$ rpki-client -vvf rpki.apnic.net/member_repository/A91395A9/67AEDE8C5D1911E88DDE393EC4F9AE02/5jDCE_s_sWBgfLvlwGkHwL7Exfg.mft File: 5jDCE_s_sWBgfLvlwGkHwL7Exfg.mft (raw, json) Hash identifier: eBEYSwW7vbvGSWXHyDweZQSxbVttjETltox+z2jZDSE= Subject key identifier: 42:B1:CD:A9:9F:F7:A5:91:1D:5D:07:AB:20:9A:03:E0:DB:E4:B8:BE Authority key identifier: E6:30:C2:13:FB:3F:B1:60:60:7C:BB:E5:C0:69:07:C0:BE:C4:C5:F8 Certificate issuer: /CN=A91395A9/serialNumber=E630C213FB3FB160607CBBE5C06907C0BEC4C5F8 Certificate serial: 13F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jDCE_s_sWBgfLvlwGkHwL7Exfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91395A9/67AEDE8C5D1911E88DDE393EC4F9AE02/5jDCE_s_sWBgfLvlwGkHwL7Exfg.mft Manifest number: 1B01 Signing time: Sat 18 May 2024 17:26:58 +0000 Manifest this update: Sat 18 May 2024 17:26:57 +0000 Manifest next update: Sat 25 May 2024 17:26:57 +0000 Files and hashes: 1: 5jDCE_s_sWBgfLvlwGkHwL7Exfg.crl (hash: XDf3nGbHHVlDCOmEk1B7k0W1Vzw7ki3NssG8+TRtKXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91395A9/67AEDE8C5D1911E88DDE393EC4F9AE02/5jDCE_s_sWBgfLvlwGkHwL7Exfg.crl rsync://rpki.apnic.net/member_repository/A91395A9/67AEDE8C5D1911E88DDE393EC4F9AE02/5jDCE_s_sWBgfLvlwGkHwL7Exfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jDCE_s_sWBgfLvlwGkHwL7Exfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5105 (0x13f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91395A9/serialNumber=E630C213FB3FB160607CBBE5C06907C0BEC4C5F8 Validity Not Before: May 18 17:26:57 2024 GMT Not After : May 25 17:26:57 2024 GMT Subject: CN=6648e4e2-e234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fe:0b:97:ce:8e:d9:31:58:10:88:cc:1f:da: 27:b8:4b:ca:af:16:73:ad:87:c5:df:4e:f9:81:43: f1:ef:d2:2e:dd:fa:1f:32:e3:0e:30:8a:19:d6:dc: 3c:ee:b1:d6:c2:ba:d9:40:02:62:37:e3:1d:d3:bd: ec:2e:24:9e:31:54:db:0a:f6:86:ee:78:e7:ae:b7: ba:07:e0:f4:2a:26:fc:be:5e:5d:2d:64:d5:64:7f: 3b:fa:7a:fa:9e:00:c1:df:ab:2f:55:cd:c8:30:67: a1:60:70:cb:16:74:30:47:0f:1c:d3:0a:83:9a:3a: 90:57:61:c6:a7:22:e7:40:b6:59:b3:30:c9:24:4b: d2:c0:af:41:a0:93:98:a2:66:5e:50:a5:aa:48:dc: 90:e6:7e:37:d9:b8:e9:0d:7b:a0:de:23:9a:35:a5: d0:d4:d2:e5:38:2a:bc:c6:9e:78:4a:50:b5:97:42: 64:e6:b2:da:ef:75:3a:ef:a5:0a:43:d0:bb:25:cf: 35:9a:65:f8:58:92:b9:d2:52:73:80:04:97:04:e8: 97:af:71:17:0c:eb:a4:76:77:78:9c:b1:9f:f8:6b: 83:4f:8e:8c:af:33:3e:68:14:de:81:6e:f0:27:06: 74:90:9b:fa:b2:dd:15:38:78:70:33:a1:dd:b3:70: 4b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B1:CD:A9:9F:F7:A5:91:1D:5D:07:AB:20:9A:03:E0:DB:E4:B8:BE X509v3 Authority Key Identifier: keyid:E6:30:C2:13:FB:3F:B1:60:60:7C:BB:E5:C0:69:07:C0:BE:C4:C5:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91395A9/67AEDE8C5D1911E88DDE393EC4F9AE02/5jDCE_s_sWBgfLvlwGkHwL7Exfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jDCE_s_sWBgfLvlwGkHwL7Exfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91395A9/67AEDE8C5D1911E88DDE393EC4F9AE02/5jDCE_s_sWBgfLvlwGkHwL7Exfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:da:22:5e:f2:0f:0c:4d:df:74:4c:40:9f:b1:ec:fc:57:a8: ee:fd:8d:d1:2c:57:cd:c5:99:d0:18:c1:59:e6:a6:3f:f0:b1: 75:86:32:8d:1c:8a:6c:f3:f5:7d:c3:5e:ba:ea:82:71:90:33: dd:5a:7f:67:54:88:90:99:6a:18:3b:ab:9b:c4:df:3a:de:bb: ed:89:41:b1:95:ea:b2:cd:64:3a:56:1f:1f:0d:17:c2:dc:d7: 86:68:83:3d:59:ca:11:ab:d0:dd:9a:48:6b:97:55:0c:a4:54: f8:4d:ab:58:12:c7:12:93:17:9b:bb:f8:1e:85:ea:d3:bb:21: fd:94:71:5c:cf:0a:bf:c1:bb:89:e6:c4:55:d5:5d:62:ac:8a: 92:f0:c0:06:c3:d9:ee:71:2c:ce:02:1b:85:e9:82:54:5f:65: ee:77:57:79:74:f8:eb:ff:de:e3:7a:b0:78:ca:d0:90:0a:9f: 1f:5e:8a:43:c4:27:0f:56:f3:2e:17:3e:77:28:5e:46:35:79: 17:be:58:4d:82:f1:26:17:61:e5:a7:ff:69:3d:3b:3e:ff:4e: 26:2d:4d:01:d5:37:73:10:d7:e5:03:00:b0:c2:c3:f2:c8:76: b0:23:59:c2:19:f5:ad:17:39:6f:e0:20:bd:8c:80:00:04:bd: 5e:a3:2c:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk1QTkxMTAvBgNVBAUTKEU2MzBDMjEzRkIzRkIxNjA2MDdDQkJFNUMwNjkwN0Mw QkVDNEM1RjgwHhcNMjQwNTE4MTcyNjU3WhcNMjQwNTI1MTcyNjU3WjAYMRYwFAYD VQQDEw02NjQ4ZTRlMi1lMjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtv4Ll86O2TFYEIjMH9onuEvKrxZzrYfF3075gUPx79Iu3fofMuMOMIoZ1tw8 7rHWwrrZQAJiN+Md073sLiSeMVTbCvaG7njnrre6B+D0Kib8vl5dLWTVZH87+nr6 ngDB36svVc3IMGehYHDLFnQwRw8c0wqDmjqQV2HGpyLnQLZZszDJJEvSwK9BoJOY omZeUKWqSNyQ5n432bjpDXug3iOaNaXQ1NLlOCq8xp54SlC1l0Jk5rLa73U676UK Q9C7Jc81mmX4WJK50lJzgASXBOiXr3EXDOukdnd4nLGf+GuDT46MrzM+aBTegW7w JwZ0kJv6st0VOHhwM6Hds3BLYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKxzamf 96WRHV0HqyCaA+Db5Li+MB8GA1UdIwQYMBaAFOYwwhP7P7FgYHy75cBpB8C+xMX4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTVBOS82N0FFREU4QzVE MTkxMUU4OERERTM5M0VDNEY5QUUwMi81akRDRV9zX3NXQmdmTHZsd0drSHdMN0V4 ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVqRENFX3Nfc1dCZ2ZMdmx3R2tId0w3RXhmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTVBOS82N0FFREU4QzVEMTkxMUU4OERERTM5M0VDNEY5QUUwMi81akRDRV9zX3NX QmdmTHZsd0drSHdMN0V4ZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI2iJe8g8MTd90TECfsez8V6ju/Y3RLFfNxZnQGMFZ5qY/8LF1hjKN HIps8/V9w1666oJxkDPdWn9nVIiQmWoYO6ubxN863rvtiUGxleqyzWQ6Vh8fDRfC 3NeGaIM9WcoRq9Ddmkhrl1UMpFT4TatYEscSkxebu/geherTuyH9lHFczwq/wbuJ 5sRV1V1irIqS8MAGw9nucSzOAhuF6YJUX2Xud1d5dPjr/97jerB4ytCQCp8fXopD xCcPVvMuFz53KF5GNXkXvlhNgvEmF2Hlp/9pPTs+/04mLU0B1TdzENflAwCwwsPy yHawI1nCGfWtFzlv4CC9jIAABL1eoyzX -----END CERTIFICATE-----Generated at Sat May 18 18:21:35 2024 by rpki-client on console-ams.rpki-client.org