$ rpki-client -vvf rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft File: 5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft (raw, json) Hash identifier: 6cDpizdZ7U97zU7830keMOFO1MyXQARXGcocD28GVz0= Subject key identifier: 6F:7B:73:9A:45:75:B2:EF:1A:7D:BC:D2:DB:0C:28:55:E6:2D:92:46 Authority key identifier: E6:99:DB:CD:E0:9C:0A:A5:F8:E6:6A:E0:A7:32:54:DC:A0:5D:85:D4 Certificate issuer: /CN=A915C15F/serialNumber=E699DBCDE09C0AA5F8E66AE0A73254DCA05D85D4 Certificate serial: 05AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft Manifest number: 059F Signing time: Sun 19 May 2024 00:30:25 +0000 Manifest this update: Sun 19 May 2024 00:30:25 +0000 Manifest next update: Sun 26 May 2024 00:30:25 +0000 Files and hashes: 1: 5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl (hash: AI2b0WeAn9KGCtMXo9VA8/rMuJy+1CGLGZ6hun72Il0=) 2: 581485C0590911EE9C70C86EC4F9AE02.roa (hash: +151frpyrUQduoYCiAzWqIPYsN3G5pr9CXtQatPdObE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1453 (0x5ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C15F/serialNumber=E699DBCDE09C0AA5F8E66AE0A73254DCA05D85D4 Validity Not Before: May 19 00:30:25 2024 GMT Not After : May 26 00:30:25 2024 GMT Subject: CN=66494821-a1c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:96:a4:ba:6c:d6:d3:1a:5d:ba:13:01:af:c7: ca:5a:42:6f:5c:2a:96:c2:e9:bc:08:54:e0:07:a8: 22:58:d7:42:30:5e:2e:b7:90:7f:c0:ea:fb:fb:de: be:30:92:91:c1:72:59:b2:9c:d5:69:db:9b:08:cd: 57:8f:f6:e1:1c:6c:10:64:7a:86:77:c5:78:e3:87: af:0f:6a:3f:b2:a3:d4:72:3a:b7:07:d4:b3:e2:fc: 6f:62:82:24:a0:3b:76:c6:5e:b4:b8:6d:bb:d5:2f: a1:af:f4:2e:07:91:87:49:9e:30:69:50:e6:4f:56: 15:0f:76:ce:81:7f:4a:6b:e5:e4:c8:5b:bd:75:21: b6:c5:52:7d:b4:da:20:74:b8:09:bd:23:2f:29:6d: 35:bb:ef:6c:40:1d:fd:03:b3:a3:d2:19:fd:46:db: 4c:8e:bf:18:93:d7:5f:a8:c6:90:4c:a0:13:14:bb: 0c:db:89:6f:b1:12:b5:13:bb:74:a4:ac:a3:e2:3a: 60:64:ad:a3:46:d9:ff:99:ac:52:ac:15:4b:22:39: b7:a1:df:3e:1c:5e:77:67:50:85:b7:05:3b:e8:86: 7b:cd:7a:5b:53:70:e8:cc:83:42:81:a7:23:fc:82: e6:c5:42:2b:8a:c9:9e:6a:4a:06:47:22:f5:2b:16: df:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:7B:73:9A:45:75:B2:EF:1A:7D:BC:D2:DB:0C:28:55:E6:2D:92:46 X509v3 Authority Key Identifier: keyid:E6:99:DB:CD:E0:9C:0A:A5:F8:E6:6A:E0:A7:32:54:DC:A0:5D:85:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:6e:61:d6:05:2a:d0:57:d6:b2:5b:54:d5:a3:05:75:09:97: