$ rpki-client -vvf rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft File: 55ST8wo-6fDuQFIv8Z1oXIBium4.mft (raw, json) Hash identifier: Psm74DElyxqwhp1G7G2BPaTxpQt5PCA3TMmEUOQ3kh8= Subject key identifier: 8D:98:E0:AC:54:FC:9D:B3:1F:21:B3:BB:4A:D2:2D:04:D9:1D:24:CF Authority key identifier: E7:94:93:F3:0A:3E:E9:F0:EE:40:52:2F:F1:9D:68:5C:80:62:BA:6E Certificate issuer: /CN=A916E377/serialNumber=E79493F30A3EE9F0EE40522FF19D685C8062BA6E Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft Manifest number: 5E Signing time: Fri 17 May 2024 07:49:22 +0000 Manifest this update: Fri 17 May 2024 07:49:21 +0000 Manifest next update: Fri 24 May 2024 07:49:21 +0000 Files and hashes: 1: 55ST8wo-6fDuQFIv8Z1oXIBium4.crl (hash: sm5bO+DNg52ru1XgfHa+9wUnMeA4CUZLxWTYOwcFbLM=) 2: 260A5E588A7B11EE8FAB4037C4F9AE02.roa (hash: 1xnbF7oBtY+kAU2YQ0e5vngvavyFmxq1I+5AkLyA63E=) 3: 258E27C08A7B11EE8FAB4037C4F9AE02.roa (hash: R+dTTQJhXcWx3wuY4em0xoniPS5OMwwo/bjsKbG+bds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.crl rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E377/serialNumber=E79493F30A3EE9F0EE40522FF19D685C8062BA6E Validity Not Before: May 17 07:49:21 2024 GMT Not After : May 24 07:49:21 2024 GMT Subject: CN=66470c01-4bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:57:dc:d3:b5:e7:5d:b6:f0:8a:96:a1:65:89: c7:9e:10:31:5e:fc:b5:6f:6f:45:ff:2f:de:3c:0c: d2:c9:49:fb:5c:97:6b:5f:38:df:e7:5c:5e:1f:5e: 75:02:fc:cf:24:91:c6:7b:7a:59:f2:87:b1:72:f4: 0f:c5:9c:0d:48:74:c5:fc:02:5f:d4:f0:1c:d1:68: 25:e0:4d:08:68:89:7f:c7:7f:ee:75:39:08:9a:a4: db:7d:2b:4e:1e:02:9b:c0:b1:80:0e:3d:2e:9b:0c: 0d:01:43:c0:3d:95:d3:65:5f:bc:7b:18:9c:06:87: dc:95:e9:4c:c3:92:cc:6a:e1:36:b6:6e:60:8b:92: 1c:79:c6:8e:5c:8a:5c:20:69:d2:d7:c9:63:85:fb: 94:fd:92:a6:c0:63:99:4c:0c:82:93:9d:0d:66:27: a8:c8:57:7a:a3:f5:14:d0:5d:50:b8:67:e6:4f:4a: 17:f2:78:b7:da:77:bd:06:4d:02:5f:12:fe:63:6f: ff:13:bb:61:87:62:a1:ea:6d:5b:20:8d:23:f4:64: 1e:7a:30:0c:ae:a3:a6:ea:56:f0:49:a2:0f:b3:ca: 7e:6e:9f:4d:44:97:21:85:49:1e:f9:67:64:45:46: 05:0e:d6:82:57:fd:b2:c7:ed:c6:97:8e:65:87:f0: 40:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:98:E0:AC:54:FC:9D:B3:1F:21:B3:BB:4A:D2:2D:04:D9:1D:24:CF X509v3 Authority Key Identifier: keyid:E7:94:93:F3:0A:3E:E9:F0:EE:40:52:2F:F1:9D:68:5C:80:62:BA:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:d2:30:1e:bc:94:9f:07:75:a3:b2:84:f4:d9:55:4f:1f:45: 