$ rpki-client -vvf rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft File: 5VbchrlOkc-bLilEqF9xaS2glNI.mft (raw, json) Hash identifier: OVa55K4GkGSbTWAd06J5RYzsv1Xn1qNFLhoznM5eXSA= Subject key identifier: CC:A9:C8:0E:B2:99:F5:D7:65:FD:11:42:53:5D:9B:14:4F:23:EF:F5 Authority key identifier: E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2 Certificate issuer: /CN=A919B20D/serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft Manifest number: 60 Signing time: Sat 01 Jun 2024 09:13:09 +0000 Manifest this update: Sat 01 Jun 2024 09:13:09 +0000 Manifest next update: Sat 08 Jun 2024 09:13:09 +0000 Files and hashes: 1: 5VbchrlOkc-bLilEqF9xaS2glNI.crl (hash: GTi2Jmk4jv+NbnWaD9BhAXGw7jyyqGEnb2ETLv1O/jk=) 2: 4B3E4A0693DE11EE81D1045FC4F9AE02.roa (hash: 4Cz/oqpVomdj5KjMuMHHcnulXM/0E2/i4QAzsSN/Y08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B20D/serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2 Validity Not Before: Jun 1 09:13:09 2024 GMT Not After : Jun 8 09:13:09 2024 GMT Subject: CN=665ae625-c673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:df:e9:e2:e9:7a:ae:47:1f:16:c9:34:d2:09: 3f:1a:b1:8c:2b:c2:3c:22:39:01:d9:35:35:88:2a: 20:c1:e0:87:83:8b:87:d2:b4:7a:96:63:01:de:37: ee:c5:7c:e6:a9:3b:88:eb:5d:5f:ee:f2:60:7e:4f: f3:1e:eb:8a:2f:37:6c:c4:f0:bb:90:1c:ad:37:ea: 49:82:f1:02:c3:f8:17:77:09:06:1f:d1:bc:66:5f: 03:57:cf:0b:bf:85:b7:01:18:83:71:73:77:7e:8a: 19:57:fc:13:d3:75:c5:e9:d4:7c:52:be:c5:08:79: bd:17:50:46:6b:b3:26:61:89:55:a9:54:1b:de:9e: 58:ae:c6:8b:b2:61:42:4f:2e:68:3a:01:3f:20:f8: 1c:fe:05:bc:25:fc:a0:3b:50:6c:10:f7:37:c2:77: 28:c2:1e:13:e7:87:b2:3d:c3:16:b9:93:22:8b:2c: ea:86:8a:df:c4:39:76:ec:0f:c6:fe:53:f6:29:2c: 0f:ad:b1:01:da:c9:e2:8d:26:48:74:43:59:99:1b: 75:ab:fb:5b:f2:bd:a4:77:e4:de:8a:97:3c:17:c0: 48:68:a2:b8:1c:8e:bb:be:e5:13:84:c0:ad:00:e9: 26:c5:fd:8c:ad:02:e6:4d:4e:06:28:2a:cc:3b:75: 29:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A9:C8:0E:B2:99:F5:D7:65:FD:11:42:53:5D:9B:14:4F:23:EF:F5 X509v3 Authority Key Identifier: keyid:E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:3f:32:56:57:31:f7:ce:fd:ed:8b:69:88:bb:0c:db:f6:32: 3a:0e:55:4f:2b:e5:d6:18:6a:ad:2f:07:20:51:8b:f3:3b:48: fc:c5:4f:88:27:f1:07:b8:c5:1b:ca:20:c2:1e:53:fa:3f:65: 20:5a:36:eb:bf:a6:c4:70:c1:0b:39:b5:13:06:05:26:4f:fc: f0:be:fc:19:43:14:a5:65:73:08:ac:bc:62:24:27:a9:58:c4: 57:6a:1a:5c:48:f3:24:91:db:3f:d3:83:9b:20:4b:f9:02:3b: f1:0a:a8:c3:e3:0e:a2:4c:84:9c:8e:91:26:97:c8:ef:09:c3: 8b:c0:6b:c3:4f:e8:dd:4f:ab:22:5d:00:10:62:2d:c8:6f:88: 00:39:d1:bd:c9:e2:9b:33:88:34:be:87:90:81:08:90:76:28: 4d:a3:ed:56:92:b6:00:1d:fa:8e:e3:d8:5b:28:e9:98:37:55: fb:88:df:b5:9f:1d:c4:54:29:e0:c5:c8:47:cf:f9:ba:a3:ad: 18:df:20:a4:73:88:20:1c:72:55:38:a1:fc:87:dd:f6:e0:65: 19:86:f7:8f:4d:91:8a:42:c8:04:69:9a:b3:28:e6:2f:5e:5f: 25:47:23:21:85:d4:75:95:4b:d0:0b:06:2d:75:bd:b9:78:5e: a7:bb:27:e5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QjIwRDExMC8GA1UEBRMoRTU1NkRDODZCOTRFOTFDRjlCMkUyOTQ0QTg1RjcxNjky REEwOTREMjAeFw0yNDA2MDEwOTEzMDlaFw0yNDA2MDgwOTEzMDlaMBgxFjAUBgNV BAMTDTY2NWFlNjI1LWM2NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCy3+ni6XquRx8WyTTSCT8asYwrwjwiOQHZNTWIKiDB4IeDi4fStHqWYwHeN+7F fOapO4jrXV/u8mB+T/Me64ovN2zE8LuQHK036kmC8QLD+Bd3CQYf0bxmXwNXzwu/ hbcBGINxc3d+ihlX/BPTdcXp1HxSvsUIeb0XUEZrsyZhiVWpVBvenliuxouyYUJP Lmg6AT8g+Bz+Bbwl/KA7UGwQ9zfCdyjCHhPnh7I9wxa5kyKLLOqGit/EOXbsD8b+ U/YpLA+tsQHayeKNJkh0Q1mZG3Wr+1vyvaR35N6KlzwXwEhoorgcjru+5ROEwK0A 6SbF/YytAuZNTgYoKsw7dSkvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzKnIDrKZ 9ddl/RFCU12bFE8j7/UwHwYDVR0jBBgwFoAU5VbchrlOkc+bLilEqF9xaS2glNIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlCMjBELzYxQUNCRjQ2OTNB OTExRUU5MTQ5RTM1NEM0RjlBRTAyLzVWYmNocmxPa2MtYkxpbEVxRjl4YVMyZ2xO SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNVZiY2hybE9rYy1iTGlsRXFGOXhhUzJnbE5JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlC MjBELzYxQUNCRjQ2OTNBOTExRUU5MTQ5RTM1NEM0RjlBRTAyLzVWYmNocmxPa2Mt YkxpbEVxRjl4YVMyZ2xOSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEM/MlZXMffO/e2LaYi7DNv2MjoOVU8r5dYYaq0vByBRi/M7SPzFT4gn 8Qe4xRvKIMIeU/o/ZSBaNuu/psRwwQs5tRMGBSZP/PC+/BlDFKVlcwisvGIkJ6lY xFdqGlxI8ySR2z/Tg5sgS/kCO/EKqMPjDqJMhJyOkSaXyO8Jw4vAa8NP6N1PqyJd ABBiLchviAA50b3J4psziDS+h5CBCJB2KE2j7VaStgAd+o7j2Fso6Zg3VfuI37Wf HcRUKeDFyEfP+bqjrRjfIKRziCAcclU4ofyH3fbgZRmG949NkYpCyARpmrMo5i9e XyVHIyGF1HWVS9ALBi11vbl4Xqe7J+U= -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:28 2024 by rpki-client on console-ams.rpki-client.org