$ rpki-client -vvf rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/5-kErSYVSeMdvVn0azB0xr-m2rI.mft File: 5-kErSYVSeMdvVn0azB0xr-m2rI.mft (raw, json) Hash identifier: ipC/l+Zq/Py0xFR8sQ/7rd7++Ra5tBc6+fWhvHODlq8= Subject key identifier: 06:65:22:90:B4:54:6E:14:5F:D3:E9:C5:17:7A:7B:F0:12:BD:84:87 Authority key identifier: E7:E9:04:AD:26:15:49:E3:1D:BD:59:F4:6B:30:74:C6:BF:A6:DA:B2 Certificate issuer: /CN=A9148E9A/serialNumber=E7E904AD261549E31DBD59F46B3074C6BFA6DAB2 Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5-kErSYVSeMdvVn0azB0xr-m2rI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/5-kErSYVSeMdvVn0azB0xr-m2rI.mft Manifest number: E5 Signing time: Fri 31 May 2024 06:40:08 +0000 Manifest this update: Fri 31 May 2024 06:40:07 +0000 Manifest next update: Fri 07 Jun 2024 06:40:07 +0000 Files and hashes: 1: 5-kErSYVSeMdvVn0azB0xr-m2rI.crl (hash: 7dBXqVuviup4Yt0Vc1J/Hu3PL4lKBcQAK/XhsRgpReA=) 2: 20BD79FAC17A11ED8F7A315FC4F9AE02.roa (hash: FtelNB9mh9rm/DPnO36fMVkGjRmD3W2CCA0ojbvk/CE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/5-kErSYVSeMdvVn0azB0xr-m2rI.crl rsync://rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/5-kErSYVSeMdvVn0azB0xr-m2rI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5-kErSYVSeMdvVn0azB0xr-m2rI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 06:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148E9A/serialNumber=E7E904AD261549E31DBD59F46B3074C6BFA6DAB2 Validity Not Before: May 31 06:40:07 2024 GMT Not After : Jun 7 06:40:07 2024 GMT Subject: CN=665970c7-b1b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d0:17:b6:fe:41:f9:24:4f:20:59:68:bb:b6: ea:9e:9b:2d:fb:37:46:22:ff:cf:c2:3a:cd:a8:46: 5d:93:ce:65:be:b2:94:97:7f:01:a4:4a:2e:01:63: 6b:ce:c2:05:92:a7:c5:82:e6:b4:3d:42:d8:52:a2: 1a:ae:22:3f:08:4a:fb:bf:66:76:0c:34:bd:a8:a5: b5:58:e9:b4:5f:1d:0f:ae:bd:62:00:4f:12:e1:8c: 5f:fa:d6:b1:bb:e3:55:72:1c:fc:82:b0:4d:04:bf: 4a:00:89:b5:d9:f1:5d:69:8c:a6:87:5c:af:30:11: 84:d2:5e:c5:b2:f8:78:2b:3d:d7:2f:7e:85:ae:3d: 29:e0:6e:53:fb:11:72:98:f0:a1:0d:bf:f6:53:b3: d6:1b:5a:9d:e0:73:5d:d6:9f:41:8d:c9:42:81:b6: 36:d1:28:5c:e4:d8:ee:e2:62:83:23:55:29:d7:93: d8:f0:88:33:cc:68:a2:9f:85:de:a0:db:b4:d3:b7: 93:ec:eb:c6:07:a9:8c:40:a1:e9:44:45:6c:83:68: 37:ef:e7:91:38:87:de:24:13:54:54:ed:91:de:f2: 01:64:9f:34:52:15:74:2d:87:d0:22:00:95:be:7c: 20:7c:34:cc:4b:68:e0:4a:fe:da:b4:da:a9:f1:f8: 8c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:65:22:90:B4:54:6E:14:5F:D3:E9:C5:17:7A:7B:F0:12:BD:84:87 X509v3 Authority Key Identifier: keyid:E7:E9:04:AD:26:15:49:E3:1D:BD:59:F4:6B:30:74:C6:BF:A6:DA:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/5-kErSYVSeMdvVn0azB0xr-m2rI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5-kErSYVSeMdvVn0azB0xr-m2rI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/5-kErSYVSeMdvVn0azB0xr-m2rI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:c3:b6:04:35:c9:14:81:9f:47:4e:5c:ba:f1:95:c8:d3:44: 99:44:6f:54:be:7a:0a:4c:1e:0f:a0:f8:32:a8:e3:3d:e9:77: 62:02:59:7d:b4:73:89:41:42:d5:a3:f2:9f:6d:54:b0:5e:cb: d4:0c:12:37:1f:36:bc:1d:65:ed:66:3c:46:bb:14:47:c3:b7: 2f:1a:63:6f:9b:86:65:e0:7d:54:93:ed:8d:63:a6:fc:21:89: 59:f1:c7:b8:d9:2b:df:37:b1:db:25:7a:c0:52:46:1d:78:be: c7:85:f8:25:0f:40:74:15:a1:39:57:67:0c:e1:bc:66:8d:e3: 25:b9:3b:d6:29:25:ea:b3:1b:1c:a9:55:32:f9:17:ea:a5:9f: 2e:ff:b0:9c:73:28:34:ca:8a:90:79:04:af:e0:09:7f:3c:80: 99:b0:5a:dd:53:2b:2c:6b:93:66:40:39:1b:b0:b4:8e:f2:c3: 94:ae:20:d5:44:11:a5:ee:5e:8e:da:87:65:ac:20:67:16:42: f1:e6:44:da:3c:71:cf:5a:d0:2a:ec:30:d9:a5:e3:a7:76:58: 85:bc:84:b8:ae:0b:3b:f3:0e:e9:26:17:e5:6b:82:7b:7a:00: 0b:7a:86:5e:fa:7f:fb:f1:39:ad:30:6b:e1:d2:3c:09:5f:85: a4:96:99:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhFOUExMTAvBgNVBAUTKEU3RTkwNEFEMjYxNTQ5RTMxREJENTlGNDZCMzA3NEM2 QkZBNkRBQjIwHhcNMjQwNTMxMDY0MDA3WhcNMjQwNjA3MDY0MDA3WjAYMRYwFAYD VQQDEw02NjU5NzBjNy1iMWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydAXtv5B+SRPIFlou7bqnpst+zdGIv/PwjrNqEZdk85lvrKUl38BpEouAWNr zsIFkqfFgua0PULYUqIariI/CEr7v2Z2DDS9qKW1WOm0Xx0Prr1iAE8S4Yxf+tax u+NVchz8grBNBL9KAIm12fFdaYymh1yvMBGE0l7Fsvh4Kz3XL36Frj0p4G5T+xFy mPChDb/2U7PWG1qd4HNd1p9BjclCgbY20Shc5Nju4mKDI1Up15PY8IgzzGiin4Xe oNu007eT7OvGB6mMQKHpREVsg2g37+eROIfeJBNUVO2R3vIBZJ80UhV0LYfQIgCV vnwgfDTMS2jgSv7atNqp8fiMjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZlIpC0 VG4UX9PpxRd6e/ASvYSHMB8GA1UdIwQYMBaAFOfpBK0mFUnjHb1Z9GswdMa/ptqy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEU5QS8wM0Y0N0Q4QUMx NzcxMUVEQTAzOUYyMkZDNEY5QUUwMi81LWtFclNZVlNlTWR2Vm4wYXpCMHhyLW0y ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUta0VyU1lWU2VNZHZWbjBhekIweHItbTJySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEU5QS8wM0Y0N0Q4QUMxNzcxMUVEQTAzOUYyMkZDNEY5QUUwMi81LWtFclNZVlNl TWR2Vm4wYXpCMHhyLW0yckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxw7YENckUgZ9HTly68ZXI00SZRG9UvnoKTB4PoPgyqOM96XdiAll9 tHOJQULVo/KfbVSwXsvUDBI3Hza8HWXtZjxGuxRHw7cvGmNvm4Zl4H1Uk+2NY6b8 IYlZ8ce42SvfN7HbJXrAUkYdeL7HhfglD0B0FaE5V2cM4bxmjeMluTvWKSXqsxsc qVUy+RfqpZ8u/7Cccyg0yoqQeQSv4Al/PICZsFrdUyssa5NmQDkbsLSO8sOUriDV RBGl7l6O2odlrCBnFkLx5kTaPHHPWtAq7DDZpeOndliFvIS4rgs78w7pJhfla4J7 egALeoZe+n/78TmtMGvh0jwJX4Wklpn7 -----END CERTIFICATE-----Generated at Fri May 31 08:38:30 2024 by rpki-client on console-fra.rpki-client.org