$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft File: 54D6N3e4HUz2o1QG6lz0vk9l6fo.mft (raw, json) Hash identifier: zK7ObF6gzV4EgItjkfjrSuOAWNEFqP2emTIhuI1Zd/0= Subject key identifier: B4:23:75:AE:CB:F1:F2:47:F8:A7:A4:B9:B2:61:04:E4:2D:A2:02:83 Authority key identifier: E7:80:FA:37:77:B8:1D:4C:F6:A3:54:06:EA:5C:F4:BE:4F:65:E9:FA Certificate issuer: /CN=A917530D/serialNumber=E780FA3777B81D4CF6A35406EA5CF4BE4F65E9FA Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft Manifest number: 40 Signing time: Wed 15 May 2024 08:19:17 +0000 Manifest this update: Wed 15 May 2024 08:19:16 +0000 Manifest next update: Wed 22 May 2024 08:19:16 +0000 Files and hashes: 1: 54D6N3e4HUz2o1QG6lz0vk9l6fo.crl (hash: psvsZGUp5ZWPITGRaOX96bvScNEKlqiqjVUfJ2g5Bvo=) 2: 1BEBEF22BC2B11EE9E07372FC4F9AE02.roa (hash: 8AKjzTN2ebupzY9Q+12ANqP/63LDp5GktBtxaktGQq8=) 3: 1032223CBC2B11EE9E04192FC4F9AE02.roa (hash: MpAPurYtTXFLW1M0lBme9ujEKrNBy5u7pAbDE0pQumo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.crl rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917530D/serialNumber=E780FA3777B81D4CF6A35406EA5CF4BE4F65E9FA Validity Not Before: May 15 08:19:16 2024 GMT Not After : May 22 08:19:16 2024 GMT Subject: CN=66447004-3b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:dd:9d:ac:28:19:14:2f:cf:39:e8:7e:be:15: d0:a6:2d:db:7b:6a:d4:d0:87:b0:7a:15:2f:20:ac: ee:a5:2b:e3:ee:82:0b:18:c7:02:26:8d:13:3c:e2: f9:26:b7:4d:88:6f:6a:16:9b:79:1c:a1:6c:17:65: 51:b7:03:25:ec:df:16:d4:d3:f3:74:ea:b8:87:64: 19:1a:c3:30:72:72:15:b8:2b:27:d6:17:01:92:27: da:09:99:b2:28:5a:8b:22:a5:d9:24:d7:55:05:9a: 26:c3:eb:04:b9:c3:78:7e:5f:f3:f5:ee:53:d1:f2: cb:ac:c3:e1:43:25:99:b0:08:cb:3c:d7:bc:65:fc: ae:40:e9:e1:91:ec:ab:26:30:79:6a:82:9e:6e:a4: 2e:dd:82:44:f5:d7:9f:97:e9:8b:4c:73:62:34:73: c4:38:34:bb:fc:2a:6c:19:1a:d1:06:5f:54:57:21: e0:fe:4b:24:07:a0:bc:c6:82:83:c4:36:bb:d6:b3: a1:ed:d3:1d:6d:cf:a2:09:9f:13:c1:47:4a:d1:11: 82:aa:4f:6b:49:12:d8:31:1c:7a:dd:c9:75:b2:54: 13:2a:c9:bc:b6:3c:42:2b:ec:21:c7:e4:9b:10:2a: a7:a8:ff:c7:e2:1a:0d:87:a4:5c:af:0a:3d:30:53: cc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:23:75:AE:CB:F1:F2:47:F8:A7:A4:B9:B2:61:04:E4:2D:A2:02:83 X509v3 Authority Key Identifier: keyid:E7:80:FA:37:77:B8:1D:4C:F6:A3:54:06:EA:5C:F4:BE:4F:65:E9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:94:e7:cd:49:07:c7:b4:ba:79:37:19:52:ad:9c:df:4a:eb: 