$ rpki-client -vvf rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft File: 5B7XVgdLN63ceU-UC9H1Pj9na5M.mft (raw, json) Hash identifier: zy0mkP0SlQvVX6zNiBHTWgWgUX+1WOSn0chLy9D5FD8= Subject key identifier: 62:3C:BE:EB:C1:FC:CA:E4:86:46:B8:29:0D:04:EE:4A:09:98:42:31 Authority key identifier: E4:1E:D7:56:07:4B:37:AD:DC:79:4F:94:0B:D1:F5:3E:3F:67:6B:93 Certificate issuer: /CN=A913B5C7/serialNumber=E41ED756074B37ADDC794F940BD1F53E3F676B93 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft Manifest number: 1E Signing time: Sun 19 May 2024 08:38:40 +0000 Manifest this update: Sun 19 May 2024 08:38:39 +0000 Manifest next update: Sun 26 May 2024 08:38:39 +0000 Files and hashes: 1: 5B7XVgdLN63ceU-UC9H1Pj9na5M.crl (hash: mMAPg/eQdWIn3uIYU3Ymsnfft8VWXIk0YTgSqbwt964=) 2: B0CE94A0E80911EEADE3420AC4F9AE02.roa (hash: xeBdZEDygAkJP3gWk8DQnl/NecYbqaLYzhSDka+Be5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.crl rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B5C7/serialNumber=E41ED756074B37ADDC794F940BD1F53E3F676B93 Validity Not Before: May 19 08:38:39 2024 GMT Not After : May 26 08:38:39 2024 GMT Subject: CN=6649ba8f-d6cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2b:21:f7:1f:73:c6:cb:b0:41:f2:cd:88:74: 43:b4:c5:fb:fd:97:d0:b0:1d:c4:5f:cc:57:61:14: 30:d0:52:c7:67:e3:e4:50:b9:04:30:00:b0:75:80: 66:f1:89:80:5f:2d:da:36:99:8f:c1:c4:a8:a6:8e: 96:a8:b8:7f:29:11:d4:76:e4:7c:bd:ab:99:7f:cb: dc:6b:f5:67:3e:4c:9f:c3:1d:ab:76:71:b2:04:81: 5b:fb:98:70:fb:93:b7:da:8d:6e:70:2d:fe:87:6e: 5a:74:a9:3a:f8:7c:f6:01:b5:a5:24:4e:31:35:9b: a7:51:7b:c3:74:d6:e0:c4:8a:f7:24:c3:d5:4b:c3: 08:bb:04:88:b7:89:86:4c:91:d9:c5:ce:fa:55:de: 69:f0:01:3a:51:39:19:67:11:d2:bb:ec:05:88:9e: 2c:dd:f2:4f:4a:02:d8:cf:f4:d9:64:c5:19:0f:92: 5d:92:3d:72:a1:77:92:54:bc:98:7c:7b:35:72:79: 0a:87:88:71:84:68:a5:ea:c4:ea:05:e4:11:63:fd: ef:f6:05:94:cf:d2:34:ed:da:86:2b:ac:b3:17:23: 95:a5:94:12:38:65:aa:5c:3e:50:5c:e9:80:08:c1: 34:6b:e1:e6:46:28:9a:fa:61:a5:0b:39:af:c7:d1: 62:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:3C:BE:EB:C1:FC:CA:E4:86:46:B8:29:0D:04:EE:4A:09:98:42:31 X509v3 Authority Key Identifier: keyid:E4:1E:D7:56:07:4B:37:AD:DC:79:4F:94:0B:D1:F5:3E:3F:67:6B:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f4:67:41:d9:f2:62:15:73:fa:b0:a2:87:e3:91:07:a5:ce:9f: cc:07:ba:87:c8:42:18:cd:07:11:4d:dc:7a:20:08:d9:0f:d7: fa:1a:0e:32:a5:f6:e5:b9:c0:e6:1b:cc:a5:63:c2:17:20:16: c3:fa:d2:3f:3a:13:ff:7c:af:dc:35:58:7a:38:87:a3:b7:99: 25:fa:d8:04:a8:75:91:93:9e:2f:db:09:f7:ab:63:69:a2:57: ed:77:38:39:4d:a9:17:a9:b4:a8:62:31:e5:00:89:6f:65:52: 1d:c8:9f:d2:2f:83:52:cf:5b:5e:e9:a9:23:3d:a8:3f:48:36: d9:05:bb:78:cf:47:17:7a:c9:25:44:61:11:d9:1b:c3:79:e6: 84:32:db:d1:76:e0:07:01:44:e2:f6:74:b0:a3:65:98:d8:9c: 1b:4b:45:98:b3:97:f7:d2:d7:68:64:b2:64:e6:2f:fb:5c:a6: a7:bf:a6:b2:2d:88:59:09:34:26:d5:70:ac:57:78:42:d5:27: 8e:f6:f8:b8:6d:39:12:8e:79:00:4f:43:1b:54:b2:b0:5d:35: 79:9f:bf:98:a7:ea:5d:17:01:d3:96:58:91:59:fa:da:8a:0c: e3:68:70:b4:75:8d:1b:00:84:03:e1:04:cb:a3:72:14:6c:d8: e0:0e:2f:74 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjVDNzExMC8GA1UEBRMoRTQxRUQ3NTYwNzRCMzdBRERDNzk0Rjk0MEJEMUY1M0Uz RjY3NkI5MzAeFw0yNDA1MTkwODM4MzlaFw0yNDA1MjYwODM4MzlaMBgxFjAUBgNV BAMTDTY2NDliYThmLWQ2Y2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzKyH3H3PGy7BB8s2IdEO0xfv9l9CwHcRfzFdhFDDQUsdn4+RQuQQwALB1gGbx iYBfLdo2mY/BxKimjpaouH8pEdR25Hy9q5l/y9xr9Wc+TJ/DHat2cbIEgVv7mHD7 k7fajW5wLf6Hblp0qTr4fPYBtaUkTjE1m6dRe8N01uDEivckw9VLwwi7BIi3iYZM kdnFzvpV3mnwATpRORlnEdK77AWInizd8k9KAtjP9NlkxRkPkl2SPXKhd5JUvJh8 ezVyeQqHiHGEaKXqxOoF5BFj/e/2BZTP0jTt2oYrrLMXI5WllBI4ZapcPlBc6YAI wTRr4eZGKJr6YaULOa/H0WJlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYjy+68H8 yuSGRrgpDQTuSgmYQjEwHwYDVR0jBBgwFoAU5B7XVgdLN63ceU+UC9H1Pj9na5Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCNUM3LzY3RDI0Mzk2RTgw OTExRUVCRTQ4OTU2M0M0RjlBRTAyLzVCN1hWZ2RMTjYzY2VVLVVDOUgxUGo5bmE1 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNUI3WFZnZExONjNjZVUtVUM5SDFQajluYTVNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC NUM3LzY3RDI0Mzk2RTgwOTExRUVCRTQ4OTU2M0M0RjlBRTAyLzVCN1hWZ2RMTjYz Y2VVLVVDOUgxUGo5bmE1TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAPRnQdnyYhVz+rCih+ORB6XOn8wHuofIQhjNBxFN3HogCNkP1/oaDjKl 9uW5wOYbzKVjwhcgFsP60j86E/98r9w1WHo4h6O3mSX62ASodZGTni/bCferY2mi V+13ODlNqReptKhiMeUAiW9lUh3In9Ivg1LPW17pqSM9qD9INtkFu3jPRxd6ySVE YRHZG8N55oQy29F24AcBROL2dLCjZZjYnBtLRZizl/fS12hksmTmL/tcpqe/prIt iFkJNCbVcKxXeELVJ472+LhtORKOeQBPQxtUsrBdNXmfv5in6l0XAdOWWJFZ+tqK DONocLR1jRsAhAPhBMujchRs2OAOL3Q= -----END CERTIFICATE-----Generated at Sun May 19 09:04:13 2024 by rpki-client on console-fra.rpki-client.org