$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft File: 5fjJ4D7R71BndlYU2mtRJq1vyz4.mft (raw, json) Hash identifier: Pr4OiriiOs8DMAwcBkb0Z363qThex19Ixp/XQ0Ae5D0= Subject key identifier: 71:BE:59:38:5E:52:91:AB:97:10:2D:CA:25:6C:0F:2B:17:35:86:74 Authority key identifier: E5:F8:C9:E0:3E:D1:EF:50:67:76:56:14:DA:6B:51:26:AD:6F:CB:3E Certificate issuer: /CN=A91A6548/serialNumber=E5F8C9E03ED1EF5067765614DA6B5126AD6FCB3E Certificate serial: 0443 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5fjJ4D7R71BndlYU2mtRJq1vyz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft Manifest number: 0440 Signing time: Sun 19 May 2024 01:56:29 +0000 Manifest this update: Sun 19 May 2024 01:56:28 +0000 Manifest next update: Sun 26 May 2024 01:56:28 +0000 Files and hashes: 1: 5fjJ4D7R71BndlYU2mtRJq1vyz4.crl (hash: dZ5Msbqxy9d0CeC8gwyrXvB86K/V8HKYdekfrn0YO6o=) 2: E6EC55EE0D7E11EC94917272C4F9AE02.roa (hash: drqGG9PcuM//NwHPB/+XibzP4BJz4AhNykPzGt6/IAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.crl rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5fjJ4D7R71BndlYU2mtRJq1vyz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1091 (0x443) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6548/serialNumber=E5F8C9E03ED1EF5067765614DA6B5126AD6FCB3E Validity Not Before: May 19 01:56:28 2024 GMT Not After : May 26 01:56:28 2024 GMT Subject: CN=66495c4d-58b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1b:73:f2:63:ec:1d:b7:c3:6b:38:dc:28:08: e0:c1:8b:ae:72:66:9a:aa:c9:d2:74:9a:df:34:e0: 60:1b:66:58:44:4c:03:1e:e6:bf:03:63:42:a8:a8: 91:9c:00:8d:77:d7:bb:d4:12:1d:fe:d0:c1:5d:62: 17:c9:bc:79:47:0e:4c:ba:02:f6:4c:98:50:b5:1c: 52:29:59:25:4e:4d:e1:92:e3:4a:ca:47:23:20:9f: d1:f3:f6:b3:78:76:ce:a9:09:d7:2e:8d:93:e9:ae: 5c:4b:86:b3:08:2e:3c:94:a8:30:e0:15:43:cf:5a: 63:0d:18:9f:e8:24:18:17:58:3c:3c:4e:3d:d1:72: fd:7c:37:22:cf:ca:33:5d:a3:58:2a:61:13:89:a0: 8c:11:29:5c:db:5d:c5:29:e8:4c:c5:26:f0:ba:f4: ce:a8:e2:54:04:88:2f:e3:b7:b0:d9:f9:5a:78:e5: d4:fb:6e:3d:f6:17:75:af:a6:90:7c:8f:48:52:8e: 19:41:f9:09:4f:6e:e2:a1:e6:69:56:e3:fb:50:a3: 31:03:f1:54:8a:bf:14:09:34:ae:a2:89:68:2f:0f: e2:7b:2d:16:9b:50:53:63:01:20:27:92:a7:32:d1: 04:85:33:ef:11:88:94:1e:2f:f7:4f:b5:c0:ca:59: c9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:BE:59:38:5E:52:91:AB:97:10:2D:CA:25:6C:0F:2B:17:35:86:74 X509v3 Authority Key Identifier: