$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft File: 54D6N3e4HUz2o1QG6lz0vk9l6fo.mft (raw, json) Hash identifier: bTv4qLvlJS+94sNz3/YSJROOUYgO74FiU3+IWfLFR7k= Subject key identifier: 97:8A:9D:04:23:51:D0:BA:CB:8B:CA:67:E1:CE:60:91:C3:23:EA:98 Authority key identifier: E7:80:FA:37:77:B8:1D:4C:F6:A3:54:06:EA:5C:F4:BE:4F:65:E9:FA Certificate issuer: /CN=A917530D/serialNumber=E780FA3777B81D4CF6A35406EA5CF4BE4F65E9FA Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft Manifest number: 42 Signing time: Sun 19 May 2024 08:09:43 +0000 Manifest this update: Sun 19 May 2024 08:09:42 +0000 Manifest next update: Sun 26 May 2024 08:09:42 +0000 Files and hashes: 1: 54D6N3e4HUz2o1QG6lz0vk9l6fo.crl (hash: GfnwtrSHVu7QFtsI0BRwALxUXiU7CHpDKGARJXv4f/g=) 2: 1BEBEF22BC2B11EE9E07372FC4F9AE02.roa (hash: 8AKjzTN2ebupzY9Q+12ANqP/63LDp5GktBtxaktGQq8=) 3: 1032223CBC2B11EE9E04192FC4F9AE02.roa (hash: MpAPurYtTXFLW1M0lBme9ujEKrNBy5u7pAbDE0pQumo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.crl rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917530D/serialNumber=E780FA3777B81D4CF6A35406EA5CF4BE4F65E9FA Validity Not Before: May 19 08:09:42 2024 GMT Not After : May 26 08:09:42 2024 GMT Subject: CN=6649b3c6-4324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c9:10:4c:d5:8f:d5:dd:f4:07:8a:23:62:0b: fe:8b:26:a2:ce:38:a2:09:86:2e:2b:7a:4f:91:56: 68:06:15:c0:a8:22:06:2a:9d:da:a8:a4:b0:c9:8e: 4c:25:58:e2:9d:27:b0:8c:82:75:1f:fe:4a:4b:43: 81:22:fb:ec:08:a1:16:09:15:f2:8f:55:83:04:7e: 36:d8:75:e4:9e:23:a2:6e:e9:b4:9f:01:92:94:55: 3b:f5:5b:e8:20:d6:39:85:92:a6:9f:ac:6e:7c:9f: 55:0c:ff:62:5a:f6:4d:e5:1e:6c:60:77:3e:e3:4a: 9d:aa:db:52:ae:7d:d6:69:0a:a0:bf:7b:58:69:95: a3:2e:dd:23:84:ef:5d:ae:b1:4d:55:6f:43:f2:2a: c5:e3:44:6a:01:00:b2:0d:bf:15:ae:e2:d6:63:4c: 3c:c0:5d:78:a2:77:48:95:6b:a9:47:32:c2:94:ce: 80:c9:35:05:d7:88:15:8f:49:fb:aa:a7:db:09:23: 8e:dc:19:a2:d7:2e:e8:92:b0:8b:88:a9:1d:7f:3f: dd:3c:eb:fe:fd:f8:3e:e2:ba:a1:2a:23:1c:ea:e0: fe:40:25:88:a4:cc:00:aa:b8:91:01:67:67:95:a3: 2a:a3:12:98:60:29:c4:17:44:39:f9:06:14:be:4f: 11:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:8A:9D:04:23:51:D0:BA:CB:8B:CA:67:E1:CE:60:91:C3:23:EA:98 X509v3 Authority Key Identifier: keyid:E7:80:FA:37:77:B8:1D:4C:F6:A3:54:06:EA:5C:F4:BE:4F:65:E9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:7c:8d:c2:f3:5c:fb:3e:c1:94:2f:5d:ab:d9:dc:93:e9:73: