$ rpki-client -vvf rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft File: 5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft (raw, json) Hash identifier: 3A7lvkU1QWH6uVcqryAcGijFiFlPlrclXLriEh3u5lg= Subject key identifier: 66:5B:72:E7:97:6D:3B:CB:36:1E:97:AA:52:A3:D1:82:77:0F:6A:79 Authority key identifier: E6:A5:4B:AD:7D:17:6E:44:47:A9:E9:4F:24:48:03:27:C1:B4:0C:9E Certificate issuer: /CN=A91293F4/serialNumber=E6A54BAD7D176E4447A9E94F24480327C1B40C9E Certificate serial: 08BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft Manifest number: 08B8 Signing time: Sat 04 May 2024 21:37:33 +0000 Manifest this update: Sat 04 May 2024 21:37:33 +0000 Manifest next update: Sat 11 May 2024 21:37:32 +0000 Files and hashes: 1: 5qVLrX0XbkRHqelPJEgDJ8G0DJ4.crl (hash: XM2Kzyqq95siynkg+xHtaFNcJq2AVKJ6zbXXO5kndjc=) 2: 3E730FA28E8111EAB2038B6BC4F9AE02.roa (hash: L0mS4wob8uYeqyIh2zngdWdPiGJkyvyMSBMfCc/SXKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.crl rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2237 (0x8bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91293F4/serialNumber=E6A54BAD7D176E4447A9E94F24480327C1B40C9E Validity Not Before: May 4 21:37:33 2024 GMT Not After : May 11 21:37:32 2024 GMT Subject: CN=6636aa9d-4621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:84:ad:d8:5f:2a:46:52:ea:0d:ed:5f:b6:e6: 54:e3:3e:9e:f1:a0:94:6e:c6:ca:2b:c3:64:1a:ab: 75:de:70:b5:85:5a:1e:d3:0c:58:87:60:73:1f:39: 93:47:4f:54:e2:02:1a:7f:35:82:e9:7f:9e:e1:42: 2e:37:a3:cf:c9:63:80:56:45:1d:5b:70:37:73:e9: 7f:6d:63:f5:51:8a:1a:80:74:6f:8b:0e:b1:6e:0b: ad:db:fa:de:45:3b:e1:db:dd:53:70:5b:ba:8a:9b: 0f:a8:34:23:45:84:c8:bb:8f:a9:ea:b3:13:a1:30: 32:dc:bf:e8:3e:cb:8b:95:68:7d:2f:af:45:2a:95: 67:59:c0:8c:97:04:35:49:11:88:a9:53:fe:08:0e: be:d7:c0:6d:12:f6:58:e1:72:b6:de:90:9b:23:47: 2b:54:35:a9:5c:16:61:85:95:b4:90:c1:a3:f6:2c: a1:49:08:6d:bf:f9:4b:f0:c5:e2:02:4e:ea:fe:22: ee:16:4f:9e:5c:2b:e0:80:56:f0:e5:b6:27:55:c6: d6:90:a4:e8:ca:a5:b7:59:f0:23:95:77:5a:44:94: ef:3d:39:bb:40:a9:61:38:04:d8:89:8f:00:08:cd: 17:41:06:c3:13:34:7d:62:41:61:d7:48:93:66:92: ff:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5B:72:E7:97:6D:3B:CB:36:1E:97:AA:52:A3:D1:82:77:0F:6A:79 X509v3 Authority Key Identifier: keyid:E6:A5:4B:AD:7D:17:6E:44:47:A9:E9:4F:24:48:03:27:C1:B4:0C:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:48:bd:79:d9:04:6e:15:9c:b8:b6:23:a4:32:83:17:d5:fc: b9:d1:3d:83:cf:1f:cb:32:ae:96:83:17:18:65:7f:bc:e9:ef: 0d:44:e9:85:13:42:ab:30:bf:22:a9:8f:db:91:3a:f9:09:32: d3:4e:78:26:c8:ab:4f:1f:18:99:ca:ee:82:f9:cd:73:c6:5e: 07:a5:fd:16:63:0c:e6:0c:43:b2:65:d6:2f:7f:3c:33:3b:73: f7:6b:19:31:36:fa:a4:58:c6:6f:f0:b1:65:13:30:a3:1c:a7: 9b:a7:10:cf:0f:bd:7b:14:dc:92:f5:c4:24:b6:bd:42:21:9c: a6:a3:a8:c0:21:fc:c1:20:86:6d:44:ef:4e:1f:44:4c:d4:12: 6c:bf:3b:f1:0c:c6:ca:5d:07:91:bf:8a:cf:d6:12:43:1c:49: 9c:e8:43:3d:21:fc:30:b7:26:5d:c8:d7:cf:33:d8:0c:11:af: 59:a9:ab:2e:f7:ef:9a:18:ba:85:35:22:49:2a:7f:29:0d:62: d9:27:16:75:80:ce:8b:03:69:c1:ba:71:f0:38:37:61:a4:0e: b7:ac:bb:38:b6:af:de:58:20:2d:69:37:e8:4f:d8:4d:8b:87: de:d2:b8:d8:1d:ad:91:20:e8:24:19:6a:f4:aa:77:36:98:fc: 40:d7:44:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkzRjQxMTAvBgNVBAUTKEU2QTU0QkFEN0QxNzZFNDQ0N0E5RTk0RjI0NDgwMzI3 QzFCNDBDOUUwHhcNMjQwNTA0MjEzNzMzWhcNMjQwNTExMjEzNzMyWjAYMRYwFAYD VQQDEw02NjM2YWE5ZC00NjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvoSt2F8qRlLqDe1ftuZU4z6e8aCUbsbKK8NkGqt13nC1hVoe0wxYh2BzHzmT R09U4gIafzWC6X+e4UIuN6PPyWOAVkUdW3A3c+l/bWP1UYoagHRviw6xbgut2/re RTvh291TcFu6ipsPqDQjRYTIu4+p6rMToTAy3L/oPsuLlWh9L69FKpVnWcCMlwQ1 SRGIqVP+CA6+18BtEvZY4XK23pCbI0crVDWpXBZhhZW0kMGj9iyhSQhtv/lL8MXi Ak7q/iLuFk+eXCvggFbw5bYnVcbWkKToyqW3WfAjlXdaRJTvPTm7QKlhOATYiY8A CM0XQQbDEzR9YkFh10iTZpL/pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZbcueX bTvLNh6XqlKj0YJ3D2p5MB8GA1UdIwQYMBaAFOalS619F25ER6npTyRIAyfBtAye MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTNGNC8xRjY5NUVFQzhF N0YxMUVBQTk1ODRDNjdDNEY5QUUwMi81cVZMclgwWGJrUkhxZWxQSkVnREo4RzBE SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVxVkxyWDBYYmtSSHFlbFBKRWdESjhHMERKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTNGNC8xRjY5NUVFQzhFN0YxMUVBQTk1ODRDNjdDNEY5QUUwMi81cVZMclgwWGJr UkhxZWxQSkVnREo4RzBESjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgSL152QRuFZy4tiOkMoMX1fy50T2Dzx/LMq6WgxcYZX+86e8NROmF E0KrML8iqY/bkTr5CTLTTngmyKtPHxiZyu6C+c1zxl4Hpf0WYwzmDEOyZdYvfzwz O3P3axkxNvqkWMZv8LFlEzCjHKebpxDPD717FNyS9cQktr1CIZymo6jAIfzBIIZt RO9OH0RM1BJsvzvxDMbKXQeRv4rP1hJDHEmc6EM9IfwwtyZdyNfPM9gMEa9Zqasu 9++aGLqFNSJJKn8pDWLZJxZ1gM6LA2nBunHwODdhpA63rLs4tq/eWCAtaTfoT9hN i4fe0rjYHa2RIOgkGWr0qnc2mPxA10TA -----END CERTIFICATE-----Generated at Sun May 5 00:14:40 2024 by rpki-client on console-ams.rpki-client.org