$ rpki-client -vvf rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft File: J5KVmyX7-evckzm6nH01VXJpaas.mft (raw, json) Hash identifier: riA+9PkBcZJof1b0E+1a5R4mJ0nxuKew9BaD3f6YdG8= Subject key identifier: 20:93:ED:AB:4F:FA:9B:1A:52:B8:1F:15:41:A1:AC:2E:40:91:86:95 Authority key identifier: 27:92:95:9B:25:FB:F9:EB:DC:93:39:BA:9C:7D:35:55:72:69:69:AB Certificate issuer: /CN=A9189261/serialNumber=2792959B25FBF9EBDC9339BA9C7D3555726969AB Certificate serial: 0592 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5KVmyX7-evckzm6nH01VXJpaas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft Manifest number: 058E Signing time: Sun 05 May 2024 00:37:31 +0000 Manifest this update: Sun 05 May 2024 00:37:31 +0000 Manifest next update: Sun 12 May 2024 00:37:31 +0000 Files and hashes: 1: J5KVmyX7-evckzm6nH01VXJpaas.crl (hash: eLuDsVqxas3IoJIFVYhW+NJNmrKnid74xzudfov5JEs=) 2: CDACEC3686AD11EBBDFD106EC4F9AE02.roa (hash: +b74aWHLRD3nVFpEi7MMX8aEV8GBCMCU5F6fmVweFlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.crl rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5KVmyX7-evckzm6nH01VXJpaas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1426 (0x592) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189261/serialNumber=2792959B25FBF9EBDC9339BA9C7D3555726969AB Validity Not Before: May 5 00:37:31 2024 GMT Not After : May 12 00:37:31 2024 GMT Subject: CN=6636d4cb-c543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b5:c0:e8:bc:3e:c3:6c:48:f3:53:e1:fb:48: 53:13:25:1b:71:30:5a:c4:8e:dd:12:7c:c8:bd:46: d4:39:4b:28:da:73:7b:92:e7:f8:29:c2:6c:4c:70: e3:b3:7f:e3:17:b2:da:4a:ec:3c:b3:c6:de:1f:11: 5a:23:7e:85:07:db:17:e7:a5:61:23:e0:0a:44:34: da:25:dd:7c:10:49:09:f1:99:c0:ac:95:0c:37:0a: c7:59:9d:c1:d4:9a:a5:7a:e0:22:d9:67:8b:02:d5: 67:22:50:20:a5:78:71:a3:10:8b:e7:4e:55:3b:36: 2e:ec:f6:b3:6a:24:3c:94:f7:23:13:a2:fd:4f:8b: 07:9b:f4:64:f3:3a:65:85:1e:37:a2:83:87:aa:d1: 22:53:04:cc:d2:8a:e4:ef:2f:85:6a:0f:3a:76:40: 52:0a:9a:a6:ac:43:87:f3:22:f9:37:12:40:2b:01: d7:33:56:58:2a:06:1a:59:96:0d:a0:ad:0a:2e:d4: e4:3c:60:8c:2a:8c:b4:45:0e:c7:65:b3:22:77:6f: b7:03:be:81:07:88:82:89:3f:c8:05:d4:d5:5c:5e: c3:79:e3:06:45:b4:b7:5e:1c:31:f1:70:b4:99:c4: e7:31:28:d0:7f:5e:81:22:7e:ca:84:9f:4c:ce:89: c9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:93:ED:AB:4F:FA:9B:1A:52:B8:1F:15:41:A1:AC:2E:40:91:86:95 X509v3 Authority Key Identifier: keyid:27:92:95:9B:25:FB:F9:EB:DC:93:39:BA:9C:7D:35:55:72:69:69:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5KVmyX7-evckzm6nH01VXJpaas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f0:3a:cb:17:43:29:cd:37:e2:a3:57:e0:5d:99:d9:05:b5: 50:cd:2d:39:bd:18:3a:9a:26:fb:3d:0e:ce:e1:c3:f6:6f:c3: ee:0f:3d:5c:96:9f:bf:29:84:06:9f:2e:78:db:f0:e5:64:5f: 70:63:93:7c:55:59:74:6b:21:32:f2:12:5a:3b:c9:99:60:40: bb:0d:73:5f:af:44:f6:16:1a:dd:b4:09:28:8c:c3:59:3b:23: 3c:92:7b:3d:0e:05:9e:35:82:50:4e:23:9a:17:1f:8d:0f:79: 09:1a:d8:89:2c:0e:b8:96:52:b6:ab:12:de:ad:d0:e1:9c:79: fa:42:19:35:c3:1f:d0:d8:a0:25:50:ce:87:2d:f9:9c:1a:0b: 56:23:41:a5:0b:d7:c4:cb:f4:a1:a7:c4:b9:a3:01:44:b4:cd: ca:48:b7:67:9d:39:48:9b:3c:f9:87:e5:7d:d9:79:63:78:82: 39:e5:52:1e:0e:3d:21:c3:02:45:81:c4:b6:fe:19:16:73:7b: 67:d8:da:c0:6f:72:46:ed:a2:94:ad:cb:10:ef:19:0d:dc:08: 5b:5f:9b:13:d1:79:03:1f:f9:a1:eb:dc:66:7c:b6:15:2c:6e: 45:5b:2f:9a:11:83:91:be:92:76:49:79:db:1d:4d:a9:cd:fd: 16:05:00:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyNjExMTAvBgNVBAUTKDI3OTI5NTlCMjVGQkY5RUJEQzkzMzlCQTlDN0QzNTU1 NzI2OTY5QUIwHhcNMjQwNTA1MDAzNzMxWhcNMjQwNTEyMDAzNzMxWjAYMRYwFAYD VQQDEw02NjM2ZDRjYi1jNTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbXA6Lw+w2xI81Ph+0hTEyUbcTBaxI7dEnzIvUbUOUso2nN7kuf4KcJsTHDj s3/jF7LaSuw8s8beHxFaI36FB9sX56VhI+AKRDTaJd18EEkJ8ZnArJUMNwrHWZ3B 1JqleuAi2WeLAtVnIlAgpXhxoxCL505VOzYu7PazaiQ8lPcjE6L9T4sHm/Rk8zpl hR43ooOHqtEiUwTM0ork7y+Fag86dkBSCpqmrEOH8yL5NxJAKwHXM1ZYKgYaWZYN oK0KLtTkPGCMKoy0RQ7HZbMid2+3A76BB4iCiT/IBdTVXF7DeeMGRbS3Xhwx8XC0 mcTnMSjQf16BIn7KhJ9MzonJMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCT7atP +psaUrgfFUGhrC5AkYaVMB8GA1UdIwQYMBaAFCeSlZsl+/nr3JM5upx9NVVyaWmr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTI2MS85MEI2RjcyRTg2 QUIxMUVCQTkwODYzNTBDNEY5QUUwMi9KNUtWbXlYNy1ldmNrem02bkgwMVZYSnBh YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o1S1ZteVg3LWV2Y2t6bTZuSDAxVlhKcGFhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTI2MS85MEI2RjcyRTg2QUIxMUVCQTkwODYzNTBDNEY5QUUwMi9KNUtWbXlYNy1l dmNrem02bkgwMVZYSnBhYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO8DrLF0MpzTfio1fgXZnZBbVQzS05vRg6mib7PQ7O4cP2b8PuDz1c lp+/KYQGny542/DlZF9wY5N8VVl0ayEy8hJaO8mZYEC7DXNfr0T2FhrdtAkojMNZ OyM8kns9DgWeNYJQTiOaFx+ND3kJGtiJLA64llK2qxLerdDhnHn6Qhk1wx/Q2KAl UM6HLfmcGgtWI0GlC9fEy/Shp8S5owFEtM3KSLdnnTlImzz5h+V92XljeII55VIe Dj0hwwJFgcS2/hkWc3tn2NrAb3JG7aKUrcsQ7xkN3AhbX5sT0XkDH/mh69xmfLYV LG5FWy+aEYORvpJ2SXnbHU2pzf0WBQDF -----END CERTIFICATE-----Generated at Sun May 5 01:22:22 2024 by rpki-client on console-fra.rpki-client.org