$ rpki-client -vvf rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft File: 53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft (raw, json) Hash identifier: uZ807968tQBg775eacONbBR8GXiM8UDhFuiAe4iwPmA= Subject key identifier: DF:2E:EB:78:C3:C8:A0:F0:CB:5E:62:A3:08:0B:B4:05:36:78:3E:F6 Authority key identifier: E7:71:32:E4:FE:AD:04:EE:D4:FE:94:6D:60:7A:0D:CB:57:A4:20:65 Certificate issuer: /CN=A91F715C/serialNumber=E77132E4FEAD04EED4FE946D607A0DCB57A42065 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft Manifest number: 97 Signing time: Sun 19 May 2024 07:09:44 +0000 Manifest this update: Sun 19 May 2024 07:09:44 +0000 Manifest next update: Sun 26 May 2024 07:09:44 +0000 Files and hashes: 1: 53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl (hash: rL629KOWSUCpD7xy6c9Rh8xhpjrI604DMxFFFtAytwY=) 2: 290C6478B2BE11EEB3703266C4F9AE02.roa (hash: TizGZv74cc6YwI96YTvJGfgLIKax7KhT9lvi+U6d7lQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F715C/serialNumber=E77132E4FEAD04EED4FE946D607A0DCB57A42065 Validity Not Before: May 19 07:09:44 2024 GMT Not After : May 26 07:09:44 2024 GMT Subject: CN=6649a5b8-542b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:63:91:25:41:6a:18:68:0a:66:12:86:d3:5c: 2d:cb:7d:16:c7:21:1b:3e:fa:b4:89:f2:5c:77:f9: 88:d2:55:b9:bc:89:0c:a8:e3:66:08:4a:02:38:05: 94:09:ab:82:bb:02:57:68:10:21:f8:fd:56:9e:cc: e0:45:70:cd:6b:6f:0f:e6:1f:d6:fc:16:7e:50:73: 5a:a3:60:3c:28:30:47:fb:f1:8c:93:ca:ad:01:8d: 7a:ac:90:4b:e2:17:9a:28:ad:66:56:d3:1d:ac:d4: b4:94:b6:c3:36:d6:bc:88:99:5f:3c:30:40:fb:30: c3:9d:73:71:37:cd:2d:f7:bc:3f:06:0a:8d:eb:3f: 9b:d6:19:80:b8:fe:84:ce:ad:49:1d:d1:a1:e2:e7: ca:9d:a3:0e:4d:40:0c:3f:25:4a:1f:e3:8d:c0:8b: f6:36:19:f2:f4:55:25:7b:1d:13:86:12:b3:20:e2: d7:35:25:0a:17:c3:03:53:94:4e:f9:48:28:28:c0: 60:a8:0f:77:7b:c7:8f:22:b8:26:a8:51:10:fe:24: ae:8d:28:fb:21:90:a0:f8:e2:7e:ef:54:87:34:5d: ce:30:e2:95:a5:00:fd:11:96:17:6d:21:28:6d:6f: 50:24:d5:1b:17:73:97:46:9b:b0:9b:0e:d6:85:10: fc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2E:EB:78:C3:C8:A0:F0:CB:5E:62:A3:08:0B:B4:05:36:78:3E:F6 X509v3 Authority Key Identifier: keyid:E7:71:32:E4:FE:AD:04:EE:D4:FE:94:6D:60:7A:0D:CB:57:A4:20:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:16:d4:52:dc:75:73:7b:71:8a:c9:3f:f3:0a:2c:68:cb:c2: 