35:f1:9b:c9:af:1d:8c:40:c7:30:50:a2:45:07:b3:fc:61:df: 8c:54:86:72:be:e8:ed:4d:10:f2:ca:5a:1a:ad:5a:21:43:41: 93:28:d0:31:31:ac:52:2c:15:d0:2d:b1:b7:e7:d1:24:72:b7: ef:2e:1d:05:50:99:30:ce:8f:15:3b:d2:9c:cd:39:9f:5d:71: 8f:65:25:a3:d6:29:23:66:eb:3d:c8:c6:18:41:6f:f7:4b:66: 02:c8:b9:ed:00:2f:e7:eb:f8:2a:f5:f4:1b:4f:a7:51:2c:f9: bf:c5:d3:e4:71:06:3d:85:71:a3:0f:bb:ff:ea:ca:a1:8e:f5: a1:1f:78:af:94:a2:dd:a2:28:73:3b:f3:d1:5c:a7:2a:f4:f5: 92:e9:50:25:b8:1a:4c:74:db:66:5c:f4:ed:71:15:52:d3:cb: 71:08:56:60:fa:ea:d0:bd:e3:bb:96:0d:2b:31:ab:fe:bc:38: f3:c8:93:e4:22:97:41:be:a8:83:69:41:3d:30:86:f4:4e:40: 25:35:45:4c:2c:35:40:28:79:a8:78:e0:7b:17:45:be:2c:39: cb:b7:3a:f2:50:08:2f:6e:43:2c:e4:d5:95:96:31:ef:38:f5: 26:f0:a6:01 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NTMwRDExMC8GA1UEBRMoRTc4MEZBMzc3N0I4MUQ0Q0Y2QTM1NDA2RUE1Q0Y0QkU0 RjY1RTlGQTAeFw0yNDA1MTUwODE5MTZaFw0yNDA1MjIwODE5MTZaMBgxFjAUBgNV BAMTDTY2NDQ3MDA0LTNiN2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCz3Z2sKBkUL8856H6+FdCmLdt7atTQh7B6FS8grO6lK+PuggsYxwImjRM84vkm t02Ib2oWm3kcoWwXZVG3AyXs3xbU0/N06riHZBkawzBychW4KyfWFwGSJ9oJmbIo Wosipdkk11UFmibD6wS5w3h+X/P17lPR8susw+FDJZmwCMs817xl/K5A6eGR7Ksm MHlqgp5upC7dgkT115+X6YtMc2I0c8Q4NLv8KmwZGtEGX1RXIeD+SyQHoLzGgoPE NrvWs6Ht0x1tz6IJnxPBR0rREYKqT2tJEtgxHHrdyXWyVBMqyby2PEIr7CHH5JsQ Kqeo/8fiGg2HpFyvCj0wU8xfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtCN1rsvx 8kf4p6S5smEE5C2iAoMwHwYDVR0jBBgwFoAU54D6N3e4HUz2o1QG6lz0vk9l6fow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1MzBEL0U2NDAwMUY0QjY0 QjExRUU5MTQ2Mzc2MEM0RjlBRTAyLzU0RDZOM2U0SFV6Mm8xUUc2bHowdms5bDZm by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNTRENk4zZTRIVXoybzFRRzZsejB2azlsNmZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 MzBEL0U2NDAwMUY0QjY0QjExRUU5MTQ2Mzc2MEM0RjlBRTAyLzU0RDZOM2U0SFV6 Mm8xUUc2bHowdms5bDZmby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF+U581JB8e0unk3GVKtnN9K6zXxm8mvHYxAxzBQokUHs/xh34xUhnK+ 6O1NEPLKWhqtWiFDQZMo0DExrFIsFdAtsbfn0SRyt+8uHQVQmTDOjxU70pzNOZ9d cY9lJaPWKSNm6z3IxhhBb/dLZgLIue0AL+fr+Cr19BtPp1Es+b/F0+RxBj2FcaMP u//qyqGO9aEfeK+Uot2iKHM789Fcpyr09ZLpUCW4Gkx022Zc9O1xFVLTy3EIVmD6 6tC947uWDSsxq/68OPPIk+Qil0G+qINpQT0whvROQCU1RUwsNUAoeah44HsXRb4s Ocu3OvJQCC9uQyzk1ZWWMe849SbwpgE= -----END CERTIFICATE-----Generated at Wed May 15 09:27:34 2024 by rpki-client on console-fra.rpki-client.org