$ rpki-client -vvf rpki.apnic.net/member_repository/A91647F5/D69896E6A0C811EEA7B8D02CC4F9AE02/V5EYsUjifRVxdRVougcP4eYsfrk.mft File: V5EYsUjifRVxdRVougcP4eYsfrk.mft (raw, json) Hash identifier: IQSQM/hy98uNm9UrtGwdh8+gjeJ9R/isadeSPbI6GS8= Subject key identifier: A9:3B:EA:56:62:92:60:A0:47:5D:27:B3:E5:28:A3:46:48:84:02:71 Authority key identifier: 57:91:18:B1:48:E2:7D:15:71:75:15:68:BA:07:0F:E1:E6:2C:7E:B9 Certificate issuer: /CN=A91647F5/serialNumber=579118B148E27D1571751568BA070FE1E62C7EB9 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5EYsUjifRVxdRVougcP4eYsfrk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91647F5/D69896E6A0C811EEA7B8D02CC4F9AE02/V5EYsUjifRVxdRVougcP4eYsfrk.mft Manifest number: 52 Signing time: Sun 19 May 2024 07:58:41 +0000 Manifest this update: Sun 19 May 2024 07:58:41 +0000 Manifest next update: Sun 26 May 2024 07:58:41 +0000 Files and hashes: 1: V5EYsUjifRVxdRVougcP4eYsfrk.crl (hash: eopU5BXCEnWvSC6jRKyTSBD8hn/sPyhXX1Nupwg+Ww0=) 2: 8BDD1204FC5211EE89D8BD86C4F9AE02.roa (hash: AkiCxp9N8gMV3WtYdhLNJWSezcOAW2+2oJlKVD4H2Co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91647F5/D69896E6A0C811EEA7B8D02CC4F9AE02/V5EYsUjifRVxdRVougcP4eYsfrk.crl rsync://rpki.apnic.net/member_repository/A91647F5/D69896E6A0C811EEA7B8D02CC4F9AE02/V5EYsUjifRVxdRVougcP4eYsfrk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5EYsUjifRVxdRVougcP4eYsfrk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91647F5/serialNumber=579118B148E27D1571751568BA070FE1E62C7EB9 Validity Not Before: May 19 07:58:41 2024 GMT Not After : May 26 07:58:41 2024 GMT Subject: CN=6649b131-d7a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d4:83:ab:49:26:5e:2e:b9:85:1f:ac:95:95: 66:4f:e9:79:52:dd:b4:98:5e:16:db:c6:2a:db:09: 60:cb:af:34:35:4f:9b:47:ac:57:6d:b6:15:20:19: 64:ba:9c:4c:e4:91:1d:5a:b7:99:d5:05:e3:64:2f: 0f:c3:a8:d4:5b:80:4f:7c:c2:a3:30:99:f3:d1:e4: 54:45:33:90:bc:ea:d0:52:37:dd:1b:0d:55:d8:ae: 14:84:89:58:0d:c2:7e:98:e1:d1:df:21:f2:50:dd: 7d:09:49:30:80:be:1a:51:7c:e3:30:b1:6b:00:7e: a5:c5:72:c3:db:73:c0:a2:13:15:04:dc:e4:16:af: b6:07:9c:95:b3:e2:66:d5:0c:b9:0d:aa:cd:0e:8a: 31:7a:3d:01:a6:53:37:7b:9a:45:36:dd:fb:14:3b: a9:6d:91:f2:a6:b1:78:99:ac:cd:96:c1:b5:c0:c8: 4d:3f:fd:ab:85:15:a5:8e:59:0b:0a:88:ed:57:b4: bf:8a:13:e4:3c:42:9e:5f:3e:53:49:27:b7:08:2b: c7:e3:29:05:0d:35:6b:a1:44:39:a9:4b:5b:15:87: eb:c2:9f:71:83:a1:b7:17:27:d6:6b:2f:79:88:51: 53:b8:8b:4f:c9:ab:d9:5e:70:de:91:91:81:23:f8: 89:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3B:EA:56:62:92:60:A0:47:5D:27:B3:E5:28:A3:46:48:84:02:71 X509v3 Authority Key Identifier: