$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft File: 4x5nyg5b7bJI-Xplfe_2LshvUks.mft (raw, json) Hash identifier: AZDvjtkXgw9GRLkpoldv/M9M01j/QjHXJunsLBVNWro= Subject key identifier: 43:E0:D0:A1:22:AA:12:C0:5D:B6:3B:A5:AA:B9:7F:51:5D:77:80:A1 Authority key identifier: E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B Certificate issuer: /CN=A91ED5D9/serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft Manifest number: 01C0 Signing time: Fri 31 May 2024 05:10:00 +0000 Manifest this update: Fri 31 May 2024 05:09:59 +0000 Manifest next update: Fri 07 Jun 2024 05:09:59 +0000 Files and hashes: 1: 4x5nyg5b7bJI-Xplfe_2LshvUks.crl (hash: zq1tlJ7JbrrR7iPNY5CTxKKO6O9dx//kNSXqtx8AEU0=) 2: A3013D2A0CCB11ED97820077C4F9AE02.roa (hash: DOL44OTFyOlwsa1ppAlsvo9TecrotULLkZjpRsmzWKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 05:09:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED5D9/serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B Validity Not Before: May 31 05:09:59 2024 GMT Not After : Jun 7 05:09:59 2024 GMT Subject: CN=66595ba8-57ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:14:d8:fb:10:89:a4:33:57:91:79:6c:01:46: 1f:63:7a:c3:38:cb:13:f1:5c:fa:e5:40:cb:1f:5c: 44:3c:1f:8f:54:0c:08:a6:e0:38:a0:34:03:96:aa: e6:f5:8d:39:72:29:69:c5:b1:8e:2a:4f:ec:01:78: 2c:e6:7e:fc:df:bf:23:d1:c0:ea:31:5c:00:98:a6: 68:0f:13:1e:7a:4e:1e:f0:33:a7:e7:df:50:5c:c2: 00:a6:5d:38:ab:35:4e:5a:65:37:97:d7:99:20:01: c4:02:28:67:50:eb:3c:10:8a:04:87:49:ba:6e:4b: d8:02:70:45:04:3f:af:10:71:9c:7e:e4:4a:71:a2: a5:c6:28:73:54:44:69:36:39:fb:93:fe:8b:8c:de: c8:4d:20:f8:48:bc:c4:df:16:be:af:f7:4e:10:2a: cc:d9:ef:b8:62:eb:40:cd:0d:94:eb:2f:7b:70:d9: ba:fe:ba:1f:7e:7b:88:3b:03:1d:ce:e2:ac:5b:e3: bf:28:cc:8b:00:7c:f6:6a:ce:77:cd:f7:28:0a:42: 49:00:09:9b:2c:c6:00:50:3d:5f:25:88:93:49:6f: dc:8f:75:ca:a5:f8:35:3e:e1:7a:a3:a1:a5:d4:ed: 38:ab:c7:a9:4b:e9:0c:fb:55:d6:8e:36:fd:b9:a9: fa:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E0:D0:A1:22:AA:12:C0:5D:B6:3B:A5:AA:B9:7F:51:5D:77:80:A1 X509v3 Authority Key Identifier: keyid:E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:92:7b:28:8f:c4:a3:d4:bd:87:d0:ee:61:19:af:9e:28:fd: d6:97:1c:d7:9e:51:1c:8c:4e:a4:8f:b6:74:94:4b:00:49:0d: 96:48:7e:fa:64:ca:b9:c2:b7:15:f6:1d:16:59:b7:27:f1:7d: d9:f7:6c:97:94:5d:ea:22:e9:e3:bb:9f:2c:94:d3:c3:ec:86: a2:ac:f1:57:36:9d:cb:78:0a:64:ca:0c:36:5e:5a:eb:21:7c: 9e:50:1f:91:1f:8a:70:1e:c0:c8:3e:c7:a2:bd:86:d5:3d:09: 39:21:83:da:67:66:21:b9:7a:ea:fb:9d:51:2a:49:bb:94:e5: 22:5f:d5:3a:fc:e0:28:67:4c:85:73:fc:b2:cf:b4:8e:5d:43: 98:f0:0e:03:7c:69:f6:41:b6:d2:5d:58:10:ba:a7:f1:d8:6b: 1f:00:80:a1:a8:4d:73:3f:90:e8:30:d4:02:36:be:17:2b:07: 05:ea:73:e0:92:cf:11:37:6f:d3:df:ec:93:d2:63:4c:9a:ba: 6b:ae:25:75:5f:ce:60:c5:73:2a:ec:c8:03:df:9c:92:3c:3e: 68:0f:21:fa:2e:55:53:15:5f:c9:db:b2:d1:cf:db:c1:f8:9f: e5:20:9d:c2:be:6c:f9:51:55:4e:47:ab:1f:a8:b6:bc:52:45: bd:9b:df:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1RDkxMTAvBgNVBAUTKEUzMUU2N0NBMEU1QkVEQjI0OEY5N0E2NTdERUZGNjJF Qzg2RjUyNEIwHhcNMjQwNTMxMDUwOTU5WhcNMjQwNjA3MDUwOTU5WjAYMRYwFAYD VQQDEw02NjU5NWJhOC01N2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhTY+xCJpDNXkXlsAUYfY3rDOMsT8Vz65UDLH1xEPB+PVAwIpuA4oDQDlqrm 9Y05cilpxbGOKk/sAXgs5n78378j0cDqMVwAmKZoDxMeek4e8DOn599QXMIApl04 qzVOWmU3l9eZIAHEAihnUOs8EIoEh0m6bkvYAnBFBD+vEHGcfuRKcaKlxihzVERp Njn7k/6LjN7ITSD4SLzE3xa+r/dOECrM2e+4YutAzQ2U6y97cNm6/roffnuIOwMd zuKsW+O/KMyLAHz2as53zfcoCkJJAAmbLMYAUD1fJYiTSW/cj3XKpfg1PuF6o6Gl 1O04q8epS+kM+1XWjjb9uan6KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPg0KEi qhLAXbY7paq5f1Fdd4ChMB8GA1UdIwQYMBaAFOMeZ8oOW+2ySPl6ZX3v9i7Ib1JL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDVEOS84OUU4N0ZFMDBD QzgxMUVEQjMzQjEzNzFDNEY5QUUwMi80eDVueWc1YjdiSkktWHBsZmVfMkxzaHZV a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR4NW55ZzViN2JKSS1YcGxmZV8yTHNodlVrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDVEOS84OUU4N0ZFMDBDQzgxMUVEQjMzQjEzNzFDNEY5QUUwMi80eDVueWc1Yjdi SkktWHBsZmVfMkxzaHZVa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADknsoj8Sj1L2H0O5hGa+eKP3WlxzXnlEcjE6kj7Z0lEsASQ2WSH76 ZMq5wrcV9h0WWbcn8X3Z92yXlF3qIunju58slNPD7IairPFXNp3LeApkygw2Xlrr IXyeUB+RH4pwHsDIPseivYbVPQk5IYPaZ2YhuXrq+51RKkm7lOUiX9U6/OAoZ0yF c/yyz7SOXUOY8A4DfGn2QbbSXVgQuqfx2GsfAIChqE1zP5DoMNQCNr4XKwcF6nPg ks8RN2/T3+yT0mNMmrprriV1X85gxXMq7MgD35ySPD5oDyH6LlVTFV/J27LRz9vB +J/lIJ3Cvmz5UVVOR6sfqLa8UkW9m99S -----END CERTIFICATE-----Generated at Fri May 31 06:49:29 2024 by rpki-client on console-ams.rpki-client.org