$ rpki-client -vvf rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft File: u5dqWY5eywXjf6wApbeIjlf1HFI.mft (raw, json) Hash identifier: SnN9Fsm22ICjXHh58zsdc/uOfCS3fvzI5Ig+BRuhbKg= Subject key identifier: 52:73:30:C3:CF:53:97:4A:E0:19:AA:CE:C5:5F:06:51:3D:5E:9E:34 Authority key identifier: BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52 Certificate issuer: /CN=A91590E3/serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52 Certificate serial: 1819 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft Manifest number: 17EC Signing time: Tue 30 Apr 2024 17:08:48 +0000 Manifest this update: Tue 30 Apr 2024 17:08:47 +0000 Manifest next update: Tue 07 May 2024 17:08:47 +0000 Files and hashes: 1: u5dqWY5eywXjf6wApbeIjlf1HFI.crl (hash: iATPfbgsSqAcKjG0lvYGFdTTo7xbRnl93P0NZNknzWI=) 2: 4A4CE204D49A11EEAB1AF055C4F9AE02.roa (hash: SOUm4aPJA1GCSoMKe9nddwVZGI48xiZHVEoBS1OglGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 17:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6169 (0x1819) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91590E3/serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52 Validity Not Before: Apr 30 17:08:47 2024 GMT Not After : May 7 17:08:47 2024 GMT Subject: CN=663125a0-9fd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f9:e7:62:d5:43:af:cd:99:6b:e6:f8:b8:05: 7a:47:f6:61:e9:50:0c:b2:86:5d:31:07:fc:a3:6a: 69:e5:e3:48:38:b7:29:a6:ef:1a:bd:ec:1f:f3:15: 53:da:3d:15:e5:35:bd:e0:e0:b6:77:6d:1f:4f:e4: ed:4a:a9:3b:c8:f2:b5:40:33:82:ad:1d:c8:b3:73: 61:dc:ad:f8:1a:09:2b:7e:2a:4f:9c:ea:df:cd:d1: 74:cd:2f:15:3e:8b:cb:be:fd:0a:8b:dc:f2:d5:11: 5f:83:4d:ae:ac:c7:43:d2:6a:5f:d5:c6:cc:25:bd: 96:4d:60:43:3c:01:7b:32:be:1c:24:be:81:8b:97: 99:2a:b2:6e:d2:6f:32:7a:89:ea:7d:b3:b8:92:e0: 26:05:d4:81:42:d7:c2:73:18:d2:9b:16:f7:95:d0: 20:0f:37:84:2e:6b:dc:7e:3e:86:ab:ae:a0:b5:16: 1d:72:21:b5:28:e6:82:9d:ef:95:c4:2e:09:eb:c9: a4:c8:eb:60:0c:8f:86:10:06:df:69:bf:9a:33:d2: 88:36:ec:f3:b3:c7:7e:73:e4:0e:bc:f8:70:fb:a3: 2b:57:e5:63:bd:77:31:b3:6c:be:c2:5f:cf:8b:60: 28:cc:6e:11:fd:45:97:61:fc:fc:6f:a9:fb:ca:f4: d7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:73:30:C3:CF:53:97:4A:E0:19:AA:CE:C5:5F:06:51:3D:5E:9E:34 X509v3 Authority Key Identifier: keyid:BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:dd:50:a6:41:79:22:24:ac:4b:78:fb:d5:af:4f:3d:82:5c: 