$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft File: -jVgKfx3KltDJpwxataFxLtaZW0.mft (raw, json) Hash identifier: 16khWPc1e9Bg2x2ZUERBaWVqLRcfAEV3YfWVXFz9Xjk= Subject key identifier: A5:36:2E:C6:43:CA:11:62:53:C9:42:91:46:F3:38:8D:35:1F:46:6C Authority key identifier: FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D Certificate issuer: /CN=A9116B5E/serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D Certificate serial: 054F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft Manifest number: 0542 Signing time: Fri 03 May 2024 01:04:16 +0000 Manifest this update: Fri 03 May 2024 01:04:16 +0000 Manifest next update: Fri 10 May 2024 01:04:16 +0000 Files and hashes: 1: -jVgKfx3KltDJpwxataFxLtaZW0.crl (hash: Ysoyz2xLIpGr1PXFJBdrjvXpr4EnarHlh361un8UO/w=) 2: CF6FCFD4748C11ECA9BF0D3CC4F9AE02.roa (hash: YILeqJZnBP+biNE3Js7vsf1MLzNqi4vNRRXostQnwHI=) 3: 531416ACD5CB11ECA4E7EB2AC4F9AE02.roa (hash: f4cy+G+YntmqzMv+xjmdLs0/cMka1Iwc+8ACKfQldw4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 01:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1359 (0x54f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116B5E/serialNumber=FA356029FC772A5B43269C316AD685C4BB5A656D Validity Not Before: May 3 01:04:16 2024 GMT Not After : May 10 01:04:16 2024 GMT Subject: CN=66343810-6891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ab:ce:e9:2e:fb:41:9d:f2:8f:95:cf:87:ed: 97:be:e0:0f:75:bb:28:4a:5c:f3:d4:df:a7:36:11: 99:7a:23:31:fe:0a:13:21:10:52:97:f4:58:15:7e: df:7b:80:81:57:b3:3e:3a:6d:d4:85:25:91:5a:94: f3:11:08:fb:47:4a:31:6b:b0:d1:ec:87:8b:67:b9: 1f:f1:a0:82:14:1e:ea:67:01:b7:ea:43:64:e7:48: f4:94:2f:88:c4:24:65:9c:4e:35:68:ad:d2:81:dd: e0:d8:89:03:16:7b:bf:be:97:3c:2a:b5:40:ea:6c: 9c:a6:99:b0:f7:89:10:c5:b2:34:7a:16:0c:28:2d: 74:9e:fa:d1:40:c8:e6:b2:7d:7c:94:ac:59:97:10: 7d:29:da:92:be:29:fd:e0:1b:7c:0b:62:d8:cc:db: ed:d6:53:58:46:ba:ab:8f:72:b9:f7:cf:93:90:9b: 5e:35:0f:93:84:0e:4a:2d:8a:df:d8:78:04:71:97: cc:32:07:b9:99:50:ce:e9:69:90:82:26:0a:21:bb: 68:18:df:86:2d:53:6c:8f:e1:c2:0d:93:92:11:4a: b9:94:a5:02:39:72:de:b4:8a:1d:50:75:fa:5c:3b: 69:c5:59:f1:5c:34:fc:db:c7:d3:f8:ce:99:46:15: be:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:36:2E:C6:43:CA:11:62:53:C9:42:91:46:F3:38:8D:35:1F:46:6C X509v3 Authority Key Identifier: keyid:FA:35:60:29:FC:77:2A:5B:43:26:9C:31:6A:D6:85:C4:BB:5A:65:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-jVgKfx3KltDJpwxataFxLtaZW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B5E/F58C5694A6E011EBAC1DEB57C4F9AE02/-jVgKfx3KltDJpwxataFxLtaZW0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:68:b9:65:6d:f1:ac:5a:97:d6:80:c4:4a:f1:5e:7c:33:e7: da:6c:a0:b3:7d:90:7c:95:19:9f:f7:fc:e9:67:e1:6d:bd:34: 35:a7:08:99:b9:d1:96:47:01:48:1a:27:09:d6:17:62:7d:f3: 56:bb:ce:f3:6f:d3:57:f1:76:bc:ed:1b:53:dd:3d:2f:5d:88: 70:29:6e:98:1b:05:78:47:cb:bc:47:41:f8:f9:6f:d2:30:1c: 4e:13:bf:f8:dd:d5:89:88:90:3a:e7:d9:0f:64:7e:fb:0e:3d: ce:7a:41:30:e9:ad:b9:54:b6:6e:a5:e8:4e:7f:0c:c9:e4:d5: 01:a3:e0:cb:6b:28:68:26:8d:27:9f:c6:1e:d8:70:77:5b:34: 15:24:e0:5d:1f:e0:1f:d2:b3:5d:04:ca:d8:77:df:80:cf:5b: 6e:9e:c7:23:d7:20:e8:79:b2:88:08:6f:ee:6a:ee:17:ab:ca: bb:45:35:f0:36:e5:07:c5:a5:40:40:9d:bb:0d:b9:af:f7:24: ca:92:5e:39:90:ad:b3:e4:ac:1e:bc:3b:37:8c:5e:5f:a9:a5: 15:90:62:84:a8:ba:f4:ee:87:75:4d:dc:0b:7c:73:5d:73:5a: 3b:5d:93:c3:c4:cc:da:1d:16:93:ba:58:1b:90:d9:44:36:c3: a0:53:b6:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCNUUxMTAvBgNVBAUTKEZBMzU2MDI5RkM3NzJBNUI0MzI2OUMzMTZBRDY4NUM0 QkI1QTY1NkQwHhcNMjQwNTAzMDEwNDE2WhcNMjQwNTEwMDEwNDE2WjAYMRYwFAYD VQQDEw02NjM0MzgxMC02ODkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqvO6S77QZ3yj5XPh+2XvuAPdbsoSlzz1N+nNhGZeiMx/goTIRBSl/RYFX7f e4CBV7M+Om3UhSWRWpTzEQj7R0oxa7DR7IeLZ7kf8aCCFB7qZwG36kNk50j0lC+I xCRlnE41aK3Sgd3g2IkDFnu/vpc8KrVA6mycppmw94kQxbI0ehYMKC10nvrRQMjm sn18lKxZlxB9KdqSvin94Bt8C2LYzNvt1lNYRrqrj3K598+TkJteNQ+ThA5KLYrf 2HgEcZfMMge5mVDO6WmQgiYKIbtoGN+GLVNsj+HCDZOSEUq5lKUCOXLetIodUHX6 XDtpxVnxXDT828fT+M6ZRhW+VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKU2LsZD yhFiU8lCkUbzOI01H0ZsMB8GA1UdIwQYMBaAFPo1YCn8dypbQyacMWrWhcS7WmVt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkI1RS9GNThDNTY5NEE2 RTAxMUVCQUMxREVCNTdDNEY5QUUwMi8talZnS2Z4M0tsdERKcHd4YXRhRnhMdGFa VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1qVmdLZngzS2x0REpwd3hhdGFGeEx0YVpXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkI1RS9GNThDNTY5NEE2RTAxMUVCQUMxREVCNTdDNEY5QUUwMi8talZnS2Z4M0ts dERKcHd4YXRhRnhMdGFaVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4aLllbfGsWpfWgMRK8V58M+fabKCzfZB8lRmf9/zpZ+FtvTQ1pwiZ udGWRwFIGicJ1hdiffNWu87zb9NX8Xa87RtT3T0vXYhwKW6YGwV4R8u8R0H4+W/S MBxOE7/43dWJiJA659kPZH77Dj3OekEw6a25VLZupehOfwzJ5NUBo+DLayhoJo0n n8Ye2HB3WzQVJOBdH+Af0rNdBMrYd9+Az1tunscj1yDoebKICG/uau4Xq8q7RTXw NuUHxaVAQJ27Dbmv9yTKkl45kK2z5KwevDs3jF5fqaUVkGKEqLr07od1TdwLfHNd c1o7XZPDxMzaHRaTulgbkNlENsOgU7Zt -----END CERTIFICATE-----Generated at Fri May 3 04:45:07 2024 by rpki-client on console-fra.rpki-client.org