$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft File: 5esYDNbcUWxm01KwR7npxaUCcOM.mft (raw, json) Hash identifier: 6DMTtTGgV7OnnNOg3yIYnmHiamgE+Nr6fe1Xj0ecaxI= Subject key identifier: F9:6C:71:58:95:1A:A6:9A:75:08:67:41:89:7D:3C:AA:08:0D:07:A1 Authority key identifier: E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3 Certificate issuer: /CN=A91ABFD9/serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3 Certificate serial: 07F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft Manifest number: 07E2 Signing time: Sat 18 May 2024 21:56:49 +0000 Manifest this update: Sat 18 May 2024 21:56:49 +0000 Manifest next update: Sat 25 May 2024 21:56:49 +0000 Files and hashes: 1: 5esYDNbcUWxm01KwR7npxaUCcOM.crl (hash: lsKKYL/Cl0nsbs5FFRD+rWb5SthRd5Fu0e9NwM+lnEI=) 2: E2E21364C4F811EAB8D31113C4F9AE02.roa (hash: BIQumIGr6erTS4dsWexAI1EzFQcSWiKFq9JxlaxJzA0=) 3: F1A54AC47A5611EB876D281FC4F9AE02.roa (hash: dDoSSqmj+1KqoTK5wDPnFr2+FIWdHPdVfbnO5yGmVKY=) 4: 36945EC2232711EBA0F14F17C4F9AE02.roa (hash: /0RjVarbhWIDpd3cHraVVa21CcbNpmGk66YkcBro3Ns=) 5: 6AE50E1C21E011EBBF36CD21C4F9AE02.roa (hash: Lr1KMxJhPQ8D3zuPrAPoJ61RfejQ9+IvNN/JJj+oj5o=) 6: E22ECDEAC4F811EAB8D31113C4F9AE02.roa (hash: btmAvtbg+cv8vIT238XnatcxOtJFH8w/wTzWY/BWnok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2041 (0x7f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABFD9/serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3 Validity Not Before: May 18 21:56:49 2024 GMT Not After : May 25 21:56:49 2024 GMT Subject: CN=66492421-5310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:20:8e:69:80:a1:65:5b:0f:b4:d5:c0:82:85: 8a:6a:95:6a:53:3b:d7:c9:17:39:1a:6a:0b:c4:db: 00:cf:66:7c:b7:f4:83:d8:7c:d3:1e:c7:a4:76:05: ee:17:ea:17:ae:30:f5:dd:f7:fd:92:63:54:ec:eb: e7:b6:f1:34:bc:be:27:a9:05:28:2e:01:c7:f5:85: ee:7d:a6:db:45:a6:65:13:ae:a8:f9:6b:ce:1d:f6: 0b:50:7c:9f:a4:48:01:75:a5:15:66:62:ca:11:88: 4c:cd:67:eb:ed:08:50:83:62:74:62:b7:9b:49:0f: cb:4a:60:e3:7c:c7:8f:f3:e1:b8:68:3e:32:55:c6: 3e:c0:a4:2b:38:c3:58:69:76:3e:57:ce:2c:1b:96: 78:8b:0d:53:47:f8:7c:f0:59:a9:92:1d:1a:e9:fc: 5f:46:29:12:4b:23:39:99:14:a7:3c:2c:28:44:ed: 04:20:99:50:18:ca:1a:2a:5e:29:48:55:41:65:0c: 26:58:d6:6f:80:fe:e5:9d:50:40:ce:ee:a0:68:7d: 40:fa:da:bf:8d:a3:c3:c0:b7:1e:f1:7d:ce:8b:63: e6:8b:5a:f0:aa:85:fc:cd:9a:2e:99:0f:72:08:ab: b0:7c:c1:df:fd:50:e3:6c:7a:97:cc:06:03:bb:83: 8e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:6C:71:58:95:1A:A6:9A:75:08:67:41:89:7D:3C:AA:08:0D:07:A1 X509v3 