$ rpki-client -vvf rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft File: 5EL5lVmsG6h-4TSLL8evCiL_smE.mft (raw, json) Hash identifier: /0QmyWhZVUobVcYzi3c6XiHqjox0va5pYLY0J9Ymk+g= Subject key identifier: 8B:B6:20:A3:89:19:90:DB:24:11:DB:1D:28:4B:39:22:57:80:F6:E4 Authority key identifier: E4:42:F9:95:59:AC:1B:A8:7E:E1:34:8B:2F:C7:AF:0A:22:FF:B2:61 Certificate issuer: /CN=A9143336/serialNumber=E442F99559AC1BA87EE1348B2FC7AF0A22FFB261 Certificate serial: 2A2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft Manifest number: 2A1E Signing time: Sat 18 May 2024 15:50:13 +0000 Manifest this update: Sat 18 May 2024 15:50:13 +0000 Manifest next update: Sat 25 May 2024 15:50:13 +0000 Files and hashes: 1: 5EL5lVmsG6h-4TSLL8evCiL_smE.crl (hash: 6ZSmcTiluR3C38QgokW1V9eD5DwEyTfheO4Xn51pQQ0=) 2: 5452AC309B4911EB9952394CC4F9AE02.roa (hash: WW8r5VWu3s7zLjRc2MaNw5HuLFwohLxgkcBYESSXNcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.crl rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10796 (0x2a2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143336/serialNumber=E442F99559AC1BA87EE1348B2FC7AF0A22FFB261 Validity Not Before: May 18 15:50:13 2024 GMT Not After : May 25 15:50:13 2024 GMT Subject: CN=6648ce35-69e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:59:02:13:45:58:e0:34:36:83:7e:4e:ea:47: fb:77:36:0d:6c:10:e2:39:f6:a9:6f:4e:dd:02:ac: 1b:15:b0:c9:48:cc:57:07:43:01:7d:ba:7e:3f:66: 2e:83:9f:06:27:e2:61:e5:1f:f2:cf:a3:50:21:6c: 0d:9f:d7:0a:ce:01:51:5d:4d:61:51:f7:f7:a0:5d: ac:14:c5:ff:c7:c1:ca:a9:7d:83:bd:98:66:64:6d: c4:3c:6f:07:35:06:11:85:fe:c7:36:4b:46:3d:dd: 47:d7:e5:e6:b7:8d:44:80:ff:2c:96:bd:d3:30:ab: f4:3e:6d:cf:e4:ca:62:09:5d:5c:db:90:ee:7a:25: 8a:2c:5a:dd:c8:32:f3:ac:9c:fd:f3:3c:e5:6e:b8: d6:e0:96:9a:85:4b:17:ea:52:0f:15:ab:31:95:1a: f0:24:78:54:3c:48:d9:30:62:4b:69:52:55:03:bc: e4:fd:14:43:a7:71:71:c0:eb:84:5e:be:0c:06:76: e6:04:0a:bd:7e:92:e6:1e:a9:24:04:1a:9c:3a:cc: c6:dc:95:a2:c6:0b:49:de:45:38:5a:d5:25:8b:c9: ee:a8:90:da:23:12:d4:01:3d:ea:d6:12:ea:08:11: 44:c3:95:4c:b9:cb:e8:61:e4:29:0e:79:7c:31:23: c2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B6:20:A3:89:19:90:DB:24:11:DB:1D:28:4B:39:22:57:80:F6:E4 X509v3 Authority Key Identifier: keyid:E4:42:F9:95:59:AC:1B:A8:7E:E1:34:8B:2F:C7:AF:0A:22:FF:B2:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:bc:b3:e0:1d:78:c6:15:c3:7b:97:87:e6:c1:51:80:54:99: