$ rpki-client -vvf rpki.apnic.net/member_repository/A91D94A7/F70588781D8D11E2AD4A04EC08B02CD2/B5ku7PYjoMe42kradUVPo_cWpXA.mft File: B5ku7PYjoMe42kradUVPo_cWpXA.mft (raw, json) Hash identifier: LeusD8c+04YFIgX2E8xTYrFJFxYPgqjQpdsdaNb7WI4= Subject key identifier: A5:60:97:BE:AD:25:F3:11:89:85:61:24:A1:4B:50:5E:E0:D7:75:35 Authority key identifier: 07:99:2E:EC:F6:23:A0:C7:B8:DA:4A:DA:75:45:4F:A3:F7:16:A5:70 Certificate issuer: /CN=A91D94A7/serialNumber=07992EECF623A0C7B8DA4ADA75454FA3F716A570 Certificate serial: 365C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5ku7PYjoMe42kradUVPo_cWpXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D94A7/F70588781D8D11E2AD4A04EC08B02CD2/B5ku7PYjoMe42kradUVPo_cWpXA.mft Manifest number: 3526 Signing time: Sat 18 May 2024 14:42:48 +0000 Manifest this update: Sat 18 May 2024 14:42:47 +0000 Manifest next update: Sat 25 May 2024 14:42:47 +0000 Files and hashes: 1: B5ku7PYjoMe42kradUVPo_cWpXA.crl (hash: 9mqTn9z4ZKm6uHB2IJnWNzUql97zg/+5QoOr6MQnlcQ=) 2: 595BA7D0E9DA11EE8633E17AC4F9AE02.roa (hash: A9jpNq/uaOsRgLoZmXt1mV0DrsS+nvD76I0U56Yh6Fs=) 3: 87ED74E42A5F11EC9088405DC4F9AE02.roa (hash: SBfuOEV+cCivcjj+22gUYXGhG9m/oKGBgTQhCdPIKN8=) 4: F84DEE6C6D8311EE80145F5BC4F9AE02.roa (hash: cUtmo6zRiexfUuz5a/lnPW7cbF7lnjRmKmHAh1cbnZ0=) 5: E5913F7878F611ECAF1C286CC4F9AE02.roa (hash: JrrPdsoJpNSaaGFkEzvjmjb7G2E93NaLiJ2GLAagQHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D94A7/F70588781D8D11E2AD4A04EC08B02CD2/B5ku7PYjoMe42kradUVPo_cWpXA.crl rsync://rpki.apnic.net/member_repository/A91D94A7/F70588781D8D11E2AD4A04EC08B02CD2/B5ku7PYjoMe42kradUVPo_cWpXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5ku7PYjoMe42kradUVPo_cWpXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:42:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13916 (0x365c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D94A7/serialNumber=07992EECF623A0C7B8DA4ADA75454FA3F716A570 Validity Not Before: May 18 14:42:47 2024 GMT Not After : May 25 14:42:47 2024 GMT Subject: CN=6648be67-1f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1f:97:4a:75:a0:d2:5a:4b:ea:5c:62:ad:0f: 08:68:fe:0a:ee:56:06:7b:4a:c1:73:c2:b4:21:bf: 26:23:a5:a8:53:86:fc:51:94:38:a5:fd:b2:4d:a6: 1b:45:8d:2c:de:6f:5d:22:d3:4d:9a:9d:b3:a1:d2: 2d:f0:ab:98:71:72:e8:9b:57:f1:e1:db:69:75:a7: b9:6a:bd:17:05:bb:23:eb:3e:de:f9:cb:55:ac:33: c9:27:32:ef:98:97:c0:9d:f6:b6:41:55:3f:43:90: 42:ad:15:2a:42:8a:11:19:aa:0f:b0:77:6c:7b:c0: e2:a6:15:b5:5b:21:37:ae:35:24:36:33:52:d4:69: c1:6f:22:79:83:46:c2:4e:aa:97:37:a1:ec:d9:e9: 7a:00:3c:ef:78:48:d0:48:01:0a:b5:5b:27:5b:66: 3f:92:6d:10:e7:2a:4c:b9:7f:b9:26:9f:43:aa:1b: 34:a9:15:e8:2a:4d:5a:fc:3e:a7:b0:23:ed:33:54: 10:9d:95:14:63:fb:fa:b6:25:1e:4b:d6:d6:31:73: fd:a5:2c:92:f6:f6:43:a4:fe:93:a3:c5:e9:b8:2f: bf:e3:74:6f:8d:dd:31:c4:fb:1f:3c:d3:69:dd:4d: da:32:a4:b7:eb:13:bb:24:15:63:fa:ce:99:31:cd: 84:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:60:97:BE:AD:25:F3:11:89:85:61:24:A1:4B:50:5E:E0:D7:75:35 X509v3 Authority Key Identifier: keyid:07:99:2E:EC:F6:23:A0:C7:B8:DA:4A:DA:75:45:4F:A3:F7:16:A5:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D94A7/F70588781D8D11E2AD4A04EC08B02CD2/B5ku7PYjoMe42kradUVPo_cWpXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5ku7PYjoMe42kradUVPo_cWpXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94A7/F70588781D8D11E2AD4A04EC08B02CD2/B5ku7PYjoMe42kradUVPo_cWpXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:cd:4f:ab:d3:7f:be:d2:85:91:f8:49:07:48:3a:a2:5b:02: 7a:a5:0e:d3:10:fb:ea:70:d3:ff:96:6a:1d:22:b7:b9:e1:be: c7:11:b6:78:64:a2:f8:82:26:61:80:96:ff:31:01:cc:cd:18: 60:8a:34:6b:95:fa:d0:9c:a9:38:64:37:cc:64:00:12:21:b2: 07:df:6a:3d:14:15:42:fc:d6:d5:9f:9c:a4:37:ca:99:fc:82: 74:5d:9a:6f:53:51:f7:0e:3b:00:10:1e:61:86:63:d9:14:11: 40:85:f5:29:23:1d:09:39:12:28:95:bb:73:bb:19:7f:ca:dd: 83:00:2a:0d:3c:ce:64:16:5c:d0:c2:d1:69:8d:e8:5b:b8:cf: 3c:e6:cf:ac:eb:32:1d:0e:98:8e:91:5c:6b:23:5f:44:a1:56: 23:10:98:d1:0e:3d:6b:9f:b5:18:73:0b:da:6f:87:1f:f2:6b: 31:d4:e4:cc:85:6a:60:4c:56:bd:91:a6:c9:9a:7a:d8:72:10: fc:27:4c:5f:78:03:17:47:ba:79:12:66:96:50:98:90:f7:7c: 07:18:32:3b:ec:ca:f4:b7:13:16:c1:90:1b:f8:d5:fa:0b:f6: 5f:16:1a:2d:98:c5:66:4b:c0:1d:87:68:58:a9:67:0d:9a:5b: e3:41:94:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk0QTcxMTAvBgNVBAUTKDA3OTkyRUVDRjYyM0EwQzdCOERBNEFEQTc1NDU0RkEz RjcxNkE1NzAwHhcNMjQwNTE4MTQ0MjQ3WhcNMjQwNTI1MTQ0MjQ3WjAYMRYwFAYD VQQDEw02NjQ4YmU2Ny0xZjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxh+XSnWg0lpL6lxirQ8IaP4K7lYGe0rBc8K0Ib8mI6WoU4b8UZQ4pf2yTaYb RY0s3m9dItNNmp2zodIt8KuYcXLom1fx4dtpdae5ar0XBbsj6z7e+ctVrDPJJzLv mJfAnfa2QVU/Q5BCrRUqQooRGaoPsHdse8DiphW1WyE3rjUkNjNS1GnBbyJ5g0bC TqqXN6Hs2el6ADzveEjQSAEKtVsnW2Y/km0Q5ypMuX+5Jp9Dqhs0qRXoKk1a/D6n sCPtM1QQnZUUY/v6tiUeS9bWMXP9pSyS9vZDpP6To8XpuC+/43Rvjd0xxPsfPNNp 3U3aMqS36xO7JBVj+s6ZMc2EdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVgl76t JfMRiYVhJKFLUF7g13U1MB8GA1UdIwQYMBaAFAeZLuz2I6DHuNpK2nVFT6P3FqVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTRBNy9GNzA1ODg3ODFE OEQxMUUyQUQ0QTA0RUMwOEIwMkNEMi9CNWt1N1BZam9NZTQya3JhZFVWUG9fY1dw WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I1a3U3UFlqb01lNDJrcmFkVVZQb19jV3BYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTRBNy9GNzA1ODg3ODFEOEQxMUUyQUQ0QTA0RUMwOEIwMkNEMi9CNWt1N1BZam9N ZTQya3JhZFVWUG9fY1dwWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCazU+r03++0oWR+EkHSDqiWwJ6pQ7TEPvqcNP/lmodIre54b7HEbZ4 ZKL4giZhgJb/MQHMzRhgijRrlfrQnKk4ZDfMZAASIbIH32o9FBVC/NbVn5ykN8qZ /IJ0XZpvU1H3DjsAEB5hhmPZFBFAhfUpIx0JORIolbtzuxl/yt2DACoNPM5kFlzQ wtFpjehbuM885s+s6zIdDpiOkVxrI19EoVYjEJjRDj1rn7UYcwvab4cf8msx1OTM hWpgTFa9kabJmnrYchD8J0xfeAMXR7p5EmaWUJiQ93wHGDI77Mr0txMWwZAb+NX6 C/ZfFhotmMVmS8Adh2hYqWcNmlvjQZRF -----END CERTIFICATE-----Generated at Sat May 18 15:26:07 2024 by rpki-client on console-fra.rpki-client.org