$ rpki-client -vvf rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft File: 5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft (raw, json) Hash identifier: bxL7na3X5yqYbdjmghLGKr1pyy7yA21dqDKydvmMc6A= Subject key identifier: DE:2D:38:8D:89:CF:DB:B1:3E:1E:00:C8:07:AE:02:DE:0A:97:F0:69 Authority key identifier: E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3 Certificate issuer: /CN=A9165362/serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3 Certificate serial: 047B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft Manifest number: 045D Signing time: Sun 19 May 2024 01:57:52 +0000 Manifest this update: Sun 19 May 2024 01:57:51 +0000 Manifest next update: Sun 26 May 2024 01:57:51 +0000 Files and hashes: 1: 5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl (hash: ndjQJU8rEt9gd/rPOCw+Aq10ZcePzpopKsCbaIh75XU=) 2: 60C0C3FCED4F11EE86554841C4F9AE02.roa (hash: XOe4W/U+ahzZEhu8EHCzF/Dj9L9ZcQnhfEfHf64Gob8=) 3: FF78020EED4E11EE9B185F14C4F9AE02.roa (hash: SU1U4jm2XiLDmHEETRqQhnS7kaBRZ2AiOp0fDzUFpk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1147 (0x47b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165362/serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3 Validity Not Before: May 19 01:57:51 2024 GMT Not After : May 26 01:57:51 2024 GMT Subject: CN=66495ca0-6f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:de:42:28:96:75:0c:b8:65:e4:58:f0:22:99: eb:22:f7:a5:86:47:c5:50:f1:6e:48:39:6c:e9:03: be:1d:97:47:12:6c:1f:e1:71:06:17:85:76:f1:bf: b3:b3:d8:89:27:f9:9c:1a:ae:61:f0:6e:20:a3:3e: 17:bf:5f:77:f2:9b:7b:25:b0:f1:e5:6c:8a:f0:de: 25:05:4f:a8:d7:50:71:c4:48:fc:8a:21:99:28:03: 1e:bf:61:e9:f1:92:3a:d9:af:81:68:f2:e4:c6:d8: a5:bb:64:fa:d6:f3:fa:d4:39:72:21:f8:59:c7:ff: 8f:d4:b3:e1:bb:ae:e5:5e:11:a3:1a:30:ec:e4:00: 6c:2b:b3:59:b0:18:c6:d7:fd:95:99:fc:c8:84:4a: 7d:10:c9:e2:24:df:f8:c5:8d:b4:90:4e:8f:d7:48: 22:18:0f:5d:a7:e2:58:8b:c2:8a:ca:fb:93:1f:b5: 4c:36:62:c0:95:9a:41:48:ec:86:05:cc:6f:35:3b: be:cc:18:cd:b3:3c:d7:42:c8:31:86:72:fa:45:be: 0d:f7:cd:c5:47:ca:ac:e3:59:9d:38:6c:70:ab:30: 4a:b9:e5:e7:ad:3a:43:92:70:28:39:17:b0:40:c8: 9c:14:82:0f:ae:ad:13:ef:ee:1f:23:bf:8b:5d:54: 58:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:2D:38:8D:89:CF:DB:B1:3E:1E:00:C8:07:AE:02:DE:0A:97:F0:69 X509v3 Authority Key Identifier: keyid:E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:e8:5a:b0:ff:f8:1d:44:66:68:7e:5c:b1:b5:05:11:27:80: 