$ rpki-client -vvf rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft File: 5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft (raw, json) Hash identifier: X6m5NkH8wh9fKddC/Q4JOchno7nsFid3ULCMnYMOJw0= Subject key identifier: 47:00:C1:E3:87:CE:AB:87:3C:25:47:CC:6F:C5:57:25:57:A0:91:11 Authority key identifier: E4:62:3C:FD:44:3E:62:32:F2:6C:23:E8:1F:DF:97:58:B2:6F:3B:2C Certificate issuer: /CN=A914F3BA/serialNumber=E4623CFD443E6232F26C23E81FDF9758B26F3B2C Certificate serial: 06E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GI8_UQ-YjLybCPoH9-XWLJvOyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft Manifest number: 06E6 Signing time: Sat 18 May 2024 22:47:15 +0000 Manifest this update: Sat 18 May 2024 22:47:15 +0000 Manifest next update: Sat 25 May 2024 22:47:15 +0000 Files and hashes: 1: 5GI8_UQ-YjLybCPoH9-XWLJvOyw.crl (hash: 2eUd2OBxBptwbZoOAeOAurwcCst9ywlxQN+RRt9FmvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.crl rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GI8_UQ-YjLybCPoH9-XWLJvOyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1766 (0x6e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F3BA/serialNumber=E4623CFD443E6232F26C23E81FDF9758B26F3B2C Validity Not Before: May 18 22:47:15 2024 GMT Not After : May 25 22:47:15 2024 GMT Subject: CN=66492ff3-f79a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9c:aa:38:78:88:38:50:94:a2:4d:e6:b3:bb: 4e:ef:00:b8:42:87:8b:dc:02:66:7a:60:f9:36:b9: 51:27:37:a0:98:84:b3:df:69:ec:a5:4e:e1:a4:ed: c7:a6:56:1a:6c:77:38:fe:e0:8d:c7:b9:e0:9e:ac: 02:dc:68:7a:db:6c:e7:76:60:5f:d2:97:a9:52:b3: e2:18:43:61:76:bd:a0:b4:0f:44:1b:20:45:20:79: 6a:bf:e8:4e:fc:20:1a:1d:2e:0b:41:6c:d7:69:bc: d7:b6:0e:85:a3:4a:ed:68:08:ff:04:01:f5:d3:66: bd:51:fb:95:73:a9:1a:1d:8a:af:1a:e7:53:94:5f: db:c1:ea:cd:df:a9:ee:fb:54:e2:7c:d5:98:10:10: c8:20:4a:42:88:43:03:a0:8f:be:05:f4:c9:1f:d9: d5:6b:60:1e:f8:4e:2e:74:9f:e0:92:53:04:3d:45: 00:d6:ee:84:63:c4:b7:f3:c8:5e:46:69:9c:db:7e: a1:98:05:a6:d3:8d:72:b4:ee:8e:11:f6:05:99:38: b7:2c:2d:8e:e3:22:36:bd:aa:12:2a:24:06:70:62: 3e:08:65:46:3d:46:02:59:ae:de:4b:3e:c4:f7:75: 10:b0:b3:f7:d1:61:88:21:e1:11:37:bb:3e:7f:ef: 64:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:00:C1:E3:87:CE:AB:87:3C:25:47:CC:6F:C5:57:25:57:A0:91:11 X509v3 Authority Key Identifier: keyid:E4:62:3C:FD:44:3E:62:32:F2:6C:23:E8:1F:DF:97:58:B2:6F:3B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GI8_UQ-YjLybCPoH9-XWLJvOyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:70:c8:05:68:1d:42:63:65:8f:94:12:22:8d:df:e8:96:30: 