$ rpki-client -vvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft File: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft (raw, json) Hash identifier: 62hpjOfLZb35+QF/eWm/PO/Q3+TQZQo/ESwmfxEHgdM= Subject key identifier: 63:AE:E0:2C:17:06:03:7B:FB:AE:4E:F9:DD:58:4C:91:8E:5F:A3:10 Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 Certificate issuer: /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Certificate serial: 07DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft Manifest number: 07D4 Signing time: Tue 30 Apr 2024 22:18:35 +0000 Manifest this update: Tue 30 Apr 2024 22:18:35 +0000 Manifest next update: Tue 07 May 2024 22:18:35 +0000 Files and hashes: 1: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl (hash: jFsjkvUeCvk947JHCvXPZYXXxXd1sqwHwSWoOYhS+2k=) 2: A12DD18E2F1C11EDA3E29B09C4F9AE02.roa (hash: CfeDTQgkJrOB3G5IeP7pVkG87sRDt1MhW/A1ZvzImlA=) 3: A29A66FE2F1C11EDA3E29B09C4F9AE02.roa (hash: vbRt7FNRydtjAbCVazVGIwPi68YmILjtiMVW4GhfcaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 22:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2013 (0x7dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Validity Not Before: Apr 30 22:18:35 2024 GMT Not After : May 7 22:18:35 2024 GMT Subject: CN=66316e3b-b380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:93:e5:e5:73:26:13:fb:23:3f:4d:29:12:e1: 23:6b:dc:b3:e7:d3:36:63:19:d1:fa:73:66:4f:52: f1:cb:bc:d2:a0:4a:4c:0a:9e:86:81:82:b1:e6:a4: 1a:20:57:94:a7:7a:e2:54:03:f1:b7:67:3c:44:9e: 14:7f:4a:29:05:13:86:10:29:22:a2:40:9e:fb:60: a8:e7:c2:2e:f1:d0:22:1f:b2:ea:29:4a:76:90:51: 99:bc:1c:2e:d9:84:cd:11:f5:b5:16:45:07:40:d0: 52:25:a0:cc:7a:74:bd:f6:cd:67:3e:4f:a8:06:b4: ef:d4:58:70:0a:57:f3:3a:0c:d4:11:7a:f2:36:71: 64:28:82:a7:03:ab:2c:ea:64:da:a9:8c:65:f9:a1: 07:8e:84:a1:c7:90:38:19:32:b7:34:42:52:20:63: b6:cc:cc:77:a0:5c:2f:68:fc:32:73:d2:35:c0:d9: 5b:e7:91:cd:aa:00:c0:96:9a:9d:69:f4:9d:b9:18: 20:de:c9:e8:11:08:fc:ac:f5:a4:3c:9c:b8:bd:92: 89:9a:47:be:31:60:b6:ef:0a:a2:8f:b9:6a:bc:c0: e4:c8:0c:bf:d3:e7:4f:50:3b:f0:32:2e:31:d9:b3: 2f:8b:54:53:71:74:08:66:02:c4:84:af:c4:11:d2: 05:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:AE:E0:2C:17:06:03:7B:FB:AE:4E:F9:DD:58:4C:91:8E:5F:A3:10 X509v3 Authority Key Identifier: keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:8e:0f:d6:14:47:63:e7:ab:02:a6:c7:1f:f9:9a:91:01:c3: f0:e1:2c:1d:47:8d:db:85:82:d1:8b:3a:89:4f:1a:7a:75:5b: 62:4b:bb:7a:64:6b:06:15:80:37:1a:96:2d:04:96:0b:c2:41: 56:e9:d4:17:21:32:86:81:6e:d4:fd:b3:e9:a6:c8:cc:c5:26: 4d:e9:7c:34:ad:5e:d0:ee:70:4e:db:ac:d4:20:fd:3a:de:3f: bc:e2:85:cc:eb:b2:ec:bf:9c:4f:13:f0:d0:0c:01:2a:82:c9: 6a:3a:9a:2f:f6:b8:b9:e4:de:0e:fb:93:1f:b3:92:a1:92:b4: 34:de:8f:77:cf:7a:36:21:27:49:36:fb:0d:06:21:eb:8e:4d: 3e:40:df:3a:53:6a:02:b5:c3:55:3b:49:94:38:57:59:ca:3e: 9a:c1:53:9d:12:39:ff:13:24:98:f5:10:55:f7:aa:12:a4:92: 9e:18:e3:21:1c:d8:df:4f:b5:9a:c1:93:ef:e0:b0:35:20:fe: 5b:6d:5c:d1:7c:09:c2:7b:b3:a0:64:48:21:69:0a:3e:d2:fb: 9f:1c:3e:f4:af:f3:7d:c5:81:8e:19:2f:2f:00:ba:52:66:4c: 2e:0f:e9:65:08:81:77:30:96:75:30:d2:b6:54:6d:68:86:2b: 3b:19:bc:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyRjcxMTAvBgNVBAUTKEU1MDI3NTdDNjE3QzIxRDQ3QjFCMzU1OUMwOUQ2RUE3 QzNBRkU0MDMwHhcNMjQwNDMwMjIxODM1WhcNMjQwNTA3MjIxODM1WjAYMRYwFAYD VQQDEw02NjMxNmUzYi1iMzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJPl5XMmE/sjP00pEuEja9yz59M2YxnR+nNmT1Lxy7zSoEpMCp6GgYKx5qQa IFeUp3riVAPxt2c8RJ4Uf0opBROGECkiokCe+2Co58Iu8dAiH7LqKUp2kFGZvBwu 2YTNEfW1FkUHQNBSJaDMenS99s1nPk+oBrTv1FhwClfzOgzUEXryNnFkKIKnA6ss 6mTaqYxl+aEHjoShx5A4GTK3NEJSIGO2zMx3oFwvaPwyc9I1wNlb55HNqgDAlpqd afSduRgg3snoEQj8rPWkPJy4vZKJmke+MWC27wqij7lqvMDkyAy/0+dPUDvwMi4x 2bMvi1RTcXQIZgLEhK/EEdIFXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGOu4CwX BgN7+65O+d1YTJGOX6MQMB8GA1UdIwQYMBaAFOUCdXxhfCHUexs1WcCdbqfDr+QD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTJGNy83Q0M0NUZBRUJB QUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElkUjdHelZad0oxdXA4T3Y1 QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRSjFmR0Y4SWRSN0d6Vlp3SjF1cDhPdjVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTJGNy83Q0M0NUZBRUJBQUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElk UjdHelZad0oxdXA4T3Y1QU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4jg/WFEdj56sCpscf+ZqRAcPw4SwdR43bhYLRizqJTxp6dVtiS7t6 ZGsGFYA3GpYtBJYLwkFW6dQXITKGgW7U/bPppsjMxSZN6Xw0rV7Q7nBO26zUIP06 3j+84oXM67Lsv5xPE/DQDAEqgslqOpov9ri55N4O+5Mfs5KhkrQ03o93z3o2ISdJ NvsNBiHrjk0+QN86U2oCtcNVO0mUOFdZyj6awVOdEjn/EySY9RBV96oSpJKeGOMh HNjfT7WawZPv4LA1IP5bbVzRfAnCe7OgZEghaQo+0vufHD70r/N9xYGOGS8vALpS ZkwuD+llCIF3MJZ1MNK2VG1ohis7Gbxu -----END CERTIFICATE-----Generated at Tue Apr 30 22:56:14 2024 by rpki-client on console-fra.rpki-client.org