$ rpki-client -vvf rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft File: 0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft (raw, json) Hash identifier: xYxeiLCfBmjUbNP0Fa15qvpyGfNtAdDXlt3prMdaRjI= Subject key identifier: C6:9F:71:83:B0:20:9C:C1:4B:94:2E:CF:97:C9:B1:9D:A7:50:47:AE Authority key identifier: D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7 Certificate issuer: /CN=A91D26C6/serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7 Certificate serial: 05E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft Manifest number: 05D6 Signing time: Sun 19 May 2024 00:04:40 +0000 Manifest this update: Sun 19 May 2024 00:04:39 +0000 Manifest next update: Sun 26 May 2024 00:04:39 +0000 Files and hashes: 1: 0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl (hash: VYsNt9myIWlcuHcl+jtight27T3XtZgcpc2FNu63/3c=) 2: A390402A34E811ED92B15482C4F9AE02.roa (hash: 33WmhF/jzxc7Fv6HdvJssGLAFzI9V1m0MCmXCoHQiWE=) 3: 3F4648C2739F11EC97D44D10C4F9AE02.roa (hash: LoNlEiX8OTvSg7pVFJZC3MRR4y+GnV2LG+jKAeZIf8U=) 4: B55EC6C491B211ED92AB0679C4F9AE02.roa (hash: 2c4RzhzYczciOCNBGMKacIqLzG+8oGaU1Parx0Aa7Uw=) 5: 178E201EA51911EDB711B90AC4F9AE02.roa (hash: eEJ4R9RPyabJK8Lajsv+2k2anT5Rg1VLQX5uRv/Cz2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1512 (0x5e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D26C6/serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7 Validity Not Before: May 19 00:04:39 2024 GMT Not After : May 26 00:04:39 2024 GMT Subject: CN=66494217-e2fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:49:db:3e:10:fe:96:da:15:8b:29:13:31:a5: 71:1c:45:7e:0e:9a:b4:cf:42:a4:c0:10:8b:43:8e: cc:64:4f:4d:c9:af:18:ee:54:3f:ee:0e:fc:c3:07: 36:af:2c:74:f7:98:bd:91:ac:23:3b:92:4c:af:b4: 2c:f3:b4:e6:b1:5a:e1:cf:07:bf:a2:df:bd:a7:d0: a7:07:76:4f:30:ba:4d:2a:e4:1b:8c:da:37:55:59: a9:45:b9:74:eb:63:35:6c:bd:8f:1f:41:6c:89:91: 21:30:5c:1c:8b:45:bc:b3:e8:22:d7:64:55:42:76: 98:5c:27:d3:67:5e:b9:7d:09:5a:65:ff:f5:4e:25: 95:55:07:8e:70:0f:e6:93:9b:a7:8a:85:89:29:e3: 1c:df:16:f4:da:fa:cf:69:f9:06:4c:8b:ae:98:79: f5:19:24:af:cd:74:ab:4c:8b:1c:d8:7b:ba:b6:ef: ca:2d:2a:de:82:37:4b:30:07:9e:67:7b:10:a2:c4: 8a:2a:c7:b8:40:b8:bf:fd:ff:f8:92:82:fd:f2:83: 24:f6:16:e8:48:20:c7:d8:de:9f:a4:9f:bb:83:20: 3f:40:cd:84:de:0c:d6:af:9f:98:a4:c9:40:d7:d4: ca:9a:66:db:c7:f7:e0:d9:72:92:60:8f:a3:cd:93: 8d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9F:71:83:B0:20:9C:C1:4B:94:2E:CF:97:C9:B1:9D:A7:50:47:AE X509v3 