$ rpki-client -vvf rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft File: D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft (raw, json) Hash identifier: IJPnjCG5tSmwlfOvxnVu+Z4sA2/KA5JJieA4jxgZSyA= Subject key identifier: 12:1A:3D:3B:D0:31:66:27:6C:2A:B0:0C:CA:41:82:8A:48:49:34:FC Authority key identifier: 0F:99:B1:FE:CF:A5:70:04:F6:43:D8:2B:F5:11:CD:D4:74:78:6D:A0 Certificate issuer: /CN=A9185413/serialNumber=0F99B1FECFA57004F643D82BF511CDD474786DA0 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft Manifest number: 49 Signing time: Sun 19 May 2024 08:01:57 +0000 Manifest this update: Sun 19 May 2024 08:01:56 +0000 Manifest next update: Sun 26 May 2024 08:01:56 +0000 Files and hashes: 1: D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl (hash: Swn5RDL/HrPa5SqX/IVCBa91Qa/bZEGuYZ/ypRtDe7A=) 2: C1D49C12AEDF11EE96155C68C4F9AE02.roa (hash: dzuBA92ULhmJzmxGgdHpyawAKCUbaQ8RTfKuM5up9R0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185413/serialNumber=0F99B1FECFA57004F643D82BF511CDD474786DA0 Validity Not Before: May 19 08:01:56 2024 GMT Not After : May 26 08:01:56 2024 GMT Subject: CN=6649b1f5-fbfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:cb:6f:76:29:5c:d5:9b:06:c8:76:0d:af:2e: fc:6d:73:94:c8:e9:68:a8:6f:e7:aa:4e:bb:5b:67: 9c:ef:2f:d3:d9:9e:07:31:f3:bf:cd:81:02:51:d6: 90:50:3d:ac:5f:be:fe:fe:a3:02:31:56:14:b7:7d: 51:1f:ce:4e:4c:0b:4d:ff:0c:58:54:3f:bf:f4:42: 6a:77:fd:4a:ed:15:f0:67:66:22:89:69:79:60:35: ed:4e:8e:a6:9b:ba:3b:35:e4:67:21:8e:47:e0:60: 05:9a:40:37:d4:b0:6a:d5:a5:c7:0b:08:78:ce:1c: be:bb:78:ea:5c:c2:69:37:e3:f9:ee:98:ef:f6:a0: 74:21:2d:16:04:0c:a8:a8:ca:78:37:fa:5d:ac:e8: b5:cb:7a:06:a5:63:23:85:a4:3e:b2:86:09:dd:1e: 39:bd:6a:f0:7b:db:18:91:f7:cd:e7:50:38:62:fa: 4f:b3:06:50:dd:9d:e6:59:f4:0b:8a:83:e7:71:09: 3d:17:71:c9:b0:31:a6:88:86:60:93:93:d2:fe:a7: 38:e4:3f:f3:04:48:18:28:95:8d:55:a0:ef:62:e5: 8d:1f:49:d8:16:74:5c:34:3e:21:97:f7:fa:1d:b3: a0:dc:77:1d:9f:16:a0:58:9b:0e:bc:c0:b1:d5:60: fc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:1A:3D:3B:D0:31:66:27:6C:2A:B0:0C:CA:41:82:8A:48:49:34:FC X509v3 Authority Key Identifier: keyid:0F:99:B1:FE:CF:A5:70:04:F6:43:D8:2B:F5:11:CD:D4:74:78:6D:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:4e:6e:61:65:b5:f1:4a:a6:7f:90:0f:75:bb:09:cc:b6:6f: 