08:97:59:eb:df:8d:49:5d:9f:ba:1c:3d:44:b7:26:34:dd:62: 20:15:6e:21:0b:2c:b6:3c:b0:3b:30:ce:a1:87:95:c8:33:68: 3c:cc:e2:f5:91:79:0c:32:ba:32:5c:ea:9f:a6:12:31:77:4a: 3f:0d:8d:20:57:22:64:fe:41:87:0a:24:df:ee:38:e9:f5:20: 9e:79:f6:85:a3:f3:9a:75:ae:11:99:72:49:bc:ac:83:b2:56: e9:f8:3a:75:c4:07:1d:06:0c:d5:5a:41:05:c1:5d:09:ce:04: 4f:db:04:8f:a7:64:f6:57:7b:72:b7:50:16:64:77:5b:f7:82: fb:cd:f8:8c:10:80:10:ba:5c:84:31:fd:26:63:74:4b:33:ee: b2:dd:58:ef:2b:15:61:48:15:63:1a:d6:4f:db:91:d6:2d:ba: fd:5b:cd:bb:d9:95:ff:67:c8:4f:ef:e8:ce:fe:2b:f3:85:bd: 7c:38:a0:ff:47:1a:4b:e6:1b:5e:1e:ed:e7:9d:1e:ae:21:f3: 42:c2:13:1d:ca:65:81:f3:b7:59:50:2c:29:5d:b6:af:33:ce: 5a:5a:26:c3:db:43:71:67:8b:a4:f3:8f:07:35:75:5b:00:3d: b1:83:6c:10 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RTM3NzExMC8GA1UEBRMoRTc5NDkzRjMwQTNFRTlGMEVFNDA1MjJGRjE5RDY4NUM4 MDYyQkE2RTAeFw0yNDA1MTcwNzQ5MjFaFw0yNDA1MjQwNzQ5MjFaMBgxFjAUBgNV BAMTDTY2NDcwYzAxLTRiYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbV9zTteddtvCKlqFliceeEDFe/LVvb0X/L948DNLJSftcl2tfON/nXF4fXnUC /M8kkcZ7elnyh7Fy9A/FnA1IdMX8Al/U8BzRaCXgTQhoiX/Hf+51OQiapNt9K04e ApvAsYAOPS6bDA0BQ8A9ldNlX7x7GJwGh9yV6UzDksxq4Ta2bmCLkhx5xo5cilwg adLXyWOF+5T9kqbAY5lMDIKTnQ1mJ6jIV3qj9RTQXVC4Z+ZPShfyeLfad70GTQJf Ev5jb/8Tu2GHYqHqbVsgjSP0ZB56MAyuo6bqVvBJog+zyn5un01ElyGFSR75Z2RF RgUO1oJX/bLH7caXjmWH8EAFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjZjgrFT8 nbMfIbO7StItBNkdJM8wHwYDVR0jBBgwFoAU55ST8wo+6fDuQFIv8Z1oXIBium4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZFMzc3LzhBNkQxMEI2ODgz QzExRUU5NTU2QkI2RUM0RjlBRTAyLzU1U1Q4d28tNmZEdVFGSXY4WjFvWElCaXVt NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNTVTVDh3by02ZkR1UUZJdjhaMW9YSUJpdW00LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZF Mzc3LzhBNkQxMEI2ODgzQzExRUU5NTU2QkI2RUM0RjlBRTAyLzU1U1Q4d28tNmZE dVFGSXY4WjFvWElCaXVtNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK/SMB68lJ8HdaOyhPTZVU8fRQiXWevfjUldn7ocPUS3JjTdYiAVbiEL LLY8sDswzqGHlcgzaDzM4vWReQwyujJc6p+mEjF3Sj8NjSBXImT+QYcKJN/uOOn1 IJ559oWj85p1rhGZckm8rIOyVun4OnXEBx0GDNVaQQXBXQnOBE/bBI+nZPZXe3K3 UBZkd1v3gvvN+IwQgBC6XIQx/SZjdEsz7rLdWO8rFWFIFWMa1k/bkdYtuv1bzbvZ lf9nyE/v6M7+K/OFvXw4oP9HGkvmG14e7eedHq4h80LCEx3KZYHzt1lQLCldtq8z zlpaJsPbQ3Fni6Tzjwc1dVsAPbGDbBA= -----END CERTIFICATE-----Generated at Fri May 17 10:10:50 2024 by rpki-client on console-fra.rpki-client.org