$ rpki-client -vvf rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft File: 5hI_ServZkwi-UzV67rqztOHoW8.mft (raw, json) Hash identifier: uz7dxhUxqzwhGTsma5+QA3fJZ6Doe0Aa75KHuvTMsIw= Subject key identifier: 4B:DF:2F:36:2B:56:0C:6B:12:AB:A2:6E:F7:20:5F:D0:E7:3B:D7:90 Authority key identifier: E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F Certificate issuer: /CN=A91B861D/serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F Certificate serial: 053B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft Manifest number: 0537 Signing time: Sun 19 May 2024 00:56:10 +0000 Manifest this update: Sun 19 May 2024 00:56:09 +0000 Manifest next update: Sun 26 May 2024 00:56:09 +0000 Files and hashes: 1: 5hI_ServZkwi-UzV67rqztOHoW8.crl (hash: v21g2FWDJxjCO6Cp0Ir3T5L4SYdH9OwZablM3S2P+Gw=) 2: A9AA1A5E30AB11EC876F1B41C4F9AE02.roa (hash: WbEnl0/p9DW5LSQBfY/eVybwxbm+uFz2TgwUcU/Waio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1339 (0x53b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B861D/serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F Validity Not Before: May 19 00:56:09 2024 GMT Not After : May 26 00:56:09 2024 GMT Subject: CN=66494e2a-8cbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dc:ea:7d:e0:88:f0:cc:1a:b5:c5:f9:be:ae: 40:0e:cf:95:b8:e7:d7:f8:87:80:7c:7b:13:80:fe: f5:a8:23:a2:23:3f:0a:79:e4:2f:15:2d:52:4a:69: 09:64:56:78:be:9c:80:25:3b:bd:20:e1:a8:fb:e8: b1:37:f1:51:41:69:3a:fc:f0:8b:02:8a:29:e2:54: 86:bf:f8:bc:e2:f1:89:da:9a:2c:00:0e:4d:72:d4: ad:d6:a7:6d:6a:a2:da:50:ea:39:56:0b:68:b4:2e: 58:10:42:f0:dd:29:24:77:04:ba:c3:ee:c7:fc:5f: 9a:78:e8:b5:bd:6c:a5:2a:03:00:8e:aa:c8:44:52: 03:38:f4:a4:57:8f:a2:47:55:9a:01:f8:dd:5d:c5: 05:f3:a1:d1:65:9b:1b:f1:95:b0:01:09:e3:a4:34: 3a:07:9b:f6:a3:db:33:59:1b:ad:bd:d5:74:ed:d3: 74:19:84:54:51:4e:81:64:f2:ba:d7:59:97:a7:a3: 81:87:91:3b:ca:ba:e4:6a:b8:d3:7f:81:20:0b:8a: 66:a5:c7:da:c3:2d:d4:f7:3f:f2:76:45:e1:18:f4: 1e:c6:4c:81:f1:4e:49:82:8e:93:d0:d5:92:0c:b6: 0e:a1:85:87:df:ee:3c:75:93:81:83:da:21:8b:75: 2c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:DF:2F:36:2B:56:0C:6B:12:AB:A2:6E:F7:20:5F:D0:E7:3B:D7:90 X509v3 Authority Key Identifier: keyid:E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:49:8a:8d:47:f3:3c:77:76:29:57:df:b3:ba:d6:cc:1a:65: c3:7c:37:09:00:05:cd:84:d4:84:47:78:40:bd:1b:61:1a:48: 34:20:7b:46:31:13:58:b5:6a:0f:d9:a5:a7:3f:9d:40:c0:75: bd:22:21:74:2d:af:ba:b6:d5:10:9a:c5:2e:b0:8a:33:07:f1: fd:86:6d:e5:3e:4d:8f:93:73:18:8a:87:24:e0:8a:92:6d:77: 97:e9:8c:93:5f:3d:72:01:d5:2e:5a:6a:da:b0:b9:14:28:bb: 47:b5:b1:11:ad:7b:64:71:5c:18:93:6e:45:9b:9d:5f:a2:87: b0:7f:55:1a:3e:f3:c5:72:ef:4d:cc:50:0d:3c:3b:24:b2:bb: ec:ea:47:62:c2:05:52:79:e4:6e:75:8c:21:f7:eb:ff:09:19: 38:8c:df:21:06:41:75:bb:c0:35:c8:7c:c4:22:7c:58:ff:ae: 81:00:07:35:6d:b2:f4:ec:f6:0e:35:36:de:b3:f0:c8:e7:bc: 02:5a:55:6b:3e:8d:81:ac:11:23:9b:28:aa:3a:c7:11:10:62: 4c:bd:c9:04:83:ab:4a:90:93:91:c7:24:70:20:d0:b6:a9:3c: ad:12:b3:6f:b1:5a:5f:d5:0d:a1:a8:c0:99:cb:32:d4:da:f3: 03:60:ee:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg2MUQxMTAvBgNVBAUTKEU2MTIzRjQ5RUFFRjY2NEMyMkY5NENENUVCQkFFQUNF RDM4N0ExNkYwHhcNMjQwNTE5MDA1NjA5WhcNMjQwNTI2MDA1NjA5WjAYMRYwFAYD VQQDEw02NjQ5NGUyYS04Y2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudzqfeCI8MwatcX5vq5ADs+VuOfX+IeAfHsTgP71qCOiIz8KeeQvFS1SSmkJ ZFZ4vpyAJTu9IOGo++ixN/FRQWk6/PCLAoop4lSGv/i84vGJ2posAA5NctSt1qdt aqLaUOo5VgtotC5YEELw3SkkdwS6w+7H/F+aeOi1vWylKgMAjqrIRFIDOPSkV4+i R1WaAfjdXcUF86HRZZsb8ZWwAQnjpDQ6B5v2o9szWRutvdV07dN0GYRUUU6BZPK6 11mXp6OBh5E7yrrkarjTf4EgC4pmpcfawy3U9z/ydkXhGPQexkyB8U5Jgo6T0NWS DLYOoYWH3+48dZOBg9ohi3UscwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEvfLzYr VgxrEquibvcgX9DnO9eQMB8GA1UdIwQYMBaAFOYSP0nq72ZMIvlM1eu66s7Th6Fv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODYxRC9EMjk5N0Y2MEFC RTMxMUVCOUMyQjExNTZDNEY5QUUwMi81aElfU2Vydlprd2ktVXpWNjdycXp0T0hv VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVoSV9TZXJ2Wmt3aS1VelY2N3JxenRPSG9XOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODYxRC9EMjk5N0Y2MEFCRTMxMUVCOUMyQjExNTZDNEY5QUUwMi81aElfU2Vydlpr d2ktVXpWNjdycXp0T0hvVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCSYqNR/M8d3YpV9+zutbMGmXDfDcJAAXNhNSER3hAvRthGkg0IHtG MRNYtWoP2aWnP51AwHW9IiF0La+6ttUQmsUusIozB/H9hm3lPk2Pk3MYiock4IqS bXeX6YyTXz1yAdUuWmrasLkUKLtHtbERrXtkcVwYk25Fm51fooewf1UaPvPFcu9N zFANPDsksrvs6kdiwgVSeeRudYwh9+v/CRk4jN8hBkF1u8A1yHzEInxY/66BAAc1 bbL07PYONTbes/DI57wCWlVrPo2BrBEjmyiqOscREGJMvckEg6tKkJORxyRwINC2 qTytErNvsVpf1Q2hqMCZyzLU2vMDYO4q -----END CERTIFICATE-----Generated at Sun May 19 01:47:15 2024 by rpki-client on console-ams.rpki-client.org