$ rpki-client -vvf rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft File: SPEydjLX2-8zHA4kie7j9b77hFI.mft (raw, json) Hash identifier: mkSCZX/l9gINKGHOlGwlsi99yJq8xVXmzsKmMQFP6EM= Subject key identifier: 5E:21:56:91:F9:1E:52:AC:8A:02:67:60:09:80:76:6F:87:E7:86:B6 Authority key identifier: 48:F1:32:76:32:D7:DB:EF:33:1C:0E:24:89:EE:E3:F5:BE:FB:84:52 Certificate issuer: /CN=A91F60A7/serialNumber=48F1327632D7DBEF331C0E2489EEE3F5BEFB8452 Certificate serial: 051C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft Manifest number: 0512 Signing time: Sun 19 May 2024 01:07:36 +0000 Manifest this update: Sun 19 May 2024 01:07:36 +0000 Manifest next update: Sun 26 May 2024 01:07:36 +0000 Files and hashes: 1: SPEydjLX2-8zHA4kie7j9b77hFI.crl (hash: epp083nWOpS054eztnliVjzzkks3phImCMacN7SIIgA=) 2: 2E809260BFC511EBAD79ED25C4F9AE02.roa (hash: E4SB0VnhDCMXd9wtb1z0kPNTMj/RJ5YqNByr/DSwefI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.crl rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1308 (0x51c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F60A7/serialNumber=48F1327632D7DBEF331C0E2489EEE3F5BEFB8452 Validity Not Before: May 19 01:07:36 2024 GMT Not After : May 26 01:07:36 2024 GMT Subject: CN=664950d8-418a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ca:5e:98:b8:ae:3c:97:15:7c:21:02:40:df: 92:e8:eb:95:2f:42:fc:ac:72:3a:2d:85:5a:0f:fb: 1a:26:22:eb:30:bd:32:18:dd:1a:44:6c:38:2c:dc: 15:27:13:fe:d2:13:51:e1:92:af:67:d8:2d:50:9d: 87:06:a1:d2:f0:b1:ac:41:5c:3f:4c:ea:52:d5:2a: 15:8a:19:2c:d0:fe:df:e9:fa:77:3a:ab:8d:64:da: 66:07:8d:22:13:66:51:3d:8c:21:ff:49:4c:6f:32: 24:f5:8f:49:cd:5a:05:0b:14:d9:88:8f:fb:2c:69: f2:d9:11:cd:79:f8:6f:b1:b3:1d:5a:10:30:83:96: d6:33:87:b1:e1:77:a0:29:80:76:89:bc:3b:9e:e2: 26:fd:26:e6:ec:fb:bd:b6:12:6d:56:80:c7:9f:30: a9:e1:8d:bd:13:52:78:11:9c:65:fb:7a:77:98:23: 8e:a6:f8:63:8e:68:48:2f:1f:f1:d9:1a:ca:e3:54: 29:48:47:ef:e3:6d:fa:0c:1a:01:52:a7:4b:ed:d8: e5:3a:08:0e:36:d2:a3:f8:dd:87:84:c4:b7:69:44: a9:35:ad:6c:45:e8:3b:5d:c9:74:9c:0f:6e:15:ef: f4:08:5f:89:19:cb:01:47:89:2e:7d:fb:e3:78:6d: f2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:21:56:91:F9:1E:52:AC:8A:02:67:60:09:80:76:6F:87:E7:86:B6 X509v3 Authority Key Identifier: keyid:48:F1:32:76:32:D7:DB:EF:33:1C:0E:24:89:EE:E3:F5:BE:FB:84:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:17:48:ee:3a:05:73:40:5b:a2:37:32:69:75:5e:2b:f2:03: 