$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft File: b5wj5AN3j-Ace8lQiL_R5rMoqps.mft (raw, json) Hash identifier: RzGLvtlOpDq52bgLogSqznd/TNJKaMa9VCSkpA26xJ4= Subject key identifier: 45:02:BD:DF:36:45:D6:CF:CE:5D:6A:45:3F:FF:57:58:E7:99:0C:AD Authority key identifier: 6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B Certificate issuer: /CN=A91DB6FB/serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft Manifest number: 74 Signing time: Sun 19 May 2024 07:25:28 +0000 Manifest this update: Sun 19 May 2024 07:25:28 +0000 Manifest next update: Sun 26 May 2024 07:25:28 +0000 Files and hashes: 1: b5wj5AN3j-Ace8lQiL_R5rMoqps.crl (hash: ZQsgGnOmZLnUKx6UT3WGBRvvwdwSVRjc19NNX5zKn3M=) 2: 512CFEFE68BD11EE87942B4EC4F9AE02.roa (hash: XYr7qobbtwKguAgGaGwCKgaDEaozLZCNulqeuQS9qtA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB6FB/serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B Validity Not Before: May 19 07:25:28 2024 GMT Not After : May 26 07:25:28 2024 GMT Subject: CN=6649a968-2cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:21:45:c8:a3:50:fc:91:93:35:29:32:49:09: ab:67:ce:b6:0f:6b:93:b5:c2:a7:ff:6a:d6:7a:58: 8f:21:17:f0:0d:f7:b9:e7:4d:5c:16:7a:be:46:4f: 0a:e0:09:54:50:e2:b5:91:fa:54:f1:82:d8:c0:b0: f1:aa:0d:48:83:70:c6:00:ea:3e:85:3c:cb:68:bb: 37:76:09:f7:3c:08:55:0d:7b:16:50:b2:ec:4c:1b: 8a:33:f1:83:ad:c4:b1:d7:5d:26:13:78:54:cf:64: 9b:83:e2:59:ee:1f:54:77:e3:25:68:55:98:1a:aa: 8f:97:72:b1:a6:36:9c:1f:f4:9a:69:fd:67:a7:7f: 30:09:09:34:35:c0:e3:09:dc:e3:ef:64:a3:b1:82: 00:a3:39:40:08:f1:7c:fb:bb:b1:39:ad:d2:4c:f9: cc:0a:3c:84:33:c9:dd:a1:a4:85:af:1f:a7:57:89: b2:1d:ec:0c:6c:c7:3d:89:97:3e:15:ed:99:36:cd: 38:3d:b6:ee:a8:77:e3:f6:03:d1:a7:3b:8a:ae:1e: 97:b4:2f:37:20:da:42:3d:fe:a5:5d:24:55:92:76: f1:06:a7:52:f7:ec:41:11:24:20:10:ee:67:41:fa: 5c:4f:6f:cd:6b:cf:aa:62:b9:43:e0:89:64:2e:98: 11:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:02:BD:DF:36:45:D6:CF:CE:5D:6A:45:3F:FF:57:58:E7:99:0C:AD X509v3 Authority Key Identifier: keyid:6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:c8:b4:aa:c5:56:6f:9a:64:33:5b:e4:cf:97:1d:02:b1:f0: 6a:0b:3f:65:79:cd:b3:4e:27:1d:9a:27:81:1d:86:5b:f4:68: d8:54:1d:8f:5d:42:0d:1e:ae:0b:8d:88:3e:86:5b:88:36:30: 22:3b:06:c8:fa:bf:2e:92:5f:46:98:fb:63:12:cc:b2:3e:c4: 5a:f8:64:c8:b4:ab:b6:5a:00:cf:0c:22:21:14:d6:d8:1c:f8: 14:20:24:f2:d2:81:c2:ee:82:56:63:4f:f3:ab:39:65:7c:8d: 19:10:ab:41:28:93:a3:13:5c:ea:36:80:ae:2b:9e:9e:a8:62: 7b:87:ec:1b:35:5e:d3:63:8e:c7:33:6b:02:54:d5:5a:5e:c7: e8:a7:90:fa:a5:64:00:cc:f6:43:76:83:af:57:a6:56:4b:9e: 8a:34:d7:b9:32:d3:0d:e8:3e:aa:1b:a7:41:64:1b:9e:2b:68: 06:50:50:7c:20:36:c4:49:d6:73:2f:60:be:ea:95:21:b7:3d: 80:de:7d:7c:0a:3d:67:ad:94:45:61:fc:a6:fd:12:89:f7:dc: a3:00:aa:79:89:ac:c9:73:c6:1b:2d:b8:e0:ca:37:41:58:d5: 3b:10:66:88:5b:6b:02:74:c9:79:82:64:e0:26:9e:1e:52:1b: 7a:9f:68:ab -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QjZGQjExMC8GA1UEBRMoNkY5QzIzRTQwMzc3OEZFMDFDN0JDOTUwODhCRkQxRTZC MzI4QUE5QjAeFw0yNDA1MTkwNzI1MjhaFw0yNDA1MjYwNzI1MjhaMBgxFjAUBgNV BAMTDTY2NDlhOTY4LTJjZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5IUXIo1D8kZM1KTJJCatnzrYPa5O1wqf/atZ6WI8hF/AN97nnTVwWer5GTwrg CVRQ4rWR+lTxgtjAsPGqDUiDcMYA6j6FPMtouzd2Cfc8CFUNexZQsuxMG4oz8YOt xLHXXSYTeFTPZJuD4lnuH1R34yVoVZgaqo+XcrGmNpwf9Jpp/WenfzAJCTQ1wOMJ 3OPvZKOxggCjOUAI8Xz7u7E5rdJM+cwKPIQzyd2hpIWvH6dXibId7Axsxz2Jlz4V 7Zk2zTg9tu6od+P2A9GnO4quHpe0Lzcg2kI9/qVdJFWSdvEGp1L37EERJCAQ7mdB +lxPb81rz6piuUPgiWQumBGvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURQK93zZF 1s/OXWpFP/9XWOeZDK0wHwYDVR0jBBgwFoAUb5wj5AN3j+Ace8lQiL/R5rMoqpsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCNkZCLzExQ0QxQjZFNjhC QzExRUU5MjBFREI0REM0RjlBRTAyL2I1d2o1QU4zai1BY2U4bFFpTF9SNXJNb3Fw cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYjV3ajVBTjNqLUFjZThsUWlMX1I1ck1vcXBzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC NkZCLzExQ0QxQjZFNjhCQzExRUU5MjBFREI0REM0RjlBRTAyL2I1d2o1QU4zai1B Y2U4bFFpTF9SNXJNb3Fwcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACXItKrFVm+aZDNb5M+XHQKx8GoLP2V5zbNOJx2aJ4Edhlv0aNhUHY9d Qg0erguNiD6GW4g2MCI7Bsj6vy6SX0aY+2MSzLI+xFr4ZMi0q7ZaAM8MIiEU1tgc +BQgJPLSgcLuglZjT/OrOWV8jRkQq0Eok6MTXOo2gK4rnp6oYnuH7Bs1XtNjjscz awJU1Vpex+inkPqlZADM9kN2g69XplZLnoo017ky0w3oPqobp0FkG54raAZQUHwg NsRJ1nMvYL7qlSG3PYDefXwKPWetlEVh/Kb9Eon33KMAqnmJrMlzxhstuODKN0FY 1TsQZohbawJ0yXmCZOAmnh5SG3qfaKs= -----END CERTIFICATE-----Generated at Sun May 19 08:26:45 2024 by rpki-client on console-fra.rpki-client.org