$ rpki-client -vvf rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft File: 5wLFqnTYyWzI7vVhjk_-79UdN_k.mft (raw, json) Hash identifier: 51h5mUJgtG3s9Fn0XaHQsUVlCNJQY/IPQ05U2rA0I0Y= Subject key identifier: 3A:0D:66:35:F3:1E:E6:04:66:88:4C:1E:62:D7:CF:87:02:15:8A:09 Authority key identifier: E7:02:C5:AA:74:D8:C9:6C:C8:EE:F5:61:8E:4F:FE:EF:D5:1D:37:F9 Certificate issuer: /CN=A918CA0E/serialNumber=E702C5AA74D8C96CC8EEF5618E4FFEEFD51D37F9 Certificate serial: 05A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft Manifest number: 05A3 Signing time: Sun 19 May 2024 00:18:56 +0000 Manifest this update: Sun 19 May 2024 00:18:55 +0000 Manifest next update: Sun 26 May 2024 00:18:55 +0000 Files and hashes: 1: 5wLFqnTYyWzI7vVhjk_-79UdN_k.crl (hash: 9fnf0Gj2uemzplzdiLFeOFvHMh7Z7NXKVb7wbTyfUmU=) 2: 98C0AE7E808411EBA15C9251C4F9AE02.roa (hash: XzbSoC0w4biChI0dkcdvaVINbcs/01khNX1pxWoSbFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.crl rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1447 (0x5a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CA0E/serialNumber=E702C5AA74D8C96CC8EEF5618E4FFEEFD51D37F9 Validity Not Before: May 19 00:18:55 2024 GMT Not After : May 26 00:18:55 2024 GMT Subject: CN=66494570-9229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7d:74:cb:9f:cc:fd:29:b3:78:22:2e:a7:fa: 63:a0:60:20:fb:6a:f6:96:2e:0b:6e:aa:62:c1:7f: 8b:66:6f:f0:da:c2:06:a1:32:a7:b6:01:e2:4d:57: e3:3d:db:1b:da:69:6b:57:63:b1:fa:c8:fa:0e:82: b8:27:89:0c:e0:da:3e:36:0b:1e:36:27:8f:ed:31: c3:26:71:6e:fc:5d:69:44:a2:21:7b:ed:68:70:02: 67:a2:30:5c:45:8b:26:4e:d0:d7:6f:b9:7a:59:5a: 18:ea:ba:9b:25:a8:00:f6:9c:a3:ce:99:b7:55:99: fe:d9:08:9f:fd:a2:b0:24:7e:c9:3b:e5:e9:a0:95: 16:5a:95:2f:59:ed:8d:19:ff:4b:b7:3d:89:bc:66: 5a:33:b3:09:4d:c3:55:1b:8f:a7:7d:7b:a0:10:37: b8:4a:5b:5a:71:f9:35:6b:f1:28:86:09:a7:e5:c1: 37:d2:be:b7:42:51:c4:40:86:1a:d9:f2:f6:0a:58: c7:1a:52:64:99:31:5d:e5:57:7b:0f:04:d3:ea:3c: f0:aa:87:ff:73:71:09:29:84:95:93:c9:58:67:28: 47:47:92:54:21:59:d3:ed:df:18:2e:c2:d2:fc:d0: 62:99:78:9b:b9:85:3f:c9:2b:64:74:81:ea:8a:8c: 02:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:0D:66:35:F3:1E:E6:04:66:88:4C:1E:62:D7:CF:87:02:15:8A:09 X509v3 Authority Key Identifier: keyid:E7:02:C5:AA:74:D8:C9:6C:C8:EE:F5:61:8E:4F:FE:EF:D5:1D:37:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:ab:0e:06:54:ba:60:6e:bb:39:98:11:4f:9e:41:d6:09:08: