$ rpki-client -vvf rpki.apnic.net/member_repository/A91647F5/D69896E6A0C811EEA7B8D02CC4F9AE02/V5EYsUjifRVxdRVougcP4eYsfrk.mft File: V5EYsUjifRVxdRVougcP4eYsfrk.mft (raw, json) Hash identifier: UYDpxHnMH1KrhnWxEeYOsVMk59YFaSfl1BB9n1r5mxQ= Subject key identifier: BF:5C:46:F9:A8:5A:E9:67:49:6B:F2:5A:6E:0E:20:B9:3C:E2:3C:86 Authority key identifier: 57:91:18:B1:48:E2:7D:15:71:75:15:68:BA:07:0F:E1:E6:2C:7E:B9 Certificate issuer: /CN=A91647F5/serialNumber=579118B148E27D1571751568BA070FE1E62C7EB9 Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5EYsUjifRVxdRVougcP4eYsfrk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91647F5/D69896E6A0C811EEA7B8D02CC4F9AE02/V5EYsUjifRVxdRVougcP4eYsfrk.mft Manifest number: 51 Signing time: Fri 17 May 2024 08:04:45 +0000 Manifest this update: Fri 17 May 2024 08:04:45 +0000 Manifest next update: Fri 24 May 2024 08:04:45 +0000 Files and hashes: 1: V5EYsUjifRVxdRVougcP4eYsfrk.crl (hash: trpYTVtMfXfriPQvEiSmAKcAfzN5tbx3FZ+c3OI83ik=) 2: 8BDD1204FC5211EE89D8BD86C4F9AE02.roa (hash: AkiCxp9N8gMV3WtYdhLNJWSezcOAW2+2oJlKVD4H2Co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91647F5/D69896E6A0C811EEA7B8D02CC4F9AE02/V5EYsUjifRVxdRVougcP4eYsfrk.crl rsync://rpki.apnic.net/member_repository/A91647F5/D69896E6A0C811EEA7B8D02CC4F9AE02/V5EYsUjifRVxdRVougcP4eYsfrk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5EYsUjifRVxdRVougcP4eYsfrk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:04:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91647F5/serialNumber=579118B148E27D1571751568BA070FE1E62C7EB9 Validity Not Before: May 17 08:04:45 2024 GMT Not After : May 24 08:04:45 2024 GMT Subject: CN=66470f9d-5df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d9:c9:db:b6:b5:02:d8:f3:f0:0c:d1:9e:d2: 3b:fc:06:7a:3f:0e:dc:4f:d6:54:41:1b:96:02:0e: 80:3b:91:35:28:88:d2:20:8d:07:53:c8:de:49:55: 11:5d:ff:8e:e6:86:e0:7f:33:ab:19:a4:a1:f8:ca: 60:8d:a8:8d:75:c0:c0:71:26:23:a4:a2:30:d5:6a: d9:73:ae:23:55:2e:82:3a:12:80:22:ba:5f:cf:17: e8:b6:e3:19:60:8b:9d:3a:dd:da:e6:ea:c2:ba:95: 6f:36:60:fb:03:b7:ca:56:a9:b6:78:df:54:86:4c: 11:43:f2:80:76:2b:c7:78:89:31:27:ce:cf:cc:8f: a9:71:de:00:af:a6:1c:5c:44:d6:7e:42:8b:6b:5b: 29:6d:d3:91:c2:b3:e4:66:3f:9e:4f:a8:64:7b:af: de:a9:a5:eb:02:f6:8d:f1:a9:59:41:7a:92:87:90: 01:3c:d5:d7:17:02:eb:d8:e2:bf:1b:63:8e:9e:ce: f8:34:c2:24:02:ad:e6:87:de:a2:f9:8c:78:e4:24: 29:67:22:ab:4a:cf:78:38:31:17:ac:3f:d6:53:a6: 8e:bf:df:3d:96:f0:66:84:2a:df:c8:0f:98:78:2e: 85:99:4d:1d:ef:b2:63:6f:43:6d:c0:37:9b:8e:5e: 94:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:5C:46:F9:A8:5A:E9:67:49:6B:F2:5A:6E:0E:20:B9:3C:E2:3C:86 X509v3 Authority Key Identifier: keyid:57:91:18:B1:48:E2:7D:15:71:75:15:68:BA:07:0F:E1:E6:2C:7E:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91647F5/D69896E6A0C811EEA7B8D02CC4F9AE02/V5EYsUjifRVxdRVougcP4eYsfrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5EYsUjifRVxdRVougcP4eYsfrk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91647F5/D69896E6A0C811EEA7B8D02CC4F9AE02/V5EYsUjifRVxdRVougcP4eYsfrk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:f0:44:86:20:06:30:b0:31:47:08:6d:65:1b:03:7a:b0:b1: 3b:96:92:ef:f7:bd:fe:d5:d2:df:cf:ca:97:9f:5e:27:32:86: a3:82:a2:6c:f0:e7:e9:40:56:e3:38:3c:bb:f1:13:f9:10:3b: e6:89:e7:51:e3:c3:4d:ac:b5:f5:57:2d:d1:d2:a7:3d:0b:b3: 0b:a7:02:bc:fd:b7:cd:b4:d6:33:74:81:c6:5c:72:de:d7:5e: 6a:04:67:05:9f:44:dd:6b:ba:eb:84:81:2c:74:ad:bd:6f:26: 2b:b8:0e:be:28:87:88:b1:96:11:03:b5:ed:98:e1:4c:0d:e7: d7:d9:d3:ba:1c:03:96:43:73:7b:24:46:81:9b:00:a3:57:c2: c8:96:cb:28:55:80:05:68:ec:19:8d:cb:83:26:e7:9b:9b:13: bb:70:80:a7:45:65:a4:3b:25:0e:4c:e4:ec:45:d2:d2:7d:f6: 7c:0c:2f:d4:1a:b8:58:37:f7:4d:cc:32:8c:a1:d1:1a:16:f5: 59:15:ad:48:a9:cd:23:e9:e1:ea:1b:68:c2:0a:e2:50:78:c4: 61:60:ba:3c:00:64:0d:63:cf:b8:9f:37:7e:aa:3f:b0:d4:8f: 02:76:54:c6:88:4a:18:83:a7:31:62:08:69:6d:5d:2d:dc:a8: c3:c2:83:3e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NDdGNTExMC8GA1UEBRMoNTc5MTE4QjE0OEUyN0QxNTcxNzUxNTY4QkEwNzBGRTFF NjJDN0VCOTAeFw0yNDA1MTcwODA0NDVaFw0yNDA1MjQwODA0NDVaMBgxFjAUBgNV BAMTDTY2NDcwZjlkLTVkZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC72cnbtrUC2PPwDNGe0jv8Bno/DtxP1lRBG5YCDoA7kTUoiNIgjQdTyN5JVRFd /47mhuB/M6sZpKH4ymCNqI11wMBxJiOkojDVatlzriNVLoI6EoAiul/PF+i24xlg i5063drm6sK6lW82YPsDt8pWqbZ431SGTBFD8oB2K8d4iTEnzs/Mj6lx3gCvphxc RNZ+QotrWylt05HCs+RmP55PqGR7r96ppesC9o3xqVlBepKHkAE81dcXAuvY4r8b Y46ezvg0wiQCreaH3qL5jHjkJClnIqtKz3g4MResP9ZTpo6/3z2W8GaEKt/ID5h4 LoWZTR3vsmNvQ23AN5uOXpTrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUv1xG+aha 6WdJa/Jabg4guTziPIYwHwYDVR0jBBgwFoAUV5EYsUjifRVxdRVougcP4eYsfrkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0N0Y1L0Q2OTg5NkU2QTBD ODExRUVBN0I4RDAyQ0M0RjlBRTAyL1Y1RVlzVWppZlJWeGRSVm91Z2NQNGVZc2Zy ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVjVFWXNVamlmUlZ4ZFJWb3VnY1A0ZVlzZnJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0 N0Y1L0Q2OTg5NkU2QTBDODExRUVBN0I4RDAyQ0M0RjlBRTAyL1Y1RVlzVWppZlJW eGRSVm91Z2NQNGVZc2Zyay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMLwRIYgBjCwMUcIbWUbA3qwsTuWku/3vf7V0t/PypefXicyhqOComzw 5+lAVuM4PLvxE/kQO+aJ51Hjw02stfVXLdHSpz0LswunArz9t8201jN0gcZcct7X XmoEZwWfRN1ruuuEgSx0rb1vJiu4Dr4oh4ixlhEDte2Y4UwN59fZ07ocA5ZDc3sk RoGbAKNXwsiWyyhVgAVo7BmNy4Mm55ubE7twgKdFZaQ7JQ5M5OxF0tJ99nwML9Qa uFg3903MMoyh0RoW9VkVrUipzSPp4eobaMIK4lB4xGFgujwAZA1jz7ifN36qP7DU jwJ2VMaIShiDpzFiCGltXS3cqMPCgz4= -----END CERTIFICATE-----Generated at Fri May 17 08:52:48 2024 by rpki-client on console-ams.rpki-client.org