$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft File: 5Otd-leSQpC7j-xFuZd_xsf2-jc.mft (raw, json) Hash identifier: Kvxwe1B/NmdY1oFJ5BwzZO0c1wq+AhGrHqNqZf3C1mA= Subject key identifier: 73:52:2A:AB:B0:A7:65:BA:89:30:C1:42:08:31:DE:47:3A:A9:76:0A Authority key identifier: E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 Certificate issuer: /CN=A91A8B0B/serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Certificate serial: 0BCC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft Manifest number: 0BBA Signing time: Sat 18 May 2024 19:10:53 +0000 Manifest this update: Sat 18 May 2024 19:10:53 +0000 Manifest next update: Sat 25 May 2024 19:10:53 +0000 Files and hashes: 1: 5Otd-leSQpC7j-xFuZd_xsf2-jc.crl (hash: gX6Hjm2sYJtdKenClNiOE10/B6FCV/CxJqk+3XiIKBg=) 2: 5842DDF0FCE511E9BFA4B27AC4F9AE02.roa (hash: kJqESF4QlMyVG/2/vUjwGWXp6ZiWLKmRChQ5GeCT1ak=) 3: EA17F65E6C6711ECB7C0925AC4F9AE02.roa (hash: n6K4eFBQQStBGPjOWI9UjtqimxuSa7JV9+htrnKW+a4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3020 (0xbcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8B0B/serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Validity Not Before: May 18 19:10:53 2024 GMT Not After : May 25 19:10:53 2024 GMT Subject: CN=6648fd3d-db2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:36:4c:7d:3a:65:4b:a1:c1:9a:b4:af:80:37: a1:4b:03:0d:d6:d2:87:57:f7:1d:8c:70:df:4a:c6: c3:2b:21:89:64:1d:fe:3c:d0:d9:40:67:c9:62:9c: 85:ba:4c:1e:12:82:dd:d7:0b:83:ac:58:3a:45:3f: b4:36:63:d7:49:10:58:3e:65:e9:59:d0:6d:ae:1f: dd:5f:b0:5a:5c:13:98:bb:1a:84:df:98:59:26:ab: f0:3b:63:64:dd:8b:60:f8:52:3c:2d:78:59:f5:9f: 07:c9:28:15:ed:6b:e6:95:d0:35:fd:ef:99:00:69: c2:17:e7:0d:87:2f:38:dc:cb:7d:dc:18:b5:f9:87: 64:92:6f:86:aa:d1:33:d6:ab:6b:81:c2:e4:23:7a: a0:3e:34:07:05:83:e1:ca:c5:0d:d8:2e:c0:d8:e0: 32:d6:76:b7:b5:6d:cd:b9:1e:d1:dc:52:5d:57:90: 4e:d7:80:ef:59:23:eb:32:31:b4:6c:cb:11:36:45: d3:8f:d2:65:a9:da:8c:1f:34:e4:b1:08:91:2c:0d: 90:f5:8f:b1:9c:3a:ee:7b:78:4b:a2:ce:29:17:ca: 28:e8:cf:e5:3a:18:19:61:3d:24:b1:9a:16:dc:5a: 5b:9a:8d:6e:dc:2a:3e:00:2d:94:fa:27:41:13:d0: 1e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:52:2A:AB:B0:A7:65:BA:89:30:C1:42:08:31:DE:47:3A:A9:76:0A X509v3 Authority Key Identifier: keyid:E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:23:92:21:01:62:04:78:be:4a:b2:e4:ff:61:dc:5b:fb:59: ed:95:86:ae:de:e8:fd:15:da:1e:20:b4:66:93:c8:15:a3:c1: 34:33:55:8b:b5:ef:39:87:08:05:7e:7e:18:48:f7:59:7c:ea: c2:c9:c9:c0:2e:5b:6a:c4:d5:20:23:5b:3c:97:f6:45:ea:75: 49:e6:e6:83:15:c7:8c:8e:84:66:e5:7f:63:c4:03:3b:fc:a2: 18:f1:1e:e9:c7:fc:11:e3:91:ea:61:90:01:97:91:e9:cb:a9: b0:14:73:19:1f:fd:57:b1:e7:52:a0:ca:95:3b:5c:39:22:ff: 04:da:28:6d:96:23:dc:2c:84:9d:88:f9:ea:f8:58:87:ed:2a: 6d:e4:73:43:47:10:63:f9:54:f9:64:e4:dd:84:0e:00:56:9c: 7a:53:c4:92:e9:c5:35:52:b9:e0:e6:f6:3c:8b:af:0f:75:ab: 6a:ed:5e:5f:d5:95:d3:94:b3:31:09:06:ae:84:3b:58:3e:7f: 20:ef:6a:15:20:00:5e:93:30:ba:85:e3:87:9a:bb:e3:a1:00: 63:d6:18:7e:eb:90:3e:b0:9b:fe:46:4f:d3:af:a6:51:5c:50: 15:5c:24:45:c7:ff:83:a6:d4:49:7d:19:c6:e8:4e:a0:8e:b5: 30:15:f9:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThCMEIxMTAvBgNVBAUTKEU0RUI1REZBNTc5MjQyOTBCQjhGRUM0NUI5OTc3RkM2 QzdGNkZBMzcwHhcNMjQwNTE4MTkxMDUzWhcNMjQwNTI1MTkxMDUzWjAYMRYwFAYD VQQDEw02NjQ4ZmQzZC1kYjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTZMfTplS6HBmrSvgDehSwMN1tKHV/cdjHDfSsbDKyGJZB3+PNDZQGfJYpyF ukweEoLd1wuDrFg6RT+0NmPXSRBYPmXpWdBtrh/dX7BaXBOYuxqE35hZJqvwO2Nk 3Ytg+FI8LXhZ9Z8HySgV7WvmldA1/e+ZAGnCF+cNhy843Mt93Bi1+Ydkkm+GqtEz 1qtrgcLkI3qgPjQHBYPhysUN2C7A2OAy1na3tW3NuR7R3FJdV5BO14DvWSPrMjG0 bMsRNkXTj9JlqdqMHzTksQiRLA2Q9Y+xnDrue3hLos4pF8oo6M/lOhgZYT0ksZoW 3Fpbmo1u3Co+AC2U+idBE9AenQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNSKquw p2W6iTDBQggx3kc6qXYKMB8GA1UdIwQYMBaAFOTrXfpXkkKQu4/sRbmXf8bH9vo3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEIwQi81QUVCNUVCMkZD QzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1FwQzdqLXhGdVpkX3hzZjIt amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPdGQtbGVTUXBDN2oteEZ1WmRfeHNmMi1qYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEIwQi81QUVCNUVCMkZDQzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1Fw QzdqLXhGdVpkX3hzZjItamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNI5IhAWIEeL5KsuT/Ydxb+1ntlYau3uj9FdoeILRmk8gVo8E0M1WL te85hwgFfn4YSPdZfOrCycnALltqxNUgI1s8l/ZF6nVJ5uaDFceMjoRm5X9jxAM7 /KIY8R7px/wR45HqYZABl5Hpy6mwFHMZH/1XsedSoMqVO1w5Iv8E2ihtliPcLISd iPnq+FiH7Spt5HNDRxBj+VT5ZOTdhA4AVpx6U8SS6cU1Urng5vY8i68Pdatq7V5f 1ZXTlLMxCQauhDtYPn8g72oVIABekzC6heOHmrvjoQBj1hh+65A+sJv+Rk/Tr6ZR XFAVXCRFx/+DptRJfRnG6E6gjrUwFfkZ -----END CERTIFICATE-----Generated at Sat May 18 20:16:01 2024 by rpki-client on console-ams.rpki-client.org