$ rpki-client -vvf rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft File: V5NDbSKpagYTaFEgO7clmE1wsBc.mft (raw, json) Hash identifier: wrbst6+ISdnAcXfU1Q2QEOZXzDYlhHwQsvQlo4UPlY8= Subject key identifier: 30:9F:13:90:65:88:5C:32:E0:AD:9A:A1:DE:08:18:E2:79:41:2A:90 Authority key identifier: 57:93:43:6D:22:A9:6A:06:13:68:51:20:3B:B7:25:98:4D:70:B0:17 Certificate issuer: /CN=A9159DCD/serialNumber=5793436D22A96A06136851203BB725984D70B017 Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft Manifest number: 99 Signing time: Fri 17 May 2024 06:57:56 +0000 Manifest this update: Fri 17 May 2024 06:57:55 +0000 Manifest next update: Fri 24 May 2024 06:57:55 +0000 Files and hashes: 1: V5NDbSKpagYTaFEgO7clmE1wsBc.crl (hash: PyNgWkVcirPPFVwwgzjChs+jfY3dyaGRGjuauioc3ig=) 2: 29D600062C3311EEBFF69B6CC4F9AE02.roa (hash: ngWH1G+IyPwemoOuF+JzNuSD97M/6I4YZeW4mDTVznw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.crl rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159DCD/serialNumber=5793436D22A96A06136851203BB725984D70B017 Validity Not Before: May 17 06:57:55 2024 GMT Not After : May 24 06:57:55 2024 GMT Subject: CN=6646fff4-4c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6f:ac:de:6d:02:1f:e3:b9:30:14:1b:60:f6: 76:ea:a8:5d:79:9e:95:b7:f9:d7:91:55:e2:31:69: f7:d2:c5:6f:8a:88:9c:c2:fc:cf:d1:9e:06:5d:07: da:58:c2:96:e9:aa:a5:34:fa:e1:4c:00:41:c3:fd: 96:fb:02:f8:b4:b7:39:0d:c9:0f:a0:b6:f3:f4:12: b9:1b:15:80:26:3a:69:d5:1c:a5:e4:41:80:9d:07: fc:7e:7a:a4:74:ee:05:ba:b1:20:ae:29:8b:45:4c: 83:bd:ca:23:81:0c:f0:30:49:d7:3c:4a:37:ce:8a: 86:9e:42:d4:aa:75:30:3b:be:bb:e6:b5:5a:da:d3: e4:08:aa:3a:7a:f1:f1:d9:fe:92:0d:ef:7d:f3:8f: ce:ea:7c:a5:7c:f7:62:29:c6:2f:a0:5d:d0:0d:50: 16:fb:97:f9:39:70:c4:25:3b:3c:fc:a1:4c:82:ff: ed:ac:b8:33:ed:c5:b5:8a:7a:1a:a2:4a:b6:35:d0: 45:f7:89:4a:9b:ee:3c:00:64:bb:13:4d:7c:65:05: 3d:ab:19:46:b3:e5:91:c5:f6:76:ca:08:f8:0b:89: 0c:46:1a:52:ab:1c:29:a8:fa:f0:e8:e7:d0:c5:d3: 13:3b:a8:e1:73:20:3b:5c:8e:33:23:66:8a:d0:7e: f2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:9F:13:90:65:88:5C:32:E0:AD:9A:A1:DE:08:18:E2:79:41:2A:90 X509v3 Authority Key Identifier: keyid:57:93:43:6D:22:A9:6A:06:13:68:51:20:3B:B7:25:98:4D:70:B0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:21:e9:34:72:3a:ae:86:6f:bd:f0:52:11:a6:43:15:2f:0c: 