$ rpki-client -vvf rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft File: V5NDbSKpagYTaFEgO7clmE1wsBc.mft (raw, json) Hash identifier: +VQfjo9HRjII+7OdaUcgeH/DS2bOLeLtxxQ6aDQOh8o= Subject key identifier: 0C:7F:4E:06:33:5A:51:65:89:07:C9:B2:AC:9B:B0:A6:DD:A7:50:5F Authority key identifier: 57:93:43:6D:22:A9:6A:06:13:68:51:20:3B:B7:25:98:4D:70:B0:17 Certificate issuer: /CN=A9159DCD/serialNumber=5793436D22A96A06136851203BB725984D70B017 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft Manifest number: 9A Signing time: Sun 19 May 2024 06:51:10 +0000 Manifest this update: Sun 19 May 2024 06:51:09 +0000 Manifest next update: Sun 26 May 2024 06:51:09 +0000 Files and hashes: 1: V5NDbSKpagYTaFEgO7clmE1wsBc.crl (hash: +NkB1NCIeuwxU+FUKaZTZ9kqLrxupyajNGg7ZoDlU38=) 2: 29D600062C3311EEBFF69B6CC4F9AE02.roa (hash: ngWH1G+IyPwemoOuF+JzNuSD97M/6I4YZeW4mDTVznw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.crl rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159DCD/serialNumber=5793436D22A96A06136851203BB725984D70B017 Validity Not Before: May 19 06:51:09 2024 GMT Not After : May 26 06:51:09 2024 GMT Subject: CN=6649a15e-f901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3a:ce:54:ba:b0:ac:bc:2a:c2:00:c7:80:de: 15:17:c5:cb:bc:21:7c:51:10:2f:e6:dd:3b:6d:f4: 8d:76:b3:fe:67:53:f9:53:0d:63:6e:47:d0:41:b7: 29:51:fd:da:d8:64:ec:8f:bd:f9:93:e8:b6:8d:ac: 54:b2:9f:8c:f6:b3:4c:f8:64:ff:e2:f3:cd:b3:e5: d4:08:98:fe:ff:2a:2b:de:a8:2e:53:d7:75:81:2a: ee:12:18:37:04:e6:28:3c:38:97:a6:89:86:67:4c: 6d:d1:da:d8:5d:a7:2e:a4:f4:7e:86:a1:01:44:00: 13:3c:8a:44:8c:e2:90:a4:a2:73:6d:34:a5:f1:c1: 6a:a9:24:87:d9:62:c2:0c:71:73:4c:e5:83:45:f8: af:45:1a:4d:bb:78:e0:5b:d2:bf:49:10:6b:75:e0: 28:bb:d4:46:a3:0f:98:96:75:23:46:c4:62:ea:54: ec:af:43:0b:1d:af:7d:33:ea:71:01:85:7a:fa:bd: 30:ac:de:7a:64:19:06:91:3b:1f:e9:a3:bd:a0:82: f4:81:c9:67:b6:17:7d:2a:0e:9a:8f:27:d6:02:88: 15:10:3a:fa:6d:73:13:a8:14:7d:7e:dd:d5:4a:26: 33:57:59:4a:c2:62:71:44:97:d6:d5:1d:d4:f2:c5: 18:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:7F:4E:06:33:5A:51:65:89:07:C9:B2:AC:9B:B0:A6:DD:A7:50:5F X509v3 Authority Key Identifier: keyid:57:93:43:6D:22:A9:6A:06:13:68:51:20:3B:B7:25:98:4D:70:B0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:38:d6:bf:0d:c0:14:9b:bc:83:06:c6:82:46:37:71:1f:76: