$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft File: 5KlM-o0vn1s570Y1BZHOMS5RT7M.mft (raw, json) Hash identifier: fiZt5bb1/+ZW4ETyuOga1smT0dBQn+YSdmmQGAwo8sw= Subject key identifier: 0C:E7:A7:B5:C4:B4:04:4E:5B:49:0A:70:52:D1:5F:FF:94:6B:23:18 Authority key identifier: E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3 Certificate issuer: /CN=A91A3AB3/serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3 Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft Manifest number: 01AA Signing time: Sun 19 May 2024 04:40:35 +0000 Manifest this update: Sun 19 May 2024 04:40:34 +0000 Manifest next update: Sun 26 May 2024 04:40:34 +0000 Files and hashes: 1: 5KlM-o0vn1s570Y1BZHOMS5RT7M.crl (hash: M8oSF4uzm1am3L1UgjiaJGWOvPkC1myiMLOeouF89W0=) 2: 81C7EE088DF111EEBAF5601BC4F9AE02.roa (hash: CRI92XbMS3q/rRPmQg3wO3RSp8ZmrhL7Jbxpo/V0XVM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3AB3/serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3 Validity Not Before: May 19 04:40:34 2024 GMT Not After : May 26 04:40:34 2024 GMT Subject: CN=664982c2-904b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:15:0a:50:77:9b:80:e1:16:88:8b:9a:a2:0c: 05:d7:4e:6d:62:a8:cc:28:9c:e6:35:a0:a1:9f:22: 49:7b:42:ce:9a:cc:94:59:00:7e:da:57:4a:06:ab: ae:70:07:35:04:1e:3a:2e:32:23:dd:58:ff:7f:9e: 08:8c:3e:67:49:1b:39:0d:db:49:f1:e8:33:0d:46: 9a:b3:5f:18:c8:e9:89:ad:20:10:69:2e:d3:4c:0d: 4f:f6:3a:85:b3:83:c3:0c:c1:57:f2:ff:cd:98:bc: b4:ad:ee:1e:cc:81:c2:c5:15:c5:1a:d5:b0:40:00: 60:d7:2e:b9:c5:c4:0b:69:35:a4:27:48:f7:59:06: 1d:4f:69:4e:56:2a:84:45:79:af:b7:a0:71:18:bf: 69:f7:99:c5:3d:09:d5:b2:6b:52:12:d0:87:e2:66: 88:9a:07:5d:13:53:73:cc:58:94:ae:68:01:25:60: c4:1d:00:f3:79:64:a0:f8:30:a2:50:15:13:e0:1a: 66:53:2e:31:b2:77:d7:52:38:2b:22:d5:3d:42:b6: 4e:73:31:8a:8b:41:34:9f:af:ec:94:dc:29:1c:0a: 8f:6d:0b:7a:8a:c6:58:ce:91:70:a5:2b:c6:0e:11: 21:7d:e3:bb:42:85:f6:a9:b3:06:a7:dd:30:40:84: 12:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E7:A7:B5:C4:B4:04:4E:5B:49:0A:70:52:D1:5F:FF:94:6B:23:18 X509v3 Authority Key Identifier: keyid:E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:ac:4b:97:54:2d:f9:fc:91:78:72:73:ed:75:6d:3f:b2:e9: ce:1f:52:c1:2a:32:45:f8:75:6e:2b:4a:68:b1:12:74:a7:a9: 4e:c4:0a:3e:13:dd:f0:d9:f1:5e:91:2c:9a:1a:45:35:d5:9b: f9:76:fb:e6:1c:21:99:fa:53:9b:da:34:12:f6:e0:aa:74:4f: 54:f8:50:e2:c6:ed:93:07:15:4f:e5:65:7a:5a:72:d6:17:d9: fe:25:ee:48:d1:cc:8d:4e:68:75:ff:bd:a3:9d:81:cf:ce:79: 5a:62:29:10:e0:b3:d0:1a:17:58:6c:3f:4b:6c:c7:87:03:63: b1:0b:5f:c5:e7:7b:03:64:af:fd:75:a8:85:be:94:f9:a7:bb: a9:a1:6f:c2:b6:cd:dc:ba:05:8f:e7:e8:5f:8d:94:56:3d:20: b7:ee:cb:35:e9:03:76:06:31:fd:ae:d8:b1:29:6a:3a:4c:7d: 05:7f:c6:68:49:00:e0:d2:c6:47:68:79:ab:db:99:b9:7e:27: 51:7c:ca:07:66:d3:a3:f2:e2:06:20:83:68:54:d3:0a:cc:a2: 80:2b:1a:95:2d:ba:8f:e0:4a:f5:a0:ce:94:70:21:06:88:49: 7f:f4:d4:34:11:1a:29:97:14:ca:7d:2f:72:51:a1:9f:81:aa: c0:3c:c9:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNBQjMxMTAvBgNVBAUTKEU0QTk0Q0ZBOEQyRjlGNUIzOUVGNDYzNTA1OTFDRTMx MkU1MTRGQjMwHhcNMjQwNTE5MDQ0MDM0WhcNMjQwNTI2MDQ0MDM0WjAYMRYwFAYD VQQDEw02NjQ5ODJjMi05MDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBUKUHebgOEWiIuaogwF105tYqjMKJzmNaChnyJJe0LOmsyUWQB+2ldKBquu cAc1BB46LjIj3Vj/f54IjD5nSRs5DdtJ8egzDUaas18YyOmJrSAQaS7TTA1P9jqF s4PDDMFX8v/NmLy0re4ezIHCxRXFGtWwQABg1y65xcQLaTWkJ0j3WQYdT2lOViqE RXmvt6BxGL9p95nFPQnVsmtSEtCH4maImgddE1NzzFiUrmgBJWDEHQDzeWSg+DCi UBUT4BpmUy4xsnfXUjgrItU9QrZOczGKi0E0n6/slNwpHAqPbQt6isZYzpFwpSvG DhEhfeO7QoX2qbMGp90wQIQSEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAznp7XE tAROW0kKcFLRX/+UayMYMB8GA1UdIwQYMBaAFOSpTPqNL59bOe9GNQWRzjEuUU+z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0FCMy8wNUVEOTRDRTE5 NEMxMUVEQUQzOEYyMkJDNEY5QUUwMi81S2xNLW8wdm4xczU3MFkxQlpIT01TNVJU N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVLbE0tbzB2bjFzNTcwWTFCWkhPTVM1UlQ3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0FCMy8wNUVEOTRDRTE5NEMxMUVEQUQzOEYyMkJDNEY5QUUwMi81S2xNLW8wdm4x czU3MFkxQlpIT01TNVJUN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2rEuXVC35/JF4cnPtdW0/sunOH1LBKjJF+HVuK0posRJ0p6lOxAo+ E93w2fFekSyaGkU11Zv5dvvmHCGZ+lOb2jQS9uCqdE9U+FDixu2TBxVP5WV6WnLW F9n+Je5I0cyNTmh1/72jnYHPznlaYikQ4LPQGhdYbD9LbMeHA2OxC1/F53sDZK/9 daiFvpT5p7upoW/Cts3cugWP5+hfjZRWPSC37ss16QN2BjH9rtixKWo6TH0Ff8Zo SQDg0sZHaHmr25m5fidRfMoHZtOj8uIGIINoVNMKzKKAKxqVLbqP4Er1oM6UcCEG iEl/9NQ0ERoplxTKfS9yUaGfgarAPMm8 -----END CERTIFICATE-----Generated at Sun May 19 05:48:51 2024 by rpki-client on console-fra.rpki-client.org