Authority Key Identifier: keyid:E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:99:d0:a8:e8:a3:d3:2f:a8:52:bf:c4:42:f1:6e:6e:ea:0c: a4:d0:93:aa:91:82:b0:81:da:32:4e:3a:98:4c:08:6e:fb:9c: 51:42:b5:99:24:40:1d:ce:a0:80:44:76:73:e9:3d:f7:6c:b4: 57:83:b0:b4:45:1e:25:4e:d0:68:dd:2a:50:3c:fe:02:35:ba: 98:e6:a2:2b:54:f0:e4:66:d4:ed:75:bd:e5:ff:ca:a5:40:40: a0:38:b4:ce:89:b7:92:6b:ba:ff:aa:3c:57:4f:77:b0:d7:cd: 0d:62:7c:6f:53:32:e4:33:2a:9d:69:09:0d:ba:95:c0:a3:67: f8:a1:0f:3e:d2:01:03:0d:85:7c:d5:5f:5c:6a:c1:7e:c5:6c: ec:dc:2d:44:06:d5:7a:e7:be:08:b2:0a:2e:42:1a:7e:c2:4a: b7:8c:af:a9:2b:2a:f0:18:61:66:0e:35:fb:92:56:67:50:08: 33:bf:d3:21:fd:3a:29:77:a5:f5:ce:ba:0d:d2:d6:6c:2f:c7: 00:ad:d9:13:80:b8:b0:5f:d2:a6:5b:fd:35:35:10:a3:dd:c1: be:4d:50:07:e0:6b:98:5d:41:e2:d2:33:22:d3:9e:c4:cc:8f: 3d:a8:b6:c3:04:88:2d:dc:50:25:8a:94:b7:6d:7b:9b:b3:1d: 0b:70:60:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJGRDkxMTAvBgNVBAUTKEU1RUIxODBDRDZEQzUxNkM2NkQzNTJCMDQ3QjlFOUM1 QTUwMjcwRTMwHhcNMjQwNTE4MjE1NjQ5WhcNMjQwNTI1MjE1NjQ5WjAYMRYwFAYD VQQDEw02NjQ5MjQyMS01MzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0iCOaYChZVsPtNXAgoWKapVqUzvXyRc5GmoLxNsAz2Z8t/SD2HzTHsekdgXu F+oXrjD13ff9kmNU7OvntvE0vL4nqQUoLgHH9YXufabbRaZlE66o+WvOHfYLUHyf pEgBdaUVZmLKEYhMzWfr7QhQg2J0YrebSQ/LSmDjfMeP8+G4aD4yVcY+wKQrOMNY aXY+V84sG5Z4iw1TR/h88Fmpkh0a6fxfRikSSyM5mRSnPCwoRO0EIJlQGMoaKl4p SFVBZQwmWNZvgP7lnVBAzu6gaH1A+tq/jaPDwLce8X3Oi2Pmi1rwqoX8zZoumQ9y CKuwfMHf/VDjbHqXzAYDu4OO9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPlscViV GqaadQhnQYl9PKoIDQehMB8GA1UdIwQYMBaAFOXrGAzW3FFsZtNSsEe56cWlAnDj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkZEOS80QUU4MDQxRUI5 RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VXeG0wMUt3UjducHhhVUNj T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVlc1lETmJjVVd4bTAxS3dSN25weGFVQ2NPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkZEOS80QUU4MDQxRUI5RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VX eG0wMUt3UjducHhhVUNjT00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZmdCo6KPTL6hSv8RC8W5u6gyk0JOqkYKwgdoyTjqYTAhu+5xRQrWZ JEAdzqCARHZz6T33bLRXg7C0RR4lTtBo3SpQPP4CNbqY5qIrVPDkZtTtdb3l/8ql QECgOLTOibeSa7r/qjxXT3ew180NYnxvUzLkMyqdaQkNupXAo2f4oQ8+0gEDDYV8 1V9casF+xWzs3C1EBtV6574IsgouQhp+wkq3jK+pKyrwGGFmDjX7klZnUAgzv9Mh /Topd6X1zroN0tZsL8cArdkTgLiwX9KmW/01NRCj3cG+TVAH4GuYXUHi0jMi057E zI89qLbDBIgt3FAlipS3bXubsx0LcGAy -----END CERTIFICATE-----Generated at Sun May 19 00:16:17 2024 by rpki-client on console-fra.rpki-client.org