$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft File: x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft (raw, json) Hash identifier: U+tboNJs/uOCA2esivN8+ynlUG0mmn1ysxdu3IONHe8= Subject key identifier: 6D:1C:93:A0:B1:CB:AE:24:9A:A3:04:DF:66:3E:AB:E8:EA:2E:2A:97 Authority key identifier: C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9 Certificate issuer: /CN=A91E01B2/serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9 Certificate serial: 02A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft Manifest number: 0298 Signing time: Sun 19 May 2024 03:37:32 +0000 Manifest this update: Sun 19 May 2024 03:37:31 +0000 Manifest next update: Sun 26 May 2024 03:37:31 +0000 Files and hashes: 1: x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl (hash: 57Uo5XSVrXq/a7/R+IjVSYPl0VW74c0cQUi4+OHJqHE=) 2: A8E34E9CB66611ECAF76DA4CC4F9AE02.roa (hash: H61h5fXsvlRnlENkIrx+tFqMY/HM+pvGeCm6ugQKqtU=) 3: A9906244B66611ECAF76DA4CC4F9AE02.roa (hash: 2BMnSUaVbf1wtJhhxxVU6VnaQor23drbSv3U2jHE+g4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 672 (0x2a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01B2/serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9 Validity Not Before: May 19 03:37:31 2024 GMT Not After : May 26 03:37:31 2024 GMT Subject: CN=664973fc-11d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e7:4c:58:f0:78:d2:39:a5:ee:3a:a8:8f:03: 6b:59:90:c9:7b:95:c9:7e:a0:a3:22:83:cb:e8:53: 5b:89:94:e3:53:8a:d9:d4:59:54:f8:df:11:cd:6c: 00:17:51:c5:29:f6:ef:76:fd:a7:d7:da:f0:83:a5: e1:2e:b0:e3:39:6f:d7:8d:9b:b3:4a:d4:1c:25:a6: fa:12:39:ea:d4:3e:52:02:36:7f:ac:bb:43:89:39: 81:2f:d1:43:cc:d7:ec:4e:82:70:68:c9:ec:92:1a: 4f:68:8d:0a:5d:b2:19:11:46:99:56:9a:ed:a0:7f: 4c:77:42:39:96:51:72:16:8f:67:40:a4:d9:c5:bc: ee:c5:43:5b:39:a6:d8:58:0d:3e:67:d4:ca:5e:6e: 85:19:6c:60:0e:5a:75:c6:ad:17:40:3e:6d:19:e1: 83:e8:46:1b:39:75:50:3c:51:29:38:29:57:9f:de: d0:ab:24:df:00:bb:26:9e:c0:65:94:f8:c0:da:4e: 67:62:30:98:a5:b8:98:0d:66:94:61:82:49:c0:6d: e7:2d:f1:ed:fd:92:6d:ce:4f:76:b5:e8:52:6b:e9: b6:99:83:1c:9c:3d:15:9c:bb:41:db:33:d8:d8:ec: ee:22:7d:08:99:ce:43:59:73:65:84:e1:22:8d:60: f4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1C:93:A0:B1:CB:AE:24:9A:A3:04:DF:66:3E:AB:E8:EA:2E:2A:97 X509v3 Authority Key Identifier: keyid:C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:c8:96:1b:ca:c2:55:04:e6:fb:d8:85:f4:0d:b6:28:6c:cd: 