$ rpki-client -vvf rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft File: 5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft (raw, json) Hash identifier: 5XD7e7RjUlyC/zLQ2D/7lEQxNM9O1xNubciI56kr9cI= Subject key identifier: 3D:AF:2A:74:7B:0C:DA:3C:D3:CF:5C:14:BF:EB:8B:9E:CF:BB:F1:C9 Authority key identifier: E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36 Certificate issuer: /CN=A9183DB7/serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836 Certificate serial: 0D2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft Manifest number: 0D1F Signing time: Sun 26 May 2024 18:46:06 +0000 Manifest this update: Sun 26 May 2024 18:46:05 +0000 Manifest next update: Sun 02 Jun 2024 18:46:05 +0000 Files and hashes: 1: 5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl (hash: Qg4mH661gY4AF6Sa6xX9BinxwXLFsErZOmXeqFh6qQQ=) 2: 6B7E8FC670DE11EC8B944928C4F9AE02.roa (hash: CBDu90GR3xsviOZ0N0R99O9OMgbT6z9iLxP41yOkSlU=) 3: 6A5EC93A70DE11EC8B944928C4F9AE02.roa (hash: JlFQLvioPtKDHzgt/ccs15goXEYCvMHyBF9hWkPtf5Y=) 4: 9F14D15E70DB11ECACCABD21C4F9AE02.roa (hash: zMAVaAwkc1/EVMSIYdfQTQ+1t6ZCtLmjf5ap7S+isIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 18:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3373 (0xd2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183DB7/serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836 Validity Not Before: May 26 18:46:05 2024 GMT Not After : Jun 2 18:46:05 2024 GMT Subject: CN=6653836d-bead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ba:b2:0a:f8:ed:90:26:91:68:fe:1d:5f:d0: 53:d7:2c:8d:88:85:c3:54:cd:76:63:bb:b9:8d:eb: 19:d6:f6:0e:ef:fc:de:5e:3e:01:c3:6d:b2:b5:86: 63:4d:d4:d6:2e:f4:a3:14:24:a0:7b:bb:c6:a3:71: 0c:34:06:b2:7f:2c:f8:e9:80:80:be:01:a6:ec:96: e5:1c:d2:d5:d3:2f:04:53:60:25:3f:41:fd:7b:06: 79:62:c9:cc:0b:20:da:02:97:65:c5:fb:6f:4e:14: 37:62:66:ec:68:6a:87:9e:c4:cf:b6:dc:83:88:ec: 0e:5f:a3:ac:b0:d7:9e:2e:46:bb:31:b5:db:0d:ae: 65:0b:fd:ed:6d:6c:c4:04:3f:9e:af:2b:21:ce:39: d6:23:2e:82:b2:b6:0e:7f:0e:8b:70:84:b4:41:2f: fa:e6:c0:ae:04:a0:74:d0:1e:d6:f6:43:88:85:94: b7:fc:db:f6:41:06:1c:a5:08:f6:47:26:e3:30:61: 6a:e1:7f:95:32:24:88:81:7e:89:17:4e:2e:65:f9: c8:e5:09:ad:3b:03:61:fa:ba:71:aa:93:24:bf:af: 2c:25:7e:43:df:97:ba:c3:fc:71:0a:ce:44:7c:fd: e7:6e:92:3a:58:db:4d:e4:d8:f3:e8:50:7a:b6:db: ec:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AF:2A:74:7B:0C:DA:3C:D3:CF:5C:14:BF:EB:8B:9E:CF:BB:F1:C9 X509v3 Authority Key