$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft File: 5TfQw0j9fcSfX8OwBmoxxYT64as.mft (raw, json) Hash identifier: fHM1jGVeYKZQoidJ/5HOaSEAKClOXQ4P0K4p2mEw/wA= Subject key identifier: 34:79:DC:29:CE:EC:94:D7:0E:0B:4A:49:ED:32:8A:E4:47:67:F5:5E Authority key identifier: E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB Certificate issuer: /CN=A91D4345/serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB Certificate serial: 0B94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft Manifest number: 0B88 Signing time: Sat 18 May 2024 19:23:37 +0000 Manifest this update: Sat 18 May 2024 19:23:37 +0000 Manifest next update: Sat 25 May 2024 19:23:37 +0000 Files and hashes: 1: 5TfQw0j9fcSfX8OwBmoxxYT64as.crl (hash: K5BodaapTI6+pCEs5X03KcJjwOtPBYwf9rfcKEJcgos=) 2: F3529CDCAE1511EE92D99E46C4F9AE02.roa (hash: vERej6PFMwMOORNrIHg1KRCb9Qq6yxbmNgCH2y9OYoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2964 (0xb94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4345/serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB Validity Not Before: May 18 19:23:37 2024 GMT Not After : May 25 19:23:37 2024 GMT Subject: CN=66490039-16f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:85:9c:e6:e8:6c:7e:3c:21:df:33:b3:37:61: 8e:64:c4:46:5d:a7:21:55:3f:6d:3d:d2:3f:9e:4e: 90:cc:75:c7:93:86:d4:27:09:5f:1b:e7:3a:5c:5b: d9:8a:df:ff:6e:74:41:b1:ec:8f:58:c9:f0:11:3f: 3a:a5:d1:de:94:cd:14:e0:d0:1e:0a:08:9a:ce:6c: 74:ac:d9:b5:aa:9a:b0:e6:af:37:9f:aa:fd:0f:55: da:a9:14:64:7e:e9:75:a3:b8:34:40:06:a2:69:c3: 78:d0:81:8d:b6:57:4f:2d:f5:cd:11:d8:ae:1a:5f: e3:09:e1:aa:11:cf:64:ba:b3:eb:13:24:d1:63:29: 14:b9:ed:75:2b:5b:60:d4:a0:f4:c3:65:d3:4c:2f: 22:7f:de:c8:f2:e4:a4:7b:66:5e:2b:10:23:10:13: 95:50:a2:ed:b5:bc:0e:ac:04:b5:e8:8b:a2:c6:bf: bc:4e:b7:4f:37:14:29:30:ef:18:41:19:6e:a3:fb: 13:4d:41:5d:b3:98:2b:16:64:60:fa:13:f0:ca:dc: c9:8f:66:b4:91:7c:14:95:9a:a6:6f:52:3b:d7:1f: a8:26:6c:8e:9a:58:bb:97:33:d3:e2:cc:b9:5c:10: 4f:d0:9c:0d:ac:b2:69:c9:ee:a2:fe:c3:44:32:55: 0f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:79:DC:29:CE:EC:94:D7:0E:0B:4A:49:ED:32:8A:E4:47:67:F5:5E X509v3 Authority Key Identifier: keyid:E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:1c:bd:77:20:1f:aa:51:e8:21:5a:57:1b:4c:f6:8e:d7:2e: 26:85:54:9f:86:f9:bf:dd:ad:b6:c8:72:21:39:91:8b:ca:68: 20:54:95:24:d4:96:a4:6a:2c:7b:44:26:fb:f5:a3:ab:5d:70: 69:ff:83:44:77:ce:23:fd:32:40:59:15:e7:69:2b:17:86:f2: 40:8e:5a:cb:f9:4a:27:ae:cc:6a:b3:5a:6c:36:e5:f8:5b:38: f4:5c:ff:fd:95:0f:41:32:80:33:dc:f9:ec:55:ae:96:f5:90: 34:4c:5a:d2:d8:63:4f:fd:ef:97:89:d5:92:1b:d1:a8:d7:9b: a7:52:30:5a:4a:eb:c4:65:1b:cb:de:19:f7:26:fb:ed:b6:39: 18:75:21:a7:0e:89:df:6f:86:9b:1c:21:de:3f:6b:f5:97:42: e8:da:26:0c:0b:e5:80:77:0c:cf:0b:75:f6:f5:17:12:c5:2c: 14:86:96:07:3c:71:d6:0b:d8:6c:ed:fb:12:01:b8:e0:c0:c8: 61:12:b6:2b:ee:93:6a:c4:75:d9:85:d5:70:78:d2:43:d0:a9: f1:ee:63:54:16:c1:da:86:3d:d0:6d:fc:75:51:b2:fc:90:56: 95:67:47:1f:2c:be:27:8d:08:4b:00:f5:b7:06:3e:97:21:c0: 32:da:4d:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQzNDUxMTAvBgNVBAUTKEU1MzdEMEMzNDhGRDdEQzQ5RjVGQzNCMDA2NkEzMUM1 ODRGQUUxQUIwHhcNMjQwNTE4MTkyMzM3WhcNMjQwNTI1MTkyMzM3WjAYMRYwFAYD VQQDEw02NjQ5MDAzOS0xNmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4Wc5uhsfjwh3zOzN2GOZMRGXachVT9tPdI/nk6QzHXHk4bUJwlfG+c6XFvZ it//bnRBseyPWMnwET86pdHelM0U4NAeCgiazmx0rNm1qpqw5q83n6r9D1XaqRRk ful1o7g0QAaiacN40IGNtldPLfXNEdiuGl/jCeGqEc9kurPrEyTRYykUue11K1tg 1KD0w2XTTC8if97I8uSke2ZeKxAjEBOVUKLttbwOrAS16Iuixr+8TrdPNxQpMO8Y QRluo/sTTUFds5grFmRg+hPwytzJj2a0kXwUlZqmb1I71x+oJmyOmli7lzPT4sy5 XBBP0JwNrLJpye6i/sNEMlUPNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDR53CnO 7JTXDgtKSe0yiuRHZ/VeMB8GA1UdIwQYMBaAFOU30MNI/X3En1/DsAZqMcWE+uGr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDM0NS9FQzc4Q0REQTA1 MzgxMUVBQjU4OTc2NjhDNEY5QUUwMi81VGZRdzBqOWZjU2ZYOE93Qm1veHhZVDY0 YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVUZlF3MGo5ZmNTZlg4T3dCbW94eFlUNjRhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDM0NS9FQzc4Q0REQTA1MzgxMUVBQjU4OTc2NjhDNEY5QUUwMi81VGZRdzBqOWZj U2ZYOE93Qm1veHhZVDY0YXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmHL13IB+qUeghWlcbTPaO1y4mhVSfhvm/3a22yHIhOZGLymggVJUk 1Jakaix7RCb79aOrXXBp/4NEd84j/TJAWRXnaSsXhvJAjlrL+Uonrsxqs1psNuX4 Wzj0XP/9lQ9BMoAz3PnsVa6W9ZA0TFrS2GNP/e+XidWSG9Go15unUjBaSuvEZRvL 3hn3JvvttjkYdSGnDonfb4abHCHeP2v1l0Lo2iYMC+WAdwzPC3X29RcSxSwUhpYH PHHWC9hs7fsSAbjgwMhhErYr7pNqxHXZhdVweNJD0Knx7mNUFsHahj3Qbfx1UbL8 kFaVZ0cfLL4njQhLAPW3Bj6XIcAy2k2h -----END CERTIFICATE-----Generated at Sat May 18 19:56:07 2024 by rpki-client on console-fra.rpki-client.org