$ rpki-client -vvf rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft File: 5K6ANyqGeYe7Kgq74RCrgENw1eM.mft (raw, json) Hash identifier: qC6DgfKgBfogx6c0MHW8o4i6ApntqX1O2mavWpj2vNo= Subject key identifier: 00:CE:2B:C5:D2:37:86:C4:45:6F:51:75:9C:55:3C:4A:6E:BF:84:3B Authority key identifier: E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3 Certificate issuer: /CN=A917452D/serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft Manifest number: 019A Signing time: Sun 19 May 2024 04:46:42 +0000 Manifest this update: Sun 19 May 2024 04:46:41 +0000 Manifest next update: Sun 26 May 2024 04:46:41 +0000 Files and hashes: 1: 5K6ANyqGeYe7Kgq74RCrgENw1eM.crl (hash: mRL8/GQ4Z3lvz1m5uMwyW0B1QFhP8M3iMI+u1RlPRxo=) 2: 5ABAAD76D21811EE93095285C4F9AE02.roa (hash: jqEeR5aXqpprEUgBz7NvCCwqJPX6Jw/fXVk1HSO4iwY=) 3: 59942846D21811EE93095285C4F9AE02.roa (hash: WKGoGCPF42uOFvWjDbePlTDvmtNNp0qAbQmIqMf1Y2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.crl rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917452D/serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3 Validity Not Before: May 19 04:46:41 2024 GMT Not After : May 26 04:46:41 2024 GMT Subject: CN=66498431-846e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:dd:07:8c:17:2c:19:78:17:d0:54:f5:77:4d: 5c:56:e4:76:43:a5:ef:49:c2:fc:d7:44:56:bc:72: af:db:6c:c0:9f:c5:56:1f:63:4b:ff:34:c7:1b:9b: f8:8b:26:17:13:88:e9:d1:95:d9:51:fa:4c:22:0c: 43:38:7d:d2:b2:0d:02:e0:35:66:5d:60:85:b3:39: af:96:64:d6:bf:79:7c:0e:39:a1:65:7c:28:9f:9a: 93:46:53:82:e3:52:74:da:b2:4e:5c:16:49:91:cf: cc:ad:86:03:2a:41:f3:61:a0:fc:86:09:cd:8a:53: ec:05:42:60:8b:2f:ba:46:d2:c7:aa:ef:be:06:af: 8b:6f:36:eb:bd:c7:57:f9:53:9c:13:13:1a:bd:6b: 33:4f:75:21:84:01:40:d2:7c:f4:fc:52:d2:e4:53: a0:e5:8e:9c:8c:25:91:52:4d:97:90:dd:ed:3c:91: 74:79:bc:ed:59:33:3d:c0:e6:3a:33:bc:6c:70:f1: 7e:16:cf:85:8e:c1:ed:52:e7:47:63:f2:e8:86:4f: 59:13:dd:21:b7:5b:12:0b:3d:59:d5:b2:d1:28:b3: d6:7d:ab:ce:b5:be:62:be:5b:7b:cf:2a:1f:95:44: 69:5a:4f:6a:99:fc:38:51:b2:50:be:48:5b:4c:26: e0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CE:2B:C5:D2:37:86:C4:45:6F:51:75:9C:55:3C:4A:6E:BF:84:3B X509v3 Authority Key Identifier: keyid:E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:30:37:92:2a:92:2e:0f:87:ab:00:51:c7:5e:76:5d:a6:72: 