$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft File: 5rsDqligwnDrZrPq6yQI__q6Xsc.mft (raw, json) Hash identifier: B4aQ6joaVlL/rIeTOGZ3V0/3d3j9bYAwHZwqpHGN9TM= Subject key identifier: 1C:04:91:78:75:DA:45:8D:E0:C6:BD:69:62:33:0F:DD:6D:24:D3:5E Authority key identifier: E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7 Certificate issuer: /CN=A914D2BF/serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7 Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft Manifest number: D0 Signing time: Tue 07 May 2024 06:12:17 +0000 Manifest this update: Tue 07 May 2024 06:12:17 +0000 Manifest next update: Tue 14 May 2024 06:12:17 +0000 Files and hashes: 1: 5rsDqligwnDrZrPq6yQI__q6Xsc.crl (hash: 3OM3RsirIaxHsGBfbEmBN0of/JI+OxrgsD1UQhIpaso=) 2: AEF266ECD34811EDAD96D95DC4F9AE02.roa (hash: uEvVY1ok6a49Mu9d75rAbyeazYfnD3ESapA5YfOEXsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 05:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D2BF/serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7 Validity Not Before: May 7 06:12:17 2024 GMT Not After : May 14 06:12:17 2024 GMT Subject: CN=6639c641-7ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e6:6c:db:1f:eb:26:db:57:54:d0:63:b5:13: 4b:8c:3d:df:ef:16:c9:7b:98:03:bf:86:49:01:9e: ea:d3:74:79:91:71:4b:e1:0b:f9:ad:78:c8:a0:1c: c5:09:49:db:a3:4e:35:3a:44:7f:00:ac:3f:01:5c: 96:b8:86:fa:c0:71:3e:cd:d0:cf:0c:ec:fd:09:e9: b1:6a:88:8b:a0:f1:b7:2d:29:8c:00:53:1c:c2:65: 74:b5:41:5e:1d:92:84:f1:47:9d:fb:bc:62:ec:78: 94:4c:cb:06:e5:b7:9f:e2:5f:52:08:e1:9e:44:94: 69:e2:d5:ef:a0:75:da:75:8f:5a:78:e6:89:08:b8: 2e:62:f6:25:63:ad:d1:0a:2c:40:e0:fa:ae:65:45: be:11:13:27:2c:e9:61:d8:d6:ec:1d:1a:ac:fc:94: 1c:62:b8:c8:89:44:29:c1:d8:4e:a6:95:be:8c:a2: 7b:2f:36:ef:ff:b1:2d:6c:91:fd:4c:e9:a5:ec:09: 50:07:73:5b:a7:7f:6a:f4:f7:c0:0b:5b:5e:2e:7b: 9f:38:5e:3e:03:18:6c:db:87:7e:76:d1:ea:35:76: a1:74:81:63:ba:47:0d:d7:32:4f:20:db:61:db:a2: 70:8c:de:e6:59:19:fa:b5:e0:e3:08:f9:4f:d1:48: a6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:04:91:78:75:DA:45:8D:E0:C6:BD:69:62:33:0F:DD:6D:24:D3:5E X509v3 Authority Key Identifier: keyid:E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:69:09:56:a1:63:cd:bc:7c:05:3e:16:7c:ea:c8:d3:ee:6f: 11:2c:55:40:af:6f:4b:67:c2:b4:9b:22:98:04:47:5d:3b:72: f1:79:48:f9:58:7a:ae:a7:9a:3f:ea:ac:24:fe:9c:c3:29:6b: 4d:80:26:d9:58:a9:07:d3:11:76:ee:e5:5c:60:29:60:50:d3: 9b:b9:c4:93:57:5e:c5:31:63:64:6a:7f:57:07:17:c7:08:d6: 25:b0:d7:71:d7:59:4b:b7:a3:98:8c:48:0c:77:40:80:45:44: c9:f7:15:eb:e7:11:7e:41:34:29:62:85:27:f0:2f:03:a3:74: 49:95:fd:4a:67:a7:bb:8e:26:1d:6f:3c:24:d1:fb:2e:94:5e: 19:4c:aa:2f:16:c5:26:e6:f6:52:05:7f:02:2c:3f:25:d7:40: 5f:b2:c3:11:9b:fa:c6:79:81:b2:ed:b5:d6:64:95:d6:96:39: 06:b4:97:b7:00:86:58:3c:89:62:0e:b0:14:0e:81:2a:78:35: b5:7b:8b:3d:69:90:b4:df:69:d0:b8:29:05:f3:48:68:81:8c: 53:93:4f:98:cb:57:4e:2c:61:92:9a:f1:21:bc:b8:2a:7d:c5: 87:b7:1b:00:b8:98:7a:5a:6f:b1:ca:30:65:67:af:5a:e5:ca: c4:77:68:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQyQkYxMTAvBgNVBAUTKEU2QkIwM0FBNThBMEMyNzBFQjY2QjNFQUVCMjQwOEZG RkFCQTVFQzcwHhcNMjQwNTA3MDYxMjE3WhcNMjQwNTE0MDYxMjE3WjAYMRYwFAYD VQQDEw02NjM5YzY0MS03ZWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+Zs2x/rJttXVNBjtRNLjD3f7xbJe5gDv4ZJAZ7q03R5kXFL4Qv5rXjIoBzF CUnbo041OkR/AKw/AVyWuIb6wHE+zdDPDOz9CemxaoiLoPG3LSmMAFMcwmV0tUFe HZKE8Ued+7xi7HiUTMsG5bef4l9SCOGeRJRp4tXvoHXadY9aeOaJCLguYvYlY63R CixA4PquZUW+ERMnLOlh2NbsHRqs/JQcYrjIiUQpwdhOppW+jKJ7Lzbv/7EtbJH9 TOml7AlQB3Nbp39q9PfAC1teLnufOF4+Axhs24d+dtHqNXahdIFjukcN1zJPINth 26JwjN7mWRn6teDjCPlP0UimcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwEkXh1 2kWN4Ma9aWIzD91tJNNeMB8GA1UdIwQYMBaAFOa7A6pYoMJw62az6uskCP/6ul7H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDJCRi8yQTcxRTZCQ0Qz NDQxMUVEOEUyQzU0NjRDNEY5QUUwMi81cnNEcWxpZ3duRHJaclBxNnlRSV9fcTZY c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyc0RxbGlnd25EclpyUHE2eVFJX19xNlhzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDJCRi8yQTcxRTZCQ0QzNDQxMUVEOEUyQzU0NjRDNEY5QUUwMi81cnNEcWxpZ3du RHJaclBxNnlRSV9fcTZYc2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAaQlWoWPNvHwFPhZ86sjT7m8RLFVAr29LZ8K0myKYBEddO3LxeUj5 WHqup5o/6qwk/pzDKWtNgCbZWKkH0xF27uVcYClgUNObucSTV17FMWNkan9XBxfH CNYlsNdx11lLt6OYjEgMd0CARUTJ9xXr5xF+QTQpYoUn8C8Do3RJlf1KZ6e7jiYd bzwk0fsulF4ZTKovFsUm5vZSBX8CLD8l10BfssMRm/rGeYGy7bXWZJXWljkGtJe3 AIZYPIliDrAUDoEqeDW1e4s9aZC032nQuCkF80hogYxTk0+Yy1dOLGGSmvEhvLgq fcWHtxsAuJh6Wm+xyjBlZ69a5crEd2jp -----END CERTIFICATE-----Generated at Tue May 7 07:01:20 2024 by rpki-client on console-fra.rpki-client.org