$ rpki-client -vvf rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft File: 5jLTjFoywhfG7nHVLe-fOMoWbFE.mft (raw, json) Hash identifier: +rtKNMHHr4c624wpo9g7m2zUYzIbVtNKwGCMvrk7DhA= Subject key identifier: 8B:14:7E:1F:DF:42:B1:20:8C:18:23:D2:B3:2F:28:71:77:91:DB:F5 Authority key identifier: E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51 Certificate issuer: /CN=A911486F/serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51 Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft Manifest number: 010D Signing time: Sun 05 May 2024 05:41:14 +0000 Manifest this update: Sun 05 May 2024 05:41:13 +0000 Manifest next update: Sun 12 May 2024 05:41:13 +0000 Files and hashes: 1: 5jLTjFoywhfG7nHVLe-fOMoWbFE.crl (hash: 7I/3B0Z0udqcvJOtLPjoURX+wIiwWnpYV0Ke2TJNzls=) 2: 32D8E190D0CB11EEAB1CAF34C4F9AE02.roa (hash: XiWcqkDcsvOFFig0n+ygYts/d+AZtwoFOnRQ5BOzYoQ=) 3: 4D554D70D0CA11EE9DCDFA83C4F9AE02.roa (hash: IoymGXpKD2CL70pPUTw2E3zSeo05rJSNZrms/9hf9jQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911486F/serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51 Validity Not Before: May 5 05:41:13 2024 GMT Not After : May 12 05:41:13 2024 GMT Subject: CN=66371bf9-3274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:03:f4:78:bf:df:9f:c0:c8:90:02:f2:a4:4f: f7:92:59:c3:aa:91:1a:ac:f4:ac:6e:80:8d:0c:00: ba:05:15:08:e9:d4:47:58:39:d8:3e:84:20:bb:f9: 64:eb:21:37:8a:04:e5:3d:3e:88:01:d9:38:0b:dd: dc:40:4e:86:19:de:22:76:ec:e1:72:5f:6d:e8:df: e2:35:d1:9f:46:63:89:89:b0:d0:78:d2:fd:1b:a4: 8c:c9:be:48:df:4b:18:ec:66:52:fb:b8:a2:5b:84: 06:d2:5d:bb:16:93:15:af:50:51:bf:29:4b:fe:75: 1d:8a:c5:51:d4:b7:18:c0:1a:27:3c:5d:36:af:bc: cc:69:26:86:ab:9f:a8:50:3e:3c:cf:83:bb:bf:28: 1e:0b:da:dc:ac:88:41:44:bb:46:45:ff:57:19:46: 6a:cf:df:45:0c:20:98:82:5b:a8:a3:36:5d:3f:ad: 44:fd:44:d3:91:e3:11:c5:ba:6c:b7:1f:dc:49:7a: 45:8a:53:4e:a2:b4:7d:2a:fd:fe:79:1a:c5:e2:d1: a3:66:62:f3:06:14:15:04:30:b0:d9:55:9c:f8:90: 4e:15:1f:ba:f3:b3:5c:db:35:19:be:a4:ef:32:51: 0a:e7:4f:3b:dc:3a:7c:23:60:e2:7f:c3:2b:38:b3: 1f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:14:7E:1F:DF:42:B1:20:8C:18:23:D2:B3:2F:28:71:77:91:DB:F5 X509v3 Authority Key Identifier: keyid:E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:a7:72:f7:a1:4c:ac:2e:80:46:25:d6:ec:f6:fd:11:7a:d7: 