$ rpki-client -vvf rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft File: 5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft (raw, json) Hash identifier: 2V7+LM1jm1OECicBOUtHNSh9Lggd+k9eBnL9CHPGzrg= Subject key identifier: F7:00:97:26:9A:77:D8:D8:26:F0:58:E5:D0:83:2E:E6:3A:9E:ED:95 Authority key identifier: E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF Certificate issuer: /CN=A9187313/serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF Certificate serial: 1894 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft Manifest number: 187B Signing time: Tue 30 Apr 2024 17:00:53 +0000 Manifest this update: Tue 30 Apr 2024 17:00:53 +0000 Manifest next update: Tue 07 May 2024 17:00:53 +0000 Files and hashes: 1: 5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl (hash: ELeaps8Fv30qom4+CLa3Q7zkiCWbCEP4NFiiHOdKCZQ=) 2: 98E572FC777011E7BF7EED10C4F9AE02.roa (hash: FW25uAjbp3VXdd8DgauoNj145uQiRAWNHrzwr9oOra4=) 3: 9787989A777011E7BF7EED10C4F9AE02.roa (hash: RsqA7B/aBR+qsQkDg6SkdNsGCnpuyycp5jbjpDkf27I=) 4: 97F31854777011E7BF7EED10C4F9AE02.roa (hash: EFjHZXaY8KAv855DfzaRxgSb+nwJIk5Dh3mOeYsbX0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 17:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6292 (0x1894) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187313/serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF Validity Not Before: Apr 30 17:00:53 2024 GMT Not After : May 7 17:00:53 2024 GMT Subject: CN=663123c5-94b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:58:8c:ce:62:de:f9:7e:b4:11:3c:0f:85:79: 42:79:fc:f3:24:52:a0:60:88:09:37:42:3a:8b:c9: e3:f1:1d:15:a1:2f:ba:62:3a:4e:e4:8f:4b:ac:e1: f0:8f:d6:45:03:07:c5:ff:5b:36:42:63:79:6e:9e: 4a:be:75:88:cd:3f:dc:52:b4:9b:1f:c8:38:fc:8d: af:d8:c7:a9:88:c1:c1:90:4b:10:9b:2d:e6:e2:37: 1d:d7:a2:07:fb:f6:61:d3:3d:64:2a:aa:a1:3e:98: 7a:1c:8d:e9:7a:d9:79:44:40:6a:08:20:4d:4f:1d: e7:8d:e6:40:09:bf:ad:2f:84:44:65:21:ce:17:a4: 11:db:99:de:63:73:2a:e0:32:c0:db:96:36:c6:6b: 73:9a:c8:1e:15:92:c2:96:ac:2f:91:3b:c2:bc:8e: b9:39:65:9a:24:b9:2d:7e:45:2f:15:76:b8:04:4a: 82:3c:a8:f8:5c:ca:0c:1d:d6:4e:68:af:b4:be:7c: ce:02:64:2b:88:2a:c1:24:4b:b0:b4:93:ce:9d:a6: 9b:eb:c0:e9:dc:5f:58:f4:00:3b:7a:04:95:45:cd: fe:e7:0d:ab:40:96:82:06:33:29:41:0e:cb:5f:ed: 59:d4:ac:a8:15:e1:5b:45:5c:3f:1f:3c:0a:ab:4b: 94:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:00:97:26:9A:77:D8:D8:26:F0:58:E5:D0:83:2E:E6:3A:9E:ED:95 X509v3 Authority Key