85:4a:f4:b7:60:75:64:37:d5:8b:2b:1d:69:2a:ec:05:ac:cb: 52:14:2f:30:14:2e:63:91:5c:96:1a:34:7e:6f:fa:71:5f:7a: 24:be:ad:f2:3e:93:26:37:61:a1:36:a1:73:43:02:a0:61:f3: a5:a8:8a:53:94:21:f9:68:2a:b2:8c:a9:49:4a:d9:cb:f3:7d: 1c:f4:1c:c4:49:1b:24:75:e7:c9:35:b1:7f:76:6c:8b:93:75: 1d:fc:74:8d:c8:6f:6c:0b:d8:7e:c7:a5:98:ed:cd:64:07:95: 9f:80:de:a5:f5:3f:eb:e2:43:46:59:73:21:a6:38:56:f8:d8: 26:2a:0c:50:e4:fd:d3:88:03:b7:77:f6:f5:99:5a:4b:01:d0: 56:8b:6a:0b:9b:13:c4:49:dd:90:5d:5f:d8:45:06:5f:4b:3a: 8e:23:c6:9b:29:b6:21:8f:c5:fc:b5:90:73:1d:fa:0b:c3:ef: 3c:db:38:cb:8f:0c:70:f4:22:61:2e:a9:80:b9:a4:6c:f0:9e: a3:92:02:a0:92:b1:2a:13:bd:7b:50:de:ae:0d:02:06:7e:33: 6c:7a:05:b3:b2:a3:ca:19:d8:ec:fc:19:79:9b:54:df:8a:64: cf:af:49:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkwRTMxMTAvBgNVBAUTKEJCOTc2QTU5OEU1RUNCMDVFMzdGQUMwMEE1Qjc4ODhF NTdGNTFDNTIwHhcNMjQwNDMwMTcwODQ3WhcNMjQwNTA3MTcwODQ3WjAYMRYwFAYD VQQDEw02NjMxMjVhMC05ZmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfnnYtVDr82Za+b4uAV6R/Zh6VAMsoZdMQf8o2pp5eNIOLcppu8avewf8xVT 2j0V5TW94OC2d20fT+TtSqk7yPK1QDOCrR3Is3Nh3K34GgkrfipPnOrfzdF0zS8V PovLvv0Ki9zy1RFfg02urMdD0mpf1cbMJb2WTWBDPAF7Mr4cJL6Bi5eZKrJu0m8y eonqfbO4kuAmBdSBQtfCcxjSmxb3ldAgDzeELmvcfj6Gq66gtRYdciG1KOaCne+V xC4J68mkyOtgDI+GEAbfab+aM9KINuzzs8d+c+QOvPhw+6MrV+VjvXcxs2y+wl/P i2AozG4R/UWXYfz8b6n7yvTXfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJzMMPP U5dK4BmqzsVfBlE9Xp40MB8GA1UdIwQYMBaAFLuXalmOXssF43+sAKW3iI5X9RxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTBFMy9EQTE4QjE4NDlB NDkxMUU3OUE5RjMwMzBDNEY5QUUwMi91NWRxV1k1ZXl3WGpmNndBcGJlSWpsZjFI RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U1ZHFXWTVleXdYamY2d0FwYmVJamxmMUhGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTBFMy9EQTE4QjE4NDlBNDkxMUU3OUE5RjMwMzBDNEY5QUUwMi91NWRxV1k1ZXl3 WGpmNndBcGJlSWpsZjFIRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU3VCmQXkiJKxLePvVr089glyFSvS3YHVkN9WLKx1pKuwFrMtSFC8w FC5jkVyWGjR+b/pxX3okvq3yPpMmN2GhNqFzQwKgYfOlqIpTlCH5aCqyjKlJStnL 830c9BzESRskdefJNbF/dmyLk3Ud/HSNyG9sC9h+x6WY7c1kB5WfgN6l9T/r4kNG WXMhpjhW+NgmKgxQ5P3TiAO3d/b1mVpLAdBWi2oLmxPESd2QXV/YRQZfSzqOI8ab KbYhj8X8tZBzHfoLw+882zjLjwxw9CJhLqmAuaRs8J6jkgKgkrEqE717UN6uDQIG fjNsegWzsqPKGdjs/Bl5m1TfimTPr0mk -----END CERTIFICATE-----Generated at Tue Apr 30 19:21:17 2024 by rpki-client on console-ams.rpki-client.org