$ rpki-client -vvf rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft File: L__8o-ZL11oIXmx2cyYl8iTHRDI.mft (raw, json) Hash identifier: nkLht9wAQmhFL08QgxfSPUWuERkYuDOe/j91GqEH7QI= Subject key identifier: 7E:81:F8:24:8E:7B:38:25:8F:F4:C1:F8:3F:C6:37:3D:26:A5:EE:7D Authority key identifier: 2F:FF:FC:A3:E6:4B:D7:5A:08:5E:6C:76:73:26:25:F2:24:C7:44:32 Certificate issuer: /CN=A9193604/serialNumber=2FFFFCA3E64BD75A085E6C76732625F224C74432 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft Manifest number: 4C Signing time: Fri 17 May 2024 08:04:09 +0000 Manifest this update: Fri 17 May 2024 08:04:09 +0000 Manifest next update: Fri 24 May 2024 08:04:09 +0000 Files and hashes: 1: L__8o-ZL11oIXmx2cyYl8iTHRDI.crl (hash: iR9UbTCSYm+jhD8Y4rEz/4X7s4iOwd5FBw/T4A1N8sE=) 2: 4578BBA89F4E11EEB293B87EC4F9AE02.roa (hash: OXrFUVRlCUypfbLs5hm3cE5ycOXJ9vF5Rzr0DVn8pyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.crl rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:04:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193604/serialNumber=2FFFFCA3E64BD75A085E6C76732625F224C74432 Validity Not Before: May 17 08:04:09 2024 GMT Not After : May 24 08:04:09 2024 GMT Subject: CN=66470f79-0f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:39:d7:80:07:e2:71:43:50:1a:d5:b2:33:1e: af:02:0e:44:4c:ad:d5:d5:0c:64:10:67:64:12:58: 79:72:86:20:53:16:e6:69:db:f8:16:8e:39:30:72: a8:b7:2b:12:04:00:a1:95:63:ee:b8:b7:ca:96:b3: 14:79:ca:61:47:ee:f9:f5:a3:d7:32:48:0f:28:89: 8f:ec:3c:16:ed:58:da:14:57:21:99:7b:e7:2c:a9: 15:39:76:f7:97:8a:72:97:52:ef:1a:46:03:2b:c2: 0a:8c:ed:12:5b:f9:6e:2d:d7:0b:fb:04:77:b2:85: 4d:74:b2:50:d0:de:7d:9d:9c:f1:36:dc:19:e2:da: 1a:7a:1f:7b:7b:40:99:e5:d2:80:08:58:7d:32:a5: c1:71:66:33:f0:3a:57:c8:31:d5:b4:af:bf:3b:a9: b9:3a:ab:3e:77:72:5f:b3:76:6f:54:34:98:85:5d: f3:44:a7:79:92:82:c3:91:26:23:ac:60:0a:2f:0d: 98:64:67:60:fd:1b:b8:84:7d:65:da:dd:c2:18:db: ad:a0:77:eb:71:5f:1b:07:81:37:42:e4:15:e8:51: 3d:39:14:2a:61:f9:4b:66:d2:72:df:42:a9:37:1b: 9a:8a:60:2a:c2:53:6c:8b:72:5f:20:c8:02:4c:6d: aa:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:81:F8:24:8E:7B:38:25:8F:F4:C1:F8:3F:C6:37:3D:26:A5:EE:7D X509v3 Authority Key Identifier: keyid:2F:FF:FC:A3:E6:4B:D7:5A:08:5E:6C:76:73:26:25:F2:24:C7:44:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:3d:34:e5:35:94:08:4d:a1:9e:18:f6:54:80:25:51:63:53: 