a7:43:9b:6e:98:93:d2:d0:6f:c9:ad:85:2d:49:66:a2:ea:21: 8e:7b:bf:d0:97:81:f0:6d:de:75:31:cd:40:c7:45:69:51:a6: 98:21:0e:79:bb:12:b0:6b:b6:b6:3d:bc:a5:f0:dc:f3:a8:3e: 43:86:54:fb:5a:dd:47:9d:1f:86:c4:d3:26:63:d9:a9:89:2e: b1:c6:a4:50:51:70:97:7a:60:8d:b5:66:7a:c6:c6:6d:ef:1e: 94:19:d9:13:82:e0:40:67:eb:e6:7f:5b:8c:ca:a1:41:f7:d4: e1:ca:97:d4:56:b1:50:58:4f:61:fb:67:06:91:7a:2e:6b:e4: bd:d7:04:01:19:59:fe:c9:21:c7:83:9d:ec:15:07:48:8c:e6: 7c:9c:27:44:20:13:42:84:02:83:8e:1d:60:87:4d:29:59:54: 37:c9:ce:55:5b:48:f3:c9:00:9f:ff:3a:d1:11:e2:fc:bc:42: 5a:c4:9d:94:89:25:b8:fa:e9:24:ff:dc:56:8a:23:69:10:d0: 8e:18:23:4e:18:c4:89:2c:57:68:9b:92:85:b9:f5:d1:36:3a: 52:b4:38:57:c7:09:82:93:a9:c7:1a:4d:ac:28:6c:ab:b9:d8: 1f:1a:75:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBMEUxMTAvBgNVBAUTKEU3MDJDNUFBNzREOEM5NkNDOEVFRjU2MThFNEZGRUVG RDUxRDM3RjkwHhcNMjQwNTE5MDAxODU1WhcNMjQwNTI2MDAxODU1WjAYMRYwFAYD VQQDEw02NjQ5NDU3MC05MjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwH10y5/M/SmzeCIup/pjoGAg+2r2li4LbqpiwX+LZm/w2sIGoTKntgHiTVfj Pdsb2mlrV2Ox+sj6DoK4J4kM4No+NgseNieP7THDJnFu/F1pRKIhe+1ocAJnojBc RYsmTtDXb7l6WVoY6rqbJagA9pyjzpm3VZn+2Qif/aKwJH7JO+XpoJUWWpUvWe2N Gf9Ltz2JvGZaM7MJTcNVG4+nfXugEDe4Sltacfk1a/Eohgmn5cE30r63QlHEQIYa 2fL2CljHGlJkmTFd5Vd7DwTT6jzwqof/c3EJKYSVk8lYZyhHR5JUIVnT7d8YLsLS /NBimXibuYU/yStkdIHqiowCTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDoNZjXz HuYEZohMHmLXz4cCFYoJMB8GA1UdIwQYMBaAFOcCxap02MlsyO71YY5P/u/VHTf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0EwRS84QTExNjRDQTgw NzcxMUVCOTdEOTQwNTRDNEY5QUUwMi81d0xGcW5UWXlXekk3dlZoamtfLTc5VWRO X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV3TEZxblRZeVd6STd2Vmhqa18tNzlVZE5fay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0EwRS84QTExNjRDQTgwNzcxMUVCOTdEOTQwNTRDNEY5QUUwMi81d0xGcW5UWXlX ekk3dlZoamtfLTc5VWROX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnqw4GVLpgbrs5mBFPnkHWCQinQ5tumJPS0G/JrYUtSWai6iGOe7/Q l4Hwbd51Mc1Ax0VpUaaYIQ55uxKwa7a2Pbyl8NzzqD5DhlT7Wt1HnR+GxNMmY9mp iS6xxqRQUXCXemCNtWZ6xsZt7x6UGdkTguBAZ+vmf1uMyqFB99ThypfUVrFQWE9h +2cGkXoua+S91wQBGVn+ySHHg53sFQdIjOZ8nCdEIBNChAKDjh1gh00pWVQ3yc5V W0jzyQCf/zrREeL8vEJaxJ2UiSW4+ukk/9xWiiNpENCOGCNOGMSJLFdom5KFufXR NjpStDhXxwmCk6nHGk2sKGyrudgfGnUI -----END CERTIFICATE-----Generated at Sun May 19 01:47:14 2024 by rpki-client on console-ams.rpki-client.org