$ rpki-client -vvf rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft File: 5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft (raw, json) Hash identifier: IRnAHxK7Xuo26pw0TDFZZ75xXmc3ZJeIFbENNLCC2aM= Subject key identifier: 9A:38:9E:36:FF:31:FE:3C:01:80:EE:00:F8:A4:21:28:16:52:4D:A3 Authority key identifier: E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18 Certificate issuer: /CN=A91367E0/serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft Manifest number: 8A Signing time: Wed 15 May 2024 07:11:07 +0000 Manifest this update: Wed 15 May 2024 07:11:06 +0000 Manifest next update: Wed 22 May 2024 07:11:06 +0000 Files and hashes: 1: 5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl (hash: /WXLNYa/iff2Ff/YMohV6iky9HyCJXRl0k88muWxgGc=) 2: 444EB35A459D11EEA8758641C4F9AE02.roa (hash: HFjFUtVHPNW7Qd56uS2rL+sndelmlhgFQUxhT/KgfFM=) 3: 57F3935045A011EEA9A5215EC4F9AE02.roa (hash: uVCsPTEKvx7XpzG0ppDtvL1K8RxPyB9GI7QJ+Zk5c9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:11:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91367E0/serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818 Validity Not Before: May 15 07:11:06 2024 GMT Not After : May 22 07:11:06 2024 GMT Subject: CN=6644600a-803b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:71:3f:2c:c0:f4:54:86:a9:76:e6:96:0b:96: 52:87:f2:f3:75:3b:97:84:a6:f4:fb:55:be:49:3e: 48:89:1c:9f:9c:36:7a:53:5c:ad:e4:51:64:46:3f: e0:d2:c3:98:43:e9:e9:f6:d3:d8:e7:f1:69:8c:d5: 92:b7:b9:a8:24:fc:7b:30:d1:00:26:8a:67:36:60: aa:c9:f8:c8:b7:70:07:e9:20:ca:fd:9d:9e:8c:43: 29:36:ca:0f:18:da:f0:59:42:96:05:bc:f9:2c:1c: 26:84:b7:bd:42:59:29:7a:ef:65:7e:97:6f:1f:31: ca:35:5a:68:79:5c:78:6b:82:9e:5f:11:bd:94:74: 10:23:be:c9:2a:b9:ad:b7:c1:39:b7:75:59:5e:a8: 3c:26:76:ca:fe:57:0a:89:10:16:00:62:16:44:2c: f0:2d:9e:55:50:8b:e5:16:55:cc:89:e6:02:fa:80: dd:2a:a8:78:e6:a7:ab:8d:99:96:1d:ed:df:db:91: 59:d8:d9:ce:53:a6:49:29:e2:18:a9:dd:a2:45:e8: 9c:04:58:b6:97:35:70:18:a7:d6:97:4e:df:8a:f3: e4:70:47:11:75:da:bd:45:6f:20:ce:5c:01:28:38: 1b:21:1d:2f:30:11:f4:90:9a:2f:aa:e7:35:33:ee: bb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:38:9E:36:FF:31:FE:3C:01:80:EE:00:F8:A4:21:28:16:52:4D:A3 X509v3 Authority Key Identifier: keyid:E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:14:38:ad:96:97:ea:d4:27:3b:76:41:2e:c1:be:8c:79:84: 8c:85:35:ff:8f:10:de:cc:55:de:b0:b3:84:d5:d9:bf:5d:9f: cc:dc:9d:99:5b:6e:40:12:83:ec:2f:3e:54:67:ff:f5:f5:ef: c1:f4:53:d0:62:8d:d3:58:bb:6d:f3:33:d7:33:a9:18:d1:f3: 2e:7b:39:91:3d:1b:ce:54:5c:33:ed:8a:a1:83:40:bc:a8:a7: c3:9c:fc:ff:78:e5:66:8e:79:85:6e:ef:a8:44:46:f8:7e:c4: f2:8b:cc:3f:1f:18:4d:d1:b1:53:fb:28:56:64:70:80:aa:ce: 9b:3c:75:3c:5c:87:93:3d:34:0d:aa:34:0c:8e:11:a2:51:d9: 4b:10:5b:4e:cf:92:d6:16:07:b7:99:1d:7c:63:c6:f6:10:5c: 28:43:3a:3e:bf:e2:1e:e7:de:35:98:a9:17:90:2d:af:1b:3f: 55:14:f6:70:f6:4d:f6:6e:51:ee:02:4f:20:16:1e:66:34:35: 32:e8:98:c7:eb:78:9b:06:ea:44:74:c8:2d:49:0c:b2:a3:57: 68:13:01:ad:39:9a:b7:23:aa:58:4d:81:29:e2:71:64:36:9f: 71:9d:1e:d0:f2:a3:cb:84:48:44:22:8a:45:2c:47:05:8e:1b: d4:74:bb:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY3RTAxMTAvBgNVBAUTKEU2MUJFQzEzOTI4NjMyODNEQzk5RTJGRjkzMTU3NUEz MTgxQzI4MTgwHhcNMjQwNTE1MDcxMTA2WhcNMjQwNTIyMDcxMTA2WjAYMRYwFAYD VQQDEw02NjQ0NjAwYS04MDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHE/LMD0VIapduaWC5ZSh/LzdTuXhKb0+1W+ST5IiRyfnDZ6U1yt5FFkRj/g 0sOYQ+np9tPY5/FpjNWSt7moJPx7MNEAJopnNmCqyfjIt3AH6SDK/Z2ejEMpNsoP GNrwWUKWBbz5LBwmhLe9Qlkpeu9lfpdvHzHKNVpoeVx4a4KeXxG9lHQQI77JKrmt t8E5t3VZXqg8JnbK/lcKiRAWAGIWRCzwLZ5VUIvlFlXMieYC+oDdKqh45qerjZmW He3f25FZ2NnOU6ZJKeIYqd2iReicBFi2lzVwGKfWl07fivPkcEcRddq9RW8gzlwB KDgbIR0vMBH0kJovquc1M+67lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJo4njb/ Mf48AYDuAPikISgWUk2jMB8GA1UdIwQYMBaAFOYb7BOShjKD3Jni/5MVdaMYHCgY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjdFMC9FNDE4OTkxMDQ1 OUMxMUVFQjY5RDY4MzFDNEY5QUUwMi81aHZzRTVLR01vUGNtZUxfa3hWMW94Z2NL QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVodnNFNUtHTW9QY21lTF9reFYxb3hnY0tCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjdFMC9FNDE4OTkxMDQ1OUMxMUVFQjY5RDY4MzFDNEY5QUUwMi81aHZzRTVLR01v UGNtZUxfa3hWMW94Z2NLQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDaFDitlpfq1Cc7dkEuwb6MeYSMhTX/jxDezFXesLOE1dm/XZ/M3J2Z W25AEoPsLz5UZ//19e/B9FPQYo3TWLtt8zPXM6kY0fMuezmRPRvOVFwz7Yqhg0C8 qKfDnPz/eOVmjnmFbu+oREb4fsTyi8w/HxhN0bFT+yhWZHCAqs6bPHU8XIeTPTQN qjQMjhGiUdlLEFtOz5LWFge3mR18Y8b2EFwoQzo+v+Ie5941mKkXkC2vGz9VFPZw 9k32blHuAk8gFh5mNDUy6JjH63ibBupEdMgtSQyyo1doEwGtOZq3I6pYTYEp4nFk Np9xnR7Q8qPLhEhEIopFLEcFjhvUdLsM -----END CERTIFICATE-----Generated at Wed May 15 09:27:30 2024 by rpki-client on console-fra.rpki-client.org