$ rpki-client -vvf rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft File: 5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft (raw, json) Hash identifier: TZqtWOr8BfMlC82/Rzq3dWPE8O+dbI126TzWnmDnn0s= Subject key identifier: 9E:01:51:97:40:7D:03:E8:D6:24:C2:B9:EC:80:AB:6D:0D:AF:53:48 Authority key identifier: E6:99:DB:CD:E0:9C:0A:A5:F8:E6:6A:E0:A7:32:54:DC:A0:5D:85:D4 Certificate issuer: /CN=A915C15F/serialNumber=E699DBCDE09C0AA5F8E66AE0A73254DCA05D85D4 Certificate serial: 05B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft Manifest number: 05A4 Signing time: Wed 29 May 2024 00:46:34 +0000 Manifest this update: Wed 29 May 2024 00:46:34 +0000 Manifest next update: Wed 05 Jun 2024 00:46:34 +0000 Files and hashes: 1: 5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl (hash: jHJEf4ULyno+4sjk/v6r3D/UEHRePmfH9ItaXPPEstw=) 2: 581485C0590911EE9C70C86EC4F9AE02.roa (hash: +151frpyrUQduoYCiAzWqIPYsN3G5pr9CXtQatPdObE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 00:46:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1458 (0x5b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C15F/serialNumber=E699DBCDE09C0AA5F8E66AE0A73254DCA05D85D4 Validity Not Before: May 29 00:46:34 2024 GMT Not After : Jun 5 00:46:34 2024 GMT Subject: CN=66567aea-091b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a5:ba:8d:f1:2c:71:e6:4c:6a:e3:bb:63:44: ef:d3:9f:d6:86:a4:fc:57:dc:50:77:6d:4c:40:5c: 92:0f:79:f4:f6:54:66:80:7b:75:ce:20:6d:b2:bb: ac:bf:4c:12:e0:94:2f:61:18:ca:87:f7:30:4a:d4: 55:8f:df:0c:75:05:f3:b9:48:21:da:8b:01:1e:38: e4:95:b2:29:25:89:06:1d:d9:cc:0a:0c:1d:c9:87: 4a:d2:d2:11:e7:ab:51:f9:96:1b:20:6f:03:09:2f: b0:24:aa:be:41:45:b6:47:2f:a3:5f:d3:82:2e:f6: 94:4e:4e:88:1a:50:2a:05:7d:70:7f:d2:d4:0b:36: 1c:42:31:12:35:d9:e3:2c:c9:d1:86:3d:59:db:80: 4a:ef:f3:2d:eb:c4:cc:2d:4e:13:ff:30:2f:91:97: fe:c4:dd:da:9c:0f:7e:80:b2:5f:a2:84:f6:d0:ba: 3d:db:c6:94:2d:a9:3e:91:d7:21:54:60:77:e8:73: ff:d0:24:64:f3:c1:f9:26:1b:26:41:2a:fa:07:f7: 00:57:24:b9:38:c3:2d:c1:e7:72:98:1b:08:55:1c: 2d:ab:11:c5:5a:bd:98:06:01:39:c1:8a:54:8f:47: 4f:92:56:06:c2:fb:98:90:76:76:b6:f7:b7:83:22: a4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:01:51:97:40:7D:03:E8:D6:24:C2:B9:EC:80:AB:6D:0D:AF:53:48 X509v3 Authority Key Identifier: keyid:E6:99:DB:CD:E0:9C:0A:A5:F8:E6:6A:E0:A7:32:54:DC:A0:5D:85:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:91:8c:70:00:44:a9:8d:f8:1c:71:19:59:07:84:8e:6e:55: 