$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft File: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft (raw, json) Hash identifier: LK1qxVrbD3liOKCcHeLoLzJvPYmMZ0L+e0r0XZus39g= Subject key identifier: 17:77:B7:49:98:83:B2:62:19:B8:47:5B:43:A8:32:EA:1C:2D:D3:5B Authority key identifier: E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 Certificate issuer: /CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Certificate serial: 0292 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft Manifest number: 0288 Signing time: Wed 01 May 2024 04:01:34 +0000 Manifest this update: Wed 01 May 2024 04:01:34 +0000 Manifest next update: Wed 08 May 2024 04:01:34 +0000 Files and hashes: 1: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl (hash: ubXfd6/OkqwC+SOAnJ905KFFtG2lfK6xCnBSGdYqX/I=) 2: 44B90434DFA011ED8C895F7CC4F9AE02.roa (hash: 5uQdC/Aj/BekU6t4F2SSyV0cuXGmv9OJwhqQoF3gV3Y=) 3: 0589A4B8DF9511EDAAA7E22AC4F9AE02.roa (hash: fZINIbheYfqPSlmD4xMT4zKcUz3FSELZ4ZHi11Z85ho=) 4: 36B1CD340A6D11ED89FD3F13C4F9AE02.roa (hash: 62sXJWlT3h3nHyOfMwNf6c+ar5aY+tJqwoFwwPI3cac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 658 (0x292) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Validity Not Before: May 1 04:01:34 2024 GMT Not After : May 8 04:01:34 2024 GMT Subject: CN=6631be9e-00fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:77:ae:8c:b1:0e:bd:b8:4e:8d:fd:9a:a4:74: ef:e4:aa:b8:5c:00:1e:83:55:f3:47:95:ac:84:b5: 40:cd:7a:70:ed:83:37:47:4b:3e:cb:c5:e4:94:a6: 8a:30:bb:67:84:7b:53:52:b0:ed:fd:fb:2a:84:9c: d8:69:ab:14:ef:b2:11:20:b1:8b:97:a2:46:c0:fb: f8:4b:88:e9:ca:e6:6b:fa:56:8b:fb:b6:ee:df:d2: f7:24:9b:dc:d8:13:78:bd:26:56:4c:1b:31:65:8d: 94:51:be:25:00:37:ef:fc:ac:e2:1b:68:0a:b7:e6: 6f:db:c5:4d:e1:35:ae:a5:b7:2e:8d:05:10:ee:69: 2a:48:42:4c:1d:10:f4:6e:10:a7:0b:df:56:fd:aa: 81:23:4a:5e:d8:d0:ad:a3:8a:15:fd:80:7c:14:83: ec:4e:f0:5c:e4:0e:55:df:7d:e3:c1:df:c0:10:d9: b6:1d:4e:c7:4f:94:80:c6:12:42:35:3f:7a:b6:c5: b9:b9:55:77:a1:e5:00:5a:f2:7f:2f:72:21:a9:11: af:6b:7d:d9:36:b9:f4:32:b6:b2:3c:3e:52:8e:cb: 63:14:46:04:4a:b6:00:85:f6:33:fc:c4:07:5f:82: 0a:25:68:ea:3f:09:d1:5b:34:ed:74:b5:da:85:d5: 8d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:77:B7:49:98:83:B2:62:19:B8:47:5B:43:A8:32:EA:1C:2D:D3:5B X509v3 Authority Key Identifier: keyid:E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:85:2e:e8:f8:ea:5d:c0:9e:e6:c6:7f:31:ea:98:e0:85:c3: 