44:4b:4f:d9:5c:33:84:d5:99:b3:db:ef:66:a5:c7:7d:cd:2a: e2:32:20:48:ba:98:17:3c:21:c5:dc:a6:da:2b:b5:0a:a6:a7: 6c:90:b5:bb:ee:14:6e:c6:75:ac:01:65:39:d0:33:fe:a7:59: 44:b3:b2:1a:89:47:95:69:a8:f2:79:77:9c:d5:4b:3c:01:2b: 25:86:74:53:89:18:ea:c5:50:e4:de:ab:ae:37:11:f3:91:b4: 8f:16:0c:68:0c:e0:45:76:ac:31:27:2f:a0:d2:88:e7:9e:13: ba:f2:3d:54:94:53:3b:ee:32:3d:be:d9:00:6f:87:f4:54:4f: 93:d8:7f:8c:81:67:7a:c7:d3:c7:ca:2a:ff:7d:cc:a4:eb:f9: 0e:3f:04:e5:e3:4f:da:59:2e:75:03:d6:30:e9:20:dd:4b:70: 84:37:3b:12:6c:8b:8b:d4:02:88:31:01:92:4a:13:e6:89:79: 5c:d5:a0:a1:6a:bd:c3:6f:d0:34:74:6e:df:d7:d4:1a:36:bc: dc:e2:23:55:f5:d7:17:94:92:74:44:66:2e:65:5f:18:ba:01: fc:53:00:35:da:2e:df:9d:38:33:f6:6b:a2:b8:b8:a8:4c:eb: 0c:de:78:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUzNjIxMTAvBgNVBAUTKEU1RTVEMTY4QTBFMTA5NkVBMUMzRjlCN0Y4RThENzU4 RUFFQTIzRjMwHhcNMjQwNTE5MDE1NzUxWhcNMjQwNTI2MDE1NzUxWjAYMRYwFAYD VQQDEw02NjQ5NWNhMC02ZjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsd5CKJZ1DLhl5FjwIpnrIvelhkfFUPFuSDls6QO+HZdHEmwf4XEGF4V28b+z s9iJJ/mcGq5h8G4goz4Xv1938pt7JbDx5WyK8N4lBU+o11BxxEj8iiGZKAMev2Hp 8ZI62a+BaPLkxtilu2T61vP61DlyIfhZx/+P1LPhu67lXhGjGjDs5ABsK7NZsBjG 1/2VmfzIhEp9EMniJN/4xY20kE6P10giGA9dp+JYi8KKyvuTH7VMNmLAlZpBSOyG BcxvNTu+zBjNszzXQsgxhnL6Rb4N983FR8qs41mdOGxwqzBKueXnrTpDknAoORew QMicFIIPrq0T7+4fI7+LXVRYbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4tOI2J z9uxPh4AyAeuAt4Kl/BpMB8GA1UdIwQYMBaAFOXl0Wig4QluocP5t/jo11jq6iPz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTM2Mi9EOUNCRjgwQTEw QjMxMUVDQTMxREY4MkNDNEY5QUUwMi81ZVhSYUtEaENXNmh3X20zLU9qWFdPcnFJ X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVlWFJhS0RoQ1c2aHdfbTMtT2pYV09ycUlfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTM2Mi9EOUNCRjgwQTEwQjMxMUVDQTMxREY4MkNDNEY5QUUwMi81ZVhSYUtEaENX Nmh3X20zLU9qWFdPcnFJX00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo6Fqw//gdRGZoflyxtQURJ4BES0/ZXDOE1Zmz2+9mpcd9zSriMiBI upgXPCHF3KbaK7UKpqdskLW77hRuxnWsAWU50DP+p1lEs7IaiUeVaajyeXec1Us8 ASslhnRTiRjqxVDk3quuNxHzkbSPFgxoDOBFdqwxJy+g0ojnnhO68j1UlFM77jI9 vtkAb4f0VE+T2H+MgWd6x9PHyir/fcyk6/kOPwTl40/aWS51A9Yw6SDdS3CENzsS bIuL1AKIMQGSShPmiXlc1aChar3Db9A0dG7f19QaNrzc4iNV9dcXlJJ0RGYuZV8Y ugH8UwA12i7fnTgz9muiuLioTOsM3ngg -----END CERTIFICATE-----Generated at Sun May 19 02:59:07 2024 by rpki-client on console-ams.rpki-client.org