$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft File: 5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft (raw, json) Hash identifier: TA27TZPhxbqPG4fWDiyP+gpjSFz/PCoD83IOPc4BL9Q= Subject key identifier: DE:F1:7D:1C:ED:AA:B8:A4:E6:7C:02:7D:78:0A:E8:A6:6D:25:11:DF Authority key identifier: E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C Certificate issuer: /CN=A91C3ABA/serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C Certificate serial: 03EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft Manifest number: 03E6 Signing time: Fri 31 May 2024 02:53:37 +0000 Manifest this update: Fri 31 May 2024 02:53:37 +0000 Manifest next update: Fri 07 Jun 2024 02:53:37 +0000 Files and hashes: 1: 5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl (hash: ZvVgBPtYlnffIt6eyOR0iBEx4gLFSWT5weuaOE/VmII=) 2: 4B9F1AA6354F11EC8531C34DC4F9AE02.roa (hash: 8D/20Uwr6gsdj74w8re/Pl0pD6S5jZ4kXrR8EA86scs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 02:53:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1002 (0x3ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3ABA/serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C Validity Not Before: May 31 02:53:37 2024 GMT Not After : Jun 7 02:53:37 2024 GMT Subject: CN=66593bb1-6f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:40:29:32:e0:19:81:8f:33:9e:c4:c3:1a:dd: 4d:1f:6e:54:f4:46:b3:44:3a:9b:16:07:df:6d:c8: 5a:9f:d2:ec:f1:8a:8a:2d:3d:f1:7e:fb:5c:3b:b0: 74:75:a9:e6:b1:a5:8f:33:31:bb:54:8c:4b:bc:c7: da:f5:79:1d:cb:10:28:64:3f:97:29:19:24:0e:c0: 86:86:3d:58:a9:0b:bd:d0:b8:2b:d3:5b:bc:20:aa: 86:a7:07:08:50:0b:f6:31:2d:2f:42:2a:b5:8e:60: 90:e9:95:ac:65:45:77:97:a2:2e:d0:03:71:b6:be: be:fb:6a:a6:a3:43:72:91:43:b9:18:bc:05:e5:f4: d0:d8:86:dc:70:91:b4:36:f1:8a:9e:81:d9:a5:4b: dd:e8:0b:1e:c7:d2:a2:63:df:0b:a4:73:b0:5a:48: 34:ce:e4:4c:41:ff:5e:55:c4:cc:76:5b:63:b1:ef: ec:84:ee:3f:19:ca:98:2a:fc:a0:eb:a0:45:bd:17: 29:49:83:3a:4a:2f:ed:3d:df:4f:be:01:01:f2:08: 45:52:c7:73:17:1a:20:6d:d9:9f:fd:f5:72:1d:92: 9a:dd:0f:f4:ed:28:97:24:27:20:42:65:a7:79:9e: 86:17:cf:4e:b6:ee:6c:83:99:06:c8:81:dd:d7:41: bd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F1:7D:1C:ED:AA:B8:A4:E6:7C:02:7D:78:0A:E8:A6:6D:25:11:DF X509v3 Authority Key Identifier: keyid:E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:94:83:ae:9c:2c:d9:be:d4:aa:e7:ed:aa:da:5e:e3:d3:55: b3:68:36:fe:bd:16:fc:22:d3:fc:1d:36:9b:d3:14:74:4f:bd: 07:9b:9e:ee:a0:31:6b:2b:81:29:49:b0:70:ae:a2:bf:7f:e8: 5f:42:aa:70:e8:e5:fd:37:1e:df:c7:73:2e:72:85:ce:1b:64: 19:81:7b:66:c6:0b:44:9b:4c:fa:f4:10:26:a4:f1:c4:a0:2a: 45:4f:8f:29:d9:88:2c:34:7e:11:fc:e3:c0:23:a5:a2:ec:67: 85:88:9e:c3:06:4a:9a:a0:c3:2d:32:4a:d6:cb:10:f7:22:01: d9:4d:22:22:6c:1f:22:58:40:27:ff:e5:a9:66:0f:8a:35:56: 25:f3:a6:65:14:cb:96:a0:88:92:1e:ae:39:58:85:17:45:3d: 3b:61:39:6d:84:40:2f:4f:30:8b:9e:8b:36:a4:55:5f:ee:aa: a7:8c:5d:18:a2:84:b1:62:d2:e6:87:8f:9f:e9:88:37:53:ae: 24:b0:c0:17:a7:26:e1:db:da:2d:1c:d4:c9:e5:da:03:cb:91: 84:09:fc:e7:65:7e:59:73:84:40:c3:a8:f1:0f:52:23:93:0c: b2:dd:eb:6a:85:75:ea:ff:b5:6b:d7:1b:c5:ff:0c:b0:af:90: 49:e6:7c:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNBQkExMTAvBgNVBAUTKEU1OTkzMTU1QzQ0NDNBMkU1NkMwREUyMzMzQTQ0QjU2 Q0FENDkxOUMwHhcNMjQwNTMxMDI1MzM3WhcNMjQwNjA3MDI1MzM3WjAYMRYwFAYD VQQDEw02NjU5M2JiMS02ZjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0ApMuAZgY8znsTDGt1NH25U9EazRDqbFgffbchan9Ls8YqKLT3xfvtcO7B0 danmsaWPMzG7VIxLvMfa9XkdyxAoZD+XKRkkDsCGhj1YqQu90Lgr01u8IKqGpwcI UAv2MS0vQiq1jmCQ6ZWsZUV3l6Iu0ANxtr6++2qmo0NykUO5GLwF5fTQ2IbccJG0 NvGKnoHZpUvd6Asex9KiY98LpHOwWkg0zuRMQf9eVcTMdltjse/shO4/GcqYKvyg 66BFvRcpSYM6Si/tPd9PvgEB8ghFUsdzFxogbdmf/fVyHZKa3Q/07SiXJCcgQmWn eZ6GF89Otu5sg5kGyIHd10G9SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7xfRzt qrik5nwCfXgK6KZtJRHfMB8GA1UdIwQYMBaAFOWZMVXERDouVsDeIzOkS1bK1JGc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0FCQS85ODVGMDkyMjM1 NEIxMUVDQjYyREJENDhDNEY5QUUwMi81Wmt4VmNSRU9pNVd3TjRqTTZSTFZzclVr WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVaa3hWY1JFT2k1V3dONGpNNlJMVnNyVWtady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0FCQS85ODVGMDkyMjM1NEIxMUVDQjYyREJENDhDNEY5QUUwMi81Wmt4VmNSRU9p NVd3TjRqTTZSTFZzclVrWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHlIOunCzZvtSq5+2q2l7j01WzaDb+vRb8ItP8HTab0xR0T70Hm57u oDFrK4EpSbBwrqK/f+hfQqpw6OX9Nx7fx3MucoXOG2QZgXtmxgtEm0z69BAmpPHE oCpFT48p2YgsNH4R/OPAI6Wi7GeFiJ7DBkqaoMMtMkrWyxD3IgHZTSIibB8iWEAn /+WpZg+KNVYl86ZlFMuWoIiSHq45WIUXRT07YTlthEAvTzCLnos2pFVf7qqnjF0Y ooSxYtLmh4+f6Yg3U64ksMAXpybh29otHNTJ5doDy5GECfznZX5Zc4RAw6jxD1Ij kwyy3etqhXXq/7Vr1xvF/wywr5BJ5nxd -----END CERTIFICATE-----Generated at Fri May 31 06:49:25 2024 by rpki-client on console-ams.rpki-client.org