1d:ce:8b:40:22:82:60:b6:20:a5:3a:4a:48:e0:a5:e5:52:0f: 91:8e:9a:3f:6a:a9:4b:8c:db:d6:98:65:35:89:77:08:b7:10: 12:a1:34:e6:e7:37:84:b1:54:8c:b6:6d:00:9c:6d:c6:86:3d: 05:f1:01:e0:dd:cc:9c:2d:fd:47:bb:53:d1:97:f6:5f:9b:28: 12:dc:70:ec:e7:8e:7b:3b:e9:ec:cb:6d:2f:99:a8:20:0e:73: a9:f0:01:2f:94:c0:80:e7:c5:5b:d1:cc:af:8b:7d:dc:20:b1: 83:e1:3d:83:0b:da:09:1c:71:a3:eb:ed:c7:cf:b0:6e:45:b1: da:5a:ac:23:8c:c8:3c:bd:3a:af:c7:d3:42:f3:a0:ee:be:f0: 80:ee:0b:5d:75:a7:b0:e7:56:b1:7f:24:f7:35:e5:15:10:fa: 80:49:12:47:3b:ad:8e:e2:b5:75:17:5b:45:e1:7c:fc:35:ab: d0:5e:a8:ab:67:25:31:32:0e:01:6f:39:b4:40:a1:83:db:a4: 1b:33:65:04:5b:d7:22:9c:c2:54:79:c4:be:19:a6:be:cb:34: 0a:79:f3:42:96:9d:24:cf:a0:60:bd:ca:41:79:d8:06:72:fa: fd:c6:ba:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYwQTcxMTAvBgNVBAUTKDQ4RjEzMjc2MzJEN0RCRUYzMzFDMEUyNDg5RUVFM0Y1 QkVGQjg0NTIwHhcNMjQwNTE5MDEwNzM2WhcNMjQwNTI2MDEwNzM2WjAYMRYwFAYD VQQDEw02NjQ5NTBkOC00MThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8pemLiuPJcVfCECQN+S6OuVL0L8rHI6LYVaD/saJiLrML0yGN0aRGw4LNwV JxP+0hNR4ZKvZ9gtUJ2HBqHS8LGsQVw/TOpS1SoVihks0P7f6fp3OquNZNpmB40i E2ZRPYwh/0lMbzIk9Y9JzVoFCxTZiI/7LGny2RHNefhvsbMdWhAwg5bWM4ex4Xeg KYB2ibw7nuIm/Sbm7Pu9thJtVoDHnzCp4Y29E1J4EZxl+3p3mCOOpvhjjmhILx/x 2RrK41QpSEfv4236DBoBUqdL7djlOggONtKj+N2HhMS3aUSpNa1sReg7Xcl0nA9u Fe/0CF+JGcsBR4kuffvjeG3yeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4hVpH5 HlKsigJnYAmAdm+H54a2MB8GA1UdIwQYMBaAFEjxMnYy19vvMxwOJInu4/W++4RS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjBBNy80RTAwRkU5QUJE MUQxMUVCOUFEODVENDVDNEY5QUUwMi9TUEV5ZGpMWDItOHpIQTRraWU3ajliNzdo RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQRXlkakxYMi04ekhBNGtpZTdqOWI3N2hGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjBBNy80RTAwRkU5QUJEMUQxMUVCOUFEODVENDVDNEY5QUUwMi9TUEV5ZGpMWDIt OHpIQTRraWU3ajliNzdoRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUF0juOgVzQFuiNzJpdV4r8gMdzotAIoJgtiClOkpI4KXlUg+Rjpo/ aqlLjNvWmGU1iXcItxASoTTm5zeEsVSMtm0AnG3Ghj0F8QHg3cycLf1Hu1PRl/Zf mygS3HDs5457O+nsy20vmaggDnOp8AEvlMCA58Vb0cyvi33cILGD4T2DC9oJHHGj 6+3Hz7BuRbHaWqwjjMg8vTqvx9NC86DuvvCA7gtddaew51axfyT3NeUVEPqASRJH O62O4rV1F1tF4Xz8NavQXqirZyUxMg4Bbzm0QKGD26QbM2UEW9cinMJUecS+Gaa+ yzQKefNClp0kz6BgvcpBedgGcvr9xrpX -----END CERTIFICATE-----Generated at Sun May 19 01:47:15 2024 by rpki-client on console-fra.rpki-client.org