$ rpki-client -vvf rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft File: k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft (raw, json) Hash identifier: 5yJ2OX5hnjlxzn3bxR85R9V0wXdlhJ/D2FvHNaUxjs0= Subject key identifier: 45:68:14:60:7A:E2:3D:BF:D8:8B:B3:E2:F6:34:86:E3:9C:7A:74:94 Authority key identifier: 93:41:F9:B7:0F:71:4F:13:1C:52:E1:FE:4B:E5:E5:AB:8C:26:EB:EA Certificate issuer: /CN=A91E473F/serialNumber=9341F9B70F714F131C52E1FE4BE5E5AB8C26EBEA Certificate serial: 055C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft Manifest number: 0559 Signing time: Sun 19 May 2024 00:47:36 +0000 Manifest this update: Sun 19 May 2024 00:47:35 +0000 Manifest next update: Sun 26 May 2024 00:47:35 +0000 Files and hashes: 1: k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl (hash: Lel3oigk3sqm3mSJE3x7r49ktqhBgB2RBjZjh5TXZDk=) 2: 4816D7F0327A11EEA132B74CC4F9AE02.roa (hash: 926TgVrFLI48lAWa3hhPjtJO/GgYWtJWROrDl79qu6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1372 (0x55c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E473F/serialNumber=9341F9B70F714F131C52E1FE4BE5E5AB8C26EBEA Validity Not Before: May 19 00:47:35 2024 GMT Not After : May 26 00:47:35 2024 GMT Subject: CN=66494c28-7de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c5:cf:50:0d:19:84:f2:4d:50:ad:2b:ab:77: c2:05:54:fb:69:f2:d5:13:f9:7a:8f:15:b7:57:c1: b3:24:aa:ee:b0:51:f6:7d:a9:a1:b6:c4:08:4f:a0: 45:01:8a:d1:62:bf:b8:02:93:9a:ef:04:8c:ee:a9: 3e:a8:de:79:6f:50:57:20:bf:25:47:06:f8:3f:42: 9f:c1:2f:d6:ba:98:dd:cf:59:75:2c:a6:a5:01:db: 69:fd:4c:2b:92:fb:c4:41:9f:79:d9:1d:13:07:ff: 14:6f:c0:b8:ac:50:8d:82:b5:db:9d:79:34:8f:dc: ee:f8:e9:e0:5c:17:90:7e:a5:1e:ee:e5:c7:93:90: f8:99:5a:5a:f1:d8:0e:66:f6:13:68:93:3e:24:7d: 6b:a2:8c:3a:90:c7:fb:38:d8:5f:cb:a5:80:32:12: c9:2f:ec:a9:43:58:da:54:fc:19:84:3b:ff:f8:92: c4:00:da:ef:d0:b2:47:64:83:2a:6a:52:c9:68:fb: 33:64:10:56:e5:ce:f3:e2:10:dd:b7:bd:5f:c5:19: 4c:ff:53:f6:98:6d:24:ab:26:62:02:82:6c:e7:f8: 34:e7:8c:76:03:e3:99:f8:83:c9:eb:9f:03:85:4a: c6:f1:ef:6f:76:25:0f:3d:65:38:42:0d:08:0f:ae: 1f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:68:14:60:7A:E2:3D:BF:D8:8B:B3:E2:F6:34:86:E3:9C:7A:74:94 X509v3 Authority Key Identifier: keyid:93:41:F9:B7:0F:71:4F:13:1C:52:E1:FE:4B:E5:E5:AB:8C:26:EB:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:0f:f1:84:ad:c0:09:35:e8:08:9b:36:d2:6e:f2:f4:a6:a7: ce:92:dc:56:a7:74:f4:25:8f:11:91:a3:30:b6:bf:3c:60:0b: 34:6f:5c:48:d6:ab:fd:73:2b:43:4c:ce:af:e7:07:ad:0e:0c: 03:98:66:34:ff:bd:5b:6a:5c:48:0a:14:a3:e1:0c:f4:ef:ab: 44:19:f1:15:01:5f:1a:8a:d7:4b:c9:51:72:32:35:73:fa:ec: c1:22:00:ac:74:a0:3b:ee:02:6f:dc:75:68:dc:97:2d:74:a3: 1c:da:9e:1d:45:a0:2f:9a:13:71:0d:ef:2b:45:98:c5:38:ee: c6:c7:ce:c9:b8:4e:5d:32:6c:75:be:d1:b1:28:89:a4:1f:47: 17:e8:f3:ac:c6:3e:7d:cf:29:41:28:f4:53:a5:ea:92:b8:61: 6b:b3:2a:c5:14:c1:ee:42:26:6b:62:52:fb:06:be:7f:58:d3: 85:e7:66:9a:3d:91:2a:13:f3:90:46:d4:2d:cc:7f:de:b3:69: cb:da:3f:7e:12:71:f0:53:e3:96:8a:ac:04:73:30:4b:09:0c: a9:14:40:ef:f9:4c:cf:b3:29:ed:2b:7f:39:83:d4:70:f6:db: 30:44:32:f4:33:cc:e7:4a:8d:1c:6b:11:e5:d9:73:9c:bf:4f: 4d:34:e2:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ3M0YxMTAvBgNVBAUTKDkzNDFGOUI3MEY3MTRGMTMxQzUyRTFGRTRCRTVFNUFC OEMyNkVCRUEwHhcNMjQwNTE5MDA0NzM1WhcNMjQwNTI2MDA0NzM1WjAYMRYwFAYD VQQDEw02NjQ5NGMyOC03ZGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqsXPUA0ZhPJNUK0rq3fCBVT7afLVE/l6jxW3V8GzJKrusFH2famhtsQIT6BF AYrRYr+4ApOa7wSM7qk+qN55b1BXIL8lRwb4P0KfwS/Wupjdz1l1LKalAdtp/Uwr kvvEQZ952R0TB/8Ub8C4rFCNgrXbnXk0j9zu+OngXBeQfqUe7uXHk5D4mVpa8dgO ZvYTaJM+JH1roow6kMf7ONhfy6WAMhLJL+ypQ1jaVPwZhDv/+JLEANrv0LJHZIMq alLJaPszZBBW5c7z4hDdt71fxRlM/1P2mG0kqyZiAoJs5/g054x2A+OZ+IPJ658D hUrG8e9vdiUPPWU4Qg0ID64fSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVoFGB6 4j2/2Iuz4vY0huOcenSUMB8GA1UdIwQYMBaAFJNB+bcPcU8THFLh/kvl5auMJuvq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDczRi9ENkU1NDAzODlE QjMxMUVCQjAzMkIwNENDNEY5QUUwMi9rMEg1dHc5eFR4TWNVdUgtUy1YbHE0d202 LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2swSDV0dzl4VHhNY1V1SC1TLVhscTR3bTYtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDczRi9ENkU1NDAzODlEQjMxMUVCQjAzMkIwNENDNEY5QUUwMi9rMEg1dHc5eFR4 TWNVdUgtUy1YbHE0d202LW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRD/GErcAJNegImzbSbvL0pqfOktxWp3T0JY8RkaMwtr88YAs0b1xI 1qv9cytDTM6v5wetDgwDmGY0/71balxIChSj4Qz076tEGfEVAV8aitdLyVFyMjVz +uzBIgCsdKA77gJv3HVo3JctdKMc2p4dRaAvmhNxDe8rRZjFOO7Gx87JuE5dMmx1 vtGxKImkH0cX6POsxj59zylBKPRTpeqSuGFrsyrFFMHuQiZrYlL7Br5/WNOF52aa PZEqE/OQRtQtzH/es2nL2j9+EnHwU+OWiqwEczBLCQypFEDv+UzPsyntK385g9Rw 9tswRDL0M8znSo0caxHl2XOcv09NNOJy -----END CERTIFICATE-----Generated at Sun May 19 01:47:16 2024 by rpki-client on console-ams.rpki-client.org