3b:da:45:4d:ce:86:c9:71:01:8f:bb:f6:6a:24:8f:35:32:eb: ec:b2:2a:9e:ba:71:51:38:c4:60:78:32:99:3b:be:b9:bc:da: 7f:b5:55:2f:d0:8b:fa:c1:a9:93:74:e5:0c:ab:29:df:01:3e: 78:ce:f7:36:0d:cf:6a:41:f2:bb:ce:75:a4:b1:d3:68:77:34: c0:6a:c7:c2:6c:cd:2b:8f:0d:53:5f:b5:12:bd:db:7f:fc:8b: c6:8f:cc:96:9a:89:e5:d2:1f:e6:ed:c4:78:db:f0:e5:be:97: fc:ab:73:42:bc:e4:83:c0:95:bc:b9:11:3b:7b:ec:87:6e:1e: 8b:99:f7:a1:06:61:02:93:fc:cb:37:2b:35:1a:6b:72:21:db: df:1d:0a:b6:59:ee:00:43:e2:2e:76:d6:fd:e2:2c:75:43:82: 77:78:03:65:60:5b:12:e2:fa:27:e4:97:e5:3e:b3:cb:65:75: 7e:25:48:0a:43:a9:29:8e:7d:41:ef:a7:e0:0f:f8:ae:3c:6e: 5c:28:fc:fe:d4:29:25:de:b3:ba:be:b4:4a:be:b0:f6:e4:d6: ce:f6:86:77:f7:bb:5e:a4:c5:5a:2c:62:d7:ff:40:a6:8d:18: 0a:69:59:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYzQkExMTAvBgNVBAUTKEU0NjIzQ0ZENDQzRTYyMzJGMjZDMjNFODFGREY5NzU4 QjI2RjNCMkMwHhcNMjQwNTE4MjI0NzE1WhcNMjQwNTI1MjI0NzE1WjAYMRYwFAYD VQQDEw02NjQ5MmZmMy1mNzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5yqOHiIOFCUok3ms7tO7wC4QoeL3AJmemD5NrlRJzegmISz32nspU7hpO3H plYabHc4/uCNx7ngnqwC3Gh622zndmBf0pepUrPiGENhdr2gtA9EGyBFIHlqv+hO /CAaHS4LQWzXabzXtg6Fo0rtaAj/BAH102a9UfuVc6kaHYqvGudTlF/bwerN36nu +1TifNWYEBDIIEpCiEMDoI++BfTJH9nVa2Ae+E4udJ/gklMEPUUA1u6EY8S388he Rmmc236hmAWm041ytO6OEfYFmTi3LC2O4yI2vaoSKiQGcGI+CGVGPUYCWa7eSz7E 93UQsLP30WGIIeERN7s+f+9kKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcAweOH zquHPCVHzG/FVyVXoJERMB8GA1UdIwQYMBaAFORiPP1EPmIy8mwj6B/fl1iybzss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjNCQS9GRjIwRUJEQzAx M0QxMUVCQTAwMDEyNkJDNEY5QUUwMi81R0k4X1VRLVlqTHliQ1BvSDktWFdMSnZP eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVHSThfVVEtWWpMeWJDUG9IOS1YV0xKdk95dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjNCQS9GRjIwRUJEQzAxM0QxMUVCQTAwMDEyNkJDNEY5QUUwMi81R0k4X1VRLVlq THliQ1BvSDktWFdMSnZPeXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGcMgFaB1CY2WPlBIijd/oljA72kVNzobJcQGPu/ZqJI81Muvssiqe unFROMRgeDKZO765vNp/tVUv0Iv6wamTdOUMqynfAT54zvc2Dc9qQfK7znWksdNo dzTAasfCbM0rjw1TX7USvdt//IvGj8yWmonl0h/m7cR42/Dlvpf8q3NCvOSDwJW8 uRE7e+yHbh6LmfehBmECk/zLNys1GmtyIdvfHQq2We4AQ+Iudtb94ix1Q4J3eANl YFsS4von5JflPrPLZXV+JUgKQ6kpjn1B76fgD/iuPG5cKPz+1Ckl3rO6vrRKvrD2 5NbO9oZ397tepMVaLGLX/0CmjRgKaVkW -----END CERTIFICATE-----Generated at Sun May 19 00:16:13 2024 by rpki-client on console-fra.rpki-client.org