$ rpki-client -vvf rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft File: 5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft (raw, json) Hash identifier: iiFS83AAnPXi+vsv7QK/ppmIj88k12dp2XUCvT0EQEo= Subject key identifier: AF:D4:43:0A:51:A5:FD:CE:E1:D3:B7:80:3D:74:82:50:4C:D4:3F:89 Authority key identifier: E6:A5:4B:AD:7D:17:6E:44:47:A9:E9:4F:24:48:03:27:C1:B4:0C:9E Certificate issuer: /CN=A91293F4/serialNumber=E6A54BAD7D176E4447A9E94F24480327C1B40C9E Certificate serial: 08C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft Manifest number: 08BE Signing time: Sat 18 May 2024 21:26:16 +0000 Manifest this update: Sat 18 May 2024 21:26:16 +0000 Manifest next update: Sat 25 May 2024 21:26:16 +0000 Files and hashes: 1: 5qVLrX0XbkRHqelPJEgDJ8G0DJ4.crl (hash: wTrq0DurK2t/fWpAtIhmp9dp0/TD6l1+b6htCiI6wfQ=) 2: 3E730FA28E8111EAB2038B6BC4F9AE02.roa (hash: L0mS4wob8uYeqyIh2zngdWdPiGJkyvyMSBMfCc/SXKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.crl rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2243 (0x8c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91293F4/serialNumber=E6A54BAD7D176E4447A9E94F24480327C1B40C9E Validity Not Before: May 18 21:26:16 2024 GMT Not After : May 25 21:26:16 2024 GMT Subject: CN=66491cf8-8b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7e:14:16:d7:86:e1:7c:0b:5c:d5:22:f6:60: 33:56:66:d4:e2:03:3e:59:1f:c1:6a:e9:6e:ff:1f: 40:16:98:86:5b:11:13:b5:fc:24:df:d9:60:e7:92: 61:13:6d:d2:03:f1:66:4a:2e:a3:5b:f0:8e:db:5a: 10:7e:48:9a:4e:9b:6b:27:aa:02:4d:bf:66:07:17: 0a:80:b3:cb:e0:a7:9c:27:c4:e5:72:f4:79:98:4c: 1d:4c:91:04:bf:c1:2f:2f:c0:c3:e0:8b:69:8b:75: 73:1b:56:8f:00:93:af:24:7c:f0:91:55:0a:90:ef: 46:e8:6e:be:3a:c9:26:ad:77:76:f7:e1:85:c2:76: 32:01:1a:0b:06:f5:a4:d2:bf:69:10:92:74:03:ef: 7d:15:e0:ca:15:f0:18:c4:b2:76:2d:5d:86:02:24: a4:ad:b2:8a:80:62:69:f9:79:f2:cb:51:74:7c:6d: c3:39:7e:1c:93:47:30:b4:e9:47:22:4c:a2:87:47: ef:4e:5d:dc:5b:0b:c6:52:f6:44:d1:02:3c:83:49: 59:e8:f3:c4:ec:b1:6a:e0:50:f0:77:0f:df:31:05: d4:76:a0:9b:18:51:bf:fd:25:33:64:5c:19:b5:bf: 47:32:19:67:25:19:1f:7b:87:33:89:50:6a:6c:f2: 36:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D4:43:0A:51:A5:FD:CE:E1:D3:B7:80:3D:74:82:50:4C:D4:3F:89 X509v3 Authority Key Identifier: keyid:E6:A5:4B:AD:7D:17:6E:44:47:A9:E9:4F:24:48:03:27:C1:B4:0C:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:64:0c:1c:da:f6:09:3e:9c:09:17:67:e3:36:6e:a3:db:00: 