$ rpki-client -vvf rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft File: 5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft (raw, json) Hash identifier: efimFeimtGKGyzfDmETCL0In7439IGaWGkiysFgt5A4= Subject key identifier: AD:5C:18:D3:73:97:99:45:30:05:CE:CC:D3:B6:19:3A:24:41:28:F7 Authority key identifier: E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69 Certificate issuer: /CN=A916148F/serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569 Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft Manifest number: 01C1 Signing time: Sun 05 May 2024 04:34:26 +0000 Manifest this update: Sun 05 May 2024 04:34:25 +0000 Manifest next update: Sun 12 May 2024 04:34:25 +0000 Files and hashes: 1: 5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl (hash: 03eFRnJc7mYjnPv+kzfl03FJFBk0LOKvnsZAQEE1U+Y=) 2: E757164C074511EDB229157DC4F9AE02.roa (hash: zhlSwv825k22uOhCsCYjl4S8dGLu2Xo+4xCX2EAGQwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916148F/serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569 Validity Not Before: May 5 04:34:25 2024 GMT Not After : May 12 04:34:25 2024 GMT Subject: CN=66370c51-fd01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7c:e2:12:39:84:47:de:ac:8d:d4:54:ab:6b: c9:9f:d4:99:8f:10:85:26:b7:1e:37:1b:e5:1e:bd: a8:3c:0e:73:c8:43:26:3c:f4:de:aa:fd:8f:60:21: 52:fa:8c:a2:d8:72:71:77:27:f3:ca:c3:ce:f5:76: 7d:75:8f:a6:3a:e9:e1:5c:f0:1e:ae:3b:70:94:9a: b6:74:ba:a2:ee:2f:fb:c8:ad:40:8b:21:76:3b:91: 4c:a6:91:d7:89:f5:60:21:10:c1:34:67:82:08:05: 82:1c:dc:b2:2b:ce:9d:51:32:f2:e5:52:73:65:96: ff:6d:51:22:fa:1a:ec:7b:7c:46:98:a4:c7:87:06: 09:f2:fc:ad:a5:61:f5:09:71:38:70:e8:73:44:af: 17:d4:92:5e:c6:43:84:2d:35:e3:36:7a:a6:09:7a: ef:5c:ab:c2:22:3a:78:22:f9:a9:04:5f:5d:d7:9e: d3:f3:a2:f5:09:e1:47:55:5a:1f:de:b1:49:6e:03: fc:73:23:17:ca:9f:8e:12:0a:38:91:b5:27:c6:72: 95:e7:6f:22:3b:e6:20:1d:4c:97:3f:0e:0e:b3:8a: 02:db:fb:0a:a9:b1:7b:5e:64:ba:29:36:28:53:16: 89:75:38:03:d3:9e:98:1e:29:1e:2f:ac:47:de:21: aa:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:5C:18:D3:73:97:99:45:30:05:CE:CC:D3:B6:19:3A:24:41:28:F7 X509v3 Authority Key Identifier: keyid:E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:e2:34:77:b4:f2:90:e8:f7:53:12:f9:18:ee:bf:a0:0b:c0: d2:7c:42:bd:cf:0f:63:2a:96:0c:f3:49:65:42:89:f2:bb:93: 84:bd:18:17:90:7e:88:ce:4e:59:0c:8c:7d:e0:f1:4c:ae:72: 8b:d9:ab:8d:19:72:83:f5:cd:42:a7:fd:eb:35:0f:70:6f:34: 1a:bc:2a:36:c9:ad:25:55:c0:27:93:de:97:2a:db:45:d7:9b: 9f:a0:70:47:0a:ee:27:5a:71:7e:52:b6:73:a8:d2:64:b7:c1: 71:91:29:ee:a7:0a:84:c7:6e:d0:fc:11:29:df:ed:51:b2:57: bb:2c:7a:bd:7c:07:55:d8:3b:a8:66:d8:f5:03:63:88:69:31: 44:b1:6b:18:c5:f8:73:b6:5f:8b:29:01:d4:da:0e:bd:13:68: 75:67:38:e9:0c:da:09:0b:9b:22:47:b6:72:09:bb:aa:13:bb: 94:76:97:ac:99:ae:de:87:a6:1e:12:ca:37:80:2f:ea:36:5f: 86:fb:ba:ae:59:46:bb:43:22:3b:7c:12:27:28:55:14:50:56: 05:99:82:0a:c3:13:c1:c8:a2:2a:21:e1:d0:36:3f:48:3d:20: 28:41:79:2b:97:d4:45:d4:fd:9e:a2:7d:6c:15:54:fc:5f:4f: d6:af:34:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE0OEYxMTAvBgNVBAUTKEU1MDg3M0FGNDc1RUQ2RUVCN0NCOTYzQzY1RThEOTgw NUI4QkI1NjkwHhcNMjQwNTA1MDQzNDI1WhcNMjQwNTEyMDQzNDI1WjAYMRYwFAYD VQQDEw02NjM3MGM1MS1mZDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHziEjmER96sjdRUq2vJn9SZjxCFJrceNxvlHr2oPA5zyEMmPPTeqv2PYCFS +oyi2HJxdyfzysPO9XZ9dY+mOunhXPAerjtwlJq2dLqi7i/7yK1AiyF2O5FMppHX ifVgIRDBNGeCCAWCHNyyK86dUTLy5VJzZZb/bVEi+hrse3xGmKTHhwYJ8vytpWH1 CXE4cOhzRK8X1JJexkOELTXjNnqmCXrvXKvCIjp4IvmpBF9d157T86L1CeFHVVof 3rFJbgP8cyMXyp+OEgo4kbUnxnKV528iO+YgHUyXPw4Os4oC2/sKqbF7XmS6KTYo UxaJdTgD056YHikeL6xH3iGqqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1cGNNz l5lFMAXOzNO2GTokQSj3MB8GA1UdIwQYMBaAFOUIc69HXtbut8uWPGXo2YBbi7Vp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTQ4Ri82ODg0ODI2ODA3 NDExMUVEQUIxOUQ0NDdDNEY5QUUwMi81UWh6cjBkZTF1NjN5NVk4WmVqWmdGdUx0 V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRaHpyMGRlMXU2M3k1WThaZWpaZ0Z1THRXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTQ4Ri82ODg0ODI2ODA3NDExMUVEQUIxOUQ0NDdDNEY5QUUwMi81UWh6cjBkZTF1 NjN5NVk4WmVqWmdGdUx0V2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr4jR3tPKQ6PdTEvkY7r+gC8DSfEK9zw9jKpYM80llQonyu5OEvRgX kH6Izk5ZDIx94PFMrnKL2auNGXKD9c1Cp/3rNQ9wbzQavCo2ya0lVcAnk96XKttF 15ufoHBHCu4nWnF+UrZzqNJkt8FxkSnupwqEx27Q/BEp3+1Rsle7LHq9fAdV2Duo Ztj1A2OIaTFEsWsYxfhztl+LKQHU2g69E2h1ZzjpDNoJC5siR7ZyCbuqE7uUdpes ma7eh6YeEso3gC/qNl+G+7quWUa7QyI7fBInKFUUUFYFmYIKwxPByKIqIeHQNj9I PSAoQXkrl9RF1P2eon1sFVT8X0/WrzRh -----END CERTIFICATE-----Generated at Sun May 5 05:21:56 2024 by rpki-client on console-fra.rpki-client.org