$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft File: 5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft (raw, json) Hash identifier: RuRWBxFsmIMAdlFNpFcU7Sprl+4NC8n9hqhPmO6lvEs= Subject key identifier: D5:41:1F:39:9E:53:3A:DF:61:4C:D6:7C:4D:A1:93:9D:30:8D:4E:53 Authority key identifier: E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30 Certificate issuer: /CN=A91EEEB8/serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930 Certificate serial: 33F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft Manifest number: 33D7 Signing time: Sat 18 May 2024 15:17:01 +0000 Manifest this update: Sat 18 May 2024 15:17:01 +0000 Manifest next update: Sat 25 May 2024 15:17:01 +0000 Files and hashes: 1: 5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl (hash: K+3d7njb782+dliOW57nBbiBXG/Cz76XDgyoDtfuaJY=) 2: 32DFCCDCEB8011EAAB806163C4F9AE02.roa (hash: LuMXWjGVkOAFMr7y1JipZb37cvnj1AkgOmeR14XQOTc=) 3: 9A4EE834EB8111EA87E2C165C4F9AE02.roa (hash: Fy6xqv5na3HgQasuL0cruqcvb2fBlGE564xe2jgQvbA=) 4: FC75A532DBAC11EA9FF2FA1FC4F9AE02.roa (hash: nc7dTJZdG3NMZxoKathNuflUax+bKbbvz3Dh9X4qKLA=) 5: 60DA0694D9E111EA82120960C4F9AE02.roa (hash: eF4YndkxMR5mkDPzt0ay4vD7NL5uyIf5gVPkSh26pBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13299 (0x33f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEEB8/serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930 Validity Not Before: May 18 15:17:01 2024 GMT Not After : May 25 15:17:01 2024 GMT Subject: CN=6648c66d-c1cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:eb:b2:81:6d:9f:6c:06:95:23:b5:00:58:56: 87:1f:e5:e5:cc:0b:3d:40:dc:9c:86:ac:a4:11:b9: a8:ed:37:4c:20:66:8f:67:c0:fb:ad:28:b2:6a:1f: a6:04:0a:43:36:a6:53:3a:67:b3:0a:64:74:60:3e: d7:94:e4:d4:b8:b3:0f:c0:6e:ad:f4:b3:45:67:f8: 3a:71:fc:40:fb:bb:e9:4a:77:27:f0:ba:14:6c:78: a0:30:a7:6b:bd:cf:0b:c5:1e:72:02:95:96:e6:cf: eb:32:8d:5e:12:c1:f5:01:30:0b:f9:ef:58:e1:3f: da:e2:c9:0c:5d:ef:22:9a:0e:56:4c:e6:1b:d3:8c: 80:e8:55:22:44:16:d1:04:d0:66:5a:fd:9f:c7:84: 25:a6:cf:b5:0f:3d:40:fa:8b:9e:58:95:bb:0d:47: 53:56:8a:c1:df:94:5e:b9:68:33:4a:67:74:52:ae: 43:c2:f7:20:66:9e:a4:f5:aa:9c:fc:81:bb:ca:1f: 0e:13:c4:45:fb:a9:0e:ab:da:9d:6d:24:d4:ad:b5: bc:90:9f:14:6c:bd:e9:d3:5f:25:6d:e0:b5:ae:6c: 42:32:12:20:e4:35:62:10:ff:ec:55:7d:8c:f2:bd: a4:53:67:f3:7e:08:0a:c7:7a:f2:93:8b:d4:50:d9: 90:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:41:1F:39:9E:53:3A:DF:61:4C:D6:7C:4D:A1:93:9D:30:8D:4E:53 X509v3 Authority