$ rpki-client -vvf rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft File: 5K6ANyqGeYe7Kgq74RCrgENw1eM.mft (raw, json) Hash identifier: dCzsqX40XmY9+fjpY22/CFwnGz7j1FUkLXm6QlSnTc0= Subject key identifier: 8C:AE:FF:E8:F8:72:3C:8E:63:6A:E1:E9:36:FD:80:A9:A6:BF:52:84 Authority key identifier: E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3 Certificate issuer: /CN=A917452D/serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3 Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft Manifest number: 0191 Signing time: Mon 29 Apr 2024 04:44:15 +0000 Manifest this update: Mon 29 Apr 2024 04:44:15 +0000 Manifest next update: Mon 06 May 2024 04:44:15 +0000 Files and hashes: 1: 5K6ANyqGeYe7Kgq74RCrgENw1eM.crl (hash: 4XXitpZTLxnYTvfUQdE/+KNSRZW/EVcvPfi6PhcX8pM=) 2: 5ABAAD76D21811EE93095285C4F9AE02.roa (hash: jqEeR5aXqpprEUgBz7NvCCwqJPX6Jw/fXVk1HSO4iwY=) 3: 59942846D21811EE93095285C4F9AE02.roa (hash: WKGoGCPF42uOFvWjDbePlTDvmtNNp0qAbQmIqMf1Y2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.crl rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 04:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917452D/serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3 Validity Not Before: Apr 29 04:44:15 2024 GMT Not After : May 6 04:44:15 2024 GMT Subject: CN=662f259f-5ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:32:e0:d8:d5:d7:4e:3f:fd:49:ac:7e:b0:60: 62:b5:c0:7c:cc:8e:20:fd:d5:08:ef:b4:1c:a1:fe: 9e:4a:37:4d:48:df:84:42:a6:f3:d0:99:d1:cb:3b: 4d:22:24:31:22:6b:dd:e8:c4:42:29:a4:84:ad:ac: 2f:09:21:41:41:82:9e:2a:38:f2:9d:da:2a:ad:0a: f2:21:1d:69:99:ba:bf:71:3d:b0:2e:61:1b:12:46: 1f:14:f8:23:dd:2b:ec:13:5c:28:eb:1e:e4:9a:55: 7c:60:2b:59:e8:c8:fb:5a:07:13:8e:c4:bd:33:2a: 71:46:5f:47:9e:f6:53:db:51:65:34:4e:f2:e3:1d: ad:a1:41:0a:09:26:81:10:0f:80:e5:81:3e:a9:65: 5d:5e:b1:57:4a:b2:18:9b:bd:2e:e4:71:2a:7e:c8: 72:f7:65:d9:ef:64:f2:6a:a0:c8:b0:e5:ff:61:e1: 88:59:c7:56:02:2f:ab:dc:69:dd:54:50:93:a6:a8: c1:3c:76:3c:13:40:1a:99:69:cf:72:c6:66:12:b5: f2:35:b1:0b:24:7d:d3:46:c6:8c:91:4b:03:bd:13: 2f:ad:14:32:fb:c4:cd:a8:e6:33:b5:9d:fb:b9:00: 12:a6:5a:bb:83:08:4f:ea:7c:ea:a9:4a:62:e6:06: f2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AE:FF:E8:F8:72:3C:8E:63:6A:E1:E9:36:FD:80:A9:A6:BF:52:84 X509v3 Authority Key Identifier: keyid:E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:9e:ab:6c:72:c9:98:93:45:35:74:0f:45:90:41:d9:14:14: e7:00:2b:bf:c0:42:2b:d7:55:1c:4c:17:63:14:37:80:12:06: 07:94:62:b8:bb:e8:8f:5e:9f:30:cd:57:48:b0:1c:08:3e:ec: 8f:f9:fb:46:1d:fd:94:8d:8c:3d:dc:55:76:e0:b8:f3:89:21: 3d:2c:71:14:97:a0:0a:99:81:e1:44:d2:b4:51:9e:37:0c:30: 99:cb:ee:17:2b:9c:2b:07:10:fd:8f:87:7a:b2:22:9e:3b:64: 3b:5f:9c:73:a0:cc:bb:56:e3:fa:8f:a1:0a:cb:8c:8e:bd:86: 7e:97:d3:a6:dd:ff:ea:a6:b0:c9:bd:5e:7a:65:7b:a5:4d:66: 57:67:10:10:02:da:99:49:3b:e1:6a:32:08:35:da:34:49:5d: 50:c9:ab:a3:3d:1b:88:3d:34:2c:10:7d:69:42:14:69:79:95: 3c:49:e7:ec:5b:0d:5a:42:68:32:7e:26:64:c8:d5:4a:cc:18: 36:94:32:3a:41:72:1b:78:ab:62:c4:1c:15:91:ef:e7:e6:33: 9f:09:47:f8:0e:79:f7:7d:32:d9:05:f0:5f:2c:26:a1:4b:0f: d8:fa:c2:59:88:fb:0c:e8:4e:fb:ac:5d:cb:9d:b4:00:0d:cf: fe:cd:ef:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ1MkQxMTAvBgNVBAUTKEU0QUU4MDM3MkE4Njc5ODdCQjJBMEFCQkUxMTBBQjgw NDM3MEQ1RTMwHhcNMjQwNDI5MDQ0NDE1WhcNMjQwNTA2MDQ0NDE1WjAYMRYwFAYD VQQDEw02NjJmMjU5Zi01ZWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDLg2NXXTj/9Sax+sGBitcB8zI4g/dUI77Qcof6eSjdNSN+EQqbz0JnRyztN IiQxImvd6MRCKaSErawvCSFBQYKeKjjyndoqrQryIR1pmbq/cT2wLmEbEkYfFPgj 3SvsE1wo6x7kmlV8YCtZ6Mj7WgcTjsS9MypxRl9HnvZT21FlNE7y4x2toUEKCSaB EA+A5YE+qWVdXrFXSrIYm70u5HEqfshy92XZ72TyaqDIsOX/YeGIWcdWAi+r3Gnd VFCTpqjBPHY8E0AamWnPcsZmErXyNbELJH3TRsaMkUsDvRMvrRQy+8TNqOYztZ37 uQASplq7gwhP6nzqqUpi5gbyzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIyu/+j4 cjyOY2rh6Tb9gKmmv1KEMB8GA1UdIwQYMBaAFOSugDcqhnmHuyoKu+EQq4BDcNXj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDUyRC9BQTQyMTcxRTI3 NjgxMUVEOUEyMjE3MzBDNEY5QUUwMi81SzZBTnlxR2VZZTdLZ3E3NFJDcmdFTncx ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVLNkFOeXFHZVllN0tncTc0UkNyZ0VOdzFlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDUyRC9BQTQyMTcxRTI3NjgxMUVEOUEyMjE3MzBDNEY5QUUwMi81SzZBTnlxR2VZ ZTdLZ3E3NFJDcmdFTncxZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKnqtscsmYk0U1dA9FkEHZFBTnACu/wEIr11UcTBdjFDeAEgYHlGK4 u+iPXp8wzVdIsBwIPuyP+ftGHf2UjYw93FV24LjziSE9LHEUl6AKmYHhRNK0UZ43 DDCZy+4XK5wrBxD9j4d6siKeO2Q7X5xzoMy7VuP6j6EKy4yOvYZ+l9Om3f/qprDJ vV56ZXulTWZXZxAQAtqZSTvhajIINdo0SV1QyaujPRuIPTQsEH1pQhRpeZU8Sefs Ww1aQmgyfiZkyNVKzBg2lDI6QXIbeKtixBwVke/n5jOfCUf4Dnn3fTLZBfBfLCah Sw/Y+sJZiPsM6E77rF3LnbQADc/+ze8j -----END CERTIFICATE-----Generated at Mon Apr 29 05:41:30 2024 by rpki-client on console-fra.rpki-client.org