$ rpki-client -vvf rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft File: 5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft (raw, json) Hash identifier: SnCwCLbz1fr/35nc6+YeMRVW1yfwlXV2AQ+yC0a55nM= Subject key identifier: 8E:37:4E:61:02:B5:95:D7:F9:93:C8:35:5E:7B:EA:8D:26:08:C1:E5 Authority key identifier: E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69 Certificate issuer: /CN=A916148F/serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft Manifest number: 01C8 Signing time: Sun 19 May 2024 04:25:44 +0000 Manifest this update: Sun 19 May 2024 04:25:44 +0000 Manifest next update: Sun 26 May 2024 04:25:44 +0000 Files and hashes: 1: 5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl (hash: H4DNNSX/biGrAS9Pp0wwHoahijcty9tVgiw/aIT0NAc=) 2: E757164C074511EDB229157DC4F9AE02.roa (hash: zhlSwv825k22uOhCsCYjl4S8dGLu2Xo+4xCX2EAGQwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916148F/serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569 Validity Not Before: May 19 04:25:44 2024 GMT Not After : May 26 04:25:44 2024 GMT Subject: CN=66497f48-a768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:67:65:87:ff:48:47:e6:60:7a:54:02:c4:e2: 6d:6e:01:07:8e:05:79:e6:7f:66:87:bc:b0:8e:1b: ef:72:5a:2a:05:16:78:d3:b9:e6:67:71:e7:77:bb: c7:4d:7a:21:61:69:1c:89:6a:c2:68:8a:a5:45:bd: a4:ef:e8:4a:9c:95:52:82:31:84:11:00:28:84:22: c9:f8:40:93:15:9b:32:69:2d:04:b0:cd:0a:52:f4: e9:5a:06:2a:b6:7b:d3:9d:2a:77:c6:a7:1a:d1:1f: 52:7d:df:ed:37:b9:78:d2:b3:99:c3:10:cc:1d:70: 7b:88:9f:18:5e:e2:9d:62:ad:13:77:66:7e:3e:d6: c1:8b:bb:5a:e1:24:1c:97:7e:7c:c4:10:80:54:79: 1f:72:cb:b7:f6:ec:5b:54:27:0a:9c:11:ff:31:e5: 4c:56:7c:5c:9f:87:85:97:89:51:6d:28:b2:7c:45: 35:f0:10:38:49:40:89:a6:56:c1:9b:f5:d2:28:c1: ab:3a:5c:2c:15:72:94:e9:68:3e:f8:83:d7:34:3b: b9:60:7f:02:b0:ed:41:c2:35:96:1b:b8:4d:a0:90: 63:a6:92:b5:8a:96:53:46:c5:64:14:81:ea:01:2f: 8f:6b:4f:c8:9a:e5:73:f8:58:7f:21:ed:ac:f7:21: 05:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:37:4E:61:02:B5:95:D7:F9:93:C8:35:5E:7B:EA:8D:26:08:C1:E5 X509v3 Authority Key Identifier: keyid:E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:b9:a3:aa:9f:a3:77:29:04:a0:29:69:13:ad:06:6a:d0:4d: cb:85:9a:98:a6:95:84:52:e4:a9:a7:dc:11:ba:83:97:53:4e: ef:f5:02:ee:9b:d2:df:4d:64:ed:c3:d8:5e:2d:60:0a:24:e2: 80:91:09:f9:31:63:61:b0:1d:cd:1f:60:a7:7d:9c:ad:ab:f0: 47:61:88:1b:5c:75:cb:43:14:d7:c4:18:30:e4:e5:a7:2e:81: d5:d0:f5:3f:15:71:37:6b:e1:d4:0e:21:a0:a1:08:51:bc:74: 53:c9:55:80:e1:a7:a2:ea:0b:cd:c7:66:58:0e:b2:39:f2:3c: e6:a6:8e:8a:b0:29:60:7d:58:86:56:c7:38:c6:4d:db:cc:be: 10:c9:bb:bf:ef:0b:51:cd:56:80:84:23:8e:bc:24:8d:af:41: 07:f2:00:b1:63:cc:f9:4f:c4:78:f0:60:51:4c:e8:01:37:61: a5:6c:4e:52:d0:2b:e0:8d:3b:93:b7:90:ea:7c:8a:6e:41:4a: 5a:2e:62:f7:21:5a:77:2c:e9:ed:1f:b3:0e:3f:08:21:4d:15: 5b:4d:cc:1e:a2:4b:ad:03:76:7c:3b:44:9c:6c:15:10:51:4d: 1a:f6:49:d9:29:86:ed:9e:8a:74:88:5b:51:0c:aa:19:40:51: ac:3b:46:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE0OEYxMTAvBgNVBAUTKEU1MDg3M0FGNDc1RUQ2RUVCN0NCOTYzQzY1RThEOTgw NUI4QkI1NjkwHhcNMjQwNTE5MDQyNTQ0WhcNMjQwNTI2MDQyNTQ0WjAYMRYwFAYD VQQDEw02NjQ5N2Y0OC1hNzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2dlh/9IR+ZgelQCxOJtbgEHjgV55n9mh7ywjhvvcloqBRZ407nmZ3Hnd7vH TXohYWkciWrCaIqlRb2k7+hKnJVSgjGEEQAohCLJ+ECTFZsyaS0EsM0KUvTpWgYq tnvTnSp3xqca0R9Sfd/tN7l40rOZwxDMHXB7iJ8YXuKdYq0Td2Z+PtbBi7ta4SQc l358xBCAVHkfcsu39uxbVCcKnBH/MeVMVnxcn4eFl4lRbSiyfEU18BA4SUCJplbB m/XSKMGrOlwsFXKU6Wg++IPXNDu5YH8CsO1BwjWWG7hNoJBjppK1ipZTRsVkFIHq AS+Pa0/ImuVz+Fh/Ie2s9yEFJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI43TmEC tZXX+ZPINV576o0mCMHlMB8GA1UdIwQYMBaAFOUIc69HXtbut8uWPGXo2YBbi7Vp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTQ4Ri82ODg0ODI2ODA3 NDExMUVEQUIxOUQ0NDdDNEY5QUUwMi81UWh6cjBkZTF1NjN5NVk4WmVqWmdGdUx0 V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRaHpyMGRlMXU2M3k1WThaZWpaZ0Z1THRXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTQ4Ri82ODg0ODI2ODA3NDExMUVEQUIxOUQ0NDdDNEY5QUUwMi81UWh6cjBkZTF1 NjN5NVk4WmVqWmdGdUx0V2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALuaOqn6N3KQSgKWkTrQZq0E3LhZqYppWEUuSpp9wRuoOXU07v9QLu m9LfTWTtw9heLWAKJOKAkQn5MWNhsB3NH2CnfZytq/BHYYgbXHXLQxTXxBgw5OWn LoHV0PU/FXE3a+HUDiGgoQhRvHRTyVWA4aei6gvNx2ZYDrI58jzmpo6KsClgfViG Vsc4xk3bzL4Qybu/7wtRzVaAhCOOvCSNr0EH8gCxY8z5T8R48GBRTOgBN2GlbE5S 0CvgjTuTt5DqfIpuQUpaLmL3IVp3LOntH7MOPwghTRVbTcweokutA3Z8O0ScbBUQ UU0a9knZKYbtnop0iFtRDKoZQFGsO0b3 -----END CERTIFICATE-----Generated at Sun May 19 04:56:55 2024 by rpki-client on console-fra.rpki-client.org