$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft File: 5DyCH7uc7qZ-unouUFzF3X92YFU.mft (raw, json) Hash identifier: z535CbRVZayXVlEtLm6dqhycanFG011Iwy+KansY0Gw= Subject key identifier: BF:5F:73:7D:5E:EA:A2:0D:77:7E:4B:B3:D9:63:05:70:40:53:0E:A3 Authority key identifier: E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55 Certificate issuer: /CN=A9114D2E/serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055 Certificate serial: 0A12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft Manifest number: 0A02 Signing time: Thu 16 May 2024 20:48:43 +0000 Manifest this update: Thu 16 May 2024 20:48:42 +0000 Manifest next update: Thu 23 May 2024 20:48:42 +0000 Files and hashes: 1: 5DyCH7uc7qZ-unouUFzF3X92YFU.crl (hash: LZnT7uV+UvRajj00oq1D12yIRjcwqJmZQy79HBG+bx0=) 2: 8ABED0585F0911ECA629B815C4F9AE02.roa (hash: yJ71VBH0x6Cizy3pLk3TQDQEwieJvCbqnha729ASJmU=) 3: 823433125F0C11EC8C2C2820C4F9AE02.roa (hash: SeaNTqd0MT2Mb0YJWYURazfx/oLk37QwRX3zpyKaSjw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2578 (0xa12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D2E/serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055 Validity Not Before: May 16 20:48:42 2024 GMT Not After : May 23 20:48:42 2024 GMT Subject: CN=6646712a-6c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:65:49:dd:37:4f:05:df:e8:7e:75:4a:2c:42: 4a:e6:05:27:05:3d:ef:a8:8a:fe:ca:71:e1:ce:52: 58:c6:85:37:a1:40:b3:5b:c4:b9:d0:cf:9a:d3:1b: d6:76:86:15:13:4a:f0:63:2f:9a:48:50:60:1b:15: 20:b6:da:09:1d:db:6e:65:e9:5a:51:25:d2:3d:55: 64:50:b1:5b:0f:9f:63:ce:76:79:b1:9f:21:b1:c0: 8b:11:09:7b:7a:1a:2e:81:fd:08:ad:ba:6b:a0:4b: c9:4f:f8:46:12:31:e7:ce:d1:da:fb:06:96:40:cb: a4:45:50:f1:53:82:e7:c1:2d:6a:61:1c:85:7d:26: 6a:ba:8d:19:2a:24:99:33:61:ae:70:a0:7b:c0:4a: d3:fd:5c:10:7b:ad:51:3b:fa:f6:76:90:2b:e3:98: 6a:67:41:e5:88:c3:7e:e1:85:0c:cf:ce:15:cc:7b: 45:86:cb:a6:19:20:14:38:b8:96:6e:32:a6:13:2c: 5b:42:e1:34:69:b0:93:33:70:3c:bb:b2:ae:fc:e5: a1:6c:e8:06:b2:3d:6c:a0:f8:16:d8:d4:0b:84:ff: c8:bf:28:11:91:30:d0:e6:ff:a9:b8:ca:d8:44:ee: 45:d0:30:00:89:b7:33:eb:18:e5:14:00:66:04:21: bf:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:5F:73:7D:5E:EA:A2:0D:77:7E:4B:B3:D9:63:05:70:40:53:0E:A3 X509v3 Authority Key Identifier: keyid:E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:0b:e6:39:b1:a4:77:67:ab:44:95:8a:91:77:dd:32:af:78: 