99:ec:19:0a:85:23:40:46:30:70:5e:16:2f:ee:2e:41:15:05: 68:c7:c9:1c:e6:f9:8b:3d:c4:33:84:71:bf:3e:53:5a:fe:15: ef:42:a7:39:64:8b:88:ac:5a:08:fe:0e:45:20:f7:68:ea:a3: 56:b9:10:ed:e7:b9:3e:f4:bf:ee:67:f6:3d:74:ae:9d:7e:db: 1e:c3:48:0d:4e:45:48:fe:44:a2:47:f6:9a:dd:e2:c2:1e:b4: 0e:78:9c:5e:f0:42:c0:a7:c6:e0:99:3a:99:15:52:22:ee:b1: 94:9d:6f:81:72:53:fe:7e:4a:5b:e1:be:96:18:c9:2d:f0:1d: a9:a1:6d:cd:68:71:1d:66:70:ec:36:1a:2a:37:49:18:00:fb: 9a:67:b6:fa:96:67:ab:df:c0:bc:69:de:f1:a2:e7:8f:33:84: 67:1a:51:f8:72:9e:37:04:0d:ca:63:bd:a8:23:e4:3d:45:18: 86:7e:8e:f1:01:27:5d:65:26:f8:e2:ce:1e:a5:c2:a1:91:24: 80:de:87:5c:ae:75:97:db:01:cf:77:2c:ea:0f:73:87:f4:ad: 06:ea:df:ca:16:d4:15:1f:f8:c1:88:f3:36:40:d7:58:51:a7: 6f:0e:63:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxNUMxMTAvBgNVBAUTKEU3NzEzMkU0RkVBRDA0RUVENEZFOTQ2RDYwN0EwRENC NTdBNDIwNjUwHhcNMjQwNTE5MDcwOTQ0WhcNMjQwNTI2MDcwOTQ0WjAYMRYwFAYD VQQDEw02NjQ5YTViOC01NDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5mORJUFqGGgKZhKG01wty30WxyEbPvq0ifJcd/mI0lW5vIkMqONmCEoCOAWU CauCuwJXaBAh+P1WnszgRXDNa28P5h/W/BZ+UHNao2A8KDBH+/GMk8qtAY16rJBL 4heaKK1mVtMdrNS0lLbDNta8iJlfPDBA+zDDnXNxN80t97w/BgqN6z+b1hmAuP6E zq1JHdGh4ufKnaMOTUAMPyVKH+ONwIv2Nhny9FUlex0ThhKzIOLXNSUKF8MDU5RO +UgoKMBgqA93e8ePIrgmqFEQ/iSujSj7IZCg+OJ+71SHNF3OMOKVpQD9EZYXbSEo bW9QJNUbF3OXRpuwmw7WhRD8vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8u63jD yKDwy15iowgLtAU2eD72MB8GA1UdIwQYMBaAFOdxMuT+rQTu1P6UbWB6DctXpCBl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzE1Qy81RjA3MjYzODRG MzMxMUVFOTY2RTBGNzJDNEY5QUUwMi81M0V5NVA2dEJPN1VfcFJ0WUhvTnkxZWtJ R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUzRXk1UDZ0Qk83VV9wUnRZSG9OeTFla0lHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzE1Qy81RjA3MjYzODRGMzMxMUVFOTY2RTBGNzJDNEY5QUUwMi81M0V5NVA2dEJP N1VfcFJ0WUhvTnkxZWtJR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxFtRS3HVze3GKyT/zCixoy8KZ7BkKhSNARjBwXhYv7i5BFQVox8kc 5vmLPcQzhHG/PlNa/hXvQqc5ZIuIrFoI/g5FIPdo6qNWuRDt57k+9L/uZ/Y9dK6d ftsew0gNTkVI/kSiR/aa3eLCHrQOeJxe8ELAp8bgmTqZFVIi7rGUnW+BclP+fkpb 4b6WGMkt8B2poW3NaHEdZnDsNhoqN0kYAPuaZ7b6lmer38C8ad7xouePM4RnGlH4 cp43BA3KY72oI+Q9RRiGfo7xASddZSb44s4epcKhkSSA3odcrnWX2wHPdyzqD3OH 9K0G6t/KFtQVH/jBiPM2QNdYUadvDmM7 -----END CERTIFICATE-----Generated at Sun May 19 07:40:46 2024 by rpki-client on console-fra.rpki-client.org