$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft File: cS61otcGnxjunGXzsBMnGtvx9UA.mft (raw, json) Hash identifier: yxX3810pFgh5+NXUkSh1wKa2J0t7HyDGuYoMlEI9OfQ= Subject key identifier: 16:B5:5A:46:02:9A:AF:01:BB:DF:ED:32:3A:D6:E9:6E:3A:91:B5:B6 Authority key identifier: 71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40 Certificate issuer: /CN=A91A8A52/serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft Manifest number: 0118 Signing time: Sun 19 May 2024 05:22:17 +0000 Manifest this update: Sun 19 May 2024 05:22:16 +0000 Manifest next update: Sun 26 May 2024 05:22:16 +0000 Files and hashes: 1: cS61otcGnxjunGXzsBMnGtvx9UA.crl (hash: tuGhPjKQAQqTW7jKxyh9eDZlzd2wl2QKwV2GZQ96vFA=) 2: E5FC4584965E11EEBE3E0C54C4F9AE02.roa (hash: v7dLmK1CZLoLxUWjZWdMzn94e/qgfqNNjyJGBbnx3cE=) 3: B5AE4CBAB4E111EDABDE6465C4F9AE02.roa (hash: oIRC/aQgJAallAP6T7346kNwrc54H/9fYzZwh6vtxAk=) 4: 8F14EDAA70B911EDB6E1F81BC4F9AE02.roa (hash: krdX3E3FXGP80zr3le2cyVtnOC95WYTeNcCBOyjwLio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A52/serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540 Validity Not Before: May 19 05:22:16 2024 GMT Not After : May 26 05:22:16 2024 GMT Subject: CN=66498c89-f353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cb:57:9d:fb:b2:b9:29:db:c8:06:29:4b:1f: 5d:a3:2a:67:da:00:dc:40:4c:a8:51:9f:eb:0c:89: 4f:1e:a2:ea:48:fd:5f:f8:0a:82:de:5d:f4:14:37: 4b:8d:57:cb:f9:92:f5:f1:26:29:02:f1:33:40:f8: 62:dc:38:1c:20:7a:de:dc:15:8b:05:cd:a6:d4:92: d4:e8:8a:49:78:62:31:96:8b:94:3f:89:35:ca:46: 1c:a2:63:78:69:bc:d3:ee:6b:b4:68:47:2d:ee:b7: a6:8b:cb:36:34:81:f7:17:35:f2:6d:36:dc:e8:c5: 2c:4e:00:8c:b3:2e:46:39:c0:ce:9a:c4:96:ba:49: dd:e2:0b:7f:b5:d8:8c:ba:c5:84:79:4d:79:5a:29: b6:ee:33:9d:00:92:0c:02:5a:07:19:13:b4:c9:19: 5e:d2:41:8c:58:e9:34:90:3f:68:b6:a6:5e:3a:be: b8:fc:1f:24:b5:4e:dc:83:b2:a8:b0:bc:77:26:ed: 94:0a:60:09:2b:e0:31:09:e2:de:a8:9b:02:45:b6: b3:c1:27:0d:13:00:ae:ac:ed:aa:74:23:f6:78:ba: 66:92:85:0a:67:1b:16:c5:5c:02:0e:39:13:1f:0b: f9:68:3a:48:e2:79:8d:b8:85:a3:02:0a:f1:14:f2: 5f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B5:5A:46:02:9A:AF:01:BB:DF:ED:32:3A:D6:E9:6E:3A:91:B5:B6 X509v3 Authority Key Identifier: keyid:71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:fe:52:15:90:2d:cf:cc:cd:db:c9:51:c9:13:71:f9:d1:75: