$ rpki-client -vvf rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft File: P5mfuMEae4Z_G_n5nKHCaglVK34.mft (raw, json) Hash identifier: RqtXeqjr5NwUHiqrc0Fcln/C+tFuOBKSZsJEpd5jkFg= Subject key identifier: 6A:73:46:30:2D:02:0E:19:18:30:85:40:6F:65:53:61:EC:1F:00:71 Authority key identifier: 3F:99:9F:B8:C1:1A:7B:86:7F:1B:F9:F9:9C:A1:C2:6A:09:55:2B:7E Certificate issuer: /CN=A917429C/serialNumber=3F999FB8C11A7B867F1BF9F99CA1C26A09552B7E Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft Manifest number: A2 Signing time: Sat 01 Jun 2024 08:10:47 +0000 Manifest this update: Sat 01 Jun 2024 08:10:47 +0000 Manifest next update: Sat 08 Jun 2024 08:10:47 +0000 Files and hashes: 1: P5mfuMEae4Z_G_n5nKHCaglVK34.crl (hash: kJeHG2N3HIXDigjRfhnKu6Q5pTDtKkTm0QMpqraYyi4=) 2: D41F53D48DC011EEB2B3600BC4F9AE02.roa (hash: vG1Nu+chFQxY1PRKVRFhF7dzg2tdkhlf/gdqUz+7rDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.crl rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917429C/serialNumber=3F999FB8C11A7B867F1BF9F99CA1C26A09552B7E Validity Not Before: Jun 1 08:10:47 2024 GMT Not After : Jun 8 08:10:47 2024 GMT Subject: CN=665ad787-b050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a0:c5:d3:7e:70:63:c5:9a:61:dc:5d:41:67: 70:3a:f4:98:c3:4b:4d:6d:e3:42:ca:d2:fb:c4:d5: 64:f7:e2:2e:bd:bf:2f:09:1d:eb:77:bd:0d:c9:0d: b8:27:84:57:d1:e0:db:94:9d:d4:58:6c:7b:ec:98: 46:14:1f:4e:6c:0a:9a:3c:7a:34:61:98:bc:23:cf: bf:e1:8e:12:60:2b:90:f2:ca:ed:e2:c3:45:7f:cb: df:2b:bd:9f:51:2c:f0:a7:03:40:49:94:03:ad:01: 0d:7e:e9:e4:b8:ca:3e:1d:c2:15:29:80:68:09:7d: 18:e5:1e:ee:14:94:b0:2b:21:6a:09:f0:d7:77:f5: 9b:ef:ed:f5:ad:fb:20:66:b0:02:11:44:59:83:6c: 6a:50:ca:21:d8:3b:f1:fe:31:b4:51:f2:05:33:5f: 59:63:00:ec:d0:e1:8c:e9:2c:91:d3:f0:19:f7:31: 0e:86:eb:c0:7a:5b:a5:39:29:f5:23:11:5d:94:d4: 30:4e:27:27:15:d1:01:27:ed:97:6b:53:9e:7d:66: 95:ce:cc:ef:62:96:bd:96:c0:25:9d:34:3d:39:d6: ef:6d:a7:95:f5:1d:23:2d:cb:5f:e3:f6:6f:86:a6: 7e:d2:54:a5:a8:44:ab:b9:6e:67:f4:4c:e7:77:8e: ce:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:73:46:30:2D:02:0E:19:18:30:85:40:6F:65:53:61:EC:1F:00:71 X509v3 Authority Key Identifier: keyid:3F:99:9F:B8:C1:1A:7B:86:7F:1B:F9:F9:9C:A1:C2:6A:09:55:2B:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:6b:b6:1c:ee:d7:3c:7c:a0:cc:27:f3:ff:85:0a:f4:e7:6a: 