ba:3d:0c:28:c8:b6:9a:ea:7b:74:f5:10:fb:c0:13:e9:56:07: a6:e8:62:6f:6c:d3:f4:bd:02:55:ec:3a:e7:b0:b7:af:c2:bd: af:a9:bc:bd:bc:c5:8a:a3:27:22:46:00:5a:0b:d4:f9:18:77: 42:bc:1a:3c:c2:a0:23:17:bb:56:27:fc:f6:1f:2a:44:21:75: 05:5a:9d:0b:a3:f6:62:d9:2c:e8:3f:6d:d4:50:9d:37:13:41: 16:f6:2f:b4:54:2b:9c:85:33:64:37:47:4b:c5:c1:96:2f:b4: be:49:89:9f:8b:d6:f8:76:a2:45:f2:a2:39:20:3a:3e:d1:b6: bc:d4:97:6b:c0:14:9f:99:46:95:c1:3d:51:05:33:a3:83:1c: 96:f3:7a:3c:ec:37:a4:ca:52:22:f1:41:85:41:76:ce:45:68: e4:32:9b:9a:15:38:3b:0a:4b:f4:4b:44:b9:63:2c:c6:a0:75: ca:ff:dd:5a:fa:ce:22:59:f6:50:73:21:6e:30:83:0f:eb:8f: a1:e5:90:1e:17:2a:08:e0:99:bc:c9:e3:29:06:5e:83:6c:ab: 02:e0:d5:93:f0:e5:89:fc:b6:ad:51:f1:ba:af:aa:48:6a:55: 90:c4:bf:3c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NTMwRDExMC8GA1UEBRMoRTc4MEZBMzc3N0I4MUQ0Q0Y2QTM1NDA2RUE1Q0Y0QkU0 RjY1RTlGQTAeFw0yNDA1MTkwODA5NDJaFw0yNDA1MjYwODA5NDJaMBgxFjAUBgNV BAMTDTY2NDliM2M2LTQzMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjyRBM1Y/V3fQHiiNiC/6LJqLOOKIJhi4rek+RVmgGFcCoIgYqndqopLDJjkwl WOKdJ7CMgnUf/kpLQ4Ei++wIoRYJFfKPVYMEfjbYdeSeI6Ju6bSfAZKUVTv1W+gg 1jmFkqafrG58n1UM/2Ja9k3lHmxgdz7jSp2q21KufdZpCqC/e1hplaMu3SOE712u sU1Vb0PyKsXjRGoBALINvxWu4tZjTDzAXXiid0iVa6lHMsKUzoDJNQXXiBWPSfuq p9sJI47cGaLXLuiSsIuIqR1/P9086/79+D7iuqEqIxzq4P5AJYikzACquJEBZ2eV oyqjEphgKcQXRDn5BhS+TxHnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUl4qdBCNR 0LrLi8pn4c5gkcMj6pgwHwYDVR0jBBgwFoAU54D6N3e4HUz2o1QG6lz0vk9l6fow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1MzBEL0U2NDAwMUY0QjY0 QjExRUU5MTQ2Mzc2MEM0RjlBRTAyLzU0RDZOM2U0SFV6Mm8xUUc2bHowdms5bDZm by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNTRENk4zZTRIVXoybzFRRzZsejB2azlsNmZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 MzBEL0U2NDAwMUY0QjY0QjExRUU5MTQ2Mzc2MEM0RjlBRTAyLzU0RDZOM2U0SFV6 Mm8xUUc2bHowdms5bDZmby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIF8jcLzXPs+wZQvXavZ3JPpc7o9DCjItprqe3T1EPvAE+lWB6boYm9s 0/S9AlXsOuewt6/Cva+pvL28xYqjJyJGAFoL1PkYd0K8GjzCoCMXu1Yn/PYfKkQh dQVanQuj9mLZLOg/bdRQnTcTQRb2L7RUK5yFM2Q3R0vFwZYvtL5JiZ+L1vh2okXy ojkgOj7RtrzUl2vAFJ+ZRpXBPVEFM6ODHJbzejzsN6TKUiLxQYVBds5FaOQym5oV ODsKS/RLRLljLMagdcr/3Vr6ziJZ9lBzIW4wgw/rj6HlkB4XKgjgmbzJ4ykGXoNs qwLg1ZPw5Yn8tq1R8bqvqkhqVZDEvzw= -----END CERTIFICATE-----Generated at Sun May 19 09:04:13 2024 by rpki-client on console-fra.rpki-client.org