$ rpki-client -vvf rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft File: 5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft (raw, json) Hash identifier: TdpVCJXP/cu8UoyU6yibtWibjhsT+kWSwUy70UXAXLY= Subject key identifier: 82:FD:B0:29:E0:86:CA:D4:F0:39:71:69:56:BA:D4:CE:1D:70:46:1F Authority key identifier: E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18 Certificate issuer: /CN=A91367E0/serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818 Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft Manifest number: 8C Signing time: Sun 19 May 2024 07:04:14 +0000 Manifest this update: Sun 19 May 2024 07:04:14 +0000 Manifest next update: Sun 26 May 2024 07:04:14 +0000 Files and hashes: 1: 5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl (hash: eEFjgw3zA3LVwtr00zAGcBinMHO0uzUDx2/V707ThFk=) 2: 444EB35A459D11EEA8758641C4F9AE02.roa (hash: HFjFUtVHPNW7Qd56uS2rL+sndelmlhgFQUxhT/KgfFM=) 3: 57F3935045A011EEA9A5215EC4F9AE02.roa (hash: uVCsPTEKvx7XpzG0ppDtvL1K8RxPyB9GI7QJ+Zk5c9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91367E0/serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818 Validity Not Before: May 19 07:04:14 2024 GMT Not After : May 26 07:04:14 2024 GMT Subject: CN=6649a46e-7cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6e:22:4b:ef:bd:6a:5b:b0:5c:5b:6c:0d:08: 61:98:b2:a6:e1:a4:3b:c9:0b:17:7d:dc:37:35:72: 3f:a4:bf:4e:4f:dc:ac:78:38:f5:4a:47:f9:47:bf: f1:71:c0:72:c3:c3:1f:b6:54:54:94:f7:b9:44:15: 43:a3:d9:2e:bb:38:a1:db:e8:2d:d4:dd:bd:69:00: a3:a1:15:54:0f:02:16:dc:19:ea:f6:66:89:27:13: b3:7d:6c:4f:77:fa:d2:57:35:d0:11:0e:96:b4:b9: 40:42:97:57:06:85:df:79:18:58:2b:68:ec:0d:94: 42:9f:4a:5a:be:1c:03:f8:cd:cb:47:20:42:30:cc: dd:88:9d:70:9c:6e:7f:d1:a2:fe:b8:b9:10:76:65: 32:e2:cd:5d:63:69:c7:c5:c4:b7:8d:8f:8f:da:10: 30:8e:d4:a2:e9:4f:69:4f:93:4f:d0:64:3a:c1:a6: 55:8a:f4:5f:f0:60:3f:24:2f:54:8f:c3:a1:70:75: 0b:b1:32:e8:9d:8e:78:1b:83:7b:3a:54:15:e1:0a: fb:ea:17:07:2f:c9:f7:5e:5d:e5:88:9c:70:86:1a: af:28:81:65:ef:f0:1d:45:50:ff:f9:09:4c:81:88: 34:f0:3e:e1:9b:ee:b0:bf:d0:60:09:6c:a8:05:08: ef:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FD:B0:29:E0:86:CA:D4:F0:39:71:69:56:BA:D4:CE:1D:70:46:1F X509v3 Authority Key Identifier: keyid:E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:9d:39:9d:02:8c:75:87:42:08:19:0a:cd:74:a8:97:78:12: f4:8e:5a:93:86:fc:e6:81:5f:7f:de:b1:e0:61:cc:ba:a7:c1: b5:0b:77:08:85:7d:73:d9:15:aa:e7:c1:ad:b2:ef:25:8c:ae: aa:47:58:78:5a:55:c8:35:c7:7c:1b:33:ad:f4:0f:49:da:3a: ed:bf:5d:ee:d8:36:b0:90:ac:32:ed:c2:a3:39:cf:50:2c:1e: e7:a2:40:34:2b:46:1f:09:26:e6:8c:12:21:cd:84:70:95:57: 57:ad:67:81:4b:07:30:fc:96:e8:04:0e:e1:ed:81:88:33:af: 55:72:a7:61:92:0c:17:49:10:6c:e0:b9:fe:3a:cc:c8:24:6e: 92:bf:9c:a5:c3:38:84:88:ed:26:de:d2:a8:30:b5:a5:be:cc: e2:b2:ae:e7:bd:f0:c3:35:5b:80:62:bb:ab:18:82:57:7a:fb: d8:1d:6e:43:ac:3f:9f:43:9d:4a:f6:db:eb:e4:45:e2:21:90: 0a:53:db:2b:b6:bc:2b:7f:d4:ff:6e:14:c8:cd:03:ae:86:59: 89:c4:36:f4:c6:bb:8e:78:5f:ce:d5:2e:e7:ae:91:ee:2b:91: 74:a4:f1:da:a0:e3:98:92:bb:63:a6:bd:7b:43:d9:57:b6:7b: f5:f4:91:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY3RTAxMTAvBgNVBAUTKEU2MUJFQzEzOTI4NjMyODNEQzk5RTJGRjkzMTU3NUEz MTgxQzI4MTgwHhcNMjQwNTE5MDcwNDE0WhcNMjQwNTI2MDcwNDE0WjAYMRYwFAYD VQQDEw02NjQ5YTQ2ZS03Y2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoW4iS++9aluwXFtsDQhhmLKm4aQ7yQsXfdw3NXI/pL9OT9yseDj1Skf5R7/x ccByw8MftlRUlPe5RBVDo9kuuzih2+gt1N29aQCjoRVUDwIW3Bnq9maJJxOzfWxP d/rSVzXQEQ6WtLlAQpdXBoXfeRhYK2jsDZRCn0pavhwD+M3LRyBCMMzdiJ1wnG5/ 0aL+uLkQdmUy4s1dY2nHxcS3jY+P2hAwjtSi6U9pT5NP0GQ6waZVivRf8GA/JC9U j8OhcHULsTLonY54G4N7OlQV4Qr76hcHL8n3Xl3liJxwhhqvKIFl7/AdRVD/+QlM gYg08D7hm+6wv9BgCWyoBQjv/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIL9sCng hsrU8DlxaVa61M4dcEYfMB8GA1UdIwQYMBaAFOYb7BOShjKD3Jni/5MVdaMYHCgY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjdFMC9FNDE4OTkxMDQ1 OUMxMUVFQjY5RDY4MzFDNEY5QUUwMi81aHZzRTVLR01vUGNtZUxfa3hWMW94Z2NL QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVodnNFNUtHTW9QY21lTF9reFYxb3hnY0tCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjdFMC9FNDE4OTkxMDQ1OUMxMUVFQjY5RDY4MzFDNEY5QUUwMi81aHZzRTVLR01v UGNtZUxfa3hWMW94Z2NLQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjnTmdAox1h0IIGQrNdKiXeBL0jlqThvzmgV9/3rHgYcy6p8G1C3cI hX1z2RWq58Gtsu8ljK6qR1h4WlXINcd8GzOt9A9J2jrtv13u2DawkKwy7cKjOc9Q LB7nokA0K0YfCSbmjBIhzYRwlVdXrWeBSwcw/JboBA7h7YGIM69VcqdhkgwXSRBs 4Ln+OszIJG6Sv5ylwziEiO0m3tKoMLWlvszisq7nvfDDNVuAYrurGIJXevvYHW5D rD+fQ51K9tvr5EXiIZAKU9srtrwrf9T/bhTIzQOuhlmJxDb0xruOeF/O1S7nrpHu K5F0pPHaoOOYkrtjpr17Q9lXtnv19JFC -----END CERTIFICATE-----Generated at Sun May 19 07:40:38 2024 by rpki-client on console-fra.rpki-client.org