Authority Key Identifier: keyid:D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:35:8c:bd:2e:4f:fd:28:b6:7d:c0:7a:bb:f7:fb:20:a8:a7: 43:77:45:d4:3a:fe:b8:7e:81:21:13:03:c9:ef:fc:df:58:3b: 05:4b:06:e6:46:dd:3f:50:90:e1:9d:4a:ca:fa:fc:6b:dc:dc: 4b:f6:80:49:a0:ef:5e:74:d7:29:27:1b:e8:6d:6b:0c:9c:50: dc:1e:0f:a4:1e:d3:7e:3d:61:bd:9c:2c:09:50:91:48:3f:af: e4:49:7d:ab:87:88:1a:34:b4:ab:b7:9d:f8:5a:9b:de:ff:a7: b5:d0:6e:d2:23:d5:9e:79:de:2f:c9:4a:ae:41:cd:53:67:26: 32:54:c6:b5:2b:05:54:78:32:0a:af:e6:06:78:5c:74:37:71: db:93:d2:93:b0:8d:48:65:88:b5:21:3d:09:6a:a1:5e:f5:ac: 60:a6:21:03:df:e2:a9:15:2d:4b:6f:fe:2a:fc:9d:e3:de:89: 8a:d5:3a:45:9d:64:b8:12:97:98:06:48:f0:e5:85:46:b7:47: 88:43:17:a5:c0:34:f5:2d:64:25:a6:d7:7e:38:d6:3e:ee:1b: 2e:b3:a4:ab:49:28:79:ba:82:9c:c0:47:a7:e3:e5:1b:4b:78: 15:b2:fe:a1:e4:e0:2a:f2:12:a9:c6:9a:92:d7:01:08:2c:02: 86:98:58:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2QzYxMTAvBgNVBAUTKEQyOUI2NEU2MzQ0NjVBQjQxMzIwNTRCQjdFODNDOUQ1 RjE4MzQ5RjcwHhcNMjQwNTE5MDAwNDM5WhcNMjQwNTI2MDAwNDM5WjAYMRYwFAYD VQQDEw02NjQ5NDIxNy1lMmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsEnbPhD+ltoViykTMaVxHEV+Dpq0z0KkwBCLQ47MZE9Nya8Y7lQ/7g78wwc2 ryx095i9kawjO5JMr7Qs87TmsVrhzwe/ot+9p9CnB3ZPMLpNKuQbjNo3VVmpRbl0 62M1bL2PH0FsiZEhMFwci0W8s+gi12RVQnaYXCfTZ165fQlaZf/1TiWVVQeOcA/m k5unioWJKeMc3xb02vrPafkGTIuumHn1GSSvzXSrTIsc2Hu6tu/KLSregjdLMAee Z3sQosSKKse4QLi//f/4koL98oMk9hboSCDH2N6fpJ+7gyA/QM2E3gzWr5+YpMlA 19TKmmbbx/fg2XKSYI+jzZONqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMafcYOw IJzBS5Quz5fJsZ2nUEeuMB8GA1UdIwQYMBaAFNKbZOY0Rlq0EyBUu36DydXxg0n3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjZDNi81OEU5OUU5NDZG NzkxMUVCQTREMjIyODdDNEY5QUUwMi8wcHRrNWpSR1dyUVRJRlM3Zm9QSjFmR0RT ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBwdGs1alJHV3JRVElGUzdmb1BKMWZHRFNmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjZDNi81OEU5OUU5NDZGNzkxMUVCQTREMjIyODdDNEY5QUUwMi8wcHRrNWpSR1dy UVRJRlM3Zm9QSjFmR0RTZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgNYy9Lk/9KLZ9wHq79/sgqKdDd0XUOv64foEhEwPJ7/zfWDsFSwbm Rt0/UJDhnUrK+vxr3NxL9oBJoO9edNcpJxvobWsMnFDcHg+kHtN+PWG9nCwJUJFI P6/kSX2rh4gaNLSrt534Wpve/6e10G7SI9Weed4vyUquQc1TZyYyVMa1KwVUeDIK r+YGeFx0N3Hbk9KTsI1IZYi1IT0JaqFe9axgpiED3+KpFS1Lb/4q/J3j3omK1TpF nWS4EpeYBkjw5YVGt0eIQxelwDT1LWQlptd+ONY+7hsus6SrSSh5uoKcwEen4+Ub S3gVsv6h5OAq8hKpxpqS1wEILAKGmFgX -----END CERTIFICATE-----Generated at Sun May 19 00:59:43 2024 by rpki-client on console-fra.rpki-client.org