c1:94:c6:7e:b8:e8:cb:b6:ab:85:2c:cf:4a:3f:32:f9:90:3f: 25:b8:ec:87:52:5f:e4:a6:38:91:17:56:22:d2:2c:a8:d7:d0: a2:8e:7e:fb:2f:b4:e1:91:59:87:3b:ff:76:bf:d8:58:9a:cb: e6:7d:eb:97:c7:b9:84:2d:41:2e:d5:b4:a0:30:72:c5:96:9a: 41:8d:f4:72:59:6b:15:5e:fe:fc:cc:78:b7:f2:b8:b0:86:67: df:b3:b3:76:e8:f6:c8:aa:7e:1a:d2:ab:71:d9:a8:2d:c9:ab: ff:79:c3:78:c0:89:d3:1d:21:a8:ea:19:05:51:4b:87:eb:0e: 01:00:74:25:b0:73:86:6d:32:be:05:6b:1c:d8:2e:06:21:17: 3b:30:fe:31:87:2f:8c:66:54:f2:1d:8d:c3:29:e5:f0:ed:6b: 91:ba:e1:d3:79:ef:8d:86:97:d8:a5:9b:4e:af:d8:8a:f7:8b: 10:28:f9:81:df:e1:1b:01:ee:32:15:44:b8:8b:01:dc:f8:bb: 97:92:2e:2f:15:29:c6:fe:9c:f4:63:df:b9:5c:7c:40:cf:1a: 5a:97:e9:8b:2f:ea:46:82:59:21:f2:35:2e:ee:4c:d2:7f:1c: 98:f3:32:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlEQ0QxMTAvBgNVBAUTKDU3OTM0MzZEMjJBOTZBMDYxMzY4NTEyMDNCQjcyNTk4 NEQ3MEIwMTcwHhcNMjQwNTE5MDY1MTA5WhcNMjQwNTI2MDY1MTA5WjAYMRYwFAYD VQQDEw02NjQ5YTE1ZS1mOTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jrOVLqwrLwqwgDHgN4VF8XLvCF8URAv5t07bfSNdrP+Z1P5Uw1jbkfQQbcp Uf3a2GTsj735k+i2jaxUsp+M9rNM+GT/4vPNs+XUCJj+/yor3qguU9d1gSruEhg3 BOYoPDiXpomGZ0xt0drYXacupPR+hqEBRAATPIpEjOKQpKJzbTSl8cFqqSSH2WLC DHFzTOWDRfivRRpNu3jgW9K/SRBrdeAou9RGow+YlnUjRsRi6lTsr0MLHa99M+px AYV6+r0wrN56ZBkGkTsf6aO9oIL0gclnthd9Kg6ajyfWAogVEDr6bXMTqBR9ft3V SiYzV1lKwmJxRJfW1R3U8sUYPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAx/TgYz WlFliQfJsqybsKbdp1BfMB8GA1UdIwQYMBaAFFeTQ20iqWoGE2hRIDu3JZhNcLAX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OURDRC9BMDBENzAwNjJD MjQxMUVFQUI5NzhGMEZDNEY5QUUwMi9WNU5EYlNLcGFnWVRhRkVnTzdjbG1FMXdz QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Y1TkRiU0twYWdZVGFGRWdPN2NsbUUxd3NCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OURDRC9BMDBENzAwNjJDMjQxMUVFQUI5NzhGMEZDNEY5QUUwMi9WNU5EYlNLcGFn WVRhRkVnTzdjbG1FMXdzQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuONa/DcAUm7yDBsaCRjdxH3bBlMZ+uOjLtquFLM9KPzL5kD8luOyH Ul/kpjiRF1Yi0iyo19Cijn77L7ThkVmHO/92v9hYmsvmfeuXx7mELUEu1bSgMHLF lppBjfRyWWsVXv78zHi38riwhmffs7N26PbIqn4a0qtx2agtyav/ecN4wInTHSGo 6hkFUUuH6w4BAHQlsHOGbTK+BWsc2C4GIRc7MP4xhy+MZlTyHY3DKeXw7WuRuuHT ee+NhpfYpZtOr9iK94sQKPmB3+EbAe4yFUS4iwHc+LuXki4vFSnG/pz0Y9+5XHxA zxpal+mLL+pGglkh8jUu7kzSfxyY8zI7 -----END CERTIFICATE-----Generated at Sun May 19 07:40:39 2024 by rpki-client on console-fra.rpki-client.org