$ rpki-client -vvf rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft File: 5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft (raw, json) Hash identifier: n8IoIVM6B3LQL7SiQpVhRS6Kmb/C8/A/lbaWd/OolIA= Subject key identifier: 82:1C:AC:66:E3:BA:59:DC:19:94:15:F6:D6:10:83:7F:49:39:7D:18 Authority key identifier: E5:06:93:CA:18:5B:B6:5D:92:CA:FB:30:E3:76:F5:1B:95:9A:D2:D8 Certificate issuer: /CN=A9115122/serialNumber=E50693CA185BB65D92CAFB30E376F51B959AD2D8 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft Manifest number: BB Signing time: Sun 05 May 2024 06:28:30 +0000 Manifest this update: Sun 05 May 2024 06:28:29 +0000 Manifest next update: Sun 12 May 2024 06:28:29 +0000 Files and hashes: 1: 5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl (hash: XAfNSpnWaivnVchdzqJmH+fgtv6CtTa9arMQL1YwFeA=) 2: D4B97082EF2211EDB7EFE882C4F9AE02.roa (hash: VorcKomQb1OhQsSZaufvKgv+HrYNfQAE9LsxfCTlxtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 06:28:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115122/serialNumber=E50693CA185BB65D92CAFB30E376F51B959AD2D8 Validity Not Before: May 5 06:28:29 2024 GMT Not After : May 12 06:28:29 2024 GMT Subject: CN=6637270e-cf64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:46:2b:a3:81:a8:c1:a9:55:fd:90:0b:a0:42: da:80:6f:b1:3b:ce:10:ca:7c:1a:d7:44:c0:29:7e: d2:15:db:68:86:b8:b2:d0:3e:db:00:1f:aa:b2:db: fa:38:7c:c4:c8:e9:44:2b:35:90:91:97:64:e2:00: d0:6b:bd:38:d4:f7:7c:04:7e:55:c2:33:3c:22:a1: f1:40:b8:10:f6:be:7e:3d:26:0d:f1:06:f5:9d:53: be:dd:59:13:34:d7:d9:6a:fd:3e:90:f4:5e:15:99: 61:f2:64:1b:ad:83:b7:30:44:44:8c:98:dc:1d:0f: 27:2e:c9:25:4f:85:a0:5b:ad:bd:4c:0d:45:fd:6b: fa:b7:75:81:25:57:eb:08:20:73:42:28:dc:de:b0: f6:e0:2a:fe:ae:d2:45:48:d4:eb:78:d0:e4:a7:bc: 33:5d:f0:be:d7:5b:03:f9:5c:84:ef:61:3a:b4:f0: a8:13:93:2b:68:6e:d3:5e:9e:92:4e:60:7c:86:45: 0f:61:09:13:20:7c:23:c2:92:46:52:a2:29:2a:f8: d6:e1:ae:d9:ed:39:ec:0f:7c:3f:aa:74:dc:8c:b9: f9:8e:bb:e5:c3:51:83:37:13:d0:21:9f:26:e1:50: 68:8b:5d:8d:bf:82:e2:cf:74:17:ca:78:f4:af:6f: 8f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1C:AC:66:E3:BA:59:DC:19:94:15:F6:D6:10:83:7F:49:39:7D:18 X509v3 Authority Key Identifier: keyid:E5:06:93:CA:18:5B:B6:5D:92:CA:FB:30:E3:76:F5:1B:95:9A:D2:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:f5:00:42:52:9c:91:1d:70:79:4b:0d:d1:e4:38:9d:cb:e5: 