$ rpki-client -vvf rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft File: 5G6s3CFDhcFCA0Z05Gxo57vilSU.mft (raw, json) Hash identifier: H+4QP50SRFw6BSCmP7T4xtbylhZqbjOb3uXEpQeRu9s= Subject key identifier: 6F:F9:A5:9F:F6:3E:3C:F2:A9:42:A2:71:21:B9:6E:CB:08:3B:D1:E8 Authority key identifier: E4:6E:AC:DC:21:43:85:C1:42:03:46:74:E4:6C:68:E7:BB:E2:95:25 Certificate issuer: /CN=A91372E6/serialNumber=E46EACDC214385C142034674E46C68E7BBE29525 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft Manifest number: 14 Signing time: Mon 27 May 2024 09:06:58 +0000 Manifest this update: Mon 27 May 2024 09:06:57 +0000 Manifest next update: Mon 03 Jun 2024 09:06:57 +0000 Files and hashes: 1: 5G6s3CFDhcFCA0Z05Gxo57vilSU.crl (hash: OymWE2ip61Tw8ZMcP3WYJnkHGdRK2386olJzBK+ZM7M=) 2: 44B42A0EFDE511EEAD5A6432C4F9AE02.roa (hash: j8TVDnQNxdrKAo9n6JHtnB5eeit+C4Hgh115UzRpapo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.crl rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 07:48:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91372E6/serialNumber=E46EACDC214385C142034674E46C68E7BBE29525 Validity Not Before: May 27 09:06:57 2024 GMT Not After : Jun 3 09:06:57 2024 GMT Subject: CN=66544d31-a177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ba:89:06:5c:b1:b8:01:9a:07:fe:9b:fd:b3: 5b:dc:dd:e7:b0:7c:fe:bb:5d:62:0e:43:fc:ef:87: 7e:e9:33:15:b8:59:a9:c3:41:fd:44:ec:d3:49:ad: 33:6d:01:61:ea:35:1b:1e:3d:80:21:03:a7:fa:d3: b2:90:d0:a7:4d:43:1b:ac:05:2d:0d:25:f4:ff:eb: c7:14:3b:c3:05:48:3a:d5:60:66:b3:1a:11:dc:0e: ae:de:34:2e:83:f7:23:f3:10:f0:0e:31:b5:5f:d7: a4:e1:18:8e:f1:12:44:eb:11:a2:c1:6a:38:d7:2b: 2c:40:09:05:10:50:5b:96:84:b6:82:4a:38:e7:60: f7:19:f4:0d:6f:98:20:5e:dc:50:6f:90:3a:45:b8: dc:84:44:9b:05:71:8d:99:dd:76:9a:92:1d:11:4e: 84:ee:73:be:f9:ea:db:84:26:58:1a:4c:78:2a:e6: ac:e4:6f:9a:ed:f7:88:0e:82:f6:2c:11:72:ce:8e: 49:0a:39:53:83:32:31:55:82:41:0f:e0:9a:3e:30: 04:16:cf:7c:24:7a:40:c4:82:6e:ec:09:2c:d8:35: c4:c7:db:fc:e7:3f:39:24:9b:1b:08:4f:7e:ac:eb: c2:59:1d:9d:da:d0:ce:f8:56:dd:f7:4d:16:df:44: 59:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F9:A5:9F:F6:3E:3C:F2:A9:42:A2:71:21:B9:6E:CB:08:3B:D1:E8 X509v3 Authority Key Identifier: keyid:E4:6E:AC:DC:21:43:85:C1:42:03:46:74:E4:6C:68:E7:BB:E2:95:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:fe:94:4f:a4:56:d0:80:47:06:f7:3a:aa:e9:3b:f6:bf:4d: 