$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft File: 51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft (raw, json) Hash identifier: kjlc7nEP94aoSMd7ht9m9lU1gLrOAwqbRgBM8VBtGzU= Subject key identifier: 5C:A7:AB:7D:21:C0:8D:02:CC:D1:B1:E5:EE:68:12:AE:B1:D0:41:7F Authority key identifier: E7:58:4F:95:9A:08:1A:4D:D9:48:09:35:30:51:D2:35:93:9C:39:1D Certificate issuer: /CN=A91AB063/serialNumber=E7584F959A081A4DD94809353051D235939C391D Certificate serial: 1AC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft Manifest number: 1AB5 Signing time: Sat 18 May 2024 16:42:55 +0000 Manifest this update: Sat 18 May 2024 16:42:54 +0000 Manifest next update: Sat 25 May 2024 16:42:54 +0000 Files and hashes: 1: 51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl (hash: Dsa+gvOgxztqRJwHz0R6o+s+FGFSY4Kq379D/9mGCo8=) 2: B6FD84CE54F611E79DF7E643C4F9AE02.roa (hash: r4vu1WVycI+yAQLPBHRRrX6zYEns7SujeRwz9d8Igvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6848 (0x1ac0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB063/serialNumber=E7584F959A081A4DD94809353051D235939C391D Validity Not Before: May 18 16:42:54 2024 GMT Not After : May 25 16:42:54 2024 GMT Subject: CN=6648da8e-4cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:65:71:84:e6:f1:ee:d3:4c:3e:33:dc:ea:d2: 46:0d:e3:8a:92:7e:da:73:2f:f0:67:66:15:6e:60: 74:01:86:b0:17:a6:be:40:d4:e9:55:1c:57:66:7e: ae:aa:15:af:f3:07:5e:37:7a:2e:3e:07:32:03:2e: c8:1e:f7:42:6c:9b:0a:2b:31:46:94:f1:34:0f:d2: 0c:1b:55:a8:55:e5:cf:1e:cc:71:5f:6a:8f:25:44: d2:4f:48:18:8d:3e:b1:c1:92:f1:5a:50:b9:6d:ac: 49:d3:a0:d8:51:2b:6b:e4:e1:aa:fa:ac:18:4b:28: c1:cc:df:f9:b8:87:56:cb:45:10:ed:86:57:5a:bc: 28:70:6d:1c:fd:28:e7:66:81:e1:b0:58:ee:9e:12: f3:c0:60:7b:96:9c:94:99:6a:e7:68:c9:e4:d7:05: 5f:25:f7:b6:12:55:d7:11:da:9c:09:0b:23:54:c3: 32:3d:e0:bc:c1:54:42:01:95:e8:e8:22:cf:61:38: ee:a1:98:0a:6b:18:18:67:a7:29:4d:0f:6f:7a:14: 76:a9:58:94:58:b0:83:1e:83:89:cb:0f:f5:59:17: ff:1f:a8:47:0d:10:4d:79:14:ab:28:fb:7a:f3:9c: d5:82:83:0d:ed:ff:21:b3:71:1d:8d:af:6e:c9:bd: e7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A7:AB:7D:21:C0:8D:02:CC:D1:B1:E5:EE:68:12:AE:B1:D0:41:7F X509v3 Authority Key Identifier: keyid:E7:58:4F:95:9A:08:1A:4D:D9:48:09:35:30:51:D2:35:93:9C:39:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:14:b0:cb:a1:6f:ca:4a:d2:34:e0:89:f3:a3:6e:4c:32:26: