$ rpki-client -vvf rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft File: 5HXUQnchUazw-uprObkBK9Ij05M.mft (raw, json) Hash identifier: I6ix56SaixqJ7lmn5L3OHLy9EpluYdZpmrUwiIyJgKE= Subject key identifier: 91:57:A9:07:9E:D8:54:DF:50:01:4E:3C:C3:A7:AF:D0:00:8D:E1:9D Authority key identifier: E4:75:D4:42:77:21:51:AC:F0:FA:EA:6B:39:B9:01:2B:D2:23:D3:93 Certificate issuer: /CN=A912809D/serialNumber=E475D442772151ACF0FAEA6B39B9012BD223D393 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft Manifest number: 5E Signing time: Wed 15 May 2024 07:48:23 +0000 Manifest this update: Wed 15 May 2024 07:48:22 +0000 Manifest next update: Wed 22 May 2024 07:48:22 +0000 Files and hashes: 1: 5HXUQnchUazw-uprObkBK9Ij05M.crl (hash: Pcb8Grna96PpZ690M1Wds3R4rAGK1n5rZitblpqtZsg=) 2: 2BBE96C284FC11EEAA5EAA5DC4F9AE02.roa (hash: 1A/0rGLyMTQmgnyQaZkWrIknuMBOl+EJ36Nl+mEe2Fg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.crl rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912809D/serialNumber=E475D442772151ACF0FAEA6B39B9012BD223D393 Validity Not Before: May 15 07:48:22 2024 GMT Not After : May 22 07:48:22 2024 GMT Subject: CN=664468c6-bcda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7c:39:d9:79:ad:fa:28:74:f9:08:1e:5d:14: b7:fd:5c:81:10:e7:2a:b8:b8:42:2f:d3:65:3c:93: 3c:29:ac:ff:3f:bf:a1:73:30:25:21:d7:90:ee:57: 3a:ba:43:29:6a:4c:d8:93:1d:61:b0:a6:99:1a:50: 02:b1:c1:8e:37:57:2e:ee:0f:ee:93:f0:8e:ca:b1: 9b:39:b7:b5:ba:e1:38:d1:b9:05:6c:2d:17:34:15: 6c:b4:d6:65:b5:6b:b6:67:67:87:29:33:f4:06:31: 7a:5a:e4:77:3f:90:8b:7f:2b:79:64:71:c1:a4:1c: b8:70:27:62:3c:7b:33:ab:60:75:fa:7b:01:0d:bc: db:f5:33:0f:19:c4:bf:53:90:f1:74:9f:27:2a:69: d8:f8:35:1f:00:59:a5:08:b6:9b:9f:1b:7a:8b:ac: 21:b0:56:22:e0:a2:e6:a5:a5:de:d0:c7:9f:b9:b3: 01:d0:d9:c2:fd:38:12:1f:be:77:56:42:e0:b0:74: d4:a8:10:8a:04:80:70:c1:e6:98:90:8c:4d:44:55: 66:b9:0c:a1:fb:78:ef:5a:f8:2a:ed:5f:ba:f6:76: 0f:a2:40:b8:e2:1c:48:8c:aa:f8:97:04:11:12:3c: 5c:e2:df:4b:4d:f9:a5:19:c7:79:25:f9:ef:59:93: b8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:57:A9:07:9E:D8:54:DF:50:01:4E:3C:C3:A7:AF:D0:00:8D:E1:9D X509v3 Authority Key Identifier: keyid:E4:75:D4:42:77:21:51:AC:F0:FA:EA:6B:39:B9:01:2B:D2:23:D3:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:0e:dd:d7:26:69:8e:2a:51:fc:42:f4:01:ea:a5:fb:c6:d8: e3:8d:ad:f4:49:ca:7f:f4:e2:f6:3c:69:04:f1:cd:84:ca:74: 03:40:34:f7:7e:45:1f:ce:02:ce:7d:72:61:61:35:c5:d6:57: ad:8e:05:d5:a1:08:5e:43:2f:ca:c3:36:68:bb:91:6e:3b:34: 59:a5:51:06:4a:63:35:82:1d:a5:b2:aa:f8:1b:c7:ca:7d:34: 74:51:39:1c:ae:29:3a:42:52:6b:ed:92:7e:72:4e:52:27:68: 25:6d:86:15:5a:40:c6:4e:19:43:e2:2e:f8:fe:72:49:c3:e7: 49:d8:1a:93:fb:31:42:35:d7:41:72:aa:24:6f:54:28:a9:5a: 3f:dd:81:3a:c1:8c:98:67:97:95:39:5a:44:6f:63:d7:a6:a1: b8:c4:95:20:7a:fb:ff:f7:a3:ec:ec:08:33:22:d2:ce:d5:56: 85:b5:50:3d:2c:c1:fb:a7:21:a3:6b:38:ca:a8:c2:84:18:8a: 67:3e:c8:58:d6:af:26:21:e8:82:c1:5a:5d:0d:88:11:a7:b1: 75:ea:c5:9a:62:4d:20:1e:81:f9:44:bd:de:ad:fa:ec:bc:c4: ec:70:88:8d:2c:ee:22:82:37:3d:23:ed:28:a2:4b:af:a7:da: 6c:d2:1a:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy ODA5RDExMC8GA1UEBRMoRTQ3NUQ0NDI3NzIxNTFBQ0YwRkFFQTZCMzlCOTAxMkJE MjIzRDM5MzAeFw0yNDA1MTUwNzQ4MjJaFw0yNDA1MjIwNzQ4MjJaMBgxFjAUBgNV BAMTDTY2NDQ2OGM2LWJjZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFfDnZea36KHT5CB5dFLf9XIEQ5yq4uEIv02U8kzwprP8/v6FzMCUh15DuVzq6 QylqTNiTHWGwppkaUAKxwY43Vy7uD+6T8I7KsZs5t7W64TjRuQVsLRc0FWy01mW1 a7ZnZ4cpM/QGMXpa5Hc/kIt/K3lkccGkHLhwJ2I8ezOrYHX6ewENvNv1Mw8ZxL9T kPF0nycqadj4NR8AWaUItpufG3qLrCGwViLgoualpd7Qx5+5swHQ2cL9OBIfvndW QuCwdNSoEIoEgHDB5piQjE1EVWa5DKH7eO9a+CrtX7r2dg+iQLjiHEiMqviXBBES PFzi30tN+aUZx3kl+e9Zk7iFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkVepB57Y VN9QAU48w6ev0ACN4Z0wHwYDVR0jBBgwFoAU5HXUQnchUazw+uprObkBK9Ij05Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4MDlELzAxRkFDOThBODRG OTExRUVBNzVDMkYzOUM0RjlBRTAyLzVIWFVRbmNoVWF6dy11cHJPYmtCSzlJajA1 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNUhYVVFuY2hVYXp3LXVwck9ia0JLOUlqMDVNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4 MDlELzAxRkFDOThBODRGOTExRUVBNzVDMkYzOUM0RjlBRTAyLzVIWFVRbmNoVWF6 dy11cHJPYmtCSzlJajA1TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJUO3dcmaY4qUfxC9AHqpfvG2OONrfRJyn/04vY8aQTxzYTKdANANPd+ RR/OAs59cmFhNcXWV62OBdWhCF5DL8rDNmi7kW47NFmlUQZKYzWCHaWyqvgbx8p9 NHRRORyuKTpCUmvtkn5yTlInaCVthhVaQMZOGUPiLvj+cknD50nYGpP7MUI110Fy qiRvVCipWj/dgTrBjJhnl5U5WkRvY9emobjElSB6+//3o+zsCDMi0s7VVoW1UD0s wfunIaNrOMqowoQYimc+yFjWryYh6ILBWl0NiBGnsXXqxZpiTSAegflEvd6t+uy8 xOxwiI0s7iKCNz0j7SiiS6+n2mzSGjI= -----END CERTIFICATE-----Generated at Wed May 15 09:27:28 2024 by rpki-client on console-fra.rpki-client.org