$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft File: 5xqfIU6Aybw7LSOf-LmqtxP27bc.mft (raw, json) Hash identifier: r10M8k1JYD9K5/RAOdbeaDdoAJFyI5y4FzbD46hGEWA= Subject key identifier: E4:2F:53:D3:3B:1D:DB:8E:67:42:AA:97:01:F1:50:AF:D1:BA:02:61 Authority key identifier: E7:1A:9F:21:4E:80:C9:BC:3B:2D:23:9F:F8:B9:AA:B7:13:F6:ED:B7 Certificate issuer: /CN=A91E8525/serialNumber=E71A9F214E80C9BC3B2D239FF8B9AAB713F6EDB7 Certificate serial: 1912 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft Manifest number: 1900 Signing time: Sat 18 May 2024 16:52:23 +0000 Manifest this update: Sat 18 May 2024 16:52:23 +0000 Manifest next update: Sat 25 May 2024 16:52:23 +0000 Files and hashes: 1: 5xqfIU6Aybw7LSOf-LmqtxP27bc.crl (hash: 9PUynsk8Jv0dCbQIj0C4YYXQL0oGErwmME43dvgpAqY=) 2: 3A21C144E51211EBB1225278C4F9AE02.roa (hash: 72UJY4qW+1X6PGltHkH0J24hlzlOfouYDMNRAXq28vY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.crl rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6418 (0x1912) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8525/serialNumber=E71A9F214E80C9BC3B2D239FF8B9AAB713F6EDB7 Validity Not Before: May 18 16:52:23 2024 GMT Not After : May 25 16:52:23 2024 GMT Subject: CN=6648dcc7-13d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:18:bd:c1:cf:8f:4c:f6:7b:6a:a2:27:ed:86: d7:6b:07:e9:7d:a8:8e:05:10:0a:97:ad:04:66:f6: 2c:53:c8:aa:2b:df:a6:6c:b1:db:7a:f5:d5:9c:cb: 28:d6:d9:c0:2d:43:23:4a:c0:9c:9f:20:93:31:79: 15:d1:68:02:9a:2d:76:99:b8:b0:12:96:a3:8b:4c: b3:a0:67:a9:38:2d:3d:ef:89:6f:79:a2:12:c2:1f: bb:01:d8:25:8c:e6:90:26:64:3f:56:d9:33:6e:62: 5a:73:2d:56:01:9d:e6:46:48:6e:02:78:4d:5a:e0: c7:8e:61:f7:3c:c8:36:ca:fd:07:fc:e7:14:93:c1: ee:9e:43:9f:ba:11:2c:30:bc:40:b1:e5:29:09:01: 53:a2:8a:e3:58:47:66:a1:d0:2a:09:a2:10:47:eb: 15:34:2b:19:11:9a:4f:b8:82:89:e3:dd:b4:c6:8e: d7:af:a2:09:5d:16:b2:96:b3:0d:9c:5e:b6:70:c4: 98:6d:3b:61:f9:59:db:9c:ab:84:6f:bc:f3:92:2d: fa:3a:78:ca:cb:7d:d4:b7:85:d3:b7:44:65:82:f8: 65:44:ce:9d:6c:8f:8a:ea:a2:e3:fc:2c:33:28:18: dd:e6:ec:0f:ea:d7:e2:21:06:8f:6a:64:77:96:30: 6d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:2F:53:D3:3B:1D:DB:8E:67:42:AA:97:01:F1:50:AF:D1:BA:02:61 X509v3 Authority Key Identifier: keyid:E7:1A:9F:21:4E:80:C9:BC:3B:2D:23:9F:F8:B9:AA:B7:13:F6:ED:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:b4:76:65:b7:4d:e4:26:70:41:4d:54:55:7c:7a:71:e7:aa: 