6b:ef:c6:e0:4b:b2:9e:69:9f:7a:f1:05:88:34:dc:e3:16:2e: 0d:97:9b:1d:d9:b9:87:74:81:9a:3d:00:6c:63:d9:ba:94:b3: 1e:53:1c:eb:47:cd:be:cd:27:9e:d1:73:3c:2a:30:46:f1:74: 34:ba:fb:cc:5b:67:94:7b:6c:f7:ec:c4:fc:05:38:2c:f6:d5: 0e:c1:30:ea:8a:79:4e:b1:b1:e7:b5:50:61:90:38:30:15:07: f1:5e:3d:f3:5f:8b:34:bd:da:6b:74:34:ac:ed:5b:11:68:d0: 0c:f6:36:b0:0b:b2:dd:31:98:bb:45:02:8b:84:d9:3f:88:9c: 1a:9d:cd:e0:ec:c4:93:a2:f2:ec:b8:c3:dc:37:d6:53:7b:89: f9:68:26:42:0c:73:37:d9:48:47:6c:5c:33:c5:ba:de:d2:b5: 4a:dd:0c:b6:66:99:9d:1e:96:fb:5f:1f:b6:82:5b:ee:42:12: a4:69:e2:c0:c7:ee:f1:c7:37:63:3d:d5:a7:a4:5b:5e:bd:db: 5c:e1:e3:e7:c9:9a:22:de:44:d2:98:26:11:fc:d7:d9:bc:1c: cf:8e:16:54:60:c9:9f:e1:fc:d9:05:ca:60:3c:c2:2c:3e:f4: c2:04:61:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUQxMTAvBgNVBAUTKEU0MjE0MkUzRTU4NDU3NjJEMEU4RDY4QjAyRkIxMEU4 NzVCQzZCRjIwHhcNMjQwNTAxMDQwMTM0WhcNMjQwNTA4MDQwMTM0WjAYMRYwFAYD VQQDEw02NjMxYmU5ZS0wMGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2neujLEOvbhOjf2apHTv5Kq4XAAeg1XzR5WshLVAzXpw7YM3R0s+y8XklKaK MLtnhHtTUrDt/fsqhJzYaasU77IRILGLl6JGwPv4S4jpyuZr+laL+7bu39L3JJvc 2BN4vSZWTBsxZY2UUb4lADfv/KziG2gKt+Zv28VN4TWupbcujQUQ7mkqSEJMHRD0 bhCnC99W/aqBI0pe2NCto4oV/YB8FIPsTvBc5A5V333jwd/AENm2HU7HT5SAxhJC NT96tsW5uVV3oeUAWvJ/L3IhqRGva33ZNrn0MrayPD5SjstjFEYESrYAhfYz/MQH X4IKJWjqPwnRWzTtdLXahdWN3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBd3t0mY g7JiGbhHW0OoMuocLdNbMB8GA1UdIwQYMBaAFOQhQuPlhFdi0OjWiwL7EOh1vGvy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRC9CNDZFNDJEQUJC MUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYyTFE2TmFMQXZzUTZIVzhh X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDRkM0LVdFVjJMUTZOYUxBdnNRNkhXOGFfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRC9CNDZFNDJEQUJCMUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYy TFE2TmFMQXZzUTZIVzhhX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRhS7o+OpdwJ7mxn8x6pjghcNr78bgS7KeaZ968QWINNzjFi4Nl5sd 2bmHdIGaPQBsY9m6lLMeUxzrR82+zSee0XM8KjBG8XQ0uvvMW2eUe2z37MT8BTgs 9tUOwTDqinlOsbHntVBhkDgwFQfxXj3zX4s0vdprdDSs7VsRaNAM9jawC7LdMZi7 RQKLhNk/iJwanc3g7MSTovLsuMPcN9ZTe4n5aCZCDHM32UhHbFwzxbre0rVK3Qy2 ZpmdHpb7Xx+2glvuQhKkaeLAx+7xxzdjPdWnpFtevdtc4ePnyZoi3kTSmCYR/NfZ vBzPjhZUYMmf4fzZBcpgPMIsPvTCBGFS -----END CERTIFICATE-----Generated at Wed May 1 05:58:57 2024 by rpki-client on console-fra.rpki-client.org