$ rpki-client -vvf rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft File: 5jLTjFoywhfG7nHVLe-fOMoWbFE.mft (raw, json) Hash identifier: taEoWEv36cdnwCQJg+5K+tjlvB5gwUu4m3SgtPf5tzk= Subject key identifier: BD:2F:34:C7:E3:38:2C:F2:6B:D5:3D:C5:57:35:AE:60:C7:63:69:A8 Authority key identifier: E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51 Certificate issuer: /CN=A911486F/serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51 Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft Manifest number: 0119 Signing time: Fri 31 May 2024 06:13:16 +0000 Manifest this update: Fri 31 May 2024 06:13:15 +0000 Manifest next update: Fri 07 Jun 2024 06:13:15 +0000 Files and hashes: 1: 5jLTjFoywhfG7nHVLe-fOMoWbFE.crl (hash: G7yLh/QmqIcKtFZf0owDV3Ax8a5vELfifkYQndkFWHI=) 2: 32D8E190D0CB11EEAB1CAF34C4F9AE02.roa (hash: XiWcqkDcsvOFFig0n+ygYts/d+AZtwoFOnRQ5BOzYoQ=) 3: 4D554D70D0CA11EE9DCDFA83C4F9AE02.roa (hash: IoymGXpKD2CL70pPUTw2E3zSeo05rJSNZrms/9hf9jQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 06:13:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911486F/serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51 Validity Not Before: May 31 06:13:15 2024 GMT Not After : Jun 7 06:13:15 2024 GMT Subject: CN=66596a7c-96c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fa:18:c6:e7:e6:e8:10:91:5a:78:6b:fc:2d: 76:51:6a:e2:e0:49:85:d6:41:30:27:2a:7f:36:2c: a0:7a:eb:b1:34:4f:b7:ed:e5:bb:6f:de:38:92:37: fc:d6:65:fc:cf:97:f9:d3:9e:7b:a9:cd:49:4e:90: 9b:15:4d:e4:25:50:63:db:44:b0:f4:77:28:bc:14: 4a:e3:f2:69:85:f1:ed:a3:c0:c9:fa:5f:3a:e7:ce: f1:a2:76:5f:b5:33:bf:63:53:b8:c9:34:4b:86:d1: 6a:ea:e1:e9:02:e8:1e:90:ae:d5:37:0e:20:87:7c: 1b:67:c4:45:e5:b9:17:5a:cb:30:73:73:59:14:9c: bc:2e:f7:e4:ec:47:01:c5:e2:cc:cd:59:95:7f:4b: 86:80:12:24:6c:9c:ab:a5:4e:97:9c:64:8e:ee:0f: ce:64:97:4f:26:16:a8:87:56:36:73:83:a8:21:b2: 6e:e8:18:d4:e3:96:71:ba:56:e0:72:5f:1a:06:ab: d5:f9:00:6d:e3:ba:07:7a:a3:b8:83:3d:a0:fd:1c: 52:83:62:8a:f0:37:d2:0d:7d:79:33:79:e9:44:f3: 9b:ce:20:5d:10:0b:0a:7d:7f:9c:69:49:b3:98:8d: 0b:17:e7:74:e5:8e:2f:dd:00:6d:c1:f3:13:e4:75: 45:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2F:34:C7:E3:38:2C:F2:6B:D5:3D:C5:57:35:AE:60:C7:63:69:A8 X509v3 Authority Key Identifier: keyid:E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:71:ab:17:db:42:1e:5b:42:a9:9a:c3:c7:29:07:70:7e:ff: d7:4f:9f:47:8e:93:bd:43:bd:10:d5:de:d0:71:c8:5d:74:fa: 56:73:01:6c:6c:b3:43:b2:7e:3d:62:49:30:97:05:8d:8b:4c: 20:0f:a4:f4:4e:6a:b0:0d:4a:99:86:ea:f7:d3:54:13:dc:71: 1f:a7:0b:08:c2:65:f9:fe:27:12:90:cb:f5:1f:ae:37:cb:dc: 9c:df:c5:04:82:7f:cf:5e:15:ba:75:0d:f0:79:f2:5d:7f:27: 51:5a:15:12:4d:f2:bf:8b:6a:0d:d4:a0:92:3e:a9:e9:b2:ec: fd:7f:28:c2:df:7e:39:01:eb:db:d6:3a:4d:93:b1:f6:db:d2: 1b:4d:19:64:ea:65:0d:b0:77:3f:22:92:e5:dc:c0:1c:1b:22: c5:b3:4d:c9:f5:92:59:4c:c5:3f:11:b4:83:09:53:35:81:19: 88:fb:47:2f:55:f9:1b:e8:79:85:7d:32:0c:f1:e2:e6:a4:6d: 90:2f:cb:41:d5:7d:54:71:f0:c4:55:5d:e6:e9:19:98:d5:c7: c1:f0:7f:31:46:26:91:f8:5a:12:be:02:15:e7:a0:67:59:7b: 4e:27:aa:e7:60:17:50:8c:60:2c:0e:6a:fc:ae:08:e6:47:3c: 04:ca:bb:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ4NkYxMTAvBgNVBAUTKEU2MzJEMzhDNUEzMkMyMTdDNkVFNzFENTJERUY5RjM4 Q0ExNjZDNTEwHhcNMjQwNTMxMDYxMzE1WhcNMjQwNjA3MDYxMzE1WjAYMRYwFAYD VQQDEw02NjU5NmE3Yy05NmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfoYxufm6BCRWnhr/C12UWri4EmF1kEwJyp/NiygeuuxNE+37eW7b944kjf8 1mX8z5f50557qc1JTpCbFU3kJVBj20Sw9HcovBRK4/JphfHto8DJ+l86587xonZf tTO/Y1O4yTRLhtFq6uHpAugekK7VNw4gh3wbZ8RF5bkXWsswc3NZFJy8Lvfk7EcB xeLMzVmVf0uGgBIkbJyrpU6XnGSO7g/OZJdPJhaoh1Y2c4OoIbJu6BjU45Zxulbg cl8aBqvV+QBt47oHeqO4gz2g/RxSg2KK8DfSDX15M3npRPObziBdEAsKfX+caUmz mI0LF+d05Y4v3QBtwfMT5HVFmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0vNMfj OCzya9U9xVc1rmDHY2moMB8GA1UdIwQYMBaAFOYy04xaMsIXxu5x1S3vnzjKFmxR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDg2Ri8yMkNGMzQ0ODg2 NkMxMUVEQUZBNUE0NzFDNEY5QUUwMi81akxUakZveXdoZkc3bkhWTGUtZk9Nb1di RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVqTFRqRm95d2hmRzduSFZMZS1mT01vV2JGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDg2Ri8yMkNGMzQ0ODg2NkMxMUVEQUZBNUE0NzFDNEY5QUUwMi81akxUakZveXdo Zkc3bkhWTGUtZk9Nb1diRkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwcasX20IeW0KpmsPHKQdwfv/XT59HjpO9Q70Q1d7QcchddPpWcwFs bLNDsn49YkkwlwWNi0wgD6T0TmqwDUqZhur301QT3HEfpwsIwmX5/icSkMv1H643 y9yc38UEgn/PXhW6dQ3wefJdfydRWhUSTfK/i2oN1KCSPqnpsuz9fyjC3345Aevb 1jpNk7H229IbTRlk6mUNsHc/IpLl3MAcGyLFs03J9ZJZTMU/EbSDCVM1gRmI+0cv Vfkb6HmFfTIM8eLmpG2QL8tB1X1UcfDEVV3m6RmY1cfB8H8xRiaR+FoSvgIV56Bn WXtOJ6rnYBdQjGAsDmr8rgjmRzwEyrs+ -----END CERTIFICATE-----Generated at Fri May 31 08:38:28 2024 by rpki-client on console-fra.rpki-client.org