$ rpki-client -vvf rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft File: t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft (raw, json) Hash identifier: +2zPvhGNM3kZ7c9oOlYnymnX1n6mTPs+ko/HdIV6y9c= Subject key identifier: C8:B0:98:95:60:A3:F2:77:89:17:91:91:A8:9C:C6:76:8F:19:EF:9D Authority key identifier: B7:91:BD:1C:9E:20:81:AA:84:F8:07:80:66:C0:C7:F6:0A:63:79:0E Certificate issuer: /CN=A917F8F2/serialNumber=B791BD1C9E2081AA84F8078066C0C7F60A63790E Certificate serial: 0768 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft Manifest number: 075A Signing time: Wed 01 May 2024 10:45:02 +0000 Manifest this update: Wed 01 May 2024 10:45:02 +0000 Manifest next update: Wed 08 May 2024 10:45:02 +0000 Files and hashes: 1: t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl (hash: AFKxSM0SvyhlXQaXtZHqFGLKcI1tgdshf54wzmgYJ0M=) 2: DB137BAA07A711EF85DF1B17C4F9AE02.roa (hash: CZXfioN2/L3xjGzytc+fDFq5K1pnBa+Gc5IViD10gQ0=) 3: B78B5CB6D65F11EA8B30486EC4F9AE02.roa (hash: pyE1yk75hZHnyTIGM5Wvuc1wIGq6cD55fIaC+TnGwmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 10:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1896 (0x768) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F8F2/serialNumber=B791BD1C9E2081AA84F8078066C0C7F60A63790E Validity Not Before: May 1 10:45:02 2024 GMT Not After : May 8 10:45:02 2024 GMT Subject: CN=66321d2e-41c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8a:e8:13:9e:8c:87:de:20:a8:75:42:fd:a0: 41:bd:b3:e3:40:55:ca:2b:74:4a:36:5f:40:11:ca: 1e:cb:43:41:97:2b:77:63:2c:ac:4a:d5:3b:e0:52: eb:32:77:6c:b6:75:b6:b1:12:45:41:9f:aa:21:9c: 26:82:74:7a:c1:81:d8:59:87:07:94:a3:95:c1:b4: 10:c3:e3:b7:bd:a5:ed:fb:ec:85:19:6d:45:3d:19: b7:8b:7e:03:e7:40:fc:b9:86:02:f6:31:f8:aa:f0: 5e:aa:2e:2b:21:66:c1:e5:fb:8a:1b:b0:7c:72:04: 1b:8f:b8:d6:1c:a9:78:7c:a9:f2:44:71:49:36:be: 91:3b:51:8c:e7:80:92:8a:16:98:c1:c1:b8:43:91: 04:58:65:5c:47:0d:f3:e1:e7:49:0b:85:7e:ef:6d: 5f:f1:57:65:ef:af:21:ff:02:bb:05:9d:eb:25:30: a0:27:81:57:c3:9e:46:4b:47:c5:9c:10:07:21:ba: 97:b9:14:2b:7b:b8:51:3f:f6:30:c0:c0:f1:19:83: ee:ef:6a:66:09:ff:bb:01:d2:1d:25:4d:27:12:d5: 37:2a:cc:c1:6b:11:68:9d:1a:33:b9:e5:1e:4b:02: 20:87:1f:f8:dc:04:ca:73:fc:69:d8:04:6e:f0:d4: b6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B0:98:95:60:A3:F2:77:89:17:91:91:A8:9C:C6:76:8F:19:EF:9D X509v3 Authority Key Identifier: keyid:B7:91:BD:1C:9E:20:81:AA:84:F8:07:80:66:C0:C7:F6:0A:63:79:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:3e:92:41:e9:b8:61:e1:f2:2e:d2:3c:0f:a1:0a:84:d9:54: 9e:41:22:6a:cc:be:33:1c:81:76:41:f9:96:c7:f1:b4:cd:17: 10:28:e3:17:fc:cf:01:6d:75:20:35:f8:51:a3:c2:55:ee:6d: e2:4d:6c:21:c3:78:46:38:b0:0c:3d:56:b4:35:dd:83:ba:cc: 74:ea:ea:0d:52:51:2c:dd:42:a7:55:86:20:23:de:2c:b0:cf: ee:97:0f:da:29:ad:32:e4:f6:da:86:3a:73:a2:c5:97:0d:54: 49:30:17:f5:ae:e6:25:4d:36:9e:cd:62:3c:d0:14:07:be:fe: 16:8b:95:5a:c2:92:19:b3:60:9c:85:4e:20:ec:c7:83:75:1d: c1:a9:3f:c5:7a:26:1f:20:53:cf:9e:1f:d6:f4:2b:54:27:50: 72:b2:f7:41:eb:68:09:1b:ec:e7:36:80:2a:8c:76:83:e2:fd: bb:a1:21:7a:0d:09:4c:98:e1:35:6f:47:25:57:72:e2:e1:0f: b6:c9:a0:5b:f6:85:80:a0:cd:b9:83:71:2a:28:54:b9:d3:bc: c5:f7:29:a7:8d:d0:1f:e2:e0:7b:65:d4:6e:52:97:c0:44:7d: 53:79:c2:d8:21:ce:d3:a7:cf:1d:e3:3c:7e:63:96:25:13:a1: ce:dd:c9:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4RjIxMTAvBgNVBAUTKEI3OTFCRDFDOUUyMDgxQUE4NEY4MDc4MDY2QzBDN0Y2 MEE2Mzc5MEUwHhcNMjQwNTAxMTA0NTAyWhcNMjQwNTA4MTA0NTAyWjAYMRYwFAYD VQQDEw02NjMyMWQyZS00MWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4roE56Mh94gqHVC/aBBvbPjQFXKK3RKNl9AEcoey0NBlyt3YyysStU74FLr MndstnW2sRJFQZ+qIZwmgnR6wYHYWYcHlKOVwbQQw+O3vaXt++yFGW1FPRm3i34D 50D8uYYC9jH4qvBeqi4rIWbB5fuKG7B8cgQbj7jWHKl4fKnyRHFJNr6RO1GM54CS ihaYwcG4Q5EEWGVcRw3z4edJC4V+721f8Vdl768h/wK7BZ3rJTCgJ4FXw55GS0fF nBAHIbqXuRQre7hRP/YwwMDxGYPu72pmCf+7AdIdJU0nEtU3KszBaxFonRozueUe SwIghx/43ATKc/xp2ARu8NS2uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMiwmJVg o/J3iReRkaicxnaPGe+dMB8GA1UdIwQYMBaAFLeRvRyeIIGqhPgHgGbAx/YKY3kO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjhGMi8wMjJENTcxQ0Q2 NUUxMUVBQjYwQ0EzNkJDNEY5QUUwMi90NUc5SEo0Z2dhcUUtQWVBWnNESDlncGpl UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q1RzlISjRnZ2FxRS1BZUFac0RIOWdwamVRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjhGMi8wMjJENTcxQ0Q2NUUxMUVBQjYwQ0EzNkJDNEY5QUUwMi90NUc5SEo0Z2dh cUUtQWVBWnNESDlncGplUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACPpJB6bhh4fIu0jwPoQqE2VSeQSJqzL4zHIF2QfmWx/G0zRcQKOMX /M8BbXUgNfhRo8JV7m3iTWwhw3hGOLAMPVa0Nd2Dusx06uoNUlEs3UKnVYYgI94s sM/ulw/aKa0y5PbahjpzosWXDVRJMBf1ruYlTTaezWI80BQHvv4Wi5VawpIZs2Cc hU4g7MeDdR3BqT/FeiYfIFPPnh/W9CtUJ1BysvdB62gJG+znNoAqjHaD4v27oSF6 DQlMmOE1b0clV3Li4Q+2yaBb9oWAoM25g3EqKFS507zF9ymnjdAf4uB7ZdRuUpfA RH1TecLYIc7Tp88d4zx+Y5YlE6HO3cnx -----END CERTIFICATE-----Generated at Wed May 1 13:30:13 2024 by rpki-client on console-fra.rpki-client.org