40:24:11:9b:22:b9:e5:30:94:79:37:86:d0:25:b5:cf:0d:dc: b1:46:86:0d:5b:1f:47:97:39:f1:6b:b8:99:db:44:00:5c:87: 3c:06:da:3c:6e:4c:41:73:ea:c7:ca:37:6e:7d:15:24:c0:2c: d7:14:08:66:70:92:06:f9:20:74:51:30:dd:18:5c:d4:cb:3a: e4:86:cf:07:be:2a:22:bf:d3:ac:19:b9:07:03:aa:2f:b6:38: 65:63:71:f3:27:e5:86:4b:99:e3:67:bc:be:46:67:1b:68:7e: 4b:90:cc:00:cd:9c:df:89:a9:43:aa:15:5f:fd:7a:44:6f:9b: 0c:00:a5:d6:23:74:bc:ab:3a:1e:15:4e:8a:e9:bd:1f:21:13: 3d:27:ac:99:57:a9:cf:6a:4d:f9:ff:c0:57:95:09:fa:99:0b: 50:b8:ed:ef:cc:65:85:0b:e1:2e:ff:15:6c:c4:dc:a3:3b:a5: 20:2f:f9:b9:d2:5c:e1:75:1b:fe:66:6c:a9:0f:27:d8:94:bb: c7:7f:ad:04:9b:93:7c:0a:c3:16:a0:40:1f:ff:a6:5b:b9:91: 28:aa:bf:55:67:f0:a9:bb:ee:ef:99:da:ee:b9:e5:eb:b6:a0: ee:62:18:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ1MkQxMTAvBgNVBAUTKEU0QUU4MDM3MkE4Njc5ODdCQjJBMEFCQkUxMTBBQjgw NDM3MEQ1RTMwHhcNMjQwNTE5MDQ0NjQxWhcNMjQwNTI2MDQ0NjQxWjAYMRYwFAYD VQQDEw02NjQ5ODQzMS04NDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/N0HjBcsGXgX0FT1d01cVuR2Q6XvScL810RWvHKv22zAn8VWH2NL/zTHG5v4 iyYXE4jp0ZXZUfpMIgxDOH3Ssg0C4DVmXWCFszmvlmTWv3l8DjmhZXwon5qTRlOC 41J02rJOXBZJkc/MrYYDKkHzYaD8hgnNilPsBUJgiy+6RtLHqu++Bq+LbzbrvcdX +VOcExMavWszT3UhhAFA0nz0/FLS5FOg5Y6cjCWRUk2XkN3tPJF0ebztWTM9wOY6 M7xscPF+Fs+FjsHtUudHY/Lohk9ZE90ht1sSCz1Z1bLRKLPWfavOtb5ivlt7zyof lURpWk9qmfw4UbJQvkhbTCbgYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADOK8XS N4bERW9RdZxVPEpuv4Q7MB8GA1UdIwQYMBaAFOSugDcqhnmHuyoKu+EQq4BDcNXj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDUyRC9BQTQyMTcxRTI3 NjgxMUVEOUEyMjE3MzBDNEY5QUUwMi81SzZBTnlxR2VZZTdLZ3E3NFJDcmdFTncx ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVLNkFOeXFHZVllN0tncTc0UkNyZ0VOdzFlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDUyRC9BQTQyMTcxRTI3NjgxMUVEOUEyMjE3MzBDNEY5QUUwMi81SzZBTnlxR2VZ ZTdLZ3E3NFJDcmdFTncxZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5MDeSKpIuD4erAFHHXnZdpnJAJBGbIrnlMJR5N4bQJbXPDdyxRoYN Wx9Hlznxa7iZ20QAXIc8Bto8bkxBc+rHyjdufRUkwCzXFAhmcJIG+SB0UTDdGFzU yzrkhs8Hvioiv9OsGbkHA6ovtjhlY3HzJ+WGS5njZ7y+RmcbaH5LkMwAzZzfialD qhVf/XpEb5sMAKXWI3S8qzoeFU6K6b0fIRM9J6yZV6nPak35/8BXlQn6mQtQuO3v zGWFC+Eu/xVsxNyjO6UgL/m50lzhdRv+ZmypDyfYlLvHf60Em5N8CsMWoEAf/6Zb uZEoqr9VZ/Cpu+7vmdruueXrtqDuYhip -----END CERTIFICATE-----Generated at Sun May 19 05:48:50 2024 by rpki-client on console-fra.rpki-client.org