a5:55:33:70:28:be:5c:57:99:dd:b8:9c:86:56:43:e2:44:50: 15:1b:e6:5e:70:52:3a:89:3e:8c:99:8c:8f:47:bc:6c:0f:f7: 55:08:54:54:ac:1e:13:d7:4a:c9:db:2d:00:c5:99:4e:56:7b: b2:7a:a1:2c:69:cd:5a:0d:eb:42:0b:f6:69:98:3a:94:44:86: 66:eb:d3:ca:5e:ce:bd:5f:1c:a5:a1:b7:92:2b:f8:30:3a:ba: be:a5:fc:ee:36:3b:81:51:71:e3:38:6d:af:55:18:64:3f:1f: 1d:d3:2c:e2:71:6b:ff:25:cf:66:b0:67:85:f7:11:ae:a5:05: a3:b9:a8:5f:21:65:1d:6d:72:d7:d3:17:cd:cf:a5:44:64:a3: 9d:7f:df:ab:5d:2b:ed:63:2f:fa:ad:e7:d9:02:a7:b9:62:e8: a2:0b:5f:dc:b0:95:cf:e5:74:8a:2d:f5:6d:b9:d5:5a:a2:d0: c6:07:dd:b6:a1:40:40:3b:81:04:8b:a1:91:1a:db:0c:7c:ee: 4e:cd:0e:7f:5a:83:6f:88:93:57:3f:59:35:5b:46:85:04:dd: da:89:ce:80:a4:ea:6a:60:aa:81:64:0a:2e:39:f6:c5:71:0c: 20:1b:b2:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMzMzYxMTAvBgNVBAUTKEU0NDJGOTk1NTlBQzFCQTg3RUUxMzQ4QjJGQzdBRjBB MjJGRkIyNjEwHhcNMjQwNTE4MTU1MDEzWhcNMjQwNTI1MTU1MDEzWjAYMRYwFAYD VQQDEw02NjQ4Y2UzNS02OWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2lkCE0VY4DQ2g35O6kf7dzYNbBDiOfapb07dAqwbFbDJSMxXB0MBfbp+P2Yu g58GJ+Jh5R/yz6NQIWwNn9cKzgFRXU1hUff3oF2sFMX/x8HKqX2DvZhmZG3EPG8H NQYRhf7HNktGPd1H1+Xmt41EgP8slr3TMKv0Pm3P5MpiCV1c25DueiWKLFrdyDLz rJz98zzlbrjW4JaahUsX6lIPFasxlRrwJHhUPEjZMGJLaVJVA7zk/RRDp3FxwOuE Xr4MBnbmBAq9fpLmHqkkBBqcOszG3JWixgtJ3kU4WtUli8nuqJDaIxLUAT3q1hLq CBFEw5VMucvoYeQpDnl8MSPCbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIu2IKOJ GZDbJBHbHShLOSJXgPbkMB8GA1UdIwQYMBaAFORC+ZVZrBuofuE0iy/Hrwoi/7Jh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzMzNi84RUU3RkMxRTA4 NTMxMUU0QjAyMzlFNjFDNEY5QUUwMi81RUw1bFZtc0c2aC00VFNMTDhldkNpTF9z bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVFTDVsVm1zRzZoLTRUU0xMOGV2Q2lMX3NtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzMzNi84RUU3RkMxRTA4NTMxMUU0QjAyMzlFNjFDNEY5QUUwMi81RUw1bFZtc0c2 aC00VFNMTDhldkNpTF9zbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsvLPgHXjGFcN7l4fmwVGAVJmlVTNwKL5cV5nduJyGVkPiRFAVG+Ze cFI6iT6MmYyPR7xsD/dVCFRUrB4T10rJ2y0AxZlOVnuyeqEsac1aDetCC/ZpmDqU RIZm69PKXs69XxylobeSK/gwOrq+pfzuNjuBUXHjOG2vVRhkPx8d0yzicWv/Jc9m sGeF9xGupQWjuahfIWUdbXLX0xfNz6VEZKOdf9+rXSvtYy/6refZAqe5YuiiC1/c sJXP5XSKLfVtudVaotDGB922oUBAO4EEi6GRGtsMfO5OzQ5/WoNviJNXP1k1W0aF BN3aic6ApOpqYKqBZAouOfbFcQwgG7Ke -----END CERTIFICATE-----Generated at Sat May 18 16:19:52 2024 by rpki-client on console-fra.rpki-client.org