19:a4:87:2c:3a:6d:e3:c0:3a:06:f1:5c:9b:38:7b:d0:65:20: 58:78:b2:6d:ce:a8:98:38:6f:57:d4:0e:e0:e7:ca:16:ab:5d: 65:0e:36:0a:06:e3:0e:9c:65:a4:56:c2:d3:0f:77:6a:1f:b1: ea:24:dc:07:02:a6:2b:cb:27:a0:ca:63:ee:6f:6f:fe:a8:c0: 9f:f0:b3:2d:a3:0d:1e:13:c7:51:e8:dd:3c:7d:95:f8:b8:68: 6b:bf:5b:30:28:25:9a:e9:17:25:84:fe:22:d9:22:ed:77:c5: 42:dd:fd:81:57:58:64:72:75:26:4d:0d:fb:ca:3b:6f:53:c7: 6d:a8:5e:9c:26:30:fc:15:66:ed:5e:ea:06:ff:3b:37:ca:c0: 14:69:59:9f:f0:74:b6:e3:9c:7f:ce:87:e4:f3:92:e5:18:5c: ba:48:50:29:4f:f8:0c:0b:71:cf:ad:d4:93:8a:04:77:9a:65: 52:61:14:3e:ac:c6:fe:50:ea:0f:a7:28:6c:2b:48:65:c5:ff: 77:ca:24:71:91:be:52:00:12:71:8c:dd:41:4d:43:ed:6b:a5: d2:19:44:1e:0b:c4:d9:c2:91:73:71:63:aa:0e:88:e7:c6:84: 39:fb:85:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTREMkUxMTAvBgNVBAUTKEU0M0M4MjFGQkI5Q0VFQTY3RUJBN0EyRTUwNUNDNURE N0Y3NjYwNTUwHhcNMjQwNTE2MjA0ODQyWhcNMjQwNTIzMjA0ODQyWjAYMRYwFAYD VQQDEw02NjQ2NzEyYS02Yzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWVJ3TdPBd/ofnVKLEJK5gUnBT3vqIr+ynHhzlJYxoU3oUCzW8S50M+a0xvW doYVE0rwYy+aSFBgGxUgttoJHdtuZelaUSXSPVVkULFbD59jznZ5sZ8hscCLEQl7 ehougf0IrbproEvJT/hGEjHnztHa+waWQMukRVDxU4LnwS1qYRyFfSZquo0ZKiSZ M2GucKB7wErT/VwQe61RO/r2dpAr45hqZ0HliMN+4YUMz84VzHtFhsumGSAUOLiW bjKmEyxbQuE0abCTM3A8u7Ku/OWhbOgGsj1soPgW2NQLhP/IvygRkTDQ5v+puMrY RO5F0DAAibcz6xjlFABmBCG/kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9fc31e 6qINd35Ls9ljBXBAUw6jMB8GA1UdIwQYMBaAFOQ8gh+7nO6mfrp6LlBcxd1/dmBV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQyRS8wRkUxOUM2QzUx MUUxMUVBQjgxODI1ODBDNEY5QUUwMi81RHlDSDd1YzdxWi11bm91VUZ6RjNYOTJZ RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVEeUNIN3VjN3FaLXVub3VVRnpGM1g5MllGVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEQyRS8wRkUxOUM2QzUxMUUxMUVBQjgxODI1ODBDNEY5QUUwMi81RHlDSDd1Yzdx Wi11bm91VUZ6RjNYOTJZRlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/C+Y5saR3Z6tElYqRd90yr3gZpIcsOm3jwDoG8VybOHvQZSBYeLJt zqiYOG9X1A7g58oWq11lDjYKBuMOnGWkVsLTD3dqH7HqJNwHAqYryyegymPub2/+ qMCf8LMtow0eE8dR6N08fZX4uGhrv1swKCWa6RclhP4i2SLtd8VC3f2BV1hkcnUm TQ37yjtvU8dtqF6cJjD8FWbtXuoG/zs3ysAUaVmf8HS245x/zofk85LlGFy6SFAp T/gMC3HPrdSTigR3mmVSYRQ+rMb+UOoPpyhsK0hlxf93yiRxkb5SABJxjN1BTUPt a6XSGUQeC8TZwpFzcWOqDojnxoQ5+4WC -----END CERTIFICATE-----Generated at Thu May 16 21:45:25 2024 by rpki-client on console-fra.rpki-client.org