Identifier: keyid:E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:d6:6b:0d:21:0d:ad:88:76:4d:f0:8e:2b:f0:86:77:b4:28: 81:ae:07:aa:44:7f:35:0f:51:b0:37:b4:99:cb:26:86:75:69: 88:fc:fd:b8:65:2a:db:e7:98:ee:60:d0:c2:1e:89:ad:57:1f: 55:40:be:76:3f:ea:e8:bb:45:53:89:75:15:07:d2:70:d8:e6: 07:7b:7b:7c:f6:e5:83:aa:94:74:ec:91:9a:eb:d0:9d:dc:0f: f7:03:04:3e:3d:fa:9b:61:ef:90:82:6c:cb:ee:59:b9:f3:d9: 7c:73:f2:38:9d:13:f0:38:b3:0e:86:c6:3e:ff:2b:bf:48:bd: 9a:9f:d8:30:72:bd:85:d5:69:b8:60:55:07:f0:23:68:bb:01: d8:05:84:dd:76:6c:79:98:a7:f7:b6:8d:29:33:d1:2a:9b:a1: 32:32:97:18:c8:2e:ae:10:3e:6e:b9:a6:7e:6b:38:dd:b3:f3: db:02:fd:a2:d4:27:5c:7c:87:77:7f:e2:49:4e:9a:bf:39:6a: bf:37:82:8b:e5:ec:d7:6d:e5:32:32:75:82:18:67:9c:7d:70: 9b:48:d4:ae:8c:a1:44:09:9a:cf:53:29:40:95:34:0d:4e:ab: 65:af:d3:69:70:e6:f2:e7:11:7a:c4:c6:07:52:97:35:d3:9f: e4:78:66:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczMTMxMTAvBgNVBAUTKEU1NjcyQkJGMThDNENGRUJEM0Y0NzJEMTNCNDg3NzEz NzJEMzRFREYwHhcNMjQwNDMwMTcwMDUzWhcNMjQwNTA3MTcwMDUzWjAYMRYwFAYD VQQDEw02NjMxMjNjNS05NGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApliMzmLe+X60ETwPhXlCefzzJFKgYIgJN0I6i8nj8R0VoS+6YjpO5I9LrOHw j9ZFAwfF/1s2QmN5bp5KvnWIzT/cUrSbH8g4/I2v2MepiMHBkEsQmy3m4jcd16IH +/Zh0z1kKqqhPph6HI3petl5REBqCCBNTx3njeZACb+tL4REZSHOF6QR25neY3Mq 4DLA25Y2xmtzmsgeFZLClqwvkTvCvI65OWWaJLktfkUvFXa4BEqCPKj4XMoMHdZO aK+0vnzOAmQriCrBJEuwtJPOnaab68Dp3F9Y9AA7egSVRc3+5w2rQJaCBjMpQQ7L X+1Z1KyoFeFbRVw/HzwKq0uUYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPcAlyaa d9jYJvBY5dCDLuY6nu2VMB8GA1UdIwQYMBaAFOVnK78YxM/r0/Ry0TtIdxNy007f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzMxMy8zQzM0RUMwQTc3 NkYxMUU3ODJBRDZEMEVDNEY5QUUwMi81V2NydnhqRXotdlQ5SExSTzBoM0UzTFRU dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVXY3J2eGpFei12VDlITFJPMGgzRTNMVFR0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzMxMy8zQzM0RUMwQTc3NkYxMUU3ODJBRDZEMEVDNEY5QUUwMi81V2NydnhqRXot dlQ5SExSTzBoM0UzTFRUdDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS1msNIQ2tiHZN8I4r8IZ3tCiBrgeqRH81D1GwN7SZyyaGdWmI/P24 ZSrb55juYNDCHomtVx9VQL52P+rou0VTiXUVB9Jw2OYHe3t89uWDqpR07JGa69Cd 3A/3AwQ+PfqbYe+QgmzL7lm589l8c/I4nRPwOLMOhsY+/yu/SL2an9gwcr2F1Wm4 YFUH8CNouwHYBYTddmx5mKf3to0pM9Eqm6EyMpcYyC6uED5uuaZ+azjds/PbAv2i 1CdcfId3f+JJTpq/OWq/N4KL5ezXbeUyMnWCGGecfXCbSNSujKFECZrPUylAlTQN Tqtlr9NpcOby5xF6xMYHUpc105/keGaE -----END CERTIFICATE-----Generated at Tue Apr 30 18:57:04 2024 by rpki-client on console-fra.rpki-client.org