Key Identifier: keyid:E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:e2:61:8d:33:d1:7e:4f:10:69:04:44:63:b1:a5:2e:ae:6c: 38:1f:3b:3a:24:da:ad:52:e7:9c:f2:ec:58:42:a3:02:45:e6: d2:83:4b:29:88:26:01:f3:1e:04:43:d0:58:0d:ef:e8:32:2a: d7:f2:39:15:f8:ae:d7:a9:35:39:9a:bb:ac:26:bd:b6:a4:1f: 08:40:8d:1d:02:08:ba:e1:76:dc:f3:1c:5e:8b:da:3f:e2:d7: 13:06:d6:0e:31:29:82:e7:e1:cf:5d:fa:d0:86:16:96:4f:9a: 59:7e:df:18:d8:62:e6:bd:d7:ea:26:4d:36:05:1c:14:bb:12: 9b:79:c5:cd:37:cd:dd:f0:0b:9c:c0:a1:60:f4:b2:3e:e2:67: 7a:09:05:bc:e6:20:a8:47:ba:07:38:aa:5a:b3:47:14:30:ea: 00:f9:92:4e:8a:16:0d:9d:d8:4a:8f:b7:d2:28:e3:2e:20:37: 23:e4:66:9a:dc:bd:a2:bf:ad:64:24:59:e2:f6:b1:bd:66:0a: 12:9e:0a:ff:73:b1:70:31:ed:70:b0:1f:fb:eb:92:f5:82:68: 96:a9:bd:3b:4c:4b:29:72:0b:c2:fe:32:81:42:07:4b:04:ad: 87:98:8e:ce:81:48:ed:62:fe:d5:28:84:f9:f8:5a:0e:26:0a: b7:4d:a6:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFQjgxMTAvBgNVBAUTKEU2MjJDODExNEYzRjI0QUE2QTgwN0M4MTQxRTM5NjRC NTUxQkI5MzAwHhcNMjQwNTE4MTUxNzAxWhcNMjQwNTI1MTUxNzAxWjAYMRYwFAYD VQQDEw02NjQ4YzY2ZC1jMWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+uygW2fbAaVI7UAWFaHH+XlzAs9QNychqykEbmo7TdMIGaPZ8D7rSiyah+m BApDNqZTOmezCmR0YD7XlOTUuLMPwG6t9LNFZ/g6cfxA+7vpSncn8LoUbHigMKdr vc8LxR5yApWW5s/rMo1eEsH1ATAL+e9Y4T/a4skMXe8img5WTOYb04yA6FUiRBbR BNBmWv2fx4Qlps+1Dz1A+oueWJW7DUdTVorB35ReuWgzSmd0Uq5DwvcgZp6k9aqc /IG7yh8OE8RF+6kOq9qdbSTUrbW8kJ8UbL3p018lbeC1rmxCMhIg5DViEP/sVX2M 8r2kU2fzfggKx3ryk4vUUNmQlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVBHzme UzrfYUzWfE2hk50wjU5TMB8GA1UdIwQYMBaAFOYiyBFPPySqaoB8gUHjlktVG7kw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUVCOC84RTBGMkNCNjFE QTExMUUyQjkwNkJDOTMwOEIwMkNEMi81aUxJRVU4X0pLcHFnSHlCUWVPV1MxVWJ1 VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVpTElFVThfSktwcWdIeUJRZU9XUzFVYnVUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUVCOC84RTBGMkNCNjFEQTExMUUyQjkwNkJDOTMwOEIwMkNEMi81aUxJRVU4X0pL cHFnSHlCUWVPV1MxVWJ1VEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb4mGNM9F+TxBpBERjsaUurmw4Hzs6JNqtUuec8uxYQqMCRebSg0sp iCYB8x4EQ9BYDe/oMirX8jkV+K7XqTU5mrusJr22pB8IQI0dAgi64Xbc8xxei9o/ 4tcTBtYOMSmC5+HPXfrQhhaWT5pZft8Y2GLmvdfqJk02BRwUuxKbecXNN83d8Auc wKFg9LI+4md6CQW85iCoR7oHOKpas0cUMOoA+ZJOihYNndhKj7fSKOMuIDcj5Gaa 3L2iv61kJFni9rG9ZgoSngr/c7FwMe1wsB/765L1gmiWqb07TEspcgvC/jKBQgdL BK2HmI7OgUjtYv7VKIT5+FoOJgq3TaYF -----END CERTIFICATE-----Generated at Sat May 18 16:20:16 2024 by rpki-client on console-fra.rpki-client.org