$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft File: C5sr_BxrLAlndq91fTrxRUfkPnI.mft (raw, json) Hash identifier: OOd7A9PGpK3X9v478u3Xaf75w8o6eHFn1TBnR6cFHrQ= Subject key identifier: 6F:34:9D:64:8A:7A:8F:59:46:88:79:5E:CD:82:A3:0D:FA:3B:9D:71 Authority key identifier: 0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72 Certificate issuer: /CN=A918F646/serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72 Certificate serial: 110A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft Manifest number: 10F7 Signing time: Sat 18 May 2024 17:52:08 +0000 Manifest this update: Sat 18 May 2024 17:52:07 +0000 Manifest next update: Sat 25 May 2024 17:52:07 +0000 Files and hashes: 1: C5sr_BxrLAlndq91fTrxRUfkPnI.crl (hash: ENcrF1eRAFRXVOymfgs7IiBnqA5BD2gjZRn7OaB6cyw=) 2: 60FCDED2F48F11E89651151FC4F9AE02.roa (hash: sBWfqMdrbgHXkc/ZfAmcs+ee3JGLkHqnwdG8y4HuuaQ=) 3: DA0E6EFEE86411ECA54EC03BC4F9AE02.roa (hash: H4DVjhrQX80NkE2QeTyaoNeUxrpJLEpfDpSQExmSZjk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4362 (0x110a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F646/serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72 Validity Not Before: May 18 17:52:07 2024 GMT Not After : May 25 17:52:07 2024 GMT Subject: CN=6648eac7-074c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a0:ba:a4:5f:bf:5e:34:ed:3b:0b:0d:c6:04: c4:62:a8:26:1d:ae:ed:c9:e4:ca:67:f1:8f:4e:c3: d1:21:4c:a9:6e:b0:e4:bc:e6:c0:0c:ba:08:89:a8: 69:e3:56:99:26:f2:0c:a2:66:e3:e7:af:5b:6e:33: 2c:e0:d9:9b:73:8e:a6:85:89:3c:91:18:5b:01:72: 17:09:e6:12:25:ba:6e:86:92:25:23:e5:e2:aa:9f: 8c:fd:56:ae:65:1c:52:ea:dd:bc:fd:c0:c6:92:27: bd:8e:81:52:a0:6d:e5:22:f5:23:51:d2:41:2c:54: c7:50:18:88:dc:6a:ff:cd:6b:77:99:0b:50:74:3a: b3:c7:2c:ce:2e:dc:a3:bc:da:14:b1:6e:69:bd:bf: cf:59:db:c7:fe:29:07:43:b3:19:f8:b0:fa:7a:1b: dc:0d:63:33:0f:89:53:ab:8d:ee:f8:86:9e:36:93: df:ed:69:37:76:18:c5:c4:8d:94:c4:d1:b6:41:bd: 1f:f3:6f:c0:be:87:da:a9:7f:1d:20:4e:26:8f:46: 07:99:93:39:89:6b:a9:df:90:0f:6b:ff:60:d0:e8: 27:e3:1c:d9:56:59:cf:cc:04:20:2f:76:89:44:57: 1a:32:98:c6:1c:ae:b3:34:02:5e:b8:03:9b:59:b0: b8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:34:9D:64:8A:7A:8F:59:46:88:79:5E:CD:82:A3:0D:FA:3B:9D:71 X509v3 Authority Key Identifier: keyid:0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:a0:ec:ee:df:b5:e4:b1:97:8e:71:32:b3:a9:6b:c6:37:ec: 