keyid:E5:F8:C9:E0:3E:D1:EF:50:67:76:56:14:DA:6B:51:26:AD:6F:CB:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5fjJ4D7R71BndlYU2mtRJq1vyz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:c6:de:47:c7:dd:fa:47:8b:5e:24:b2:da:14:37:a5:cf:09: 67:d6:28:22:e0:fd:63:6d:c8:c8:9e:04:c0:13:79:99:a5:f8: 7b:f4:f9:12:76:f0:5a:94:b8:5a:de:40:30:61:a2:00:f5:31: e4:b4:33:32:bc:90:76:d1:64:91:bd:ba:b2:ec:be:4b:f5:64: 64:2d:07:0d:bf:63:ef:5c:c4:86:64:6f:6c:df:64:a9:09:3f: 5e:be:ca:e9:1c:9e:a4:2c:40:37:6a:1b:3a:69:74:98:00:ed: 9d:ea:cb:a8:2a:1f:4e:b0:fe:c8:13:25:6f:40:63:bd:27:49: b3:3d:c4:9d:60:a0:9e:02:8e:5c:22:78:ce:27:90:ed:c0:09: 93:17:d4:52:90:d0:83:e1:a7:d2:6d:f2:84:de:4f:d4:22:78: ea:ba:d6:cb:2f:84:87:3d:22:80:75:c8:52:15:d6:33:c5:46: 29:94:1e:aa:23:e3:9c:84:13:bd:13:f3:2b:2c:0e:cf:00:a0: c1:a8:45:62:8f:e7:d2:c4:1f:8a:0d:ca:b7:c2:ef:3a:78:7e: 28:1e:15:1f:b5:0f:b7:fe:08:42:45:b9:74:ff:ca:40:4c:f4: 08:76:bb:6a:e7:30:c0:0d:da:b6:ee:cd:29:d5:42:43:7a:0d: c5:7e:64:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY1NDgxMTAvBgNVBAUTKEU1RjhDOUUwM0VEMUVGNTA2Nzc2NTYxNERBNkI1MTI2 QUQ2RkNCM0UwHhcNMjQwNTE5MDE1NjI4WhcNMjQwNTI2MDE1NjI4WjAYMRYwFAYD VQQDEw02NjQ5NWM0ZC01OGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Btz8mPsHbfDazjcKAjgwYuucmaaqsnSdJrfNOBgG2ZYREwDHua/A2NCqKiR nACNd9e71BId/tDBXWIXybx5Rw5MugL2TJhQtRxSKVklTk3hkuNKykcjIJ/R8/az eHbOqQnXLo2T6a5cS4azCC48lKgw4BVDz1pjDRif6CQYF1g8PE490XL9fDciz8oz XaNYKmETiaCMESlc213FKehMxSbwuvTOqOJUBIgv47ew2flaeOXU+2499hd1r6aQ fI9IUo4ZQfkJT27ioeZpVuP7UKMxA/FUir8UCTSuooloLw/iey0Wm1BTYwEgJ5Kn MtEEhTPvEYiUHi/3T7XAylnJDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHG+WThe UpGrlxAtyiVsDysXNYZ0MB8GA1UdIwQYMBaAFOX4yeA+0e9QZ3ZWFNprUSatb8s+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjU0OC83RENGMjQ4QTBE N0MxMUVDQkFCREQ1NkRDNEY5QUUwMi81ZmpKNEQ3UjcxQm5kbFlVMm10UkpxMXZ5 ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVmako0RDdSNzFCbmRsWVUybXRSSnExdnl6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjU0OC83RENGMjQ4QTBEN0MxMUVDQkFCREQ1NkRDNEY5QUUwMi81ZmpKNEQ3Ujcx Qm5kbFlVMm10UkpxMXZ5ejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuxt5Hx936R4teJLLaFDelzwln1igi4P1jbcjIngTAE3mZpfh79PkS dvBalLha3kAwYaIA9THktDMyvJB20WSRvbqy7L5L9WRkLQcNv2PvXMSGZG9s32Sp CT9evsrpHJ6kLEA3ahs6aXSYAO2d6suoKh9OsP7IEyVvQGO9J0mzPcSdYKCeAo5c InjOJ5DtwAmTF9RSkNCD4afSbfKE3k/UInjqutbLL4SHPSKAdchSFdYzxUYplB6q I+OchBO9E/MrLA7PAKDBqEVij+fSxB+KDcq3wu86eH4oHhUftQ+3/ghCRbl0/8pA TPQIdrtq5zDADdq27s0p1UJDeg3FfmTM -----END CERTIFICATE-----Generated at Sun May 19 02:39:37 2024 by rpki-client on console-fra.rpki-client.org