelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9Lmg8wcUXPfPD773c+VST8rHajEyaqjYfGW1dpcXeO8i59qg7WSlw k7ilERGy2HpRJ9Njafl/HDrW5K/oFuv2cdddfYLdaKIM6cKJJzNlZgf97OAa0hPO qmPqSgCyBR0IdRj+gqMMno9TxJyYtc2Nv9Ab6P+cPR0aWfZ8EvvdjmTWEssmH1VU BxUoDYTM2/1GAS/WihfYdd0VyT8tqAP8aMt2lP7aZQv7yUqsMw0VpYsyam2rJZzb X3yF/9w7WVG++9sDRz+TbY2VIYnksLDBeNeH0vuUe29sQ/eU6PnqPSAGgMUeaS3Q rMgcI9AwH/0mUXZBx7jniYhGm8XSI/HL -----END CERTIFICATE-----Generated at Thu May 2 20:50:29 2024 by rpki-client on console-fra.rpki-client.org