1e:dd:8e:77:5a:e4:1a:00:dc:9a:71:f6:3a:68:46:5e:25:0f: 5d:19:28:04:18:e3:61:d8:d8:9a:c8:92:7d:3c:84:47:71:92: 28:4f:08:e1:37:17:f7:70:4b:58:32:4b:fd:c9:19:86:1c:ca: 0b:7c:32:77:91:33:7d:d3:1e:8e:b5:e1:41:a4:70:88:c9:4c: 7f:87:77:65:cd:ba:d8:4f:1e:9b:5e:fd:22:35:05:55:8e:fb: a6:18:4d:4a:cc:f3:41:33:31:81:a8:07:59:f7:85:85:bb:4c: 8e:a3:ba:8e:56:2f:02:0a:a3:5b:1f:3e:f1:2a:a8:bb:db:97: e2:f7:25:1e:22:4d:64:5c:ba:42:82:d8:3b:6d:d1:a2:79:b6: 05:49:ba:8f:98:3c:70:ef:2f:77:c8:67:af:75:f2:0b:32:c2: c9:9d:62:51:5e:af:3d:1e:81:ce:4c:2c:d0:02:12:71:02:55: 71:37:f0:6a:d9:94:20:84:42:89:3a:61:9b:7f:c8:34:93:69: 93:64:d9:a7:de:e8:30:3a:df:46:26:44:c6:a8:2e:a9:bf:b7: e9:ae:e0:66:ce:0a:0f:82:cd:dc:b3:4c:7b:a1:18:9a:cc:e4: f8:d9:3c:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQyOUMxMTAvBgNVBAUTKDNGOTk5RkI4QzExQTdCODY3RjFCRjlGOTlDQTFDMjZB MDk1NTJCN0UwHhcNMjQwNjAxMDgxMDQ3WhcNMjQwNjA4MDgxMDQ3WjAYMRYwFAYD VQQDEw02NjVhZDc4Ny1iMDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKDF035wY8WaYdxdQWdwOvSYw0tNbeNCytL7xNVk9+Iuvb8vCR3rd70NyQ24 J4RX0eDblJ3UWGx77JhGFB9ObAqaPHo0YZi8I8+/4Y4SYCuQ8srt4sNFf8vfK72f USzwpwNASZQDrQENfunkuMo+HcIVKYBoCX0Y5R7uFJSwKyFqCfDXd/Wb7+31rfsg ZrACEURZg2xqUMoh2Dvx/jG0UfIFM19ZYwDs0OGM6SyR0/AZ9zEOhuvAelulOSn1 IxFdlNQwTicnFdEBJ+2Xa1OefWaVzszvYpa9lsAlnTQ9OdbvbaeV9R0jLctf4/Zv hqZ+0lSlqESruW5n9Eznd47OjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpzRjAt Ag4ZGDCFQG9lU2HsHwBxMB8GA1UdIwQYMBaAFD+Zn7jBGnuGfxv5+ZyhwmoJVSt+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDI5Qy8wRjE3MkREMjMw MjgxMUVFOTM0QThEMENDNEY5QUUwMi9QNW1mdU1FYWU0Wl9HX241bktIQ2FnbFZL MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A1bWZ1TUVhZTRaX0dfbjVuS0hDYWdsVkszNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDI5Qy8wRjE3MkREMjMwMjgxMUVFOTM0QThEMENDNEY5QUUwMi9QNW1mdU1FYWU0 Wl9HX241bktIQ2FnbFZLMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpa7Yc7tc8fKDMJ/P/hQr052oe3Y53WuQaANyacfY6aEZeJQ9dGSgE GONh2NiayJJ9PIRHcZIoTwjhNxf3cEtYMkv9yRmGHMoLfDJ3kTN90x6OteFBpHCI yUx/h3dlzbrYTx6bXv0iNQVVjvumGE1KzPNBMzGBqAdZ94WFu0yOo7qOVi8CCqNb Hz7xKqi725fi9yUeIk1kXLpCgtg7bdGiebYFSbqPmDxw7y93yGevdfILMsLJnWJR Xq89HoHOTCzQAhJxAlVxN/Bq2ZQghEKJOmGbf8g0k2mTZNmn3ugwOt9GJkTGqC6p v7fpruBmzgoPgs3cs0x7oRiazOT42TwF -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:18 2024 by rpki-client on console-ams.rpki-client.org