Identifier: keyid:E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:83:09:22:75:73:e0:6f:29:25:17:17:95:9a:e8:78:4b:8b: e6:cb:bc:19:2b:b2:42:ac:5b:ba:51:7f:a6:b4:33:1b:ef:c4: 5c:09:53:87:83:a9:ae:8a:5f:11:00:38:0e:be:0f:18:69:25: 5a:e7:69:6e:95:b4:fe:de:e5:4e:76:68:42:13:bc:f4:65:46: 02:a9:ed:41:46:14:b2:ac:a9:18:4a:bd:09:49:a5:36:b5:cf: 12:44:71:96:b5:c5:dc:de:2b:a8:68:a7:eb:8f:95:d2:ed:80: 57:e5:7d:af:e9:0f:be:cf:3a:f6:62:00:81:d1:23:dc:59:e1: ba:03:85:48:00:2d:5c:16:1f:33:93:31:45:56:ce:d9:f3:0f: a4:14:42:f3:c3:c1:2a:2f:36:63:a4:8f:3e:5e:3d:8f:80:0a: e4:54:6f:43:eb:07:f0:f3:c7:35:cd:a3:53:61:ea:43:9f:6b: ea:1b:8d:0c:eb:d3:cf:60:12:61:1d:41:ca:f0:04:46:bb:6a: 1c:89:15:61:da:87:63:7e:53:d1:05:48:d0:0d:3e:d9:3a:2c: 69:5c:d1:58:4a:87:3e:95:41:e6:18:b7:21:b1:f5:45:4c:47: 90:94:5c:8c:2b:de:48:d7:0f:65:36:65:d9:ed:f8:30:fe:85: 67:d1:e3:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNEQjcxMTAvBgNVBAUTKEU1MThFOTQ4MTVDNDZEN0Q4RTZGRUY0RUJDM0QxOERG MEUyMUY4MzYwHhcNMjQwNTI2MTg0NjA1WhcNMjQwNjAyMTg0NjA1WjAYMRYwFAYD VQQDEw02NjUzODM2ZC1iZWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq7qyCvjtkCaRaP4dX9BT1yyNiIXDVM12Y7u5jesZ1vYO7/zeXj4Bw22ytYZj TdTWLvSjFCSge7vGo3EMNAayfyz46YCAvgGm7JblHNLV0y8EU2AlP0H9ewZ5YsnM CyDaApdlxftvThQ3YmbsaGqHnsTPttyDiOwOX6OssNeeLka7MbXbDa5lC/3tbWzE BD+eryshzjnWIy6CsrYOfw6LcIS0QS/65sCuBKB00B7W9kOIhZS3/Nv2QQYcpQj2 RybjMGFq4X+VMiSIgX6JF04uZfnI5QmtOwNh+rpxqpMkv68sJX5D35e6w/xxCs5E fP3nbpI6WNtN5Njz6FB6ttvsMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2vKnR7 DNo8089cFL/ri57Pu/HJMB8GA1UdIwQYMBaAFOUY6UgVxG19jm/vTrw9GN8OIfg2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0RCNy8wRjM3NTk5RUI1 MjExMUU5OEQ4QkFDNTJDNEY5QUUwMi81UmpwU0JYRWJYMk9iLTlPdkQwWTN3NGgt RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVSanBTQlhFYlgyT2ItOU92RDBZM3c0aC1EWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0RCNy8wRjM3NTk5RUI1MjExMUU5OEQ4QkFDNTJDNEY5QUUwMi81UmpwU0JYRWJY Mk9iLTlPdkQwWTN3NGgtRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBgwkidXPgbyklFxeVmuh4S4vmy7wZK7JCrFu6UX+mtDMb78RcCVOH g6muil8RADgOvg8YaSVa52lulbT+3uVOdmhCE7z0ZUYCqe1BRhSyrKkYSr0JSaU2 tc8SRHGWtcXc3iuoaKfrj5XS7YBX5X2v6Q++zzr2YgCB0SPcWeG6A4VIAC1cFh8z kzFFVs7Z8w+kFELzw8EqLzZjpI8+Xj2PgArkVG9D6wfw88c1zaNTYepDn2vqG40M 69PPYBJhHUHK8ARGu2ociRVh2odjflPRBUjQDT7ZOixpXNFYSoc+lUHmGLchsfVF TEeQlFyMK95I1w9lNmXZ7fgw/oVn0eOR -----END CERTIFICATE-----Generated at Sun May 26 19:58:54 2024 by rpki-client on console-fra.rpki-client.org