$ rpki-client -vvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft File: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft (raw, json) Hash identifier: zYAw/7r/ebhjpmwwFVH7Nb65Me7h3rmPj+qmTOwnxBo= Subject key identifier: 69:DB:4D:CC:17:F4:80:C7:C0:49:76:46:39:24:E3:31:FD:5F:2A:67 Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 Certificate issuer: /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Certificate serial: 07EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft Manifest number: 07E2 Signing time: Thu 30 May 2024 22:25:51 +0000 Manifest this update: Thu 30 May 2024 22:25:50 +0000 Manifest next update: Thu 06 Jun 2024 22:25:50 +0000 Files and hashes: 1: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl (hash: y4ixxOON2z1dM62eIy1OMqEl/CJn+6+P9yoIaLLcfmU=) 2: A12DD18E2F1C11EDA3E29B09C4F9AE02.roa (hash: CfeDTQgkJrOB3G5IeP7pVkG87sRDt1MhW/A1ZvzImlA=) 3: A29A66FE2F1C11EDA3E29B09C4F9AE02.roa (hash: vbRt7FNRydtjAbCVazVGIwPi68YmILjtiMVW4GhfcaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 22:25:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2027 (0x7eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Validity Not Before: May 30 22:25:50 2024 GMT Not After : Jun 6 22:25:50 2024 GMT Subject: CN=6658fcee-c494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f5:64:dd:cb:a6:72:82:aa:63:09:5f:cd:0e: bd:24:8c:cc:a7:11:34:f6:fd:53:b5:d9:6c:d8:ab: 26:2f:89:e9:a0:75:24:dd:88:55:06:bb:1b:24:76: 05:53:8f:1e:e5:64:f4:7c:37:b1:b3:5f:fc:54:38: 01:22:55:e3:4e:20:1d:9c:73:51:b0:4a:c8:82:dc: 56:16:59:e7:67:b1:5f:0e:4b:74:cd:fa:ce:8c:a0: 6b:37:6f:b4:9d:95:fd:d9:a3:f5:cb:5a:f7:2f:5b: 5d:16:c0:f0:1e:1c:53:0d:82:91:2f:c4:03:46:cd: 8c:9f:12:92:c4:39:3e:5f:08:7e:ce:26:48:a5:1b: 54:a1:e6:c7:f1:98:71:da:b1:ce:db:f9:97:63:48: 15:66:17:0e:51:15:53:c9:db:d9:bf:69:45:45:bb: 4d:30:25:bd:19:18:76:8d:26:65:cc:a0:9b:79:9d: c3:eb:85:ee:53:48:24:dc:23:1e:e6:9f:1e:ac:16: f4:c9:01:b7:6d:28:70:59:ee:41:ec:81:ab:0d:78: 06:2b:ff:63:ed:68:10:2a:96:37:1f:c3:d1:a8:1b: 0d:0b:39:23:1c:e7:e3:5c:a8:66:34:47:a7:10:bc: 17:34:ef:78:fa:5f:cb:61:96:c4:ca:e6:4a:20:bb: eb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DB:4D:CC:17:F4:80:C7:C0:49:76:46:39:24:E3:31:FD:5F:2A:67 X509v3 Authority Key Identifier: keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:1a:1c:04:15:77:c9:19:8a:4d:0e:a7:f3:90:c5:d1:37:5a: 7c:a1:d4:6a:fb:c1:fb:7b:0a:80:52:cf:87:64:05:63:31:1c: b3:c8:2a:4d:e2:7b:d3:b0:94:3d:6b:24:e6:b8:7c:23:a8:ca: 8d:8d:28:0b:58:ba:bc:39:5e:3c:70:34:be:62:9f:3a:77:73: e5:a2:71:6f:4d:32:09:dd:40:f6:d7:a2:3b:4a:44:25:b0:7d: 70:e7:91:bf:bc:90:0a:61:c4:92:30:41:c2:bc:d2:b4:f9:bf: 73:85:47:d7:bc:82:f7:8d:7c:a0:f7:8c:00:6c:d4:a0:ee:76: d7:f6:2a:7f:a2:0c:30:b8:b7:33:d4:76:13:2c:5b:87:f1:b4: 69:74:70:99:1e:66:a0:23:50:a9:5a:aa:1d:99:e8:cb:2e:89: 6b:23:b3:88:53:62:5e:f5:93:10:ee:14:e5:34:ec:80:d0:c3: 79:f4:67:40:f5:92:bf:a9:c5:5d:c9:05:2c:60:86:40:4a:ec: e4:49:cc:ab:38:8a:96:da:dc:4b:b6:92:3c:a7:33:f3:c8:0d: c4:81:04:24:90:b0:06:83:2a:98:ae:a4:f8:b3:23:92:89:0d: eb:de:97:33:00:ab:ca:54:9a:d5:00:37:fe:d5:81:4c:54:34: df:dd:5a:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyRjcxMTAvBgNVBAUTKEU1MDI3NTdDNjE3QzIxRDQ3QjFCMzU1OUMwOUQ2RUE3 QzNBRkU0MDMwHhcNMjQwNTMwMjIyNTUwWhcNMjQwNjA2MjIyNTUwWjAYMRYwFAYD VQQDEw02NjU4ZmNlZS1jNDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/Vk3cumcoKqYwlfzQ69JIzMpxE09v1Ttdls2KsmL4npoHUk3YhVBrsbJHYF U48e5WT0fDexs1/8VDgBIlXjTiAdnHNRsErIgtxWFlnnZ7FfDkt0zfrOjKBrN2+0 nZX92aP1y1r3L1tdFsDwHhxTDYKRL8QDRs2MnxKSxDk+Xwh+ziZIpRtUoebH8Zhx 2rHO2/mXY0gVZhcOURVTydvZv2lFRbtNMCW9GRh2jSZlzKCbeZ3D64XuU0gk3CMe 5p8erBb0yQG3bShwWe5B7IGrDXgGK/9j7WgQKpY3H8PRqBsNCzkjHOfjXKhmNEen ELwXNO94+l/LYZbEyuZKILvrWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGnbTcwX 9IDHwEl2Rjkk4zH9XypnMB8GA1UdIwQYMBaAFOUCdXxhfCHUexs1WcCdbqfDr+QD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTJGNy83Q0M0NUZBRUJB QUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElkUjdHelZad0oxdXA4T3Y1 QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRSjFmR0Y4SWRSN0d6Vlp3SjF1cDhPdjVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTJGNy83Q0M0NUZBRUJBQUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElk UjdHelZad0oxdXA4T3Y1QU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARGhwEFXfJGYpNDqfzkMXRN1p8odRq+8H7ewqAUs+HZAVjMRyzyCpN 4nvTsJQ9ayTmuHwjqMqNjSgLWLq8OV48cDS+Yp86d3PlonFvTTIJ3UD216I7SkQl sH1w55G/vJAKYcSSMEHCvNK0+b9zhUfXvIL3jXyg94wAbNSg7nbX9ip/ogwwuLcz 1HYTLFuH8bRpdHCZHmagI1CpWqodmejLLolrI7OIU2Je9ZMQ7hTlNOyA0MN59GdA 9ZK/qcVdyQUsYIZASuzkScyrOIqW2txLtpI8pzPzyA3EgQQkkLAGgyqYrqT4syOS iQ3r3pczAKvKVJrVADf+1YFMVDTf3Vpy -----END CERTIFICATE-----Generated at Thu May 30 23:29:04 2024 by rpki-client on console-ams.rpki-client.org