$ rpki-client -vvf rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft File: 5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft (raw, json) Hash identifier: /wdIDI3g01ZTJr54h6lVUn+UkqDOVPFkXFEW/U+RkMc= Subject key identifier: 3F:70:8C:70:49:11:57:BD:A9:BA:E7:42:26:41:CE:67:6C:9A:B0:A8 Authority key identifier: E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3 Certificate issuer: /CN=A9165362/serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3 Certificate serial: 0476 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft Manifest number: 0458 Signing time: Tue 07 May 2024 01:57:31 +0000 Manifest this update: Tue 07 May 2024 01:57:31 +0000 Manifest next update: Tue 14 May 2024 01:57:31 +0000 Files and hashes: 1: 5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl (hash: Uci/urQF0kW453roJOjP3ZpkWfrL6V/KwryLvTfRHJU=) 2: 60C0C3FCED4F11EE86554841C4F9AE02.roa (hash: XOe4W/U+ahzZEhu8EHCzF/Dj9L9ZcQnhfEfHf64Gob8=) 3: FF78020EED4E11EE9B185F14C4F9AE02.roa (hash: SU1U4jm2XiLDmHEETRqQhnS7kaBRZ2AiOp0fDzUFpk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 01:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1142 (0x476) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165362/serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3 Validity Not Before: May 7 01:57:31 2024 GMT Not After : May 14 01:57:31 2024 GMT Subject: CN=66398a8b-5d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5e:78:9e:ac:37:14:cc:73:25:a1:9b:fb:06: e0:cb:4d:6e:70:cd:cc:f6:1a:a3:e7:90:5c:91:22: 7e:4c:21:0c:f1:3f:be:ea:cb:ce:1c:2a:e1:3c:e0: 72:a8:5b:fa:bb:7f:eb:bb:c0:d1:d1:30:b0:53:fa: dc:c8:47:5b:b1:e3:d0:12:e0:68:c1:d9:36:5b:af: a5:65:4e:41:56:2f:4e:74:7a:b0:e7:8d:69:4e:0e: 7a:04:0b:0c:56:05:b1:f7:a1:11:d8:1c:c9:8c:44: 7b:22:de:4b:e8:85:3c:ab:bc:73:50:b0:1a:a3:c2: f0:42:31:43:3a:67:71:db:81:ad:d3:18:fe:3b:0c: d0:8e:85:a8:ea:3e:86:b3:f4:80:4c:04:56:33:c1: ba:b9:9f:0b:cf:76:d8:66:48:ae:5a:8b:c8:7b:db: da:81:27:5f:5f:0a:54:bb:a7:dd:73:40:44:a2:11: 82:af:96:89:f3:22:0d:de:41:60:35:b9:de:18:26: 68:8e:a9:64:d0:49:ec:50:43:4f:44:46:c9:6d:81: a1:94:99:02:96:6a:21:2d:78:bc:4d:d6:9d:34:0d: e6:2f:11:79:8e:14:d7:15:20:c8:e6:c2:53:87:1c: 59:53:c0:c0:08:1b:b8:a8:39:9d:8f:23:81:48:27: 08:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:70:8C:70:49:11:57:BD:A9:BA:E7:42:26:41:CE:67:6C:9A:B0:A8 X509v3 Authority Key Identifier: keyid:E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:f7:1a:5d:14:16:62:bb:a9:8b:fe:a4:5b:c0:0a:5d:9c:b3: c5:a8:4b:24:d2:e4:7e:d1:3f:8e:b5:ea:a5:96:fd:b7:04:e5: 7c:b8:e6:21:6a:39:49:79:36:72:43:b5:f9:e9:f9:a1:a3:fd: 84:66:1b:7c:bc:74:41:7d:3e:f7:04:6b:68:71:f6:b9:c3:95: 31:93:52:92:ed:6a:e9:45:d1:2e:af:54:f5:b0:d3:38:f2:27: 1b:04:ad:75:fa:0a:06:2a:d8:08:04:8f:db:12:89:d1:19:ba: 5a:5f:70:46:16:fd:f7:77:ed:42:a6:34:e3:cc:bd:49:0d:25: 5e:1f:9e:15:5c:5f:b5:5f:f2:c1:b9:eb:26:57:ba:61:8b:5f: 80:b5:b9:cc:0f:17:5f:c1:c2:64:e4:cd:8a:9a:e0:cd:f7:ac: 4e:32:f2:82:ee:f7:63:77:3a:03:7b:c0:63:29:12:56:ca:a9: b2:19:2b:26:45:8f:33:c4:6a:e5:7b:3e:d5:f1:f1:02:45:db: 6c:b3:ed:53:9b:7c:62:b5:7e:98:7b:48:9d:0d:74:51:e5:03: 63:48:68:93:62:b7:2a:f1:f9:87:59:20:3f:3c:15:ae:47:91: 93:ca:87:ae:d0:2d:5b:ea:ce:77:c8:ef:dd:1f:50:3d:dd:b5: 18:d0:8e:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUzNjIxMTAvBgNVBAUTKEU1RTVEMTY4QTBFMTA5NkVBMUMzRjlCN0Y4RThENzU4 RUFFQTIzRjMwHhcNMjQwNTA3MDE1NzMxWhcNMjQwNTE0MDE1NzMxWjAYMRYwFAYD VQQDEw02NjM5OGE4Yi01ZDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu154nqw3FMxzJaGb+wbgy01ucM3M9hqj55BckSJ+TCEM8T++6svOHCrhPOBy qFv6u3/ru8DR0TCwU/rcyEdbsePQEuBowdk2W6+lZU5BVi9OdHqw541pTg56BAsM VgWx96ER2BzJjER7It5L6IU8q7xzULAao8LwQjFDOmdx24Gt0xj+OwzQjoWo6j6G s/SATARWM8G6uZ8Lz3bYZkiuWovIe9vagSdfXwpUu6fdc0BEohGCr5aJ8yIN3kFg NbneGCZojqlk0EnsUENPREbJbYGhlJkClmohLXi8TdadNA3mLxF5jhTXFSDI5sJT hxxZU8DACBu4qDmdjyOBSCcI7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD9wjHBJ EVe9qbrnQiZBzmdsmrCoMB8GA1UdIwQYMBaAFOXl0Wig4QluocP5t/jo11jq6iPz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTM2Mi9EOUNCRjgwQTEw QjMxMUVDQTMxREY4MkNDNEY5QUUwMi81ZVhSYUtEaENXNmh3X20zLU9qWFdPcnFJ X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVlWFJhS0RoQ1c2aHdfbTMtT2pYV09ycUlfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTM2Mi9EOUNCRjgwQTEwQjMxMUVDQTMxREY4MkNDNEY5QUUwMi81ZVhSYUtEaENX Nmh3X20zLU9qWFdPcnFJX00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW9xpdFBZiu6mL/qRbwApdnLPFqEsk0uR+0T+Oteqllv23BOV8uOYh ajlJeTZyQ7X56fmho/2EZht8vHRBfT73BGtocfa5w5Uxk1KS7WrpRdEur1T1sNM4 8icbBK11+goGKtgIBI/bEonRGbpaX3BGFv33d+1CpjTjzL1JDSVeH54VXF+1X/LB uesmV7phi1+AtbnMDxdfwcJk5M2KmuDN96xOMvKC7vdjdzoDe8BjKRJWyqmyGSsm RY8zxGrlez7V8fECRdtss+1Tm3xitX6Ye0idDXRR5QNjSGiTYrcq8fmHWSA/PBWu R5GTyoeu0C1b6s53yO/dH1A93bUY0I5x -----END CERTIFICATE-----Generated at Tue May 7 03:10:19 2024 by rpki-client on console-ams.rpki-client.org