keyid:57:91:18:B1:48:E2:7D:15:71:75:15:68:BA:07:0F:E1:E6:2C:7E:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91647F5/D69896E6A0C811EEA7B8D02CC4F9AE02/V5EYsUjifRVxdRVougcP4eYsfrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5EYsUjifRVxdRVougcP4eYsfrk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91647F5/D69896E6A0C811EEA7B8D02CC4F9AE02/V5EYsUjifRVxdRVougcP4eYsfrk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:b6:29:9c:79:96:17:01:b6:97:56:bc:cf:71:e2:dc:a5:ad: 21:d0:36:ea:67:b8:79:53:17:9f:68:42:ea:db:69:a5:33:10: be:5e:ff:89:82:1a:74:cf:96:b6:9b:b3:3a:eb:9a:bb:3b:fb: eb:a9:aa:56:04:9e:1e:b9:1b:dc:83:97:7b:69:62:f2:87:a9: 83:9e:e8:39:db:2c:d8:02:91:e9:07:61:fd:5e:6b:71:63:ba: c7:5c:1d:bf:6a:b2:51:1f:66:83:e2:f2:5e:2c:b8:16:93:41: fc:ad:30:57:bd:83:7b:f2:a5:3e:07:d9:ff:31:ed:c7:af:8a: 17:10:17:d2:e3:20:3c:2b:5c:89:2e:c7:d0:cb:7f:13:27:fd: 4e:49:56:6f:8a:ae:99:64:4e:6a:e4:7b:60:ae:00:7b:11:fc: 0a:f8:49:fa:61:2d:1e:5f:36:d1:c0:75:1c:e6:0a:47:05:dc: 68:d9:66:87:23:fb:0c:2b:dc:4d:60:1e:7b:61:ff:96:df:cf: 21:60:96:fe:55:86:8e:ab:de:4c:81:b9:4d:e3:48:16:8b:11: 29:51:02:fc:4a:28:2b:09:cd:ee:99:8d:df:66:c9:f6:0f:a7: 4f:73:68:7d:06:ac:10:aa:a7:2e:fc:96:24:e3:10:10:52:69: 71:26:06:27 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NDdGNTExMC8GA1UEBRMoNTc5MTE4QjE0OEUyN0QxNTcxNzUxNTY4QkEwNzBGRTFF NjJDN0VCOTAeFw0yNDA1MTkwNzU4NDFaFw0yNDA1MjYwNzU4NDFaMBgxFjAUBgNV BAMTDTY2NDliMTMxLWQ3YTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDU1IOrSSZeLrmFH6yVlWZP6XlS3bSYXhbbxirbCWDLrzQ1T5tHrFdtthUgGWS6 nEzkkR1at5nVBeNkLw/DqNRbgE98wqMwmfPR5FRFM5C86tBSN90bDVXYrhSEiVgN wn6Y4dHfIfJQ3X0JSTCAvhpRfOMwsWsAfqXFcsPbc8CiExUE3OQWr7YHnJWz4mbV DLkNqs0OijF6PQGmUzd7mkU23fsUO6ltkfKmsXiZrM2WwbXAyE0//auFFaWOWQsK iO1XtL+KE+Q8Qp5fPlNJJ7cIK8fjKQUNNWuhRDmpS1sVh+vCn3GDobcXJ9ZrL3mI UVO4i0/Jq9lecN6RkYEj+IkNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqTvqVmKS YKBHXSez5SijRkiEAnEwHwYDVR0jBBgwFoAUV5EYsUjifRVxdRVougcP4eYsfrkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0N0Y1L0Q2OTg5NkU2QTBD ODExRUVBN0I4RDAyQ0M0RjlBRTAyL1Y1RVlzVWppZlJWeGRSVm91Z2NQNGVZc2Zy ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVjVFWXNVamlmUlZ4ZFJWb3VnY1A0ZVlzZnJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0 N0Y1L0Q2OTg5NkU2QTBDODExRUVBN0I4RDAyQ0M0RjlBRTAyL1Y1RVlzVWppZlJW eGRSVm91Z2NQNGVZc2Zyay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAK2KZx5lhcBtpdWvM9x4tylrSHQNupnuHlTF59oQurbaaUzEL5e/4mC GnTPlrabszrrmrs7++upqlYEnh65G9yDl3tpYvKHqYOe6DnbLNgCkekHYf1ea3Fj usdcHb9qslEfZoPi8l4suBaTQfytMFe9g3vypT4H2f8x7cevihcQF9LjIDwrXIku x9DLfxMn/U5JVm+KrplkTmrke2CuAHsR/Ar4SfphLR5fNtHAdRzmCkcF3GjZZocj +wwr3E1gHnth/5bfzyFglv5Vho6r3kyBuU3jSBaLESlRAvxKKCsJze6Zjd9myfYP p09zaH0GrBCqpy78liTjEBBSaXEmBic= -----END CERTIFICATE-----Generated at Sun May 19 08:26:43 2024 by rpki-client on console-fra.rpki-client.org