18:3d:3b:80:63:6d:11:cf:2a:90:a5:8e:1e:92:ab:a5:bf:ca: c6:c3:08:74:c0:7c:74:4d:03:23:8d:7e:ef:cd:f4:24:4e:1f: a7:48:ef:49:25:5a:ea:8f:71:ec:7b:b6:2b:6f:ca:e1:75:11: 4b:72:af:50:be:01:5b:ca:60:db:dc:09:d5:ac:d5:bd:02:92: e9:e6:da:23:86:7b:bc:33:f6:f0:e2:91:f5:89:64:84:80:f2: 10:3f:39:d7:63:ee:68:c7:24:9a:7b:f1:e2:55:48:06:b5:36: f9:4f:52:19:6d:93:f3:f0:c1:e9:68:f7:ed:05:a3:86:a5:ef: 90:b0:19:1e:3d:7c:e8:c0:33:f3:12:af:f5:c0:74:5b:39:52: 24:35:3c:b1:35:81:21:5d:1b:09:9a:5c:58:d2:6b:9e:6d:0b: 3e:1c:3f:4a:14:76:f8:f7:a0:87:d3:ee:eb:df:9d:33:b5:28: a8:b9:02:a5:51:a1:11:64:00:91:69:ac:5b:5b:25:04:c6:5e: cb:31:b8:73:0a:6b:be:22:b6:01:11:ea:8b:97:9a:0d:5f:80: cf:12:8f:7f:a0:e5:8f:f9:93:45:cc:a2:57:86:56:d1:b4:d2: fe:e4:29:7f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MzYwNDExMC8GA1UEBRMoMkZGRkZDQTNFNjRCRDc1QTA4NUU2Qzc2NzMyNjI1RjIy NEM3NDQzMjAeFw0yNDA1MTcwODA0MDlaFw0yNDA1MjQwODA0MDlaMBgxFjAUBgNV BAMTDTY2NDcwZjc5LTBmMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDyOdeAB+JxQ1Aa1bIzHq8CDkRMrdXVDGQQZ2QSWHlyhiBTFuZp2/gWjjkwcqi3 KxIEAKGVY+64t8qWsxR5ymFH7vn1o9cySA8oiY/sPBbtWNoUVyGZe+csqRU5dveX inKXUu8aRgMrwgqM7RJb+W4t1wv7BHeyhU10slDQ3n2dnPE23Bni2hp6H3t7QJnl 0oAIWH0ypcFxZjPwOlfIMdW0r787qbk6qz53cl+zdm9UNJiFXfNEp3mSgsORJiOs YAovDZhkZ2D9G7iEfWXa3cIY262gd+txXxsHgTdC5BXoUT05FCph+Utm0nLfQqk3 G5qKYCrCU2yLcl8gyAJMbapNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfoH4JI57 OCWP9MH4P8Y3PSal7n0wHwYDVR0jBBgwFoAUL//8o+ZL11oIXmx2cyYl8iTHRDIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzNjA0L0I1OTVGREEyOUY0 RDExRUU4NERCMEY3REM0RjlBRTAyL0xfXzhvLVpMMTFvSVhteDJjeVlsOGlUSFJE SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTF9fOG8tWkwxMW9JWG14MmN5WWw4aVRIUkRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz NjA0L0I1OTVGREEyOUY0RDExRUU4NERCMEY3REM0RjlBRTAyL0xfXzhvLVpMMTFv SVhteDJjeVlsOGlUSFJESS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIw9NOU1lAhNoZ4Y9lSAJVFjUxg9O4BjbRHPKpCljh6Sq6W/ysbDCHTA fHRNAyONfu/N9CROH6dI70klWuqPcex7titvyuF1EUtyr1C+AVvKYNvcCdWs1b0C kunm2iOGe7wz9vDikfWJZISA8hA/Oddj7mjHJJp78eJVSAa1NvlPUhltk/Pwwelo 9+0Fo4al75CwGR49fOjAM/MSr/XAdFs5UiQ1PLE1gSFdGwmaXFjSa55tCz4cP0oU dvj3oIfT7uvfnTO1KKi5AqVRoRFkAJFprFtbJQTGXssxuHMKa74itgER6ouXmg1f gM8Sj3+g5Y/5k0XMoleGVtG00v7kKX8= -----END CERTIFICATE-----Generated at Fri May 17 08:52:51 2024 by rpki-client on console-ams.rpki-client.org