8a:11:c8:70:c9:b0:e0:40:2e:2c:0d:74:c9:8d:f0:e5:81:3d: b9:0c:4c:0e:e2:e5:c7:95:bb:ed:53:d6:3d:4e:c2:5c:75:3b: 98:ef:3b:62:9f:ee:5a:0e:33:67:9c:d6:99:af:e2:bd:9d:3b: b2:fb:bf:55:84:59:5d:f0:cf:17:32:8b:95:ee:d9:c8:b8:44: 29:93:2c:83:93:e7:8d:06:91:ca:5e:47:b7:1d:b3:56:92:f6: 89:b4:ad:36:45:17:fd:a9:f5:b7:5a:71:20:85:54:59:db:ec: 9f:60:c3:08:81:67:09:8c:4b:5a:ce:e9:de:52:29:4f:f5:22: 15:3d:e3:9e:35:41:55:6e:d1:e0:0e:9a:d2:12:40:d1:0f:10: 99:65:d3:6f:da:21:62:b3:f7:bd:fa:41:5f:f1:8a:d7:ff:c0: 44:48:df:43:dc:e9:45:51:89:4e:9c:00:1e:46:cc:bf:03:c3: ae:fe:ef:c3:5f:31:00:e2:d3:cb:60:df:c3:0c:51:f3:c0:31: 0d:c5:81:12:f5:76:5e:82:4c:25:a4:15:38:b4:2a:17:c6:78: aa:0c:dc:23:2f:04:2e:57:bc:8e:19:84:ac:29:61:8d:80:88: a6:15:d5:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY2NDYxMTAvBgNVBAUTKDBCOUIyQkZDMUM2QjJDMDk2Nzc2QUY3NTdEM0FGMTQ1 NDdFNDNFNzIwHhcNMjQwNTE4MTc1MjA3WhcNMjQwNTI1MTc1MjA3WjAYMRYwFAYD VQQDEw02NjQ4ZWFjNy0wNzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6C6pF+/XjTtOwsNxgTEYqgmHa7tyeTKZ/GPTsPRIUypbrDkvObADLoIiahp 41aZJvIMombj569bbjMs4Nmbc46mhYk8kRhbAXIXCeYSJbpuhpIlI+Xiqp+M/Vau ZRxS6t28/cDGkie9joFSoG3lIvUjUdJBLFTHUBiI3Gr/zWt3mQtQdDqzxyzOLtyj vNoUsW5pvb/PWdvH/ikHQ7MZ+LD6ehvcDWMzD4lTq43u+IaeNpPf7Wk3dhjFxI2U xNG2Qb0f82/AvofaqX8dIE4mj0YHmZM5iWup35APa/9g0Ogn4xzZVlnPzAQgL3aJ RFcaMpjGHK6zNAJeuAObWbC41wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG80nWSK eo9ZRoh5Xs2Cow36O51xMB8GA1UdIwQYMBaAFAubK/wcaywJZ3avdX068UVH5D5y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjY0Ni9DRUNFOEM5QUY0 OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9DNXNyX0J4ckxBbG5kcTkxZlRyeFJVZmtQ bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0M1c3JfQnhyTEFsbmRxOTFmVHJ4UlVma1BuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjY0Ni9DRUNFOEM5QUY0OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9DNXNyX0J4ckxB bG5kcTkxZlRyeFJVZmtQbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjoOzu37XksZeOcTKzqWvGN+yKEchwybDgQC4sDXTJjfDlgT25DEwO 4uXHlbvtU9Y9TsJcdTuY7ztin+5aDjNnnNaZr+K9nTuy+79VhFld8M8XMouV7tnI uEQpkyyDk+eNBpHKXke3HbNWkvaJtK02RRf9qfW3WnEghVRZ2+yfYMMIgWcJjEta zuneUilP9SIVPeOeNUFVbtHgDprSEkDRDxCZZdNv2iFis/e9+kFf8YrX/8BESN9D 3OlFUYlOnAAeRsy/A8Ou/u/DXzEA4tPLYN/DDFHzwDENxYES9XZegkwlpBU4tCoX xniqDNwjLwQuV7yOGYSsKWGNgIimFdU6 -----END CERTIFICATE-----Generated at Sat May 18 18:46:46 2024 by rpki-client on console-fra.rpki-client.org