$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft File: 05fnjG3TxpaFEzQVMschiNd1Z68.mft (raw, json) Hash identifier: hRF8j7lfwhhKtfx7ECJ3oMxcKnbcdqJsyOEpnLIuHg4= Subject key identifier: A5:81:74:26:D8:61:59:B3:00:F3:A8:27:45:21:01:47:75:74:F8:01 Authority key identifier: D3:97:E7:8C:6D:D3:C6:96:85:13:34:15:32:C7:21:88:D7:75:67:AF Certificate issuer: /CN=A91D3CA7/serialNumber=D397E78C6DD3C6968513341532C72188D77567AF Certificate serial: 01FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft Manifest number: 01F8 Signing time: Sun 19 May 2024 04:12:25 +0000 Manifest this update: Sun 19 May 2024 04:12:24 +0000 Manifest next update: Sun 26 May 2024 04:12:24 +0000 Files and hashes: 1: 05fnjG3TxpaFEzQVMschiNd1Z68.crl (hash: jrNk3dkfdb9q8KFx6Cd2k+JD0pqRko/dLzkddf7rVTQ=) 2: DE183F1CF46611EC815F7283C4F9AE02.roa (hash: XRT7+fsGXgE2mmlj9IZm11pZ12/fHHV3iS5brnnZPc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.crl rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 507 (0x1fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3CA7/serialNumber=D397E78C6DD3C6968513341532C72188D77567AF Validity Not Before: May 19 04:12:24 2024 GMT Not After : May 26 04:12:24 2024 GMT Subject: CN=66497c28-1b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b1:66:4f:59:c9:c0:af:33:5a:f6:0a:5a:04: 1c:c8:1a:0e:b6:5e:64:f5:38:63:bb:ba:ec:8e:4a: 6f:45:01:cc:aa:5c:23:42:c2:c7:36:9c:a4:71:07: 10:98:e4:9f:a0:93:23:8a:af:50:6c:70:e0:35:09: b9:9d:19:fe:23:98:3b:c2:ca:a9:e2:79:86:3f:1a: b9:7f:5d:6e:46:8a:b2:35:a1:ee:b3:f4:83:ec:6a: e4:8a:08:d0:cf:7c:21:e5:a6:05:f8:3a:cd:88:c2: b3:f8:6b:8d:56:a4:b1:d0:c3:33:61:b2:29:43:ce: 18:ea:4c:9e:d3:c7:9f:d7:86:a3:85:fb:68:69:22: 21:22:5d:2a:fb:62:ad:e6:c0:0a:b4:42:e1:55:72: 70:ad:68:14:ec:57:8c:d5:ff:80:74:a3:eb:a7:a4: 50:49:ab:0b:51:99:da:5c:1c:dd:1f:43:dc:04:22: a5:64:4a:e2:2a:45:5f:81:3d:bf:5a:8c:dc:93:76: 6e:70:07:21:47:18:36:35:6b:c0:d5:67:bb:e6:8a: 0e:a8:24:4d:90:51:f5:e3:c1:32:5e:f1:f0:26:09: dc:9a:db:13:fb:af:9c:0d:0e:98:6b:ac:c2:35:e1: fa:b0:8f:1e:18:fa:4d:ff:20:08:ff:84:60:d4:f1: 68:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:81:74:26:D8:61:59:B3:00:F3:A8:27:45:21:01:47:75:74:F8:01 X509v3 Authority Key Identifier: keyid:D3:97:E7:8C:6D:D3:C6:96:85:13:34:15:32:C7:21:88:D7:75:67:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:77:23:d8:60:6b:53:89:ba:6c:7d:3c:d8:ab:42:28:ba:aa: a9:e0:2e:41:33:b4:65:0f:a1:43:71:73:f2:bc:aa:2a:b2:14: dc:d9:ec:8c:5a:a9:32:1c:b8:0a:7e:7f:38:fa:f8:54:81:18: 02:da:04:39:5f:17:f5:07:d6:06:a6:96:86:0c:46:7d:5a:62: af:5d:52:ae:fe:0c:30:62:0e:55:16:be:6d:ad:85:aa:d5:4e: 7c:28:9e:0f:60:46:05:6c:da:42:5a:dd:de:65:20:55:9a:8f: ed:c5:c9:4c:64:eb:1a:31:b3:0a:c3:d3:0d:9d:26:a0:87:1b: ed:64:f8:a9:73:18:ca:4f:d5:3f:c7:be:3c:3d:03:13:6d:5b: 13:96:cb:65:68:53:4c:f7:18:f2:41:67:85:dd:3e:0f:86:d1: e2:6e:45:36:bf:14:ad:b8:97:18:e6:b2:f2:1a:c3:e7:ab:61: e7:f6:32:f1:f9:62:63:dc:1b:99:e9:b3:da:a6:84:9c:bc:fc: f7:05:29:c3:1b:eb:22:6a:9d:b8:fc:35:55:57:e0:8e:67:70: 1d:a7:34:8a:80:76:bd:9b:60:62:4e:c1:5f:77:fb:de:a4:b1: 27:05:2b:6b:9b:af:f9:c4:60:24:4e:8d:3b:66:e9:1f:c3:9a: 77:3d:23:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNDQTcxMTAvBgNVBAUTKEQzOTdFNzhDNkREM0M2OTY4NTEzMzQxNTMyQzcyMTg4 RDc3NTY3QUYwHhcNMjQwNTE5MDQxMjI0WhcNMjQwNTI2MDQxMjI0WjAYMRYwFAYD VQQDEw02NjQ5N2MyOC0xYjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn7FmT1nJwK8zWvYKWgQcyBoOtl5k9Thju7rsjkpvRQHMqlwjQsLHNpykcQcQ mOSfoJMjiq9QbHDgNQm5nRn+I5g7wsqp4nmGPxq5f11uRoqyNaHus/SD7GrkigjQ z3wh5aYF+DrNiMKz+GuNVqSx0MMzYbIpQ84Y6kye08ef14ajhftoaSIhIl0q+2Kt 5sAKtELhVXJwrWgU7FeM1f+AdKPrp6RQSasLUZnaXBzdH0PcBCKlZEriKkVfgT2/ Wozck3ZucAchRxg2NWvA1We75ooOqCRNkFH148EyXvHwJgncmtsT+6+cDQ6Ya6zC NeH6sI8eGPpN/yAI/4Rg1PFokQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWBdCbY YVmzAPOoJ0UhAUd1dPgBMB8GA1UdIwQYMBaAFNOX54xt08aWhRM0FTLHIYjXdWev MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0NBNy8zRjBFMEUwNkY0 NjExMUVDODIzQ0EwN0NDNEY5QUUwMi8wNWZuakczVHhwYUZFelFWTXNjaGlOZDFa NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA1Zm5qRzNUeHBhRkV6UVZNc2NoaU5kMVo2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0NBNy8zRjBFMEUwNkY0NjExMUVDODIzQ0EwN0NDNEY5QUUwMi8wNWZuakczVHhw YUZFelFWTXNjaGlOZDFaNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMdyPYYGtTibpsfTzYq0Iouqqp4C5BM7RlD6FDcXPyvKoqshTc2eyM WqkyHLgKfn84+vhUgRgC2gQ5Xxf1B9YGppaGDEZ9WmKvXVKu/gwwYg5VFr5trYWq 1U58KJ4PYEYFbNpCWt3eZSBVmo/txclMZOsaMbMKw9MNnSaghxvtZPipcxjKT9U/ x748PQMTbVsTlstlaFNM9xjyQWeF3T4PhtHibkU2vxStuJcY5rLyGsPnq2Hn9jLx +WJj3BuZ6bPapoScvPz3BSnDG+siap24/DVVV+COZ3AdpzSKgHa9m2BiTsFfd/ve pLEnBStrm6/5xGAkTo07Zukfw5p3PSM6 -----END CERTIFICATE-----Generated at Sun May 19 05:08:06 2024 by rpki-client on console-ams.rpki-client.org