$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft File: u5MlbmB9QutuNCDcxxN_ILhNDIo.mft (raw, json) Hash identifier: iG23Zyj+jVp5Am8N5qp4jB2mj4RF5A16tudiiNTZssE= Subject key identifier: 78:D0:20:5B:C4:F6:1C:D7:64:EE:98:8B:E5:1E:38:F1:6D:32:C5:6C Authority key identifier: BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A Certificate issuer: /CN=A91DF3CA/serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A Certificate serial: 1717 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft Manifest number: 170D Signing time: Fri 31 May 2024 17:17:33 +0000 Manifest this update: Fri 31 May 2024 17:17:32 +0000 Manifest next update: Fri 07 Jun 2024 17:17:32 +0000 Files and hashes: 1: u5MlbmB9QutuNCDcxxN_ILhNDIo.crl (hash: 7OskHvr+SWG6k4VUrlUuFfDYw+MUNJOjpZC7PBsSwWM=) 2: 7D4E6EDCC3A511E78971975FC4F9AE02.roa (hash: OSPRmZYrxblqaMT8h5S4Nnhxl43CDCrEtlALBft6Y/U=) 3: 0EB22CD66BBE11EDBF717818C4F9AE02.roa (hash: z1yCiwyZj4UON44/vKIdzR5Ra7KvMftlif3KyAZf2Ig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 17:17:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5911 (0x1717) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF3CA/serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A Validity Not Before: May 31 17:17:32 2024 GMT Not After : Jun 7 17:17:32 2024 GMT Subject: CN=665a062d-13fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:55:b2:f3:3e:96:1d:01:23:85:9d:0b:50:0d: dc:53:5a:8a:c8:57:50:af:01:e4:e7:3c:94:8d:b9: 98:ba:c1:03:9b:51:c5:67:40:59:16:68:2f:2c:f5: 1f:9b:19:95:f1:0f:bd:7a:76:b6:10:5d:be:b3:af: 2a:34:d7:ad:ae:fe:b9:54:31:85:b7:a3:f1:95:d5: 40:b1:85:07:26:0f:2f:f8:be:a4:b6:20:7f:73:ae: 28:c8:30:74:73:97:b9:82:a4:ea:33:d5:4f:a4:69: 23:fa:f5:a4:30:f3:19:e5:d9:7f:5c:2a:50:0a:2a: 0d:4e:a6:ff:b1:9a:d5:37:0b:42:5a:f1:c4:e3:c4: 12:7f:75:37:7e:75:9f:e3:5b:3f:4f:b4:67:43:9e: 3f:ce:d9:cb:c0:08:a1:a0:0a:5d:ac:64:d2:10:52: 82:3e:f8:30:90:be:32:07:2d:06:06:c5:64:75:38: 35:82:16:19:fd:72:42:b7:82:63:51:6e:56:61:bc: 3a:63:0c:04:41:bc:37:60:43:da:97:05:a6:15:4d: 42:1f:47:de:9c:dd:20:5d:18:5c:3d:c8:c3:18:57: 41:c8:80:3b:90:7d:22:65:60:fb:a2:33:be:21:68: d2:71:76:8e:9d:bb:47:0d:e5:70:db:b6:ae:68:16: 1d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D0:20:5B:C4:F6:1C:D7:64:EE:98:8B:E5:1E:38:F1:6D:32:C5:6C X509v3 Authority Key Identifier: keyid:BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:75:ed:aa:66:21:e3:a5:ac:40:e1:7d:9f:30:03:86:ad:8f: d8:e4:e6:ba:0d:b8:6c:c8:00:f6:0c:a2:2b:8c:64:13:16:13: a2:7f:ee:5e:61:b8:d2:09:f5:37:32:0f:e2:84:19:4a:ab:16: 10:23:7e:c4:25:f7:f6:65:88:b0:b4:5a:35:9c:bf:48:14:87: d7:be:8a:8f:d1:1e:2b:9e:a1:25:01:f3:17:b2:e6:c2:55:c4: d5:fd:4c:eb:36:8b:fc:d3:2b:f9:23:30:91:68:2e:f9:a4:b6: f6:aa:d9:77:f6:89:12:9b:ed:e9:76:f7:6e:55:c5:0a:35:61: 77:fa:a2:ef:8e:de:19:36:d9:e0:da:6b:ed:40:ea:13:d4:17: 94:93:70:40:0a:19:fe:0d:93:c4:1f:1e:11:5a:14:43:be:35: db:14:3b:42:22:8b:4a:03:43:f0:2c:a2:1b:b1:7c:36:61:26: 03:80:5a:ef:b6:a4:26:0b:06:74:42:dd:96:0b:ad:1b:fc:7a: 30:a2:8e:6b:6b:17:7f:7c:54:d6:32:28:50:a6:7e:16:59:48: 49:ae:a7:e1:09:a0:f2:42:40:bd:3d:61:2c:f9:0e:62:63:78: 78:ef:e3:71:1e:1f:36:fc:5f:39:2e:00:b1:e9:fd:7e:02:b8: aa:19:b4:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYzQ0ExMTAvBgNVBAUTKEJCOTMyNTZFNjA3RDQyRUI2RTM0MjBEQ0M3MTM3RjIw Qjg0RDBDOEEwHhcNMjQwNTMxMTcxNzMyWhcNMjQwNjA3MTcxNzMyWjAYMRYwFAYD VQQDEw02NjVhMDYyZC0xM2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAplWy8z6WHQEjhZ0LUA3cU1qKyFdQrwHk5zyUjbmYusEDm1HFZ0BZFmgvLPUf mxmV8Q+9ena2EF2+s68qNNetrv65VDGFt6PxldVAsYUHJg8v+L6ktiB/c64oyDB0 c5e5gqTqM9VPpGkj+vWkMPMZ5dl/XCpQCioNTqb/sZrVNwtCWvHE48QSf3U3fnWf 41s/T7RnQ54/ztnLwAihoApdrGTSEFKCPvgwkL4yBy0GBsVkdTg1ghYZ/XJCt4Jj UW5WYbw6YwwEQbw3YEPalwWmFU1CH0fenN0gXRhcPcjDGFdByIA7kH0iZWD7ojO+ IWjScXaOnbtHDeVw27auaBYdQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHjQIFvE 9hzXZO6Yi+UeOPFtMsVsMB8GA1UdIwQYMBaAFLuTJW5gfULrbjQg3McTfyC4TQyK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjNDQS9FRjRGOTM3Q0Mz QTQxMUU3OTdCQkYxNUVDNEY5QUUwMi91NU1sYm1COVF1dHVOQ0RjeHhOX0lMaE5E SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U1TWxibUI5UXV0dU5DRGN4eE5fSUxoTkRJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjNDQS9FRjRGOTM3Q0MzQTQxMUU3OTdCQkYxNUVDNEY5QUUwMi91NU1sYm1COVF1 dHVOQ0RjeHhOX0lMaE5ESW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALde2qZiHjpaxA4X2fMAOGrY/Y5Oa6DbhsyAD2DKIrjGQTFhOif+5e YbjSCfU3Mg/ihBlKqxYQI37EJff2ZYiwtFo1nL9IFIfXvoqP0R4rnqElAfMXsubC VcTV/UzrNov80yv5IzCRaC75pLb2qtl39okSm+3pdvduVcUKNWF3+qLvjt4ZNtng 2mvtQOoT1BeUk3BAChn+DZPEHx4RWhRDvjXbFDtCIotKA0PwLKIbsXw2YSYDgFrv tqQmCwZ0Qt2WC60b/Howoo5raxd/fFTWMihQpn4WWUhJrqfhCaDyQkC9PWEs+Q5i Y3h47+NxHh82/F85LgCx6f1+AriqGbRk -----END CERTIFICATE-----Generated at Fri May 31 19:47:53 2024 by rpki-client on console-fra.rpki-client.org