$ rpki-client -vvf rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft File: 5LOuPtIxeiPhm9egMr766tU3J9M.mft (raw, json) Hash identifier: cOB/RMpd7Lv8/t6RaSKouHdpAQwum2lDJZ7Hb76gZxs= Subject key identifier: 1C:06:F7:A6:80:AA:50:9A:9F:38:FE:00:B2:05:27:D3:D5:8F:83:38 Authority key identifier: E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3 Certificate issuer: /CN=A91298E0/serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3 Certificate serial: 33BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft Manifest number: 33BB Signing time: Thu 02 May 2024 14:47:33 +0000 Manifest this update: Thu 02 May 2024 14:47:33 +0000 Manifest next update: Thu 09 May 2024 14:47:33 +0000 Files and hashes: 1: 5LOuPtIxeiPhm9egMr766tU3J9M.crl (hash: /C4+lWqE1rDuumXhMKxj+8Cr+P8pllQQxGuuTnmBuDA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 14:47:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13243 (0x33bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91298E0/serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3 Validity Not Before: May 2 14:47:33 2024 GMT Not After : May 9 14:47:33 2024 GMT Subject: CN=6633a785-febd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:99:1a:d8:91:9f:4e:5e:58:fa:f5:c2:08:df: 3e:92:e4:d9:e9:44:1b:b7:3c:de:3d:96:52:22:9b: 91:eb:cd:3b:56:1c:0a:57:b0:13:40:91:16:6b:63: 52:2b:cd:31:5d:fc:75:10:12:21:ab:d8:b4:48:93: e0:af:82:22:60:36:88:11:fd:1d:b5:a4:48:5e:89: ee:50:15:f9:b4:75:f8:18:99:1c:93:13:c7:90:40: 17:86:20:42:c1:59:b6:60:7e:b7:24:87:62:59:60: 9a:87:91:99:41:28:01:fe:cd:98:b9:dd:e6:06:68: 75:c4:d1:d5:b7:ba:f2:68:74:28:c4:04:aa:ce:48: 2b:f7:73:76:8e:9e:93:1c:c0:4a:d5:6e:05:8d:41: 8f:7c:51:5c:bc:97:ad:8f:5c:73:06:75:1f:0d:6c: 19:86:ec:33:9c:db:d1:dd:04:6a:37:35:e8:e2:e1: 84:b6:bf:0a:64:d8:50:c6:95:bc:7d:3e:09:34:20: eb:18:b9:73:10:6d:f4:df:7d:03:23:09:89:de:cf: 19:b6:83:38:8b:64:3c:aa:c0:3a:11:b8:e7:4e:25: c5:4b:2c:f1:f6:ad:bb:61:0a:27:98:ba:99:e8:a6: 81:0a:53:79:3c:66:e2:25:f0:2d:24:9f:e0:78:bd: 62:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:06:F7:A6:80:AA:50:9A:9F:38:FE:00:B2:05:27:D3:D5:8F:83:38 X509v3 Authority Key Identifier: keyid:E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:c7:42:5c:bb:59:dd:7b:20:db:9e:1c:f0:21:61:6f:18:5e: 91:94:0d:e7:58:0d:c4:ff:0c:98:a6:3c:d8:90:ad:56:4d:11: 92:a3:60:0a:38:dd:1c:82:de:28:b2:dd:34:fc:fa:9b:fa:8e: 99:8a:64:18:d3:a0:8e:c0:70:f9:cb:a6:34:89:31:a3:60:15: bb:e4:a9:93:41:79:8c:0a:dd:18:dc:55:f1:a9:eb:be:6a:e7: f6:62:09:a2:4d:a3:c9:16:22:50:c6:1b:1c:d7:e0:ed:ef:b2: 46:90:20:ae:9e:eb:22:f5:9a:a5:ca:37:65:0c:84:99:50:b7: 51:5b:cf:17:8d:d1:a1:f9:d4:fe:49:e8:39:d9:d3:21:6f:3d: 7a:70:47:e8:63:db:93:5f:59:a4:85:2d:37:07:15:0d:a0:44: 37:9d:16:a4:b2:eb:5a:da:01:9d:e1:13:ae:5f:d3:ec:e2:d0: f1:81:9a:9b:62:ec:f4:27:63:45:e0:78:7e:e4:8e:84:1a:6f: 30:1e:2d:77:be:3c:4e:59:53:df:41:ec:12:ac:74:60:ad:f6: bc:14:b3:2e:88:5f:a2:1b:e4:41:7c:ae:17:7e:b0:19:95:b5: e6:ee:db:d0:2d:7e:1e:34:bf:89:55:5b:f4:f0:42:27:1d:55: 56:d8:78:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk4RTAxMTAvBgNVBAUTKEU0QjNBRTNFRDIzMTdBMjNFMTlCRDdBMDMyQkVGQUVB RDUzNzI3RDMwHhcNMjQwNTAyMTQ0NzMzWhcNMjQwNTA5MTQ0NzMzWjAYMRYwFAYD VQQDEw02NjMzYTc4NS1mZWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7pka2JGfTl5Y+vXCCN8+kuTZ6UQbtzzePZZSIpuR6807VhwKV7ATQJEWa2NS K80xXfx1EBIhq9i0SJPgr4IiYDaIEf0dtaRIXonuUBX5tHX4GJkckxPHkEAXhiBC wVm2YH63JIdiWWCah5GZQSgB/s2Yud3mBmh1xNHVt7ryaHQoxASqzkgr93N2jp6T HMBK1W4FjUGPfFFcvJetj1xzBnUfDWwZhuwznNvR3QRqNzXo4uGEtr8KZNhQxpW8 fT4JNCDrGLlzEG30330DIwmJ3s8ZtoM4i2Q8qsA6EbjnTiXFSyzx9q27YQonmLqZ 6KaBClN5PGbiJfAtJJ/geL1iWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwG96aA qlCanzj+ALIFJ9PVj4M4MB8GA1UdIwQYMBaAFOSzrj7SMXoj4ZvXoDK++urVNyfT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOThFMC9EQzFFRkI0QTFE OTAxMUUyQjU3QUU3RjAwOEIwMkNEMi81TE91UHRJeGVpUGhtOWVnTXI3NjZ0VTNK OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVMT3VQdEl4ZWlQaG05ZWdNcjc2NnRVM0o5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OThFMC9EQzFFRkI0QTFEOTAxMUUyQjU3QUU3RjAwOEIwMkNEMi81TE91UHRJeGVp UGhtOWVnTXI3NjZ0VTNKOU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFx0Jcu1ndeyDbnhzwIWFvGF6RlA3nWA3E/wyYpjzYkK1WTRGSo2AK ON0cgt4ost00/Pqb+o6ZimQY06COwHD5y6Y0iTGjYBW75KmTQXmMCt0Y3FXxqeu+ auf2YgmiTaPJFiJQxhsc1+Dt77JGkCCunusi9ZqlyjdlDISZULdRW88XjdGh+dT+ Seg52dMhbz16cEfoY9uTX1mkhS03BxUNoEQ3nRaksuta2gGd4ROuX9Ps4tDxgZqb Yuz0J2NF4Hh+5I6EGm8wHi13vjxOWVPfQewSrHRgrfa8FLMuiF+iG+RBfK4XfrAZ lbXm7tvQLX4eNL+JVVv08EInHVVW2HiS -----END CERTIFICATE-----Generated at Thu May 2 17:18:26 2024 by rpki-client on console-ams.rpki-client.org