53:c4:c1:14:71:43:5a:8c:4e:77:03:e2:a5:b9:68:14:66:b3: 16:d6:c5:fb:50:b3:05:a2:16:f5:31:69:e7:9f:8c:81:fc:66: 4e:51:d4:57:a1:3e:5e:9a:1a:31:ec:58:43:9f:88:5b:ec:c2: f1:0c:70:58:ec:91:d2:df:6b:85:d3:19:38:20:0c:80:76:22: 88:a6:93:d2:33:ce:1a:32:30:9f:12:08:d6:99:21:1e:16:4d: 88:ed:9c:c0:c3:66:00:58:29:ee:56:2d:35:d4:b0:17:cd:62: b2:e7:dd:4a:f1:8e:18:40:95:c1:2e:be:5d:bf:a7:f3:3e:e9: 4d:56:1a:17:31:12:76:3f:9c:fd:cd:b5:7e:b0:74:4c:62:bb: b4:90:ea:6f:3a:3a:93:15:41:e8:12:7f:ff:97:a5:47:d6:4a: f6:ec:81:40:52:33:3c:6d:7f:21:10:3f:96:b8:cc:82:f1:5c: fe:89:95:96:4c:ae:21:5a:0b:2f:5a:5b:25:a1:7f:44:3b:36: f0:1f:53:64:95:9c:b4:a7:15:04:86:68:d8:0f:1f:1d:d4:4b: 4d:88:b4:0a:c5:4e:c6:16:01:08:78:4d:3b:ff:83:26:42:a4: 4d:9f:20:37 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NzJFNjExMC8GA1UEBRMoRTQ2RUFDREMyMTQzODVDMTQyMDM0Njc0RTQ2QzY4RTdC QkUyOTUyNTAeFw0yNDA1MjcwOTA2NTdaFw0yNDA2MDMwOTA2NTdaMBgxFjAUBgNV BAMTDTY2NTQ0ZDMxLWExNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzuokGXLG4AZoH/pv9s1vc3eewfP67XWIOQ/zvh37pMxW4WanDQf1E7NNJrTNt AWHqNRsePYAhA6f607KQ0KdNQxusBS0NJfT/68cUO8MFSDrVYGazGhHcDq7eNC6D 9yPzEPAOMbVf16ThGI7xEkTrEaLBajjXKyxACQUQUFuWhLaCSjjnYPcZ9A1vmCBe 3FBvkDpFuNyERJsFcY2Z3Xaakh0RToTuc7756tuEJlgaTHgq5qzkb5rt94gOgvYs EXLOjkkKOVODMjFVgkEP4Jo+MAQWz3wkekDEgm7sCSzYNcTH2/znPzkkmxsIT36s 68JZHZ3a0M74Vt33TRbfRFmFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUb/mln/Y+ PPKpQqJxIbluywg70egwHwYDVR0jBBgwFoAU5G6s3CFDhcFCA0Z05Gxo57vilSUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3MkU2L0YzNTkwODI0RkRF MzExRUVBQTc3N0QxMUM0RjlBRTAyLzVHNnMzQ0ZEaGNGQ0EwWjA1R3hvNTd2aWxT VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNUc2czNDRkRoY0ZDQTBaMDVHeG81N3ZpbFNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3 MkU2L0YzNTkwODI0RkRFMzExRUVBQTc3N0QxMUM0RjlBRTAyLzVHNnMzQ0ZEaGNG Q0EwWjA1R3hvNTd2aWxTVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHr+lE+kVtCARwb3OqrpO/a/TVPEwRRxQ1qMTncD4qW5aBRmsxbWxftQ swWiFvUxaeefjIH8Zk5R1FehPl6aGjHsWEOfiFvswvEMcFjskdLfa4XTGTggDIB2 Ioimk9IzzhoyMJ8SCNaZIR4WTYjtnMDDZgBYKe5WLTXUsBfNYrLn3UrxjhhAlcEu vl2/p/M+6U1WGhcxEnY/nP3NtX6wdExiu7SQ6m86OpMVQegSf/+XpUfWSvbsgUBS MzxtfyEQP5a4zILxXP6JlZZMriFaCy9aWyWhf0Q7NvAfU2SVnLSnFQSGaNgPHx3U S02ItArFTsYWAQh4TTv/gyZCpE2fIDc= -----END CERTIFICATE-----Generated at Mon May 27 11:22:49 2024 by rpki-client on console-ams.rpki-client.org