$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft File: t0SkTltlPmx6kM9gNOANz9iUfWA.mft (raw, json) Hash identifier: w0bOHZj/CgSmmB06Uh1/rRgHRnZGneH+vrUuPO5zDOU= Subject key identifier: B5:7B:31:5B:03:FF:3A:67:42:20:50:92:26:28:07:57:73:E6:B5:89 Authority key identifier: B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60 Certificate issuer: /CN=A914EBE5/serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60 Certificate serial: 179A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft Manifest number: 178E Signing time: Fri 31 May 2024 17:13:07 +0000 Manifest this update: Fri 31 May 2024 17:13:06 +0000 Manifest next update: Fri 07 Jun 2024 17:13:06 +0000 Files and hashes: 1: t0SkTltlPmx6kM9gNOANz9iUfWA.crl (hash: rf6B8qmiXMH3WmZVB1jAg7GswQbdHIF5EC1lHCKAF9M=) 2: 65F89850A96711E79BECEA42C4F9AE02.roa (hash: PZ7XnBrJz/a7vzH5LB2fdLCKyMtJ6Vj9A+2dGf6LXe0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 17:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6042 (0x179a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EBE5/serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60 Validity Not Before: May 31 17:13:06 2024 GMT Not After : Jun 7 17:13:06 2024 GMT Subject: CN=665a0523-5d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ff:35:d7:06:ac:00:01:d9:23:00:28:8e:95: cd:13:7f:5b:6d:dd:2e:76:31:27:18:dc:0c:4f:2e: e1:7c:79:d3:2f:36:d4:02:55:0f:ec:27:c3:5b:ad: 6c:5e:e6:d9:88:11:6b:e0:13:8a:98:27:d2:e7:eb: 77:c6:47:06:28:41:2e:2b:2e:8b:f0:35:c5:5a:c6: f0:7b:0d:26:24:53:8e:57:8b:ea:0c:82:45:36:21: 39:11:f5:b9:cd:c1:c0:4a:70:e2:a3:d1:61:57:87: f6:cc:0f:58:a3:17:18:a8:a8:71:3e:3b:21:9e:2d: 0e:a0:c0:d1:0e:50:86:84:fc:d7:d3:c6:da:95:55: 09:d6:6d:74:51:c0:12:5c:f4:d2:11:e8:1c:53:7f: e0:e1:b9:d4:06:87:0d:61:70:21:ed:b1:83:38:b6: 7c:23:e3:c8:96:47:1e:d1:5e:ee:60:75:c3:65:ab: 2b:f9:77:e7:c6:8f:85:0f:35:49:95:ff:22:91:9b: 26:32:0c:40:18:8b:f6:a3:db:f6:27:50:d9:e2:c3: 5b:99:e8:1d:3e:10:4d:92:0a:7f:ca:d7:0e:a4:0a: a6:76:b4:6c:90:41:bf:44:f2:b0:ed:00:32:0e:2a: db:b4:54:ea:91:a3:ec:ac:51:4e:99:4c:4c:a5:96: 77:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7B:31:5B:03:FF:3A:67:42:20:50:92:26:28:07:57:73:E6:B5:89 X509v3 Authority Key Identifier: keyid:B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:2d:45:74:e8:a6:4f:33:ce:42:ed:e4:eb:2c:56:f8:2f:27: bb:5c:fc:01:5a:61:e7:ff:db:94:13:26:34:9b:a5:22:9b:90: cd:83:a9:32:55:8c:9f:5b:3c:15:4f:5c:b8:41:ba:71:52:7d: 48:61:c2:fb:21:e2:84:85:40:a3:9d:d2:7c:15:65:3a:78:d7: 47:41:0f:af:cc:73:80:ca:62:d3:96:bc:81:8e:8e:0c:c6:4c: f3:08:b1:e3:75:6b:e8:39:4c:b6:ad:0e:0d:12:d0:f6:5b:60: 0d:b2:11:9c:85:bf:f9:86:77:26:5c:fa:76:f7:e1:17:ae:3d: 45:ee:2f:57:cb:06:ec:f0:d5:29:5e:cd:41:de:03:b2:aa:cf: f3:cb:a8:e0:2c:7d:50:40:e0:06:7b:2b:98:da:33:71:45:c7: b9:bb:b8:cd:df:fd:2e:d7:e0:19:8f:9f:a1:a6:e2:50:0f:b5: 5b:09:fe:c7:0c:4d:4f:d9:c7:19:ea:0f:43:dd:c1:71:77:15: 3d:a6:2b:23:f5:cd:83:49:0f:f1:36:a5:3e:0e:60:7b:90:95: 47:d7:8e:2d:de:c4:18:64:d6:9b:56:01:96:5d:b6:81:a0:ee: 93:d0:ba:ce:82:d5:69:c0:09:82:0b:da:8c:b8:f6:53:08:14: fb:fe:5d:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCRTUxMTAvBgNVBAUTKEI3NDRBNDRFNUI2NTNFNkM3QTkwQ0Y2MDM0RTAwRENG RDg5NDdENjAwHhcNMjQwNTMxMTcxMzA2WhcNMjQwNjA3MTcxMzA2WjAYMRYwFAYD VQQDEw02NjVhMDUyMy01ZDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqf811wasAAHZIwAojpXNE39bbd0udjEnGNwMTy7hfHnTLzbUAlUP7CfDW61s XubZiBFr4BOKmCfS5+t3xkcGKEEuKy6L8DXFWsbwew0mJFOOV4vqDIJFNiE5EfW5 zcHASnDio9FhV4f2zA9YoxcYqKhxPjshni0OoMDRDlCGhPzX08balVUJ1m10UcAS XPTSEegcU3/g4bnUBocNYXAh7bGDOLZ8I+PIlkce0V7uYHXDZasr+Xfnxo+FDzVJ lf8ikZsmMgxAGIv2o9v2J1DZ4sNbmegdPhBNkgp/ytcOpAqmdrRskEG/RPKw7QAy DirbtFTqkaPsrFFOmUxMpZZ3VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLV7MVsD /zpnQiBQkiYoB1dz5rWJMB8GA1UdIwQYMBaAFLdEpE5bZT5sepDPYDTgDc/YlH1g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUJFNS82NEM1MjcwOEE5 NUYxMUU3OUFENEU3MzRDNEY5QUUwMi90MFNrVGx0bFBteDZrTTlnTk9BTno5aVVm V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QwU2tUbHRsUG14NmtNOWdOT0FOejlpVWZXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUJFNS82NEM1MjcwOEE5NUYxMUU3OUFENEU3MzRDNEY5QUUwMi90MFNrVGx0bFBt eDZrTTlnTk9BTno5aVVmV0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9LUV06KZPM85C7eTrLFb4Lye7XPwBWmHn/9uUEyY0m6Uim5DNg6ky VYyfWzwVT1y4QbpxUn1IYcL7IeKEhUCjndJ8FWU6eNdHQQ+vzHOAymLTlryBjo4M xkzzCLHjdWvoOUy2rQ4NEtD2W2ANshGchb/5hncmXPp29+EXrj1F7i9Xywbs8NUp Xs1B3gOyqs/zy6jgLH1QQOAGeyuY2jNxRce5u7jN3/0u1+AZj5+hpuJQD7VbCf7H DE1P2ccZ6g9D3cFxdxU9pisj9c2DSQ/xNqU+DmB7kJVH144t3sQYZNabVgGWXbaB oO6T0LrOgtVpwAmCC9qMuPZTCBT7/l2N -----END CERTIFICATE-----Generated at Fri May 31 20:34:03 2024 by rpki-client on console-ams.rpki-client.org