00:85:05:92:c6:a5:38:70:2c:c3:fe:02:e2:77:8f:d0:34:12: ea:4f:49:69:61:74:ae:f5:14:a6:b9:9e:a3:7a:d4:96:6d:b6: b6:a3:c9:48:53:d9:7a:05:7d:ce:ba:7e:13:7c:33:7b:af:00: 7d:cb:f6:73:ce:d3:8f:45:3d:aa:a4:94:9d:2f:84:34:5a:af: e0:e7:f9:36:27:8f:a5:2d:02:3a:fa:84:da:7c:bc:60:5f:7f: 91:01:8b:68:97:68:de:73:de:3d:a8:4f:35:f4:62:94:f6:06: 9f:fc:6b:ed:77:fd:37:ab:c3:e7:f2:b6:1d:bd:13:b5:6b:e9: 06:67:fd:15:3c:08:a7:c5:b2:e8:3f:36:bd:02:09:e8:0b:39: 6e:65:26:b3:44:c0:63:3a:39:65:fa:53:c3:39:fc:73:cd:c7: cc:a1:dc:d4:88:1c:83:bd:63:49:be:11:0d:6c:07:b8:27:0f: 36:d8:78:52:bc:ad:cd:d9:17:73:10:9a:59:0e:70:69:7b:a7: b9:c6:01:3e:68:1f:7b:99:fd:3f:4a:f4:31:3e:d1:f6:62:62: 89:9c:a2:9f:c1:80:ba:e7:08:67:c6:72:3b:c4:ec:10:43:f3: 01:0f:e1:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkzRjQxMTAvBgNVBAUTKEU2QTU0QkFEN0QxNzZFNDQ0N0E5RTk0RjI0NDgwMzI3 QzFCNDBDOUUwHhcNMjQwNTE4MjEyNjE2WhcNMjQwNTI1MjEyNjE2WjAYMRYwFAYD VQQDEw02NjQ5MWNmOC04YjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwH4UFteG4XwLXNUi9mAzVmbU4gM+WR/Baulu/x9AFpiGWxETtfwk39lg55Jh E23SA/FmSi6jW/CO21oQfkiaTptrJ6oCTb9mBxcKgLPL4KecJ8TlcvR5mEwdTJEE v8EvL8DD4Itpi3VzG1aPAJOvJHzwkVUKkO9G6G6+OskmrXd29+GFwnYyARoLBvWk 0r9pEJJ0A+99FeDKFfAYxLJ2LV2GAiSkrbKKgGJp+Xnyy1F0fG3DOX4ck0cwtOlH Ikyih0fvTl3cWwvGUvZE0QI8g0lZ6PPE7LFq4FDwdw/fMQXUdqCbGFG//SUzZFwZ tb9HMhlnJRkfe4cziVBqbPI2NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/UQwpR pf3O4dO3gD10glBM1D+JMB8GA1UdIwQYMBaAFOalS619F25ER6npTyRIAyfBtAye MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTNGNC8xRjY5NUVFQzhF N0YxMUVBQTk1ODRDNjdDNEY5QUUwMi81cVZMclgwWGJrUkhxZWxQSkVnREo4RzBE SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVxVkxyWDBYYmtSSHFlbFBKRWdESjhHMERKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTNGNC8xRjY5NUVFQzhFN0YxMUVBQTk1ODRDNjdDNEY5QUUwMi81cVZMclgwWGJr UkhxZWxQSkVnREo4RzBESjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhZAwc2vYJPpwJF2fjNm6j2wAAhQWSxqU4cCzD/gLid4/QNBLqT0lp YXSu9RSmuZ6jetSWbba2o8lIU9l6BX3Oun4TfDN7rwB9y/ZzztOPRT2qpJSdL4Q0 Wq/g5/k2J4+lLQI6+oTafLxgX3+RAYtol2jec949qE819GKU9gaf/Gvtd/03q8Pn 8rYdvRO1a+kGZ/0VPAinxbLoPza9AgnoCzluZSazRMBjOjll+lPDOfxzzcfModzU iByDvWNJvhENbAe4Jw822HhSvK3N2RdzEJpZDnBpe6e5xgE+aB97mf0/SvQxPtH2 YmKJnKKfwYC65whnxnI7xOwQQ/MBD+Ff -----END CERTIFICATE-----Generated at Sat May 18 22:27:53 2024 by rpki-client on console-ams.rpki-client.org