$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.mft File: 4j5WiDpuN63lIjxBOzs7D3gbySk.mft (raw, json) Hash identifier: lbtdj2LW3RK85nzvMf8LsTyJOWDVszOzpyOJMPNPUF8= Subject key identifier: 7A:78:45:46:64:B4:8E:0F:5E:03:D8:A0:AF:8F:6E:03:D1:77:08:FD Authority key identifier: E2:3E:56:88:3A:6E:37:AD:E5:22:3C:41:3B:3B:3B:0F:78:1B:C9:29 Certificate issuer: /CN=A91DF645/serialNumber=E23E56883A6E37ADE5223C413B3B3B0F781BC929 Certificate serial: 10AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4j5WiDpuN63lIjxBOzs7D3gbySk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.mft Manifest number: 10A5 Signing time: Sat 18 May 2024 17:55:14 +0000 Manifest this update: Sat 18 May 2024 17:55:13 +0000 Manifest next update: Sat 25 May 2024 17:55:13 +0000 Files and hashes: 1: 4j5WiDpuN63lIjxBOzs7D3gbySk.crl (hash: +y6zIHUUrUHuWKvjRlS6K6hj6bh7BVHhC9sKLVkmZhQ=) 2: C5EA2D4801F711E9B44DC70EC4F9AE02.roa (hash: qeAmMfoPe58Mu2dcre3dWxP4LZgoQwxKfmoeR22NktQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.crl rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4j5WiDpuN63lIjxBOzs7D3gbySk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4268 (0x10ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF645/serialNumber=E23E56883A6E37ADE5223C413B3B3B0F781BC929 Validity Not Before: May 18 17:55:13 2024 GMT Not After : May 25 17:55:13 2024 GMT Subject: CN=6648eb82-f99d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e4:30:8d:6c:7b:d8:f3:f4:b6:50:83:1d:4c: cc:fa:08:07:b1:d6:38:37:c9:e3:88:27:71:43:5d: d4:94:42:cf:16:7e:d5:ee:25:ec:5c:e9:d4:6a:ad: c0:b9:04:26:c7:9e:fa:a8:59:6f:cb:ee:da:5f:fe: 2b:51:28:cc:c5:04:23:3e:a4:39:3a:86:b3:54:4e: f4:30:2f:cf:db:bc:69:c5:0d:8a:87:2a:03:39:08: 48:7c:32:d3:84:52:8e:07:9e:5b:55:cf:d0:e6:d8: 1e:f0:17:19:2c:14:b8:11:04:45:7f:1f:46:46:e3: 9f:ac:4a:00:0b:76:79:3e:ac:9d:b9:5b:a2:80:a9: 01:98:f4:3b:e3:22:ea:1e:b8:1f:c5:4d:0d:a2:67: cb:77:10:2e:a7:2d:19:2b:de:43:74:d4:61:a9:82: fc:f7:5f:51:93:86:13:c7:af:16:b4:92:20:6f:15: 5e:4d:a4:77:93:6a:ae:92:7e:8d:5f:05:de:d1:af: 8d:b6:96:30:e2:be:5d:f9:31:20:35:d5:ce:74:9a: ad:80:30:6d:62:e3:e8:27:5d:b3:72:68:9a:20:55: fc:56:bd:9a:47:81:f8:69:d5:69:b4:2b:9e:de:49: b0:5f:a1:45:2b:01:a9:0a:68:14:47:e1:42:87:b2: ea:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:78:45:46:64:B4:8E:0F:5E:03:D8:A0:AF:8F:6E:03:D1:77:08:FD X509v3 Authority Key Identifier: keyid:E2:3E:56:88:3A:6E:37:AD:E5:22:3C:41:3B:3B:3B:0F:78:1B:C9:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4j5WiDpuN63lIjxBOzs7D3gbySk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:ff:5c:74:09:3f:4e:f1:e3:06:e3:9d:a2:a6:16:bf:01:e3: 65:00:e6:bc:9e:32:bc:c7:a0:ab:0b:b7:ca:6b:d1:08:f1:f0: c3:ab:59:c0:ec:e4:85:de:21:50:66:38:10:22:1d:87:5f:af: 49:0f:1c:f5:18:fa:04:a7:36:2e:4b:84:e5:5a:a6:5f:ea:bc: 7b:66:c6:5a:fc:d6:af:4c:1c:22:2e:e0:e1:ab:70:61:37:e3: fe:f6:cf:1a:00:e5:b2:15:1e:57:d3:bb:35:7c:d9:f2:4b:f8: b8:2b:98:22:12:3b:a5:c7:92:cc:d5:c4:6e:c4:9f:4b:27:bf: fc:35:f0:db:8b:6f:34:ba:e9:b0:4d:80:5e:65:78:95:51:fa: 1b:43:c5:27:45:eb:fb:ec:e9:e0:d4:38:4c:d0:a6:0d:97:e9: 50:cd:a4:b4:75:b5:c2:50:25:92:6f:92:ce:7a:85:c2:09:8b: 09:68:96:fd:67:36:81:b2:59:4b:76:1e:7f:c1:ae:ed:77:d4: dd:a7:a9:29:57:ae:1b:e4:d6:01:89:6d:ab:16:3c:76:fc:08: e7:2c:71:3d:c0:05:1f:84:be:84:8b:43:eb:04:51:99:92:2f: 93:b8:dc:32:9e:65:94:9a:4f:80:71:b2:05:1f:6a:54:e3:27: 10:de:a9:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY2NDUxMTAvBgNVBAUTKEUyM0U1Njg4M0E2RTM3QURFNTIyM0M0MTNCM0IzQjBG NzgxQkM5MjkwHhcNMjQwNTE4MTc1NTEzWhcNMjQwNTI1MTc1NTEzWjAYMRYwFAYD VQQDEw02NjQ4ZWI4Mi1mOTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlOQwjWx72PP0tlCDHUzM+ggHsdY4N8njiCdxQ13UlELPFn7V7iXsXOnUaq3A uQQmx576qFlvy+7aX/4rUSjMxQQjPqQ5OoazVE70MC/P27xpxQ2KhyoDOQhIfDLT hFKOB55bVc/Q5tge8BcZLBS4EQRFfx9GRuOfrEoAC3Z5PqyduVuigKkBmPQ74yLq HrgfxU0NomfLdxAupy0ZK95DdNRhqYL8919Rk4YTx68WtJIgbxVeTaR3k2qukn6N XwXe0a+NtpYw4r5d+TEgNdXOdJqtgDBtYuPoJ12zcmiaIFX8Vr2aR4H4adVptCue 3kmwX6FFKwGpCmgUR+FCh7LqZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHp4RUZk tI4PXgPYoK+PbgPRdwj9MB8GA1UdIwQYMBaAFOI+Vog6bjet5SI8QTs7Ow94G8kp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjY0NS9BQjE2RTU1MjAx RjYxMUU5QUJCODg3MERDNEY5QUUwMi80ajVXaURwdU42M2xJanhCT3pzN0QzZ2J5 U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRqNVdpRHB1TjYzbElqeEJPenM3RDNnYnlTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjY0NS9BQjE2RTU1MjAxRjYxMUU5QUJCODg3MERDNEY5QUUwMi80ajVXaURwdU42 M2xJanhCT3pzN0QzZ2J5U2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDK/1x0CT9O8eMG452ipha/AeNlAOa8njK8x6CrC7fKa9EI8fDDq1nA 7OSF3iFQZjgQIh2HX69JDxz1GPoEpzYuS4TlWqZf6rx7ZsZa/NavTBwiLuDhq3Bh N+P+9s8aAOWyFR5X07s1fNnyS/i4K5giEjulx5LM1cRuxJ9LJ7/8NfDbi280uumw TYBeZXiVUfobQ8UnRev77Ong1DhM0KYNl+lQzaS0dbXCUCWSb5LOeoXCCYsJaJb9 ZzaBsllLdh5/wa7td9Tdp6kpV64b5NYBiW2rFjx2/AjnLHE9wAUfhL6Ei0PrBFGZ ki+TuNwynmWUmk+AcbIFH2pU4ycQ3qly -----END CERTIFICATE-----Generated at Sat May 18 19:15:26 2024 by rpki-client on console-ams.rpki-client.org