14:70:42:58:53:65:8f:51:2e:95:40:0b:67:51:fd:71:eb:25: 87:22:77:1b:ce:02:b6:a3:a0:8e:67:0c:b9:1a:ed:96:06:16: fb:ce:a1:60:38:5a:d5:4a:af:90:98:65:b1:ee:ab:14:14:8b: 79:ce:dc:05:be:23:07:d5:bc:10:a3:8d:78:03:96:b5:03:a8: b5:c7:c1:9b:87:a9:c3:6d:84:44:18:8a:ee:72:1c:90:e1:81: b7:e2:a8:35:29:9f:8e:74:26:0b:0a:ce:ee:b0:f2:80:f0:4e: 4d:35:f9:6f:2f:cb:89:07:80:84:3e:72:91:71:59:c0:c1:3f: f7:f5:b7:57:ff:a3:cb:92:ba:79:e7:ec:8e:04:ba:4d:88:86: 34:bc:a2:3e:01:27:40:f1:f1:ad:64:e4:5b:b3:82:f4:44:84: 28:8c:97:d1:a0:1a:fe:2a:cc:b6:36:c8:65:5e:b7:48:81:6b: 80:23:c0:22:18:c0:d9:89:d2:9b:6e:95:7d:a9:60:d1:6b:6f: d7:88:4e:78:74:46:b5:48:53:5b:40:d8:cf:2c:11:f7:e9:c5: 12:c2:df:06:cd:e8:63:b5:27:c4:31:3c:e5:c1:d2:c5:17:dd: 14:46:ec:b6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NTQxMzExMC8GA1UEBRMoMEY5OUIxRkVDRkE1NzAwNEY2NDNEODJCRjUxMUNERDQ3 NDc4NkRBMDAeFw0yNDA1MTkwODAxNTZaFw0yNDA1MjYwODAxNTZaMBgxFjAUBgNV BAMTDTY2NDliMWY1LWZiZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDry292KVzVmwbIdg2vLvxtc5TI6Wiob+eqTrtbZ5zvL9PZngcx87/NgQJR1pBQ Paxfvv7+owIxVhS3fVEfzk5MC03/DFhUP7/0Qmp3/UrtFfBnZiKJaXlgNe1Ojqab ujs15GchjkfgYAWaQDfUsGrVpccLCHjOHL67eOpcwmk34/numO/2oHQhLRYEDKio yng3+l2s6LXLegalYyOFpD6yhgndHjm9avB72xiR983nUDhi+k+zBlDdneZZ9AuK g+dxCT0XccmwMaaIhmCTk9L+pzjkP/MESBgolY1VoO9i5Y0fSdgWdFw0PiGX9/od s6Dcdx2fFqBYmw68wLHVYPwVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEho9O9Ax ZidsKrAMykGCikhJNPwwHwYDVR0jBBgwFoAUD5mx/s+lcAT2Q9gr9RHN1HR4baAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1NDEzLzc1OUFEMjRDQUI5 RTExRUU5NjNEMzE3REM0RjlBRTAyL0Q1bXhfcy1sY0FUMlE5Z3I5UkhOMUhSNGJh QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRDVteF9zLWxjQVQyUTlncjlSSE4xSFI0YmFBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1 NDEzLzc1OUFEMjRDQUI5RTExRUU5NjNEMzE3REM0RjlBRTAyL0Q1bXhfcy1sY0FU MlE5Z3I5UkhOMUhSNGJhQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKxObmFltfFKpn+QD3W7Ccy2bxRwQlhTZY9RLpVAC2dR/XHrJYcidxvO ArajoI5nDLka7ZYGFvvOoWA4WtVKr5CYZbHuqxQUi3nO3AW+IwfVvBCjjXgDlrUD qLXHwZuHqcNthEQYiu5yHJDhgbfiqDUpn450JgsKzu6w8oDwTk01+W8vy4kHgIQ+ cpFxWcDBP/f1t1f/o8uSunnn7I4Euk2IhjS8oj4BJ0Dx8a1k5FuzgvREhCiMl9Gg Gv4qzLY2yGVet0iBa4AjwCIYwNmJ0ptulX2pYNFrb9eITnh0RrVIU1tA2M8sEffp xRLC3wbN6GO1J8QxPOXB0sUX3RRG7LY= -----END CERTIFICATE-----Generated at Sun May 19 08:26:43 2024 by rpki-client on console-fra.rpki-client.org