$ rpki-client -vvf rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.mft File: 5v6wYDITaH99TA3YxdHl8ycflmo.mft (raw, json) Hash identifier: kt67DYElz3YMYQkCNoCPyF779axE3wDohDoW9fsKguI= Subject key identifier: C6:EE:F9:19:D1:87:C9:5C:B7:9B:63:2E:F0:50:48:A0:D6:09:77:C4 Authority key identifier: E6:FE:B0:60:32:13:68:7F:7D:4C:0D:D8:C5:D1:E5:F3:27:1F:96:6A Certificate issuer: /CN=A9117602/serialNumber=E6FEB0603213687F7D4C0DD8C5D1E5F3271F966A Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5v6wYDITaH99TA3YxdHl8ycflmo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.mft Manifest number: 2E Signing time: Sun 19 May 2024 08:24:24 +0000 Manifest this update: Sun 19 May 2024 08:24:23 +0000 Manifest next update: Sun 26 May 2024 08:24:23 +0000 Files and hashes: 1: 5v6wYDITaH99TA3YxdHl8ycflmo.crl (hash: Abk+ii0ZZqj0qUHFv7GDUrzCTMp5yPnzQRdESPBfz6E=) 2: 1EF0CB38CEFB11EE9D1FB686C4F9AE02.roa (hash: amScCNDvmRytT4S33Dc63FWn1EqiRIQ/HKmNXcwZPn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.crl rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5v6wYDITaH99TA3YxdHl8ycflmo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117602/serialNumber=E6FEB0603213687F7D4C0DD8C5D1E5F3271F966A Validity Not Before: May 19 08:24:23 2024 GMT Not After : May 26 08:24:23 2024 GMT Subject: CN=6649b738-4c67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a2:c9:ae:e4:1c:e6:b7:e4:fd:48:2f:81:68: ca:d7:11:a9:c7:ff:8a:07:8e:82:f0:18:5e:42:82: 62:de:5d:59:90:d9:a9:71:3d:c8:42:9f:30:98:47: 44:78:3e:86:55:70:1f:75:62:3b:5a:05:6d:8f:b7: cd:6b:b7:d4:76:7f:3b:25:26:96:4d:ef:18:86:3e: 47:ed:17:12:38:d0:c2:d3:65:de:1d:24:4c:70:7a: af:71:a0:25:c2:e6:40:78:3a:be:b3:87:7d:5e:62: 4f:ff:31:7c:91:40:a8:0f:68:27:78:a8:74:3f:d1: 42:7d:6d:74:56:f6:bb:a3:80:06:5a:39:2e:e5:80: 75:3d:88:13:f8:f2:1c:02:33:47:e5:54:79:73:93: 6e:18:c1:98:03:86:0c:67:1c:11:64:42:c4:1b:0b: 2e:1b:14:7b:e9:9b:99:19:d3:a3:79:f8:30:51:96: 90:87:83:80:e7:a9:aa:b8:ba:83:1f:ed:f4:45:e7: 47:14:0a:e8:1b:3b:70:a9:bb:cf:a3:48:1b:4c:5f: 89:0c:ae:cb:23:2a:6d:68:11:22:01:7e:29:12:a6: a2:59:be:2c:82:d6:03:31:c2:84:8c:1f:1f:c7:31: fb:29:af:b7:ff:b3:84:f4:b4:1e:0e:2d:39:0d:06: 2d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:EE:F9:19:D1:87:C9:5C:B7:9B:63:2E:F0:50:48:A0:D6:09:77:C4 X509v3 Authority Key Identifier: keyid:E6:FE:B0:60:32:13:68:7F:7D:4C:0D:D8:C5:D1:E5:F3:27:1F:96:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5v6wYDITaH99TA3YxdHl8ycflmo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:48:03:bb:3d:90:d3:95:1f:ff:0c:ad:ab:be:69:ec:df:70: 