ac:fb:cc:05:dd:e4:f7:29:44:a1:5a:5a:69:a9:15:c6:6b:6c: c8:5c:03:bd:fa:ae:ab:8d:4a:2d:71:31:ca:98:59:50:d2:31: 97:c1:88:4a:aa:80:d3:42:cd:48:4c:cf:38:1e:1b:08:e8:6e: 37:55:49:0d:77:b1:de:cd:85:10:c9:93:8d:31:8b:60:b2:56: 39:c8:21:82:14:07:ef:40:11:3c:be:22:92:77:2a:a7:88:3d: 09:a7:e1:ba:4c:f3:dc:46:38:97:2c:88:ae:45:44:c7:0e:1d: 6a:a6:d5:fe:5a:60:6d:51:32:bd:92:3e:a9:71:b4:d2:af:c0: 1b:a4:3b:7a:c4:d9:47:c7:b1:e1:e6:ca:0b:91:6a:59:37:e1: ac:2f:5b:2c:51:81:72:26:31:a8:3a:09:7e:51:fd:c2:ce:4d: 6d:c3:28:aa:a1:9f:1b:7a:6e:b9:f0:e0:50:3d:b5:d4:0e:4c: 8a:6d:b6:0e:e7:99:14:d2:69:4a:bd:52:5e:7e:83:d9:6f:de: e0:8a:51:c2:85:b9:cd:70:e2:23:3e:c7:e6:93:17:b3:4a:e8: e1:cd:96:ba:ee:78:eb:11:af:a4:f7:13:6b:14:32:70:d4:61: 31:bc:f8:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBNTIxMTAvBgNVBAUTKDcxMkVCNUEyRDcwNjlGMThFRTlDNjVGM0IwMTMyNzFB REJGMUY1NDAwHhcNMjQwNTE5MDUyMjE2WhcNMjQwNTI2MDUyMjE2WjAYMRYwFAYD VQQDEw02NjQ5OGM4OS1mMzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArstXnfuyuSnbyAYpSx9doypn2gDcQEyoUZ/rDIlPHqLqSP1f+AqC3l30FDdL jVfL+ZL18SYpAvEzQPhi3DgcIHre3BWLBc2m1JLU6IpJeGIxlouUP4k1ykYcomN4 abzT7mu0aEct7remi8s2NIH3FzXybTbc6MUsTgCMsy5GOcDOmsSWuknd4gt/tdiM usWEeU15Wim27jOdAJIMAloHGRO0yRle0kGMWOk0kD9otqZeOr64/B8ktU7cg7Ko sLx3Ju2UCmAJK+AxCeLeqJsCRbazwScNEwCurO2qdCP2eLpmkoUKZxsWxVwCDjkT Hwv5aDpI4nmNuIWjAgrxFPJftwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBa1WkYC mq8Bu9/tMjrW6W46kbW2MB8GA1UdIwQYMBaAFHEutaLXBp8Y7pxl87ATJxrb8fVA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE1Mi9GQjdFNEJERTcw QjUxMUVEOTNGMEREMTZDNEY5QUUwMi9jUzYxb3RjR254anVuR1h6c0JNbkd0dng5 VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NTNjFvdGNHbnhqdW5HWHpzQk1uR3R2eDlVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEE1Mi9GQjdFNEJERTcwQjUxMUVEOTNGMEREMTZDNEY5QUUwMi9jUzYxb3RjR254 anVuR1h6c0JNbkd0dng5VUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl/lIVkC3PzM3byVHJE3H50XWs+8wF3eT3KUShWlppqRXGa2zIXAO9 +q6rjUotcTHKmFlQ0jGXwYhKqoDTQs1ITM84HhsI6G43VUkNd7HezYUQyZONMYtg slY5yCGCFAfvQBE8viKSdyqniD0Jp+G6TPPcRjiXLIiuRUTHDh1qptX+WmBtUTK9 kj6pcbTSr8AbpDt6xNlHx7Hh5soLkWpZN+GsL1ssUYFyJjGoOgl+Uf3Czk1twyiq oZ8bem658OBQPbXUDkyKbbYO55kU0mlKvVJefoPZb97gilHChbnNcOIjPsfmkxez SujhzZa67njrEa+k9xNrFDJw1GExvPgi -----END CERTIFICATE-----Generated at Sun May 19 05:48:51 2024 by rpki-client on console-fra.rpki-client.org