80:87:16:c0:e1:b2:0b:96:d4:7c:e1:1e:53:78:53:12:3f:82: 92:5b:83:d0:2b:11:ab:0d:5b:1b:ff:f0:65:c4:0a:cd:e7:9c: 8f:cd:c4:de:c4:fe:cd:4a:a1:d5:82:bd:1e:80:4d:ce:d5:f2: b4:11:a4:4a:68:0c:c8:5b:a2:8b:62:c1:8a:53:06:d3:8a:a8: 80:cb:bd:4b:09:f0:9f:41:d5:05:0c:f6:f7:77:67:ec:d9:ed: 51:a6:d1:e1:e7:bd:d6:8c:dd:8d:40:08:62:a8:77:b7:e9:40: 3f:15:0f:81:47:d0:59:97:7f:76:da:56:b8:bf:ac:4e:b7:24: d1:55:62:45:19:b2:ad:a8:31:c5:9b:db:80:e3:ef:bf:c1:7a: 1a:51:e8:29:f2:b5:31:36:ad:42:59:0d:eb:8b:2a:57:95:21: 5b:3a:44:d7:8f:ad:9d:07:97:f4:d1:49:c3:0d:2f:9d:a0:18: 7a:b4:12:20:1e:62:37:32:ac:7a:92:2d:68:bc:81:70:9a:a1: 6b:fe:08:0f:40:41:f8:52:b2:25:3a:6e:bb:2e:c1:67:05:a6: 45:15:f4:e7:c4:58:fc:dd:d5:1b:79:b7:bd:62:0b:30:8d:54: b4:99:b8:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTUxMjIxMTAvBgNVBAUTKEU1MDY5M0NBMTg1QkI2NUQ5MkNBRkIzMEUzNzZGNTFC OTU5QUQyRDgwHhcNMjQwNTA1MDYyODI5WhcNMjQwNTEyMDYyODI5WjAYMRYwFAYD VQQDEw02NjM3MjcwZS1jZjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkYro4GowalV/ZALoELagG+xO84Qynwa10TAKX7SFdtohriy0D7bAB+qstv6 OHzEyOlEKzWQkZdk4gDQa7041Pd8BH5VwjM8IqHxQLgQ9r5+PSYN8Qb1nVO+3VkT NNfZav0+kPReFZlh8mQbrYO3MEREjJjcHQ8nLsklT4WgW629TA1F/Wv6t3WBJVfr CCBzQijc3rD24Cr+rtJFSNTreNDkp7wzXfC+11sD+VyE72E6tPCoE5MraG7TXp6S TmB8hkUPYQkTIHwjwpJGUqIpKvjW4a7Z7TnsD3w/qnTcjLn5jrvlw1GDNxPQIZ8m 4VBoi12Nv4Liz3QXynj0r2+PtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIIcrGbj ulncGZQV9tYQg39JOX0YMB8GA1UdIwQYMBaAFOUGk8oYW7Zdksr7MON29RuVmtLY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTEyMi8zMEM3QTM4RUVG MUYxMUVEQkY3MUNDODBDNEY5QUUwMi81UWFUeWhoYnRsMlN5dnN3NDNiMUc1V2Ew dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRYVR5aGhidGwyU3l2c3c0M2IxRzVXYTB0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTEyMi8zMEM3QTM4RUVGMUYxMUVEQkY3MUNDODBDNEY5QUUwMi81UWFUeWhoYnRs MlN5dnN3NDNiMUc1V2EwdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI9QBCUpyRHXB5Sw3R5Didy+WAhxbA4bILltR84R5TeFMSP4KSW4PQ KxGrDVsb//BlxArN55yPzcTexP7NSqHVgr0egE3O1fK0EaRKaAzIW6KLYsGKUwbT iqiAy71LCfCfQdUFDPb3d2fs2e1RptHh573WjN2NQAhiqHe36UA/FQ+BR9BZl392 2la4v6xOtyTRVWJFGbKtqDHFm9uA4++/wXoaUegp8rUxNq1CWQ3riypXlSFbOkTX j62dB5f00UnDDS+doBh6tBIgHmI3Mqx6ki1ovIFwmqFr/ggPQEH4UrIlOm67LsFn BaZFFfTnxFj83dUbebe9YgswjVS0mbj0 -----END CERTIFICATE-----Generated at Sun May 5 08:38:57 2024 by rpki-client on console-fra.rpki-client.org