$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft File: s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft (raw, json) Hash identifier: 6HIrsM+ABglXJD+3Ew8RQREZOvCzgUUzLnoRiCeO6LA= Subject key identifier: 9F:49:6A:DC:48:46:01:A9:58:BE:F3:E2:6F:0B:8C:C1:E2:B8:E8:7C Authority key identifier: B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44 Certificate issuer: /CN=A917530D/serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft Manifest number: 43 Signing time: Sun 19 May 2024 08:09:45 +0000 Manifest this update: Sun 19 May 2024 08:09:45 +0000 Manifest next update: Sun 26 May 2024 08:09:44 +0000 Files and hashes: 1: s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl (hash: dG2PH8ZxXFRFSV7dZz++bJ1nO8hnjDl4zte43zn626A=) 2: DA42C906BC2A11EEB6CFC42EC4F9AE02.roa (hash: xowL51lDOOq5Kq1w+FCgVhKjCp8KQWXaZrEsKptgTj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917530D/serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44 Validity Not Before: May 19 08:09:45 2024 GMT Not After : May 26 08:09:44 2024 GMT Subject: CN=6649b3c9-d93e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:88:a0:48:df:32:1b:be:73:8a:75:05:60:58: 34:d7:63:f3:92:ef:34:7c:23:5e:fe:8f:c8:c8:60: 9d:96:1d:e1:50:23:f3:a7:77:db:6b:74:64:a4:42: 32:b5:82:82:7f:a8:d2:3d:e6:ae:8d:63:49:ff:d2: 0e:61:fd:58:4f:54:63:37:4b:01:31:b7:33:03:15: c5:c5:3d:7a:87:4c:4c:a7:d3:63:0a:7c:24:7a:bc: 55:43:37:73:a3:e6:ee:87:83:3a:36:f9:3d:65:88: cf:87:97:9e:dc:8b:39:ea:16:f3:a9:6a:84:4d:d5: f0:3b:24:9c:37:fc:20:72:8b:e7:f2:3f:1c:79:67: 0d:7c:87:71:1e:45:8d:da:9f:c3:ca:29:7f:8e:b3: a5:c5:74:00:6a:6d:08:0a:82:b7:f0:9c:f0:a7:c2: 06:fe:27:ea:10:02:30:5f:e0:5f:4f:69:0e:ae:8c: d0:ee:de:45:db:a8:43:86:d2:d2:75:fa:04:61:53: 44:84:18:de:84:1c:b8:cc:6a:1e:2c:7b:f4:eb:ff: 12:a5:99:c9:8b:01:60:8d:31:2d:28:9d:08:8d:fa: 03:27:59:4a:54:ab:f8:cf:53:18:ff:ac:6b:ff:11: 27:c7:0d:6e:98:a5:41:1d:69:6f:9f:ee:b6:27:c4: df:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:49:6A:DC:48:46:01:A9:58:BE:F3:E2:6F:0B:8C:C1:E2:B8:E8:7C X509v3 Authority Key Identifier: keyid:B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:bd:1c:39:7d:6d:65:99:6d:6f:a9:96:76:39:ce:be:3e:02: 0d:24:de:75:53:bf:bf:71:0c:c4:5d:5c:a9:29:be:99:fd:02: ee:e0:5e:30:17:4e:e7:04:33:19:a7:cb:c3:c3:9e:5d:71:e6: 6e:3b:d3:7e:e0:65:56:d3:36:0e:46:67:b2:62:e4:a5:d7:0c: f5:91:22:1c:90:a2:ae:f3:75:d5:1c:24:1b:ea:a0:bd:42:6c: ef:b5:d5:c6:fb:c5:0d:8f:38:c6:69:54:43:ef:0a:c3:8c:2a: 1d:80:cb:79:db:e7:0f:31:02:f1:69:5c:01:d1:8e:87:03:18: 76:59:47:78:80:62:be:72:4a:9f:36:bf:4b:fb:3a:30:9f:41: d0:f3:19:43:35:90:02:49:3e:0e:d2:ae:7a:87:72:0d:4a:24: 4e:e0:be:07:58:0b:98:88:0f:99:ad:e9:b4:10:2f:75:aa:1b: 6e:2b:1c:0e:c6:8f:2f:cd:64:bd:68:a7:46:bf:4e:53:de:cd: 47:3c:00:b7:0f:b6:2f:d5:9b:bf:f2:31:3f:eb:9b:56:ac:c3: b7:d1:e3:4a:eb:10:92:65:28:e4:ab:29:9d:a1:72:e2:d7:75: 30:8d:88:23:44:2c:bd:14:2f:65:c7:3e:a7:0f:8c:06:44:c8: b8:54:3e:c4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NTMwRDExMC8GA1UEBRMoQjM5OTJGMEQ0OUJBRjZBMzZGREE2NThFNUI0NTk0Njk1 MjFFNUI0NDAeFw0yNDA1MTkwODA5NDVaFw0yNDA1MjYwODA5NDRaMBgxFjAUBgNV BAMTDTY2NDliM2M5LWQ5M2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDiKBI3zIbvnOKdQVgWDTXY/OS7zR8I17+j8jIYJ2WHeFQI/Ond9trdGSkQjK1 goJ/qNI95q6NY0n/0g5h/VhPVGM3SwExtzMDFcXFPXqHTEyn02MKfCR6vFVDN3Oj 5u6Hgzo2+T1liM+Hl57ciznqFvOpaoRN1fA7JJw3/CByi+fyPxx5Zw18h3EeRY3a n8PKKX+Os6XFdABqbQgKgrfwnPCnwgb+J+oQAjBf4F9PaQ6ujNDu3kXbqEOG0tJ1 +gRhU0SEGN6EHLjMah4se/Tr/xKlmcmLAWCNMS0onQiN+gMnWUpUq/jPUxj/rGv/ ESfHDW6YpUEdaW+f7rYnxN9bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUn0lq3EhG AalYvvPibwuMweK46HwwHwYDVR0jBBgwFoAUs5kvDUm69qNv2mWOW0WUaVIeW0Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1MzBEL0REN0UwOTFDQjY0 QjExRUU5MTQ2Mzc2MEM0RjlBRTAyL3M1a3ZEVW02OXFOdjJtV09XMFdVYVZJZVcw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvczVrdkRVbTY5cU52Mm1XT1cwV1VhVkllVzBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 MzBEL0REN0UwOTFDQjY0QjExRUU5MTQ2Mzc2MEM0RjlBRTAyL3M1a3ZEVW02OXFO djJtV09XMFdVYVZJZVcwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABq9HDl9bWWZbW+plnY5zr4+Ag0k3nVTv79xDMRdXKkpvpn9Au7gXjAX TucEMxmny8PDnl1x5m47037gZVbTNg5GZ7Ji5KXXDPWRIhyQoq7zddUcJBvqoL1C bO+11cb7xQ2POMZpVEPvCsOMKh2Ay3nb5w8xAvFpXAHRjocDGHZZR3iAYr5ySp82 v0v7OjCfQdDzGUM1kAJJPg7SrnqHcg1KJE7gvgdYC5iID5mt6bQQL3WqG24rHA7G jy/NZL1op0a/TlPezUc8ALcPti/Vm7/yMT/rm1asw7fR40rrEJJlKOSrKZ2hcuLX dTCNiCNELL0UL2XHPqcPjAZEyLhUPsQ= -----END CERTIFICATE-----Generated at Sun May 19 09:32:16 2024 by rpki-client on console-ams.rpki-client.org