6e:4c:ad:a3:f7:8d:20:ba:19:10:3f:7f:71:5e:11:9b:6b:0d: 2b:90:b7:a0:69:12:59:48:a0:d2:26:f9:b8:a8:d0:3b:a1:d3: d2:f8:f1:c4:95:a6:d4:e8:99:96:44:02:d1:f9:21:ae:73:4c: 04:fb:55:5e:00:3f:bb:11:aa:3f:8e:0e:bc:47:db:d4:bc:4a: 7e:fc:34:ca:ed:8c:58:12:25:d9:d8:c6:5e:c4:99:33:92:dc: 0c:6d:4b:7a:2b:dc:d9:37:8d:92:2e:08:3c:a2:a5:e7:05:eb: d7:4f:cd:88:98:5a:8a:10:b5:60:ba:26:8e:17:ed:27:1d:3a: 9e:92:98:ac:20:5b:ae:87:92:87:05:4f:bd:24:ed:04:c9:63: e1:e0:09:96:51:b1:16:27:4f:b4:c9:a7:41:86:2e:10:89:7e: cb:b8:fc:fb:b8:65:ce:28:e2:1e:07:06:66:39:3c:08:34:59: 2b:d7:ab:73:f3:c9:37:d9:c7:10:ca:96:a3:76:24:43:ee:4f: 18:23:c0:28:5c:56:e4:16:75:cf:d9:e7:ac:dc:08:88:41:da: 0b:3d:ef:ed:bd:21:39:ed:34:2b:36:8a:ab:c8:ea:ba:89:8f: b1:be:c7:89 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NzYwMjExMC8GA1UEBRMoRTZGRUIwNjAzMjEzNjg3RjdENEMwREQ4QzVEMUU1RjMy NzFGOTY2QTAeFw0yNDA1MTkwODI0MjNaFw0yNDA1MjYwODI0MjNaMBgxFjAUBgNV BAMTDTY2NDliNzM4LTRjNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9osmu5Bzmt+T9SC+BaMrXEanH/4oHjoLwGF5CgmLeXVmQ2alxPchCnzCYR0R4 PoZVcB91YjtaBW2Pt81rt9R2fzslJpZN7xiGPkftFxI40MLTZd4dJExweq9xoCXC 5kB4Or6zh31eYk//MXyRQKgPaCd4qHQ/0UJ9bXRW9rujgAZaOS7lgHU9iBP48hwC M0flVHlzk24YwZgDhgxnHBFkQsQbCy4bFHvpm5kZ06N5+DBRlpCHg4Dnqaq4uoMf 7fRF50cUCugbO3Cpu8+jSBtMX4kMrssjKm1oESIBfikSpqJZviyC1gMxwoSMHx/H Mfspr7f/s4T0tB4OLTkNBi3lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxu75GdGH yVy3m2Mu8FBIoNYJd8QwHwYDVR0jBBgwFoAU5v6wYDITaH99TA3YxdHl8ycflmow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3NjAyL0FFQkM1Q0Y2Q0VG QTExRUU5N0Y4OEM4NUM0RjlBRTAyLzV2NndZRElUYUg5OVRBM1l4ZEhsOHljZmxt by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNXY2d1lESVRhSDk5VEEzWXhkSGw4eWNmbG1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 NjAyL0FFQkM1Q0Y2Q0VGQTExRUU5N0Y4OEM4NUM0RjlBRTAyLzV2NndZRElUYUg5 OVRBM1l4ZEhsOHljZmxtby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADZIA7s9kNOVH/8Mrau+aezfcG5MraP3jSC6GRA/f3FeEZtrDSuQt6Bp EllIoNIm+bio0Duh09L48cSVptTomZZEAtH5Ia5zTAT7VV4AP7sRqj+ODrxH29S8 Sn78NMrtjFgSJdnYxl7EmTOS3AxtS3or3Nk3jZIuCDyipecF69dPzYiYWooQtWC6 Jo4X7ScdOp6SmKwgW66HkocFT70k7QTJY+HgCZZRsRYnT7TJp0GGLhCJfsu4/Pu4 Zc4o4h4HBmY5PAg0WSvXq3PzyTfZxxDKlqN2JEPuTxgjwChcVuQWdc/Z56zcCIhB 2gs97+29ITntNCs2iqvI6rqJj7G+x4k= -----END CERTIFICATE-----Generated at Sun May 19 09:04:12 2024 by rpki-client on console-fra.rpki-client.org