$ rpki-client -vvf rpki.apnic.net/member_repository/A9175862/04B3F5FAEBCD11E797CA0E2CC4F9AE02/5ipNR4qboY7g-ZBpj2gj2VDR5nQ.mft File: 5ipNR4qboY7g-ZBpj2gj2VDR5nQ.mft (raw, json) Hash identifier: mFkGDEHbvtY8EtYpqK9EzaXdVkaINP3gyYniFqhtHQU= Subject key identifier: 4A:68:92:BD:14:4D:A2:B0:7A:F6:F5:E3:0D:1D:29:F1:96:31:A3:94 Authority key identifier: E6:2A:4D:47:8A:9B:A1:8E:E0:F9:90:69:8F:68:23:D9:50:D1:E6:74 Certificate issuer: /CN=A9175862/serialNumber=E62A4D478A9BA18EE0F990698F6823D950D1E674 Certificate serial: 1632 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ipNR4qboY7g-ZBpj2gj2VDR5nQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175862/04B3F5FAEBCD11E797CA0E2CC4F9AE02/5ipNR4qboY7g-ZBpj2gj2VDR5nQ.mft Manifest number: 162B Signing time: Thu 02 May 2024 17:15:46 +0000 Manifest this update: Thu 02 May 2024 17:15:45 +0000 Manifest next update: Thu 09 May 2024 17:15:45 +0000 Files and hashes: 1: 5ipNR4qboY7g-ZBpj2gj2VDR5nQ.crl (hash: N1f7zGEn/FdPWFkgqk+9Cz5W4pI9fK9Cx0nzpO17Iy8=) 2: 766E754AE9D411EB91D55081C4F9AE02.roa (hash: dFPUC3nfTQvBocPdPRx/Z5eqylz7fdQQ9z0hlNpStis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175862/04B3F5FAEBCD11E797CA0E2CC4F9AE02/5ipNR4qboY7g-ZBpj2gj2VDR5nQ.crl rsync://rpki.apnic.net/member_repository/A9175862/04B3F5FAEBCD11E797CA0E2CC4F9AE02/5ipNR4qboY7g-ZBpj2gj2VDR5nQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ipNR4qboY7g-ZBpj2gj2VDR5nQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5682 (0x1632) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175862/serialNumber=E62A4D478A9BA18EE0F990698F6823D950D1E674 Validity Not Before: May 2 17:15:45 2024 GMT Not After : May 9 17:15:45 2024 GMT Subject: CN=6633ca42-84fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f2:b5:6e:f6:40:80:ea:1f:e9:d9:30:6a:08: 1d:0a:2a:3e:81:76:f1:7c:9e:6a:fb:01:5e:42:65: 69:55:ff:3f:71:e8:65:24:75:ab:5b:e6:b0:44:50: af:56:8c:a4:0a:41:d9:98:b8:28:da:61:07:77:c1: 24:7c:c5:f5:3e:bb:95:81:3e:f3:02:3b:34:58:d2: ac:d8:a8:82:0e:26:f7:67:33:22:67:80:82:0b:f1: 94:7a:9a:dc:aa:46:35:a7:16:96:54:56:1e:76:93: c0:76:1b:62:ec:76:ec:0a:4d:39:6b:c4:d2:5e:a8: 5e:1b:f1:7d:f2:e3:51:9a:fb:a8:1d:3d:19:8e:30: bc:8f:91:b6:97:5e:51:55:02:e2:7b:4d:2d:67:fc: c9:11:76:30:7c:c1:7e:95:81:88:12:10:35:03:17: 94:10:63:6a:32:98:c9:da:9c:1c:83:50:47:c0:d5: d8:7d:cf:4e:c0:bc:78:83:c5:02:fd:b0:a3:4b:90: 61:af:e3:fe:5e:cb:30:c4:3b:86:a3:de:c9:b3:d4: 4f:f1:45:87:17:fa:31:36:56:66:37:0b:20:3b:18: cb:68:7c:f9:ad:12:70:d9:51:8d:ab:44:ea:e3:06: c0:22:f6:f3:b7:f6:cc:09:41:f8:22:bc:3f:da:42: c6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:68:92:BD:14:4D:A2:B0:7A:F6:F5:E3:0D:1D:29:F1:96:31:A3:94 X509v3 Authority Key Identifier: keyid:E6:2A:4D:47:8A:9B:A1:8E:E0:F9:90:69:8F:68:23:D9:50:D1:E6:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175862/04B3F5FAEBCD11E797CA0E2CC4F9AE02/5ipNR4qboY7g-ZBpj2gj2VDR5nQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ipNR4qboY7g-ZBpj2gj2VDR5nQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175862/04B3F5FAEBCD11E797CA0E2CC4F9AE02/5ipNR4qboY7g-ZBpj2gj2VDR5nQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:be:a8:26:46:f1:17:6c:34:8e:a2:03:4b:80:37:3c:88:73: 18:85:46:18:36:9c:8b:f2:22:3f:b3:7d:1f:42:f5:49:59:da: 08:da:f0:ad:38:51:c3:3d:16:22:9e:f2:37:5f:71:fa:dd:6a: 0d:98:72:d7:29:f2:e8:de:1a:1e:b3:38:b2:ea:1e:30:74:57: 5c:34:1d:3d:63:1a:f7:5e:d6:f9:a0:49:5a:a4:c7:8e:60:0f: 7e:ed:51:d3:e8:c3:71:72:37:31:b8:1d:84:08:df:1c:f5:98: b0:35:d4:e5:b5:e0:8c:43:72:49:7f:ee:31:03:19:c8:8a:5d: ba:59:05:cc:4c:69:ba:62:42:95:36:a6:69:3f:af:5e:8f:83: 60:1d:6d:20:f9:0e:da:b1:1d:69:0e:bd:7d:b4:fc:19:f2:5c: a9:84:a8:88:40:f0:9a:99:f4:38:b8:04:a4:8f:75:26:1a:f4: 44:07:a9:90:d3:34:34:c9:f4:cb:04:e3:2f:e7:95:c4:24:bb: 5a:ae:94:c1:87:9f:4f:d4:3c:9a:93:cc:46:aa:1b:89:a3:64: 8c:60:f1:5f:a5:38:02:d3:bc:cb:a1:84:bc:24:05:29:6a:d2: 93:9d:f0:8d:e6:45:ee:71:c1:9c:b1:97:b3:46:39:73:a6:bd: 63:98:88:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU4NjIxMTAvBgNVBAUTKEU2MkE0RDQ3OEE5QkExOEVFMEY5OTA2OThGNjgyM0Q5 NTBEMUU2NzQwHhcNMjQwNTAyMTcxNTQ1WhcNMjQwNTA5MTcxNTQ1WjAYMRYwFAYD VQQDEw02NjMzY2E0Mi04NGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/K1bvZAgOof6dkwaggdCio+gXbxfJ5q+wFeQmVpVf8/cehlJHWrW+awRFCv VoykCkHZmLgo2mEHd8EkfMX1PruVgT7zAjs0WNKs2KiCDib3ZzMiZ4CCC/GUeprc qkY1pxaWVFYedpPAdhti7HbsCk05a8TSXqheG/F98uNRmvuoHT0ZjjC8j5G2l15R VQLie00tZ/zJEXYwfMF+lYGIEhA1AxeUEGNqMpjJ2pwcg1BHwNXYfc9OwLx4g8UC /bCjS5Bhr+P+XsswxDuGo97Js9RP8UWHF/oxNlZmNwsgOxjLaHz5rRJw2VGNq0Tq 4wbAIvbzt/bMCUH4Irw/2kLG+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEpokr0U TaKwevb14w0dKfGWMaOUMB8GA1UdIwQYMBaAFOYqTUeKm6GO4PmQaY9oI9lQ0eZ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTg2Mi8wNEIzRjVGQUVC Q0QxMUU3OTdDQTBFMkNDNEY5QUUwMi81aXBOUjRxYm9ZN2ctWkJwajJnajJWRFI1 blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVpcE5SNHFib1k3Zy1aQnBqMmdqMlZEUjVuUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTg2Mi8wNEIzRjVGQUVCQ0QxMUU3OTdDQTBFMkNDNEY5QUUwMi81aXBOUjRxYm9Z N2ctWkJwajJnajJWRFI1blEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUvqgmRvEXbDSOogNLgDc8iHMYhUYYNpyL8iI/s30fQvVJWdoI2vCt OFHDPRYinvI3X3H63WoNmHLXKfLo3hoesziy6h4wdFdcNB09Yxr3Xtb5oElapMeO YA9+7VHT6MNxcjcxuB2ECN8c9ZiwNdTlteCMQ3JJf+4xAxnIil26WQXMTGm6YkKV NqZpP69ej4NgHW0g+Q7asR1pDr19tPwZ8lyphKiIQPCamfQ4uASkj3UmGvREB6mQ 0zQ0yfTLBOMv55XEJLtarpTBh59P1Dyak8xGqhuJo2SMYPFfpTgC07zLoYS8JAUp atKTnfCN5kXuccGcsZezRjlzpr1jmIhI -----END CERTIFICATE-----Generated at Thu May 2 20:04:39 2024 by rpki-client on console-ams.rpki-client.org