5b:6f:c3:df:9c:f0:03:f4:09:37:3f:0e:ea:bd:78:f9:f8:84: f6:87:d9:54:2f:d0:6c:36:df:84:3d:58:ce:c3:f4:1e:20:38: 8c:21:71:89:60:2c:52:fb:8e:4b:44:f5:7d:db:85:bd:ef:fc: d1:a9:3d:bf:26:d2:b8:a6:a3:37:5e:48:95:ae:79:b6:17:a9: a5:54:67:8c:9e:c3:b9:6e:db:3d:dc:1a:a7:03:2b:ed:53:6b: 23:00:32:c2:4e:b5:96:82:ec:f3:de:16:e8:e2:a2:5d:29:af: 7a:c1:16:6f:cb:cd:e8:b4:a0:90:9a:d6:16:ef:e4:4d:5f:9c: c5:6c:64:64:f7:53:ef:2e:ad:0d:ae:90:9f:ef:da:af:7d:44: 2c:ca:67:e1:3a:60:d8:ad:5a:95:04:f9:6c:89:78:10:da:62: a4:e1:b8:4c:6c:72:2c:31:77:3d:10:27:cc:47:e6:68:5f:92: a7:63:e1:94:33:94:2f:d8:45:3d:66:9a:69:4f:6c:4a:65:ed: 96:8c:6a:b6:87:8d:2a:bb:f9:c9:20:4a:8f:64:66:72:72:12: e8:fb:44:a5:af:66:c3:b1:70:f8:03:91:cc:d4:37:3c:47:0b: 6d:8a:72:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMxNUYxMTAvBgNVBAUTKEU2OTlEQkNERTA5QzBBQTVGOEU2NkFFMEE3MzI1NERD QTA1RDg1RDQwHhcNMjQwNTI5MDA0NjM0WhcNMjQwNjA1MDA0NjM0WjAYMRYwFAYD VQQDEw02NjU2N2FlYS0wOTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqW6jfEsceZMauO7Y0Tv05/WhqT8V9xQd21MQFySD3n09lRmgHt1ziBtsrus v0wS4JQvYRjKh/cwStRVj98MdQXzuUgh2osBHjjklbIpJYkGHdnMCgwdyYdK0tIR 56tR+ZYbIG8DCS+wJKq+QUW2Ry+jX9OCLvaUTk6IGlAqBX1wf9LUCzYcQjESNdnj LMnRhj1Z24BK7/Mt68TMLU4T/zAvkZf+xN3anA9+gLJfooT20Lo928aULak+kdch VGB36HP/0CRk88H5JhsmQSr6B/cAVyS5OMMtwedymBsIVRwtqxHFWr2YBgE5wYpU j0dPklYGwvuYkHZ2tve3gyKk6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4BUZdA fQPo1iTCueyAq20Nr1NIMB8GA1UdIwQYMBaAFOaZ283gnAql+OZq4KcyVNygXYXU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzE1Ri85MzI5QjBCNjhD NjcxMUVCQjdFRTg2M0VDNEY5QUUwMi81cG5iemVDY0NxWDQ1bXJncHpKVTNLQmRo ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVwbmJ6ZUNjQ3FYNDVtcmdwekpVM0tCZGhkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzE1Ri85MzI5QjBCNjhDNjcxMUVCQjdFRTg2M0VDNEY5QUUwMi81cG5iemVDY0Nx WDQ1bXJncHpKVTNLQmRoZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzkYxwAESpjfgccRlZB4SOblVbb8PfnPAD9Ak3Pw7qvXj5+IT2h9lU L9BsNt+EPVjOw/QeIDiMIXGJYCxS+45LRPV924W97/zRqT2/JtK4pqM3XkiVrnm2 F6mlVGeMnsO5bts93BqnAyvtU2sjADLCTrWWguzz3hbo4qJdKa96wRZvy83otKCQ mtYW7+RNX5zFbGRk91PvLq0NrpCf79qvfUQsymfhOmDYrVqVBPlsiXgQ2mKk4bhM bHIsMXc9ECfMR+ZoX5KnY+GUM5Qv2EU9ZpppT2xKZe2WjGq2h40qu/nJIEqPZGZy chLo+0Slr2bDsXD4A5HM1Dc8RwttinKW -----END CERTIFICATE-----Generated at Wed May 29 02:49:55 2024 by rpki-client on console-fra.rpki-client.org