$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft File: 5G4YncjpEKGrvi42TdCBd1zkhGA.mft (raw, json) Hash identifier: Bwc72V7iEDHT6ksXKb8KqgZ3FZAX/Ilqqz3Lovi7tpY= Subject key identifier: F8:AB:08:AA:C0:F5:3B:4E:A7:82:C9:F7:D6:15:86:45:A4:E2:A4:CC Authority key identifier: E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60 Certificate issuer: /CN=A9135B44/serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft Manifest number: 0141 Signing time: Sun 05 May 2024 05:05:01 +0000 Manifest this update: Sun 05 May 2024 05:05:01 +0000 Manifest next update: Sun 12 May 2024 05:05:01 +0000 Files and hashes: 1: 5G4YncjpEKGrvi42TdCBd1zkhGA.crl (hash: Cpci2YqU0ta3tuKYCbfYfVQcTFCj/EuMT6B4Mf2O7UY=) 2: D4B06AAA3A6E11ED8266115DC4F9AE02.roa (hash: TVDVEAcyy/AEflArfcqFC77C1KGTIMHM0wpYYMewUMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B44/serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460 Validity Not Before: May 5 05:05:01 2024 GMT Not After : May 12 05:05:01 2024 GMT Subject: CN=6637137d-099c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:de:a2:6e:ab:0b:6e:a9:e5:c8:1e:1f:e1:03: 8c:6c:73:6c:93:6b:76:8d:6d:db:39:8f:a5:32:34: 2e:08:df:0b:03:a9:72:f3:80:13:92:cf:a6:98:dc: 6d:ca:40:14:e3:d4:6f:59:f8:ac:83:fa:30:f2:bb: 41:67:cd:77:f1:05:83:78:8f:d7:da:90:55:88:fa: d4:9a:de:4e:3f:8f:f4:fa:e4:25:d1:28:c3:0b:6c: e5:77:08:2f:3e:8a:b4:22:6c:04:65:93:fd:c7:60: d6:8f:84:c0:aa:e3:a8:88:27:ad:ac:11:7a:7f:f3: c5:6a:54:2d:46:e5:b8:3e:ec:78:bb:3a:75:5c:cf: 15:a8:38:5e:a7:cd:17:4c:8d:8e:5e:52:0e:97:fd: bc:d4:40:c7:e2:dc:db:61:86:5c:3b:76:7d:8d:2b: c6:58:7a:6e:e2:82:7f:c3:33:a4:d8:0e:7f:08:16: fd:3b:1d:ad:b1:9c:2c:e0:2f:7a:16:8d:8e:85:8f: bb:fd:bc:eb:f6:a5:ac:0d:f5:c7:ac:96:51:dc:29: 9c:10:89:fe:70:c2:e4:8a:e8:b7:1e:ac:17:db:60: a1:a9:b9:4b:d3:fe:f6:b3:e2:b8:19:e6:d9:86:82: c1:c5:5e:1b:59:d9:0c:32:c9:fc:9d:5a:6a:66:aa: 54:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:AB:08:AA:C0:F5:3B:4E:A7:82:C9:F7:D6:15:86:45:A4:E2:A4:CC X509v3 Authority Key Identifier: keyid:E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:8b:73:bd:88:8c:79:f9:81:c5:51:19:25:cb:18:ca:ed:c7: 05:00:fc:79:bb:95:16:98:12:2e:34:22:57:c9:4d:93:88:43: f8:2d:80:75:b7:9f:4a:f9:5e:bb:8b:b6:cd:f2:f7:6e:4d:71: 7a:1c:77:f8:35:59:36:c4:58:83:83:c1:74:dc:51:5a:af:1d: 65:7e:ee:8b:fb:a3:14:20:4a:c5:61:e0:f9:8e:fe:4c:0b:c3: d0:05:9b:76:89:6c:e6:14:ba:51:0c:ff:4e:3e:63:9f:25:d5: 43:ff:8b:ff:c8:a2:4b:af:ba:15:92:c8:e7:15:b7:0f:c1:ba: 90:72:dc:6e:66:d1:93:4a:55:98:39:d1:bc:d2:53:a6:30:db: f0:94:af:b0:7b:51:e7:2a:86:85:da:33:c1:55:82:90:8d:21: c3:cd:38:30:c3:b1:1e:93:65:e3:44:2f:c4:66:d9:58:2a:6b: f6:d9:07:6d:11:c9:df:41:2d:de:f6:c3:f6:9b:d0:86:4e:d9: 2d:2f:e7:d9:3b:ea:ab:af:f4:a2:af:c1:ce:89:78:1e:7c:71: 1c:fa:9d:05:92:1e:c2:8d:32:da:89:97:99:bc:2f:46:75:a6: 2c:d0:bf:f3:cf:f7:c1:f7:38:7c:94:67:bb:08:b7:d6:19:97: 08:0e:f8:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCNDQxMTAvBgNVBAUTKEU0NkUxODlEQzhFOTEwQTFBQkJFMkUzNjRERDA4MTc3 NUNFNDg0NjAwHhcNMjQwNTA1MDUwNTAxWhcNMjQwNTEyMDUwNTAxWjAYMRYwFAYD VQQDEw02NjM3MTM3ZC0wOTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1d6ibqsLbqnlyB4f4QOMbHNsk2t2jW3bOY+lMjQuCN8LA6ly84ATks+mmNxt ykAU49RvWfisg/ow8rtBZ8138QWDeI/X2pBViPrUmt5OP4/0+uQl0SjDC2zldwgv Poq0ImwEZZP9x2DWj4TAquOoiCetrBF6f/PFalQtRuW4Pux4uzp1XM8VqDhep80X TI2OXlIOl/281EDH4tzbYYZcO3Z9jSvGWHpu4oJ/wzOk2A5/CBb9Ox2tsZws4C96 Fo2OhY+7/bzr9qWsDfXHrJZR3CmcEIn+cMLkiui3HqwX22ChqblL0/72s+K4GebZ hoLBxV4bWdkMMsn8nVpqZqpU6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPirCKrA 9TtOp4LJ99YVhkWk4qTMMB8GA1UdIwQYMBaAFORuGJ3I6RChq74uNk3QgXdc5IRg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUI0NC9BRDBENjFGODNB NkMxMUVEOTk0MUY1NUNDNEY5QUUwMi81RzRZbmNqcEVLR3J2aTQyVGRDQmQxemto R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVHNFluY2pwRUtHcnZpNDJUZENCZDF6a2hHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUI0NC9BRDBENjFGODNBNkMxMUVEOTk0MUY1NUNDNEY5QUUwMi81RzRZbmNqcEVL R3J2aTQyVGRDQmQxemtoR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCii3O9iIx5+YHFURklyxjK7ccFAPx5u5UWmBIuNCJXyU2TiEP4LYB1 t59K+V67i7bN8vduTXF6HHf4NVk2xFiDg8F03FFarx1lfu6L+6MUIErFYeD5jv5M C8PQBZt2iWzmFLpRDP9OPmOfJdVD/4v/yKJLr7oVksjnFbcPwbqQctxuZtGTSlWY OdG80lOmMNvwlK+we1HnKoaF2jPBVYKQjSHDzTgww7Eek2XjRC/EZtlYKmv22Qdt EcnfQS3e9sP2m9CGTtktL+fZO+qrr/Sir8HOiXgefHEc+p0Fkh7CjTLaiZeZvC9G daYs0L/zz/fB9zh8lGe7CLfWGZcIDvgT -----END CERTIFICATE-----Generated at Sun May 5 06:01:17 2024 by rpki-client on console-fra.rpki-client.org