43:b0:cd:f7:40:2e:17:20:36:8f:95:f1:a6:5d:d9:a4:f0:03: 68:a5:21:92:d1:01:5d:15:39:a9:78:ce:83:97:86:a0:e9:f6: 71:63:78:45:91:e9:a2:57:4c:90:c4:1c:55:71:b4:68:d4:04: 63:b3:0d:6c:b2:6d:23:13:4c:43:fa:e5:8c:d6:1f:9a:00:f9: 83:ba:28:d6:78:f3:70:11:23:73:8b:f9:1d:45:04:9d:1a:e0: b5:9f:77:86:c8:b3:7a:cf:6c:8e:d5:11:b0:2a:72:2b:f7:22: 80:f1:90:5f:0a:b0:5d:7a:6d:66:0f:a9:77:c3:73:62:bf:b5: 36:60:ff:96:e6:0f:f5:cc:9f:ec:f0:70:bd:01:f1:2b:67:b8: 09:10:e4:2a:3c:7c:13:55:7e:c6:30:79:84:78:c2:bf:ef:9b: cb:83:d0:bf:38:55:ce:4b:8f:6f:22:01:54:c7:68:3e:4b:20: 9f:81:f4:2b:eb:9e:41:d6:9a:1c:88:c9:5b:8a:86:1b:14:ae: c8:32:6e:83:1a:a1:c0:e1:86:08:b2:4e:90:c2:b9:41:29:95: 8f:90:64:34:54:43:c8:9c:56:3e:c5:be:f6:ea:32:34:32:ee: d2:aa:b0:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxQjIxMTAvBgNVBAUTKEM3RTU3OTBCMDVFMEQ0RDIwOURCNDNEQzY4MEZCNzg4 Mjc5ODE0QTkwHhcNMjQwNTE5MDMzNzMxWhcNMjQwNTI2MDMzNzMxWjAYMRYwFAYD VQQDEw02NjQ5NzNmYy0xMWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtudMWPB40jml7jqojwNrWZDJe5XJfqCjIoPL6FNbiZTjU4rZ1FlU+N8RzWwA F1HFKfbvdv2n19rwg6XhLrDjOW/XjZuzStQcJab6Ejnq1D5SAjZ/rLtDiTmBL9FD zNfsToJwaMnskhpPaI0KXbIZEUaZVprtoH9Md0I5llFyFo9nQKTZxbzuxUNbOabY WA0+Z9TKXm6FGWxgDlp1xq0XQD5tGeGD6EYbOXVQPFEpOClXn97QqyTfALsmnsBl lPjA2k5nYjCYpbiYDWaUYYJJwG3nLfHt/ZJtzk92tehSa+m2mYMcnD0VnLtB2zPY 2OzuIn0Imc5DWXNlhOEijWD0dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0ck6Cx y64kmqME32Y+q+jqLiqXMB8GA1UdIwQYMBaAFMfleQsF4NTSCdtD3GgPt4gnmBSp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFCMi82REU5RjQxMEI2 NjMxMUVDOEQ1NEE0NDlDNEY5QUUwMi94LVY1Q3dYZzFOSUoyMFBjYUEtM2lDZVlG S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gtVjVDd1hnMU5JSjIwUGNhQS0zaUNlWUZLay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFCMi82REU5RjQxMEI2NjMxMUVDOEQ1NEE0NDlDNEY5QUUwMi94LVY1Q3dYZzFO SUoyMFBjYUEtM2lDZVlGS2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4yJYbysJVBOb72IX0DbYobM1DsM33QC4XIDaPlfGmXdmk8ANopSGS 0QFdFTmpeM6Dl4ag6fZxY3hFkemiV0yQxBxVcbRo1ARjsw1ssm0jE0xD+uWM1h+a APmDuijWePNwESNzi/kdRQSdGuC1n3eGyLN6z2yO1RGwKnIr9yKA8ZBfCrBdem1m D6l3w3Niv7U2YP+W5g/1zJ/s8HC9AfErZ7gJEOQqPHwTVX7GMHmEeMK/75vLg9C/ OFXOS49vIgFUx2g+SyCfgfQr655B1pociMlbioYbFK7IMm6DGqHA4YYIsk6QwrlB KZWPkGQ0VEPInFY+xb726jI0Mu7SqrDg -----END CERTIFICATE-----Generated at Sun May 19 04:20:44 2024 by rpki-client on console-ams.rpki-client.org