e5:c2:c2:65:31:db:6a:fb:7c:24:6f:c6:67:f8:98:bb:06:a9: 6f:68:a1:70:b8:d6:89:36:9a:05:b9:68:63:a8:d0:89:8d:10: ae:2e:8e:a4:e2:86:4f:c8:a9:e6:d3:84:a6:08:3d:b5:07:1d: 1a:7e:3b:8a:4e:3c:fc:4f:02:7b:e5:64:29:8c:56:8d:9a:bd: 2c:61:3a:65:7b:35:00:fc:10:bb:07:e1:4d:36:6b:4d:92:0b: 49:e4:33:fc:39:93:f8:7c:c0:bb:25:f7:2c:48:23:4e:93:ea: 25:b5:cc:a6:62:ac:a5:cd:17:fc:90:12:98:50:14:75:bb:fa: 06:b4:8d:3f:ad:3a:dc:bd:62:83:29:65:ca:eb:32:e0:42:31: 68:a9:04:06:d4:c8:fc:02:2d:2c:ee:b2:50:27:dc:b9:9c:c5: 11:e5:16:b9:d8:6f:d4:98:d0:e3:63:93:0d:57:12:ad:13:63: 5a:8c:99:bb:5d:aa:38:52:dc:0a:07:60:16:ac:53:82:22:6a: 16:6a:64:b9:fd:67:4c:7d:ac:ea:80:ef:33:b2:b0:f5:7f:b0: 18:af:fe:10:b9:3a:5a:43:84:d0:21:85:7e:23:fa:fc:77:ef: 96:c3:ff:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMxNUYxMTAvBgNVBAUTKEU2OTlEQkNERTA5QzBBQTVGOEU2NkFFMEE3MzI1NERD QTA1RDg1RDQwHhcNMjQwNTE5MDAzMDI1WhcNMjQwNTI2MDAzMDI1WjAYMRYwFAYD VQQDEw02NjQ5NDgyMS1hMWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZakumzW0xpduhMBr8fKWkJvXCqWwum8CFTgB6giWNdCMF4ut5B/wOr7+96+ MJKRwXJZspzVadubCM1Xj/bhHGwQZHqGd8V444evD2o/sqPUcjq3B9Sz4vxvYoIk oDt2xl60uG271S+hr/QuB5GHSZ4waVDmT1YVD3bOgX9Ka+XkyFu9dSG2xVJ9tNog dLgJvSMvKW01u+9sQB39A7Oj0hn9RttMjr8Yk9dfqMaQTKATFLsM24lvsRK1E7t0 pKyj4jpgZK2jRtn/maxSrBVLIjm3od8+HF53Z1CFtwU76IZ7zXpbU3DozINCgacj /ILmxUIrismeakoGRyL1Kxbf5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG97c5pF dbLvGn280tsMKFXmLZJGMB8GA1UdIwQYMBaAFOaZ283gnAql+OZq4KcyVNygXYXU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzE1Ri85MzI5QjBCNjhD NjcxMUVCQjdFRTg2M0VDNEY5QUUwMi81cG5iemVDY0NxWDQ1bXJncHpKVTNLQmRo ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVwbmJ6ZUNjQ3FYNDVtcmdwekpVM0tCZGhkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzE1Ri85MzI5QjBCNjhDNjcxMUVCQjdFRTg2M0VDNEY5QUUwMi81cG5iemVDY0Nx WDQ1bXJncHpKVTNLQmRoZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVbmHWBSrQV9ayW1TVowV1CZflwsJlMdtq+3wkb8Zn+Ji7BqlvaKFw uNaJNpoFuWhjqNCJjRCuLo6k4oZPyKnm04SmCD21Bx0afjuKTjz8TwJ75WQpjFaN mr0sYTplezUA/BC7B+FNNmtNkgtJ5DP8OZP4fMC7JfcsSCNOk+oltcymYqylzRf8 kBKYUBR1u/oGtI0/rTrcvWKDKWXK6zLgQjFoqQQG1Mj8Ai0s7rJQJ9y5nMUR5Ra5 2G/UmNDjY5MNVxKtE2NajJm7Xao4UtwKB2AWrFOCImoWamS5/WdMfazqgO8zsrD1 f7AYr/4QuTpaQ4TQIYV+I/r8d++Ww/9n -----END CERTIFICATE-----Generated at Sun May 19 01:47:13 2024 by rpki-client on console-ams.rpki-client.org