$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft File: 5P3k1jhc-jqHPsReepFHztMJvAI.mft (raw, json) Hash identifier: 8Y/U9PTkNsGY4u1y+Xqh59dRUdwzIQ0l07M8GZ0VYGE= Subject key identifier: 7E:9F:80:FB:D6:D6:95:92:1B:88:57:44:54:7C:EF:B0:07:1F:DC:9E Authority key identifier: E4:FD:E4:D6:38:5C:FA:3A:87:3E:C4:5E:7A:91:47:CE:D3:09:BC:02 Certificate issuer: /CN=A91EC46B/serialNumber=E4FDE4D6385CFA3A873EC45E7A9147CED309BC02 Certificate serial: 05B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5P3k1jhc-jqHPsReepFHztMJvAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft Manifest number: 05A9 Signing time: Sun 19 May 2024 00:17:54 +0000 Manifest this update: Sun 19 May 2024 00:17:54 +0000 Manifest next update: Sun 26 May 2024 00:17:54 +0000 Files and hashes: 1: 5P3k1jhc-jqHPsReepFHztMJvAI.crl (hash: O5rU/1jOwXCpXv6MMeZZSAI0wsHV/wnbkOJvjhpRaFk=) 2: 18ED6F18862211EB99005123C4F9AE02.roa (hash: Ly66KgFUtQh3Msz4K4tlAGWaGSLByseU/gSCuHctCfU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.crl rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5P3k1jhc-jqHPsReepFHztMJvAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1456 (0x5b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC46B/serialNumber=E4FDE4D6385CFA3A873EC45E7A9147CED309BC02 Validity Not Before: May 19 00:17:54 2024 GMT Not After : May 26 00:17:54 2024 GMT Subject: CN=66494532-f324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:07:57:04:4e:99:00:75:b9:7a:6d:de:f3:db: ca:3d:7d:93:47:16:70:e3:16:32:47:a3:1e:8c:2d: 51:09:6b:79:d2:a5:9a:ae:42:e0:9f:ad:ff:ad:9f: 0f:5f:78:16:e5:a4:41:90:37:2c:83:63:c9:db:e2: cd:6f:70:bc:be:27:fa:d6:0f:4a:43:80:49:7d:0d: d7:37:b1:34:43:35:5e:c8:f2:8e:13:c8:82:bb:ca: d1:73:5b:a6:c5:58:7e:8e:3e:fa:3d:06:5f:fb:fd: 24:92:83:37:2e:a2:9c:37:6c:48:c0:ab:21:f7:ea: 90:1c:04:17:02:49:30:25:63:6f:43:7c:f2:e4:67: ed:0a:c2:5e:19:87:39:dc:30:43:cc:88:89:66:67: a1:3b:2f:ea:b6:88:c9:b5:e4:d2:38:05:99:74:54: eb:df:89:29:cb:cf:05:91:cb:84:b1:66:e1:f2:52: c2:fa:a3:24:66:87:cb:db:66:21:24:a0:a8:6e:54: 32:69:58:d8:36:a8:eb:44:b3:85:9d:13:1f:cf:9e: 4c:29:bc:36:71:0b:9c:84:05:3d:b6:22:2c:60:e3: dd:a2:2f:75:7f:52:43:40:7a:58:48:6f:00:2d:78: c8:73:00:64:44:1c:de:50:2d:a6:e1:fa:66:1e:2e: 4a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:9F:80:FB:D6:D6:95:92:1B:88:57:44:54:7C:EF:B0:07:1F:DC:9E X509v3 Authority Key Identifier: keyid:E4:FD:E4:D6:38:5C:FA:3A:87:3E:C4:5E:7A:91:47:CE:D3:09:BC:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5P3k1jhc-jqHPsReepFHztMJvAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:c3:4c:24:2a:b8:c1:75:ec:e7:0c:89:63:3b:89:ed:42:3f: 67:9b:5d:a2:22:fb:37:74:0b:62:70:22:40:4b:0a:44:bf:0d: 7b:04:3a:62:6f:0c:9f:a8:0f:ef:bc:e4:33:39:a8:b7:f6:cf: 38:be:f5:44:7d:1d:74:c4:4b:40:5c:69:a0:6a:cb:a6:33:b9: 93:69:9f:1d:0c:fc:d5:20:b0:3f:c4:f7:89:84:32:12:25:8c: 0e:bf:54:4a:33:94:55:37:8d:9f:2e:55:55:8b:45:cf:ec:5a: 59:63:df:cc:63:3e:35:fb:9c:0b:91:64:bd:c8:4f:5e:ba:49: 5a:25:a1:3e:7a:62:10:a8:fe:ac:d4:ce:e3:f9:5a:c6:4c:b4: 05:b4:db:ec:60:1c:e6:d2:15:ba:70:44:b1:e8:6c:f6:25:16: f8:05:97:50:90:20:9d:ac:c0:d6:4d:03:a7:86:8c:b6:b5:51: 5a:ee:31:79:cb:a8:b5:77:a1:4d:b6:ee:41:f6:e8:a6:a1:53: 28:5d:ce:4b:e6:29:0e:29:75:6f:40:a8:10:1f:07:38:26:1d: db:9d:d4:67:91:47:8e:a0:ba:6e:5c:0a:ac:96:4d:26:dc:c8: 9a:07:f7:40:d4:e3:3e:51:c6:86:6f:4e:fe:6e:9f:b4:b5:bc: 64:7c:e8:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM0NkIxMTAvBgNVBAUTKEU0RkRFNEQ2Mzg1Q0ZBM0E4NzNFQzQ1RTdBOTE0N0NF RDMwOUJDMDIwHhcNMjQwNTE5MDAxNzU0WhcNMjQwNTI2MDAxNzU0WjAYMRYwFAYD VQQDEw02NjQ5NDUzMi1mMzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAdXBE6ZAHW5em3e89vKPX2TRxZw4xYyR6MejC1RCWt50qWarkLgn63/rZ8P X3gW5aRBkDcsg2PJ2+LNb3C8vif61g9KQ4BJfQ3XN7E0QzVeyPKOE8iCu8rRc1um xVh+jj76PQZf+/0kkoM3LqKcN2xIwKsh9+qQHAQXAkkwJWNvQ3zy5GftCsJeGYc5 3DBDzIiJZmehOy/qtojJteTSOAWZdFTr34kpy88FkcuEsWbh8lLC+qMkZofL22Yh JKCoblQyaVjYNqjrRLOFnRMfz55MKbw2cQuchAU9tiIsYOPdoi91f1JDQHpYSG8A LXjIcwBkRBzeUC2m4fpmHi5KfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6fgPvW 1pWSG4hXRFR877AHH9yeMB8GA1UdIwQYMBaAFOT95NY4XPo6hz7EXnqRR87TCbwC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzQ2Qi9GNjg1QkM5QzdG QzIxMUVCQTcxNDU0MkFDNEY5QUUwMi81UDNrMWpoYy1qcUhQc1JlZXBGSHp0TUp2 QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVQM2sxamhjLWpxSFBzUmVlcEZIenRNSnZBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzQ2Qi9GNjg1QkM5QzdGQzIxMUVCQTcxNDU0MkFDNEY5QUUwMi81UDNrMWpoYy1q cUhQc1JlZXBGSHp0TUp2QUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjw0wkKrjBdeznDIljO4ntQj9nm12iIvs3dAticCJASwpEvw17BDpi bwyfqA/vvOQzOai39s84vvVEfR10xEtAXGmgasumM7mTaZ8dDPzVILA/xPeJhDIS JYwOv1RKM5RVN42fLlVVi0XP7FpZY9/MYz41+5wLkWS9yE9euklaJaE+emIQqP6s 1M7j+VrGTLQFtNvsYBzm0hW6cESx6Gz2JRb4BZdQkCCdrMDWTQOnhoy2tVFa7jF5 y6i1d6FNtu5B9uimoVMoXc5L5ikOKXVvQKgQHwc4Jh3bndRnkUeOoLpuXAqslk0m 3MiaB/dA1OM+UcaGb07+bp+0tbxkfOh9 -----END CERTIFICATE-----Generated at Sun May 19 00:59:43 2024 by rpki-client on console-fra.rpki-client.org