08:d2:30:c5:cd:cd:eb:7b:31:0c:e0:1b:96:f2:99:06:3c:99: 6e:b1:9b:fc:e6:1c:5f:6e:57:76:54:ac:01:dd:73:8f:44:35: 3c:e6:78:3e:a3:2a:24:00:db:f4:42:f7:65:88:40:b9:82:f0: 70:85:3e:33:12:c5:e0:1c:af:29:65:35:af:59:05:2c:b1:8a: f3:2c:6d:86:a8:aa:5e:73:f0:34:33:64:d0:ca:71:a8:e7:54: 3e:94:07:8c:e5:2e:d9:ec:f3:d9:2f:1b:a8:e6:68:76:53:b4: 5f:4f:84:9c:b1:88:e2:74:dd:07:11:e0:7f:9d:d7:58:93:ed: 3d:78:59:e3:00:5d:0a:b0:41:50:bf:f4:0a:88:78:9c:7d:08: 0e:c6:1d:a0:d4:cc:f3:4b:55:80:31:f4:f4:df:7b:c6:8b:b0: 05:1a:26:d2:44:6f:f6:fc:3e:ab:fb:92:f2:7a:4d:8c:33:da: 40:6d:9c:15:aa:01:61:a4:2b:49:1f:bc:62:f9:43:ca:3f:dd: af:78:02:f2:05:8a:27:18:c5:6a:23:41:6b:68:68:5f:3c:64: e0:94:03:97:30:13:bf:6c:8b:54:6d:8b:66:20:52:58:7d:da: e1:32:db:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlEQ0QxMTAvBgNVBAUTKDU3OTM0MzZEMjJBOTZBMDYxMzY4NTEyMDNCQjcyNTk4 NEQ3MEIwMTcwHhcNMjQwNTE3MDY1NzU1WhcNMjQwNTI0MDY1NzU1WjAYMRYwFAYD VQQDEw02NjQ2ZmZmNC00YzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsG+s3m0CH+O5MBQbYPZ26qhdeZ6Vt/nXkVXiMWn30sVvioicwvzP0Z4GXQfa WMKW6aqlNPrhTABBw/2W+wL4tLc5DckPoLbz9BK5GxWAJjpp1Ryl5EGAnQf8fnqk dO4FurEgrimLRUyDvcojgQzwMEnXPEo3zoqGnkLUqnUwO7675rVa2tPkCKo6evHx 2f6SDe9984/O6nylfPdiKcYvoF3QDVAW+5f5OXDEJTs8/KFMgv/trLgz7cW1inoa okq2NdBF94lKm+48AGS7E018ZQU9qxlGs+WRxfZ2ygj4C4kMRhpSqxwpqPrw6OfQ xdMTO6jhcyA7XI4zI2aK0H7ycQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDCfE5Bl iFwy4K2aod4IGOJ5QSqQMB8GA1UdIwQYMBaAFFeTQ20iqWoGE2hRIDu3JZhNcLAX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OURDRC9BMDBENzAwNjJD MjQxMUVFQUI5NzhGMEZDNEY5QUUwMi9WNU5EYlNLcGFnWVRhRkVnTzdjbG1FMXdz QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Y1TkRiU0twYWdZVGFGRWdPN2NsbUUxd3NCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OURDRC9BMDBENzAwNjJDMjQxMUVFQUI5NzhGMEZDNEY5QUUwMi9WNU5EYlNLcGFn WVRhRkVnTzdjbG1FMXdzQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8Iek0cjquhm+98FIRpkMVLwwI0jDFzc3rezEM4BuW8pkGPJlusZv8 5hxfbld2VKwB3XOPRDU85ng+oyokANv0QvdliEC5gvBwhT4zEsXgHK8pZTWvWQUs sYrzLG2GqKpec/A0M2TQynGo51Q+lAeM5S7Z7PPZLxuo5mh2U7RfT4ScsYjidN0H EeB/nddYk+09eFnjAF0KsEFQv/QKiHicfQgOxh2g1MzzS1WAMfT033vGi7AFGibS RG/2/D6r+5Lyek2MM9pAbZwVqgFhpCtJH7xi+UPKP92veALyBYonGMVqI0FraGhf PGTglAOXMBO/bItUbYtmIFJYfdrhMtva -----END CERTIFICATE-----Generated at Fri May 17 08:52:48 2024 by rpki-client on console-ams.rpki-client.org