$ rpki-client -vvf rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft File: 5tR4mVLfAG9kzr8PNVcqW5bktzc.mft (raw, json) Hash identifier: x/YAMCAkw1Q+YsVBkvVVc8MhV5JSMj4tMfdNMgkdk5Q= Subject key identifier: 1A:7F:3F:63:78:E5:2F:E9:FA:9F:EC:EE:33:D3:A8:9C:C3:F8:12:AE Authority key identifier: E6:D4:78:99:52:DF:00:6F:64:CE:BF:0F:35:57:2A:5B:96:E4:B7:37 Certificate issuer: /CN=A918E63A/serialNumber=E6D4789952DF006F64CEBF0F35572A5B96E4B737 Certificate serial: 06E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tR4mVLfAG9kzr8PNVcqW5bktzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft Manifest number: 06E5 Signing time: Fri 31 May 2024 23:37:34 +0000 Manifest this update: Fri 31 May 2024 23:37:34 +0000 Manifest next update: Fri 07 Jun 2024 23:37:34 +0000 Files and hashes: 1: 5tR4mVLfAG9kzr8PNVcqW5bktzc.crl (hash: 4M/WEVVaNHYuIyS6fePB6lpg2FX6Imtcp26/NLFRfPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.crl rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tR4mVLfAG9kzr8PNVcqW5bktzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 23:37:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1765 (0x6e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E63A/serialNumber=E6D4789952DF006F64CEBF0F35572A5B96E4B737 Validity Not Before: May 31 23:37:34 2024 GMT Not After : Jun 7 23:37:34 2024 GMT Subject: CN=665a5f3e-6ccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:16:2d:7b:24:b5:3e:c8:58:d8:ff:39:84:49: 85:47:c6:f8:23:cb:6b:b2:bf:b8:4c:ae:87:7c:1c: a2:61:29:1c:c3:b9:84:b7:be:22:bd:e8:82:e4:c7: 51:23:f8:4c:dc:1f:14:76:c1:e6:53:bb:79:ef:1c: 81:36:33:f3:b3:a9:07:d1:ec:ca:06:88:86:f0:01: d4:13:3b:76:a8:b9:d5:f9:1d:84:66:68:51:45:f2: f6:15:ca:23:5d:06:ff:b5:c9:23:9e:cd:c1:54:f2: 9d:d2:ed:fc:73:f5:f1:0f:41:d9:8d:ad:36:a4:3b: 09:86:1e:81:42:4b:ac:7a:5b:a6:3f:55:6b:db:b7: de:09:96:72:4d:f4:ca:3b:da:4f:7a:8a:57:f4:76: c9:b2:00:07:93:94:8b:8c:29:f2:18:1f:3b:6c:1b: 5f:0c:52:27:2e:fc:08:c6:7a:7d:6f:1b:c4:dd:35: 34:52:ad:13:2e:6f:a5:47:e2:6f:60:43:90:18:53: 25:8a:22:ee:66:41:61:89:f1:a7:b0:a0:75:af:46: 38:c9:ef:83:65:8d:21:d5:2c:86:89:10:f0:3d:09: 9e:ec:1b:6f:9c:97:d2:df:c3:dd:fd:49:ca:fc:b0: ca:74:e4:2c:18:ef:42:d8:0f:73:dc:91:ed:d6:0f: fe:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:7F:3F:63:78:E5:2F:E9:FA:9F:EC:EE:33:D3:A8:9C:C3:F8:12:AE X509v3 Authority Key Identifier: keyid:E6:D4:78:99:52:DF:00:6F:64:CE:BF:0F:35:57:2A:5B:96:E4:B7:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tR4mVLfAG9kzr8PNVcqW5bktzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a0:44:be:8a:ff:6b:d0:78:03:b4:7f:3a:83:f3:dc:04:8c: a6:08:25:34:69:b7:18:b8:52:40:fe:14:cd:12:bb:25:0a:fd: e0:ac:0c:d1:37:e7:d4:f0:f5:03:f1:3c:05:62:66:33:d9:be: e1:91:6f:fb:9a:58:93:04:b1:12:4e:fe:f4:29:33:91:7f:a4: 84:c2:25:e3:26:6e:63:a1:64:0c:b2:0f:51:d7:0f:93:61:9a: f6:47:6b:da:04:96:4a:4d:b4:8e:78:fb:ed:09:5a:8e:72:29: 95:53:33:52:d8:45:71:c9:68:cc:f1:05:60:cb:b0:31:36:e8: 34:95:eb:73:0a:3e:e3:e8:94:98:80:99:51:07:63:7c:e0:a1: 88:7e:cc:fc:b8:ae:8d:4f:74:35:a0:13:33:d2:a8:7d:c1:b4: bd:3a:e8:f5:40:2c:ce:e7:8a:26:06:de:c1:ae:0b:79:d3:85: b6:a3:6a:f5:5d:31:41:54:35:4f:0c:fa:71:bd:1a:33:68:66: d0:02:4c:e5:51:c2:ab:27:d5:d6:da:c4:10:64:64:0c:dd:62: 20:02:dc:29:b4:4c:b7:f0:26:cf:38:a2:90:1b:85:68:9b:53: 7d:f4:c9:f8:f9:82:52:a5:79:09:63:5c:0b:9d:d3:5e:80:99: 1f:65:29:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2M0ExMTAvBgNVBAUTKEU2RDQ3ODk5NTJERjAwNkY2NENFQkYwRjM1NTcyQTVC OTZFNEI3MzcwHhcNMjQwNTMxMjMzNzM0WhcNMjQwNjA3MjMzNzM0WjAYMRYwFAYD VQQDEw02NjVhNWYzZS02Y2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRYteyS1PshY2P85hEmFR8b4I8trsr+4TK6HfByiYSkcw7mEt74iveiC5MdR I/hM3B8UdsHmU7t57xyBNjPzs6kH0ezKBoiG8AHUEzt2qLnV+R2EZmhRRfL2Fcoj XQb/tckjns3BVPKd0u38c/XxD0HZja02pDsJhh6BQkuselumP1Vr27feCZZyTfTK O9pPeopX9HbJsgAHk5SLjCnyGB87bBtfDFInLvwIxnp9bxvE3TU0Uq0TLm+lR+Jv YEOQGFMliiLuZkFhifGnsKB1r0Y4ye+DZY0h1SyGiRDwPQme7BtvnJfS38Pd/UnK /LDKdOQsGO9C2A9z3JHt1g/+ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBp/P2N4 5S/p+p/s7jPTqJzD+BKuMB8GA1UdIwQYMBaAFObUeJlS3wBvZM6/DzVXKluW5Lc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTYzQS8zN0Q3QTVBRTAz MkYxMUVCQjU4ODJFMEFDNEY5QUUwMi81dFI0bVZMZkFHOWt6cjhQTlZjcVc1Ymt0 emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV0UjRtVkxmQUc5a3pyOFBOVmNxVzVia3R6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTYzQS8zN0Q3QTVBRTAzMkYxMUVCQjU4ODJFMEFDNEY5QUUwMi81dFI0bVZMZkFH OWt6cjhQTlZjcVc1Ymt0emMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfoES+iv9r0HgDtH86g/PcBIymCCU0abcYuFJA/hTNErslCv3grAzR N+fU8PUD8TwFYmYz2b7hkW/7mliTBLESTv70KTORf6SEwiXjJm5joWQMsg9R1w+T YZr2R2vaBJZKTbSOePvtCVqOcimVUzNS2EVxyWjM8QVgy7AxNug0letzCj7j6JSY gJlRB2N84KGIfsz8uK6NT3Q1oBMz0qh9wbS9Ouj1QCzO54omBt7Brgt504W2o2r1 XTFBVDVPDPpxvRozaGbQAkzlUcKrJ9XW2sQQZGQM3WIgAtwptEy38CbPOKKQG4Vo m1N99Mn4+YJSpXkJY1wLndNegJkfZSnH -----END CERTIFICATE-----Generated at Sat Jun 1 02:01:17 2024 by rpki-client on console-ams.rpki-client.org