d4:51:86:7e:93:db:a8:f2:75:6b:60:0c:a8:cf:bf:1d:53:e7: 03:4d:28:10:59:c7:f2:27:d4:7a:b4:24:d8:12:4a:15:22:dc: 21:40:b3:91:4f:3e:98:26:92:85:c0:cd:1b:1e:18:95:bd:5f: 5b:15:b0:94:5a:45:87:82:ce:c9:97:5d:e3:05:8c:6e:1d:22: 35:36:00:ae:39:98:0d:eb:23:0b:66:17:34:73:cb:a1:22:16: c4:f3:36:d6:db:07:46:6c:c0:79:85:f2:3e:83:19:26:98:2c: 4f:0b:e0:e3:e0:30:a3:31:52:44:4a:54:4b:a4:a0:dc:cf:8d: 11:48:19:7e:b7:eb:2b:e1:a3:e6:58:03:18:1d:3d:c7:85:f7: 1b:b4:ba:8b:99:ed:c9:78:9e:a6:55:c3:d1:a8:dd:46:fd:0e: b3:ba:ec:64:3e:89:5d:31:3a:e9:d3:cc:aa:14:94:b7:98:2f: 52:c9:81:82:71:23:7e:30:9c:2d:d5:0f:bc:84:41:8b:f8:e5: 93:a3:8c:c9:1f:be:08:54:f4:ee:f9:f1:56:8c:11:61:96:89: 1e:d5:39:9e:68:fd:7d:e4:2f:0f:bc:f1:e3:d7:1e:40:65:cc: 97:83:96:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIwNjMxMTAvBgNVBAUTKEU3NTg0Rjk1OUEwODFBNEREOTQ4MDkzNTMwNTFEMjM1 OTM5QzM5MUQwHhcNMjQwNTE4MTY0MjU0WhcNMjQwNTI1MTY0MjU0WjAYMRYwFAYD VQQDEw02NjQ4ZGE4ZS00Y2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2VxhObx7tNMPjPc6tJGDeOKkn7acy/wZ2YVbmB0AYawF6a+QNTpVRxXZn6u qhWv8wdeN3ouPgcyAy7IHvdCbJsKKzFGlPE0D9IMG1WoVeXPHsxxX2qPJUTST0gY jT6xwZLxWlC5baxJ06DYUStr5OGq+qwYSyjBzN/5uIdWy0UQ7YZXWrwocG0c/Sjn ZoHhsFjunhLzwGB7lpyUmWrnaMnk1wVfJfe2ElXXEdqcCQsjVMMyPeC8wVRCAZXo 6CLPYTjuoZgKaxgYZ6cpTQ9vehR2qViUWLCDHoOJyw/1WRf/H6hHDRBNeRSrKPt6 85zVgoMN7f8hs3Edja9uyb3nLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFynq30h wI0CzNGx5e5oEq6x0EF/MB8GA1UdIwQYMBaAFOdYT5WaCBpN2UgJNTBR0jWTnDkd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjA2My8xMTg2QjZCQzA5 M0ExMUU3OTU0MDk1MEJDNEY5QUUwMi81MWhQbFpvSUdrM1pTQWsxTUZIU05aT2NP UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUxaFBsWm9JR2szWlNBazFNRkhTTlpPY09SMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjA2My8xMTg2QjZCQzA5M0ExMUU3OTU0MDk1MEJDNEY5QUUwMi81MWhQbFpvSUdr M1pTQWsxTUZIU05aT2NPUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGFLDLoW/KStI04Inzo25MMibUUYZ+k9uo8nVrYAyoz78dU+cDTSgQ WcfyJ9R6tCTYEkoVItwhQLORTz6YJpKFwM0bHhiVvV9bFbCUWkWHgs7Jl13jBYxu HSI1NgCuOZgN6yMLZhc0c8uhIhbE8zbW2wdGbMB5hfI+gxkmmCxPC+Dj4DCjMVJE SlRLpKDcz40RSBl+t+sr4aPmWAMYHT3HhfcbtLqLme3JeJ6mVcPRqN1G/Q6zuuxk PoldMTrp08yqFJS3mC9SyYGCcSN+MJwt1Q+8hEGL+OWTo4zJH74IVPTu+fFWjBFh loke1TmeaP195C8PvPHj1x5AZcyXg5ak -----END CERTIFICATE-----Generated at Sat May 18 17:20:34 2024 by rpki-client on console-ams.rpki-client.org