86:ee:00:5e:f0:2a:47:47:d1:aa:b4:f8:ee:70:48:3b:5e:1d: 46:79:30:85:46:b1:ed:98:ca:92:45:9d:65:27:d0:f3:e9:b3: 37:cd:e3:a6:88:96:3c:41:49:1c:d6:0a:f0:e6:11:ed:46:75: 02:14:02:40:2a:66:8c:db:36:b5:b3:34:0b:17:cb:17:db:a1: c0:77:f1:be:07:fe:13:2d:0d:61:d0:25:74:db:80:07:e4:e1: 8e:b1:af:87:ef:17:ee:8e:75:08:4b:9c:2e:95:bd:6a:00:2a: 26:7b:72:63:c3:33:15:24:86:ec:62:fa:ef:67:b6:00:dd:06: 35:59:a8:3d:10:86:35:4d:65:89:7f:27:3e:b0:67:81:72:c9: d6:b4:2d:a7:6d:43:77:9d:cb:23:d2:ac:6f:1f:b4:d3:65:ab: fc:00:6d:a4:62:eb:57:bb:92:6f:1a:6b:1c:59:5a:58:a8:b2: 7b:4a:8a:96:11:b3:82:77:76:1e:d7:9a:16:ea:e7:d3:f4:5f: b8:c7:7e:04:93:61:3a:0c:1c:fe:da:f2:d4:ad:a3:f3:94:7a: 5a:e6:c0:8c:24:23:f6:dc:94:87:d3:15:bf:13:7f:2a:92:28: 7d:f3:2d:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ4NkYxMTAvBgNVBAUTKEU2MzJEMzhDNUEzMkMyMTdDNkVFNzFENTJERUY5RjM4 Q0ExNjZDNTEwHhcNMjQwNTA1MDU0MTEzWhcNMjQwNTEyMDU0MTEzWjAYMRYwFAYD VQQDEw02NjM3MWJmOS0zMjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwP0eL/fn8DIkALypE/3klnDqpEarPSsboCNDAC6BRUI6dRHWDnYPoQgu/lk 6yE3igTlPT6IAdk4C93cQE6GGd4iduzhcl9t6N/iNdGfRmOJibDQeNL9G6SMyb5I 30sY7GZS+7iiW4QG0l27FpMVr1BRvylL/nUdisVR1LcYwBonPF02r7zMaSaGq5+o UD48z4O7vygeC9rcrIhBRLtGRf9XGUZqz99FDCCYgluoozZdP61E/UTTkeMRxbps tx/cSXpFilNOorR9Kv3+eRrF4tGjZmLzBhQVBDCw2VWc+JBOFR+687Nc2zUZvqTv MlEK50873Dp8I2Dif8MrOLMfvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIsUfh/f QrEgjBgj0rMvKHF3kdv1MB8GA1UdIwQYMBaAFOYy04xaMsIXxu5x1S3vnzjKFmxR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDg2Ri8yMkNGMzQ0ODg2 NkMxMUVEQUZBNUE0NzFDNEY5QUUwMi81akxUakZveXdoZkc3bkhWTGUtZk9Nb1di RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVqTFRqRm95d2hmRzduSFZMZS1mT01vV2JGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDg2Ri8yMkNGMzQ0ODg2NkMxMUVEQUZBNUE0NzFDNEY5QUUwMi81akxUakZveXdo Zkc3bkhWTGUtZk9Nb1diRkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAap3L3oUysLoBGJdbs9v0ReteG7gBe8CpHR9GqtPjucEg7Xh1GeTCF RrHtmMqSRZ1lJ9Dz6bM3zeOmiJY8QUkc1grw5hHtRnUCFAJAKmaM2za1szQLF8sX 26HAd/G+B/4TLQ1h0CV024AH5OGOsa+H7xfujnUIS5wulb1qACome3JjwzMVJIbs YvrvZ7YA3QY1Wag9EIY1TWWJfyc+sGeBcsnWtC2nbUN3ncsj0qxvH7TTZav8AG2k YutXu5JvGmscWVpYqLJ7SoqWEbOCd3Ye15oW6ufT9F+4x34Ek2E6DBz+2vLUraPz lHpa5sCMJCP23JSH0xW/E38qkih98y1Z -----END CERTIFICATE-----Generated at Sun May 5 06:13:34 2024 by rpki-client on console-ams.rpki-client.org