$ rpki-client -vvf rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft File: 5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft (raw, json) Hash identifier: pqQm5aAbuKqpZEbCvmOo3oWfpoVyUlYYDKsgBDLgKgs= Subject key identifier: 61:84:97:E4:72:B9:FC:99:E9:18:FA:FB:E3:E6:A9:5F:F6:BD:46:DD Authority key identifier: E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D Certificate issuer: /CN=A91801A5/serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D Certificate serial: 05AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft Manifest number: 05A6 Signing time: Wed 01 May 2024 00:37:28 +0000 Manifest this update: Wed 01 May 2024 00:37:28 +0000 Manifest next update: Wed 08 May 2024 00:37:28 +0000 Files and hashes: 1: 5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl (hash: BR9uwuwA25Blt50l8E9CuHHdpUykMbBUNfYDEZQUWhA=) 2: 3F7FBFC421E711EEB0E0DE3DC4F9AE02.roa (hash: mWAcXggam87UKmbA78ylLeLwaGYiQ0rRlm2rlIbMXmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 00:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1452 (0x5ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91801A5/serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D Validity Not Before: May 1 00:37:28 2024 GMT Not After : May 8 00:37:28 2024 GMT Subject: CN=66318ec8-00f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5e:39:9b:15:00:2e:2e:5e:67:ad:10:3f:a6: c6:ad:f7:c2:53:eb:cf:b4:c9:1b:80:db:b2:32:1c: 98:44:02:94:bd:51:ce:d6:6d:fd:46:58:39:3c:62: 0a:fb:13:7c:83:8c:ef:b6:a5:72:23:e9:3e:05:d2: c5:d5:60:2d:d3:e3:98:a0:2e:4c:5a:aa:5f:1d:96: 68:35:d0:48:7f:35:8f:1b:a3:ef:ae:04:44:c6:65: e7:12:a5:b0:b6:11:db:b9:6f:14:1b:3b:7f:a7:e6: 3e:01:8f:84:8e:2c:3b:09:6c:3d:01:e8:0d:2e:ef: 6e:3c:26:2f:7a:1c:16:b3:67:09:e3:7b:e4:b2:ab: 8b:e9:12:39:b7:2f:61:27:2d:c1:e4:4b:c1:56:5a: c7:d5:ae:33:fc:48:2b:58:c6:4c:70:a5:51:44:bd: 20:51:15:fd:2b:0f:eb:fe:86:3d:62:a9:df:9a:6d: 37:81:ac:a6:8d:af:2a:84:fd:62:1b:92:51:81:3e: fe:70:2f:34:7a:77:3a:e7:83:e6:6f:f6:8e:a7:da: 4d:52:3d:c1:3e:fc:cb:00:a1:2a:e9:25:54:2d:46: a2:93:3d:a3:cb:b7:28:52:cc:95:ab:db:3a:fb:91: b0:8d:fc:0b:7c:08:56:4b:78:7a:de:01:cc:58:ae: de:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:84:97:E4:72:B9:FC:99:E9:18:FA:FB:E3:E6:A9:5F:F6:BD:46:DD X509v3 Authority Key Identifier: keyid:E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:fb:dc:f8:fd:eb:ee:d9:71:99:8c:c1:e1:fe:63:cc:04:15: f2:5f:bd:b3:27:87:0c:cf:2f:8e:54:a0:c4:f5:49:5e:ca:8c: ab:ac:dd:3b:84:8e:be:49:b9:63:09:dc:66:a2:7c:44:6e:3f: 99:fa:d0:f4:3d:5a:69:8e:51:84:4a:dc:c7:7b:52:2c:aa:e0: 0f:17:0a:29:bd:98:88:b4:43:f0:a8:32:29:ad:b4:66:59:6f: ca:2d:c5:46:1c:13:e7:a5:4f:3c:6b:30:13:7a:91:92:a7:a9: b4:8d:1d:75:c4:68:14:09:b8:3d:4c:fa:ec:d9:6c:5a:52:16: 8a:dc:aa:86:5d:fc:dc:1f:f9:2b:8e:ac:a1:bb:0d:e0:e8:b3: 28:a5:43:91:5a:53:72:77:41:ed:5c:79:76:7c:c9:b0:b6:20: 2c:d5:db:0f:6b:dd:3a:af:f4:ee:56:11:ca:4f:b0:37:4b:83: ea:52:a9:a0:61:ad:a8:29:8e:e0:73:8e:c9:74:60:ea:c1:a7: df:7c:7e:ea:69:2e:51:d0:39:7f:36:04:47:3b:4b:ab:a8:40: db:fe:71:e2:a5:fb:cc:c2:c8:ff:a2:56:5c:a3:b0:da:42:ec: ef:eb:81:40:b5:52:23:60:f4:d5:93:92:f9:54:bb:2b:2a:90: fa:07:79:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAxQTUxMTAvBgNVBAUTKEU1RTFDRkNBRTFGOUU2RjEyMUNBMTM1NTFCNDBGNjk4 OTg0QjlEOUQwHhcNMjQwNTAxMDAzNzI4WhcNMjQwNTA4MDAzNzI4WjAYMRYwFAYD VQQDEw02NjMxOGVjOC0wMGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtl45mxUALi5eZ60QP6bGrffCU+vPtMkbgNuyMhyYRAKUvVHO1m39Rlg5PGIK +xN8g4zvtqVyI+k+BdLF1WAt0+OYoC5MWqpfHZZoNdBIfzWPG6PvrgRExmXnEqWw thHbuW8UGzt/p+Y+AY+Ejiw7CWw9AegNLu9uPCYvehwWs2cJ43vksquL6RI5ty9h Jy3B5EvBVlrH1a4z/EgrWMZMcKVRRL0gURX9Kw/r/oY9Yqnfmm03gaymja8qhP1i G5JRgT7+cC80enc654Pmb/aOp9pNUj3BPvzLAKEq6SVULUaikz2jy7coUsyVq9s6 +5GwjfwLfAhWS3h63gHMWK7erwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGEl+Ry ufyZ6Rj6++PmqV/2vUbdMB8GA1UdIwQYMBaAFOXhz8rh+ebxIcoTVRtA9piYS52d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDFBNS84NEI1RDYxQzdE NkQxMUVCQTZBNEE4MTdDNEY5QUUwMi81ZUhQeXVINTV2RWh5aE5WRzBEMm1KaExu WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVlSFB5dUg1NXZFaHloTlZHMEQybUpoTG5aMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDFBNS84NEI1RDYxQzdENkQxMUVCQTZBNEE4MTdDNEY5QUUwMi81ZUhQeXVINTV2 RWh5aE5WRzBEMm1KaExuWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ+9z4/evu2XGZjMHh/mPMBBXyX72zJ4cMzy+OVKDE9UleyoyrrN07 hI6+SbljCdxmonxEbj+Z+tD0PVppjlGEStzHe1IsquAPFwopvZiItEPwqDIprbRm WW/KLcVGHBPnpU88azATepGSp6m0jR11xGgUCbg9TPrs2WxaUhaK3KqGXfzcH/kr jqyhuw3g6LMopUORWlNyd0HtXHl2fMmwtiAs1dsPa906r/TuVhHKT7A3S4PqUqmg Ya2oKY7gc47JdGDqwafffH7qaS5R0Dl/NgRHO0urqEDb/nHipfvMwsj/olZco7Da Quzv64FAtVIjYPTVk5L5VLsrKpD6B3kY -----END CERTIFICATE-----Generated at Wed May 1 02:08:04 2024 by rpki-client on console-fra.rpki-client.org