$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft File: K5XY2CKKiRR9gBk9l3DrUK7du2s.mft (raw, json) Hash identifier: f7ZNcTmDj4tO7w1iMvF42PCQhPeqTnYh+ItDtE3ljrk= Subject key identifier: 86:F7:DB:DF:2E:B2:BE:4A:0E:66:76:29:72:D3:51:51:A9:06:BA:8B Authority key identifier: 2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B Certificate issuer: /CN=A91FF5A9/serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B Certificate serial: 15FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft Manifest number: 15E5 Signing time: Sat 18 May 2024 17:11:52 +0000 Manifest this update: Sat 18 May 2024 17:11:51 +0000 Manifest next update: Sat 25 May 2024 17:11:51 +0000 Files and hashes: 1: K5XY2CKKiRR9gBk9l3DrUK7du2s.crl (hash: 0mfKvwU8p0hDO257VZ1DG3KJH9vrY+JqK2oauVbFy9I=) 2: 07D665E0862711EBAC147872C4F9AE02.roa (hash: ous1E0oLiCs3r+HQiFOj64dMFKdW/gP7r3rj77Prx3Y=) 3: F9E21144D90F11EDB2DBEA49C4F9AE02.roa (hash: iTzoakUoaVNdTqGJxVmIzhqLbUwoGqXoPnqROEzOhSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5628 (0x15fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5A9/serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B Validity Not Before: May 18 17:11:51 2024 GMT Not After : May 25 17:11:51 2024 GMT Subject: CN=6648e158-5fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d7:e7:bf:e0:8c:33:b0:55:a1:31:29:6a:ae: d2:8f:3b:ef:d2:50:b8:41:d3:6b:e5:ad:5e:6f:55: 05:50:5b:44:60:15:b7:6c:40:81:7c:2c:9d:df:85: 1d:50:c0:fa:55:48:06:38:33:bd:f4:0c:4a:fb:b7: c3:fa:9f:88:c1:e8:fb:ea:ef:c8:af:9d:7a:7b:89: 8e:36:bf:31:0a:62:75:c2:65:dc:d7:dc:68:e7:a5: f3:b0:26:65:97:52:77:43:2a:7c:ac:56:4a:fd:42: 7f:6e:d3:a1:96:2f:69:27:4c:86:b8:9e:5b:28:bc: c7:12:13:02:f3:06:5d:85:0e:df:49:c4:5f:69:bb: fa:ac:d7:e3:ef:4a:de:83:dc:be:b3:75:48:ee:b1: 85:ef:f7:24:c8:53:8a:0e:96:9b:63:21:c8:08:93: de:ff:85:db:a1:d0:71:35:63:65:75:36:ac:ca:d4: bf:dd:17:a0:6e:cf:52:9e:82:37:2d:a2:af:54:10: e9:82:2e:89:0a:99:e4:cb:8b:00:a1:48:e7:bd:72: d6:cf:d8:6b:85:64:d0:58:6c:aa:a6:37:35:fb:ab: 0e:59:49:db:db:7b:ea:30:9d:1d:51:97:b2:76:ba: 63:9f:68:da:c3:39:4e:7d:34:22:1e:33:78:64:a8: 9f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F7:DB:DF:2E:B2:BE:4A:0E:66:76:29:72:D3:51:51:A9:06:BA:8B X509v3 Authority Key Identifier: keyid:2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:13:32:37:08:4f:db:63:ec:f4:3c:38:6f:4d:f2:9b:de:3c: eb:c2:86:6b:49:6c:e2:9e:49:40:a4:ba:a8:c9:d9:79:75:d1: 3f:ba:55:63:74:83:23:a1:c4:96:96:b6:b3:f1:61:da:dc:e6: d6:ad:7c:cf:92:d0:02:73:1f:19:c3:d8:dd:85:25:b3:99:ca: 80:19:a8:9f:e4:23:1f:3d:7e:23:49:ff:31:98:83:bd:75:5f: 13:6d:03:d7:3c:8d:2c:32:84:2b:0c:fc:f6:ce:ba:63:f6:a2: 7d:14:6f:5a:5e:28:47:13:65:6e:1c:6b:60:32:fe:63:b6:34: ac:8d:65:1c:fe:6d:39:a9:f3:e1:cd:ab:e6:ba:60:65:92:c6: 19:65:99:c8:55:28:ba:59:20:26:40:0a:58:fb:78:0d:59:08: f6:0f:58:45:70:70:32:bd:5b:a1:68:9d:f9:9b:4c:47:b0:29: 02:ae:b7:f1:64:cd:30:83:6c:1f:4e:ee:6e:bb:bd:2d:e9:60: e2:e0:7b:ca:5b:4e:2d:58:49:7f:0c:61:d6:fc:38:8f:e3:bc: eb:3d:8f:ae:04:3b:d0:96:bb:6f:4b:56:f4:7f:32:92:67:ca: 38:0b:5e:fc:32:31:ec:52:c3:c8:d1:c9:21:b5:f4:43:d6:e6: d3:8c:df:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY1QTkxMTAvBgNVBAUTKDJCOTVEOEQ4MjI4QTg5MTQ3RDgwMTkzRDk3NzBFQjUw QUVEREJCNkIwHhcNMjQwNTE4MTcxMTUxWhcNMjQwNTI1MTcxMTUxWjAYMRYwFAYD VQQDEw02NjQ4ZTE1OC01ZmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9fnv+CMM7BVoTEpaq7Sjzvv0lC4QdNr5a1eb1UFUFtEYBW3bECBfCyd34Ud UMD6VUgGODO99AxK+7fD+p+Iwej76u/Ir516e4mONr8xCmJ1wmXc19xo56XzsCZl l1J3Qyp8rFZK/UJ/btOhli9pJ0yGuJ5bKLzHEhMC8wZdhQ7fScRfabv6rNfj70re g9y+s3VI7rGF7/ckyFOKDpabYyHICJPe/4XbodBxNWNldTasytS/3Regbs9SnoI3 LaKvVBDpgi6JCpnky4sAoUjnvXLWz9hrhWTQWGyqpjc1+6sOWUnb23vqMJ0dUZey drpjn2jawzlOfTQiHjN4ZKifdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIb3298u sr5KDmZ2KXLTUVGpBrqLMB8GA1UdIwQYMBaAFCuV2NgiiokUfYAZPZdw61Cu3btr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVBOS8wMEI3MTUxQ0ZE MDgxMUU3QTQyOEZGMEZDNEY5QUUwMi9LNVhZMkNLS2lSUjlnQms5bDNEclVLN2R1 MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s1WFkyQ0tLaVJSOWdCazlsM0RyVUs3ZHUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjVBOS8wMEI3MTUxQ0ZEMDgxMUU3QTQyOEZGMEZDNEY5QUUwMi9LNVhZMkNLS2lS UjlnQms5bDNEclVLN2R1MnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/EzI3CE/bY+z0PDhvTfKb3jzrwoZrSWzinklApLqoydl5ddE/ulVj dIMjocSWlraz8WHa3ObWrXzPktACcx8Zw9jdhSWzmcqAGaif5CMfPX4jSf8xmIO9 dV8TbQPXPI0sMoQrDPz2zrpj9qJ9FG9aXihHE2VuHGtgMv5jtjSsjWUc/m05qfPh zavmumBlksYZZZnIVSi6WSAmQApY+3gNWQj2D1hFcHAyvVuhaJ35m0xHsCkCrrfx ZM0wg2wfTu5uu70t6WDi4HvKW04tWEl/DGHW/DiP47zrPY+uBDvQlrtvS1b0fzKS Z8o4C178MjHsUsPI0ckhtfRD1ubTjN9P -----END CERTIFICATE-----Generated at Sat May 18 17:37:34 2024 by rpki-client on console-fra.rpki-client.org