52:91:b2:77:f5:3f:1c:34:88:b6:4d:90:0a:c4:48:1d:a6:55: 99:d3:37:81:7b:c5:d7:14:bf:b7:44:75:a5:d9:68:f8:91:54: 05:64:1f:cc:4a:d5:c3:2d:5e:8c:43:a6:0d:bd:56:51:63:aa: c1:b8:9e:ef:52:52:e3:f7:3f:af:fb:7e:3b:ae:cf:5e:03:53: 12:9e:76:7b:c6:0e:32:4f:6b:d0:e6:91:35:96:dd:0e:94:60: 84:4c:27:69:e8:86:d9:a4:8b:d3:4e:0c:9f:ae:08:7a:9a:c0: 68:a7:34:16:ef:db:f8:a4:96:25:28:2e:cb:57:29:66:42:99: 2a:4a:53:65:a9:ad:23:24:26:75:9b:a5:6b:2f:be:95:e1:cd: dc:78:69:32:ce:99:0d:66:d4:f8:77:65:61:90:ba:f9:36:7b: 9f:f6:5b:fd:5d:01:c2:f8:01:33:1e:ad:da:ef:64:a8:ea:7a: 75:e3:e5:c2:72:86:bc:02:ae:81:9a:7d:db:2f:e7:2f:8a:b7: 8e:66:12:0e:1a:87:f0:a7:8a:61:7d:a7:48:0e:80:3d:69:05: 84:76:71:97:60:79:b4:b1:69:99:6f:08:e3:08:5b:52:61:97: b4:e9:ff:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg1MjUxMTAvBgNVBAUTKEU3MUE5RjIxNEU4MEM5QkMzQjJEMjM5RkY4QjlBQUI3 MTNGNkVEQjcwHhcNMjQwNTE4MTY1MjIzWhcNMjQwNTI1MTY1MjIzWjAYMRYwFAYD VQQDEw02NjQ4ZGNjNy0xM2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xi9wc+PTPZ7aqIn7YbXawfpfaiOBRAKl60EZvYsU8iqK9+mbLHbevXVnMso 1tnALUMjSsCcnyCTMXkV0WgCmi12mbiwEpaji0yzoGepOC0974lveaISwh+7Adgl jOaQJmQ/VtkzbmJacy1WAZ3mRkhuAnhNWuDHjmH3PMg2yv0H/OcUk8HunkOfuhEs MLxAseUpCQFToorjWEdmodAqCaIQR+sVNCsZEZpPuIKJ4920xo7Xr6IJXRaylrMN nF62cMSYbTth+VnbnKuEb7zzki36OnjKy33Ut4XTt0RlgvhlRM6dbI+K6qLj/Cwz KBjd5uwP6tfiIQaPamR3ljBt1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQvU9M7 HduOZ0KqlwHxUK/RugJhMB8GA1UdIwQYMBaAFOcanyFOgMm8Oy0jn/i5qrcT9u23 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODUyNS81MjIxMjYxMDYx MkYxMUU3QkQyRURBMEJDNEY5QUUwMi81eHFmSVU2QXlidzdMU09mLUxtcXR4UDI3 YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV4cWZJVTZBeWJ3N0xTT2YtTG1xdHhQMjdiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODUyNS81MjIxMjYxMDYxMkYxMUU3QkQyRURBMEJDNEY5QUUwMi81eHFmSVU2QXli dzdMU09mLUxtcXR4UDI3YmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGtHZlt03kJnBBTVRVfHpx56pSkbJ39T8cNIi2TZAKxEgdplWZ0zeB e8XXFL+3RHWl2Wj4kVQFZB/MStXDLV6MQ6YNvVZRY6rBuJ7vUlLj9z+v+347rs9e A1MSnnZ7xg4yT2vQ5pE1lt0OlGCETCdp6IbZpIvTTgyfrgh6msBopzQW79v4pJYl KC7LVylmQpkqSlNlqa0jJCZ1m6VrL76V4c3ceGkyzpkNZtT4d2VhkLr5Nnuf9lv9 XQHC+AEzHq3a72So6np14+XCcoa8Aq6Bmn3bL+cvireOZhIOGofwp4phfadIDoA9 aQWEdnGXYHm0sWmZbwjjCFtSYZe06f9W -----END CERTIFICATE-----Generated at Sat May 18 17:37:34 2024 by rpki-client on console-fra.rpki-client.org