$ rpki-client -vvf rpki.apnic.net/member_repository/A9175862/04B3F5FAEBCD11E797CA0E2CC4F9AE02/5ipNR4qboY7g-ZBpj2gj2VDR5nQ.mft File: 5ipNR4qboY7g-ZBpj2gj2VDR5nQ.mft (raw, json) Hash identifier: 6ddfpomvLCWPp4NWLHuZ9TmPgrDP1ItZZYGYC449VMs= Subject key identifier: 37:0A:0E:C6:54:1B:0D:1B:E1:F2:C9:AA:68:17:81:60:F7:FD:C2:45 Authority key identifier: E6:2A:4D:47:8A:9B:A1:8E:E0:F9:90:69:8F:68:23:D9:50:D1:E6:74 Certificate issuer: /CN=A9175862/serialNumber=E62A4D478A9BA18EE0F990698F6823D950D1E674 Certificate serial: 163A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ipNR4qboY7g-ZBpj2gj2VDR5nQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175862/04B3F5FAEBCD11E797CA0E2CC4F9AE02/5ipNR4qboY7g-ZBpj2gj2VDR5nQ.mft Manifest number: 1633 Signing time: Sat 18 May 2024 17:11:43 +0000 Manifest this update: Sat 18 May 2024 17:11:42 +0000 Manifest next update: Sat 25 May 2024 17:11:42 +0000 Files and hashes: 1: 5ipNR4qboY7g-ZBpj2gj2VDR5nQ.crl (hash: v3AHqgedsg5FlqRYAQrWVAArtHIaQpJD4rOKhZJ4wis=) 2: 766E754AE9D411EB91D55081C4F9AE02.roa (hash: dFPUC3nfTQvBocPdPRx/Z5eqylz7fdQQ9z0hlNpStis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175862/04B3F5FAEBCD11E797CA0E2CC4F9AE02/5ipNR4qboY7g-ZBpj2gj2VDR5nQ.crl rsync://rpki.apnic.net/member_repository/A9175862/04B3F5FAEBCD11E797CA0E2CC4F9AE02/5ipNR4qboY7g-ZBpj2gj2VDR5nQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ipNR4qboY7g-ZBpj2gj2VDR5nQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5690 (0x163a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175862/serialNumber=E62A4D478A9BA18EE0F990698F6823D950D1E674 Validity Not Before: May 18 17:11:42 2024 GMT Not After : May 25 17:11:42 2024 GMT Subject: CN=6648e14e-7e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:32:a6:ab:f8:98:01:ae:d1:43:a0:a0:27:75: 26:d9:71:71:39:c9:0b:a2:d9:1e:80:81:de:db:af: 24:37:4f:08:5a:0e:f2:16:be:50:32:c6:eb:6c:6d: 33:db:36:31:fe:58:ff:1d:a0:12:06:2d:77:36:52: b6:e2:b4:c8:a5:b5:7a:eb:18:95:1b:20:21:df:2e: 7a:ea:17:ca:76:7a:48:0d:f0:02:c0:14:02:c4:52: 98:e0:bc:58:a0:3e:52:6c:ea:69:51:54:cf:78:fe: 69:60:b1:93:a2:fd:74:23:fe:32:b8:15:39:83:f2: 5b:a1:16:17:06:8a:4c:66:81:90:1d:64:f7:12:f1: 0f:64:f1:21:b9:fd:0d:00:f3:33:7a:e4:41:1a:1f: f9:63:d7:fa:0a:b1:87:01:16:ac:5a:e4:17:42:dc: 1f:3b:26:da:53:58:1e:a4:ac:e6:50:a9:e6:67:07: 0d:48:e3:da:01:bf:c5:56:ae:f9:42:df:b1:e3:62: f0:4a:f3:5b:72:55:20:45:48:a8:49:51:98:d8:c0: 2a:fd:1d:4b:fd:62:4e:d7:41:9c:b4:ec:6d:ed:15: 40:c6:db:62:6d:d5:6b:9c:8c:90:ea:f7:c5:e2:52: bc:f1:f3:71:86:0c:bb:c4:ff:f8:67:98:d9:a0:2b: 0c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0A:0E:C6:54:1B:0D:1B:E1:F2:C9:AA:68:17:81:60:F7:FD:C2:45 X509v3 Authority Key Identifier: keyid:E6:2A:4D:47:8A:9B:A1:8E:E0:F9:90:69:8F:68:23:D9:50:D1:E6:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175862/04B3F5FAEBCD11E797CA0E2CC4F9AE02/5ipNR4qboY7g-ZBpj2gj2VDR5nQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ipNR4qboY7g-ZBpj2gj2VDR5nQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175862/04B3F5FAEBCD11E797CA0E2CC4F9AE02/5ipNR4qboY7g-ZBpj2gj2VDR5nQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:ea:7a:2b:cf:e3:e9:97:3a:a6:2d:18:2e:c9:36:59:90:f3: b7:fe:82:2d:23:89:b2:46:a0:40:f0:eb:d3:e0:47:36:c8:a9: 85:33:87:2a:26:ab:e0:a2:18:dc:a0:4d:cf:21:f7:5b:4d:78: 88:33:8b:0f:e4:49:53:b2:73:0a:48:59:0e:b1:a0:a6:84:0a: f3:26:25:f7:d4:25:a8:a0:cc:db:5e:c4:12:a9:d1:89:85:ed: bf:fa:4f:19:50:c8:ae:03:ca:88:23:47:34:72:23:1a:05:5a: ba:51:cf:23:ed:1d:ac:e7:25:2c:32:eb:9c:a9:23:a0:79:68: b5:1b:70:30:cc:f3:d9:e7:8f:3a:0c:ab:7e:9a:5d:e3:76:47: 31:61:36:5f:42:1b:11:99:19:a0:f6:32:02:1b:26:4f:23:bc: 6d:8e:39:12:e9:90:45:24:ca:26:fb:fc:f8:ad:9e:63:d8:27: 5f:ef:7a:16:69:a2:53:b4:07:13:59:8c:f9:de:65:59:81:d8: 59:99:5d:73:52:c2:25:2e:3c:00:42:b8:9c:77:0a:27:0d:c2: 7d:90:29:57:83:50:9b:4f:82:3c:4a:22:4e:3e:f8:cc:5d:f4: 72:e9:47:9a:ec:7c:06:b0:de:bf:cc:0c:c7:8d:6d:c1:b5:cc: 9a:eb:af:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU4NjIxMTAvBgNVBAUTKEU2MkE0RDQ3OEE5QkExOEVFMEY5OTA2OThGNjgyM0Q5 NTBEMUU2NzQwHhcNMjQwNTE4MTcxMTQyWhcNMjQwNTI1MTcxMTQyWjAYMRYwFAYD VQQDEw02NjQ4ZTE0ZS03ZTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7zKmq/iYAa7RQ6CgJ3Um2XFxOckLotkegIHe268kN08IWg7yFr5QMsbrbG0z 2zYx/lj/HaASBi13NlK24rTIpbV66xiVGyAh3y566hfKdnpIDfACwBQCxFKY4LxY oD5SbOppUVTPeP5pYLGTov10I/4yuBU5g/JboRYXBopMZoGQHWT3EvEPZPEhuf0N APMzeuRBGh/5Y9f6CrGHARasWuQXQtwfOybaU1gepKzmUKnmZwcNSOPaAb/FVq75 Qt+x42LwSvNbclUgRUioSVGY2MAq/R1L/WJO10GctOxt7RVAxttibdVrnIyQ6vfF 4lK88fNxhgy7xP/4Z5jZoCsMUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcKDsZU Gw0b4fLJqmgXgWD3/cJFMB8GA1UdIwQYMBaAFOYqTUeKm6GO4PmQaY9oI9lQ0eZ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTg2Mi8wNEIzRjVGQUVC Q0QxMUU3OTdDQTBFMkNDNEY5QUUwMi81aXBOUjRxYm9ZN2ctWkJwajJnajJWRFI1 blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVpcE5SNHFib1k3Zy1aQnBqMmdqMlZEUjVuUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTg2Mi8wNEIzRjVGQUVCQ0QxMUU3OTdDQTBFMkNDNEY5QUUwMi81aXBOUjRxYm9Z N2ctWkJwajJnajJWRFI1blEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH6norz+PplzqmLRguyTZZkPO3/oItI4myRqBA8OvT4Ec2yKmFM4cq JqvgohjcoE3PIfdbTXiIM4sP5ElTsnMKSFkOsaCmhArzJiX31CWooMzbXsQSqdGJ he2/+k8ZUMiuA8qII0c0ciMaBVq6Uc8j7R2s5yUsMuucqSOgeWi1G3AwzPPZ5486 DKt+ml3jdkcxYTZfQhsRmRmg9jICGyZPI7xtjjkS6ZBFJMom+/z4rZ5j2Cdf73oW aaJTtAcTWYz53mVZgdhZmV1zUsIlLjwAQricdwonDcJ9kClXg1CbT4I8SiJOPvjM XfRy6Uea7HwGsN6/zAzHjW3Btcya669x -----END CERTIFICATE-----Generated at Sat May 18 18:21:37 2024 by rpki-client on console-ams.rpki-client.org