$ rpki-client -vvf rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft File: j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft (raw, json) Hash identifier: rCBvIquN+uaEPxmq0bZflzg+zwHcZX8hm3vyuwe99Cs= Subject key identifier: 0B:D2:29:BD:B6:CF:A5:FF:C0:0C:46:1C:D8:34:61:39:5C:3D:C6:4F Authority key identifier: 8F:94:22:52:B7:D4:04:E3:3D:B9:B1:E3:54:E0:91:03:AA:C5:01:84 Certificate issuer: /CN=A918127C/serialNumber=8F942252B7D404E33DB9B1E354E09103AAC50184 Certificate serial: 06EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft Manifest number: 06E2 Signing time: Sat 18 May 2024 22:53:29 +0000 Manifest this update: Sat 18 May 2024 22:53:29 +0000 Manifest next update: Sat 25 May 2024 22:53:29 +0000 Files and hashes: 1: j5QiUrfUBOM9ubHjVOCRA6rFAYQ.crl (hash: r8v8uJpMyr5AVtatv+c7cNF4aUXhUFqNRDTtMBd4BhA=) 2: 2C60C8AAE01111EEA6583A7DC4F9AE02.roa (hash: VAlmabfBIcM6/Rk4MhdZmM37IlrnItjCxo7UDLwAQB0=) 3: 706E023CD46911EE9E90881CC4F9AE02.roa (hash: t4ERgQl8omAuBKvg1Z+bntjSYYXybEL9Tu9YKSh55zk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.crl rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1771 (0x6eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918127C/serialNumber=8F942252B7D404E33DB9B1E354E09103AAC50184 Validity Not Before: May 18 22:53:29 2024 GMT Not After : May 25 22:53:29 2024 GMT Subject: CN=66493169-b06f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dd:08:ae:58:27:51:42:d5:a1:89:3e:41:b4: 8f:d4:de:92:e0:12:f7:87:dc:ad:79:8d:39:98:cb: 69:8f:5b:61:6a:2f:b5:8e:f1:f2:b1:4a:a4:87:23: ec:67:d2:13:6d:52:30:f1:49:61:88:4b:41:5e:9c: cd:02:7f:c1:06:d7:cf:03:31:18:63:34:d0:9f:28: 7b:52:8b:a1:41:39:bf:98:6d:11:a0:82:95:ae:6c: b5:d5:15:7b:f4:9b:a4:8d:61:a8:1f:1c:3d:79:f4: 16:fb:d8:ad:55:97:ab:b3:c6:d2:db:d5:c0:bd:71: cd:f8:3e:bf:76:a3:92:c1:2d:db:78:c7:64:91:2e: fb:ff:1f:85:04:6d:c9:d4:2e:f0:c9:e2:6c:04:1f: 40:bc:14:2a:30:3b:ed:76:4c:0d:d1:73:d9:d0:bd: 71:3e:ac:02:55:c5:8c:07:c2:e7:b8:99:0d:3a:28: e5:1d:16:4b:e7:3f:25:23:15:76:70:24:ef:3e:a7: 41:25:35:82:b5:9a:da:fc:1f:82:ad:a4:ed:c9:0a: 0d:47:29:ae:c2:73:eb:bf:55:6f:48:f1:82:55:af: 0a:c9:04:95:75:78:2c:d3:b3:ef:8a:4a:9d:71:a0: 54:1f:ab:43:2d:2b:2c:03:c5:de:9a:dc:ec:93:38: e8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D2:29:BD:B6:CF:A5:FF:C0:0C:46:1C:D8:34:61:39:5C:3D:C6:4F X509v3 Authority Key Identifier: keyid:8F:94:22:52:B7:D4:04:E3:3D:B9:B1:E3:54:E0:91:03:AA:C5:01:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:f3:d1:94:b5:a6:05:79:15:ba:a7:d9:cd:7c:06:82:97:b0: c6:66:18:11:e4:64:a6:71:7d:65:07:e4:e7:9f:af:c3:86:83: 3b:52:41:49:f0:34:57:e2:cb:a2:9e:95:6f:64:62:42:29:d4: 61:2d:09:6b:36:42:76:bc:90:1c:ee:03:b7:34:5f:f6:cc:e1: 53:6e:48:91:e9:46:29:29:6e:98:7c:8c:f2:2c:76:cf:51:65: bb:18:dd:bd:1c:64:c6:14:d7:de:e2:c7:b4:f0:f6:12:92:7f: a7:3a:f7:80:a1:65:76:61:79:b8:1d:89:b7:a8:7c:cd:a6:53: 69:76:09:db:bb:ea:8e:58:cd:9f:68:1c:6d:70:19:e8:7f:ae: cd:94:a8:1f:0f:96:c8:56:80:de:6f:60:87:e9:ab:14:04:98: 50:d6:19:3f:1a:0e:07:6c:39:ad:16:77:fc:5b:60:d0:23:0f: de:82:32:b3:d7:97:ab:f8:60:bc:cc:31:8f:24:78:3a:a7:49: c9:bd:a6:ad:ea:3f:d6:40:d9:e6:63:76:31:e0:d5:fd:c2:25: 6c:ef:04:45:5f:64:fa:85:db:76:d2:20:e2:af:8b:83:2e:7f: d2:ba:64:25:08:e2:ba:6e:36:a9:fb:b8:79:c0:22:0d:73:97: 53:31:54:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEyN0MxMTAvBgNVBAUTKDhGOTQyMjUyQjdENDA0RTMzREI5QjFFMzU0RTA5MTAz QUFDNTAxODQwHhcNMjQwNTE4MjI1MzI5WhcNMjQwNTI1MjI1MzI5WjAYMRYwFAYD VQQDEw02NjQ5MzE2OS1iMDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAud0IrlgnUULVoYk+QbSP1N6S4BL3h9yteY05mMtpj1thai+1jvHysUqkhyPs Z9ITbVIw8UlhiEtBXpzNAn/BBtfPAzEYYzTQnyh7UouhQTm/mG0RoIKVrmy11RV7 9JukjWGoHxw9efQW+9itVZers8bS29XAvXHN+D6/dqOSwS3beMdkkS77/x+FBG3J 1C7wyeJsBB9AvBQqMDvtdkwN0XPZ0L1xPqwCVcWMB8LnuJkNOijlHRZL5z8lIxV2 cCTvPqdBJTWCtZra/B+CraTtyQoNRymuwnPrv1VvSPGCVa8KyQSVdXgs07Pvikqd caBUH6tDLSssA8XemtzskzjoiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvSKb22 z6X/wAxGHNg0YTlcPcZPMB8GA1UdIwQYMBaAFI+UIlK31ATjPbmx41TgkQOqxQGE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTI3Qy9FNjk3MTEyQTA2 QUQxMUVCOTgyMTA1N0ZDNEY5QUUwMi9qNVFpVXJmVUJPTTl1YkhqVk9DUkE2ckZB WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o1UWlVcmZVQk9NOXViSGpWT0NSQTZyRkFZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTI3Qy9FNjk3MTEyQTA2QUQxMUVCOTgyMTA1N0ZDNEY5QUUwMi9qNVFpVXJmVUJP TTl1YkhqVk9DUkE2ckZBWVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ89GUtaYFeRW6p9nNfAaCl7DGZhgR5GSmcX1lB+Tnn6/DhoM7UkFJ 8DRX4suinpVvZGJCKdRhLQlrNkJ2vJAc7gO3NF/2zOFTbkiR6UYpKW6YfIzyLHbP UWW7GN29HGTGFNfe4se08PYSkn+nOveAoWV2YXm4HYm3qHzNplNpdgnbu+qOWM2f aBxtcBnof67NlKgfD5bIVoDeb2CH6asUBJhQ1hk/Gg4HbDmtFnf8W2DQIw/egjKz 15er+GC8zDGPJHg6p0nJvaat6j/WQNnmY3Yx4NX9wiVs7wRFX2T6hdt20iDir4uD Ln/SumQlCOK6bjap+7h5wCINc5dTMVTs -----END CERTIFICATE-----Generated at Sun May 19 00:16:16 2024 by rpki-client on console-fra.rpki-client.org