$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft File: FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft (raw, json) Hash identifier: tTgEd36XKosDAWeHp0a6HQnoh5u3uySooCuFhdT+NWA= Subject key identifier: D0:57:18:0C:7F:4E:29:20:52:F4:FA:C5:3E:18:57:13:83:CB:C1:BF Authority key identifier: 16:33:29:F5:70:5D:E9:BC:22:35:AC:57:D7:54:F9:80:78:C7:F5:2B Certificate issuer: /CN=A918BB4D/serialNumber=163329F5705DE9BC2235AC57D754F98078C7F52B Certificate serial: 05E5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FjMp9XBd6bwiNaxX11T5gHjH9Ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft Manifest number: 05E5 Signing time: Sun 19 May 2024 00:00:23 +0000 Manifest this update: Sun 19 May 2024 00:00:23 +0000 Manifest next update: Sun 26 May 2024 00:00:23 +0000 Files and hashes: 1: FjMp9XBd6bwiNaxX11T5gHjH9Ss.crl (hash: LFWF3iH/RFB3mFZQOJ4bkvthFJmeNieWWI+0ZR9dtdU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.crl rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FjMp9XBd6bwiNaxX11T5gHjH9Ss.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1509 (0x5e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BB4D/serialNumber=163329F5705DE9BC2235AC57D754F98078C7F52B Validity Not Before: May 19 00:00:23 2024 GMT Not After : May 26 00:00:23 2024 GMT Subject: CN=66494117-4817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d3:48:28:ab:11:e8:ae:fa:95:7c:81:71:e6: 2c:95:fb:98:5b:f7:5a:81:07:9f:84:1a:56:48:8a: 9d:72:1e:18:51:39:5d:57:8f:8b:38:08:bf:8e:98: aa:ee:e5:97:7c:b2:b4:f2:cb:88:19:02:4f:f6:90: ac:07:2e:1d:fa:2c:fe:a2:18:66:00:68:14:a7:c4: 96:54:11:7d:c8:47:0f:79:32:d8:53:93:3a:e5:a1: 31:12:e3:6d:a9:e2:5c:e4:a0:99:84:43:9e:b4:bc: 66:b4:21:9f:af:39:db:83:a7:fa:ae:ea:74:24:24: ab:2a:f4:92:25:6b:b5:4c:42:80:a7:65:dd:f9:fe: 47:98:29:f7:ea:21:bc:dd:ae:d7:76:6a:25:84:be: f1:96:f2:b1:4e:8d:c6:da:ce:9f:08:13:b5:02:88: d1:74:ac:b0:3a:b8:aa:69:69:0f:9e:95:6d:d8:87: be:a6:d3:17:2b:5a:e4:0b:c0:62:79:a6:dc:1b:06: f4:2a:42:c5:b5:6a:d0:3c:b8:34:51:31:d0:f3:98: a0:65:41:83:93:86:ce:0c:fc:5b:da:e6:63:86:76: f9:10:86:27:02:31:1a:3d:8d:8c:80:08:99:0e:47: 55:95:ba:a4:8a:07:9a:55:45:79:cc:4b:d0:3f:e1: b7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:57:18:0C:7F:4E:29:20:52:F4:FA:C5:3E:18:57:13:83:CB:C1:BF X509v3 Authority Key Identifier: keyid:16:33:29:F5:70:5D:E9:BC:22:35:AC:57:D7:54:F9:80:78:C7:F5:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FjMp9XBd6bwiNaxX11T5gHjH9Ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:11:05:bd:95:e4:18:b1:8f:6c:f4:0a:21:19:80:ee:19:89: 52:3f:22:66:18:55:44:18:9a:85:3b:b4:84:58:c8:b9:a3:57: 01:e0:42:83:ae:4a:87:86:95:c6:25:25:d0:a7:81:c0:c8:01: 08:25:d6:40:af:ed:2d:e1:0d:d6:2c:fd:97:1c:99:39:89:86: 51:59:91:e1:57:40:6a:04:af:9c:d3:0c:f6:a1:23:23:47:85: 7f:f0:93:00:98:12:0a:0e:45:cd:b8:8e:f0:e6:4a:ff:48:96: ff:db:4f:22:df:fd:bf:de:08:ec:d2:43:c5:b6:e4:e2:a3:6d: dc:97:cb:e3:21:42:30:ea:3c:15:b7:3f:b5:75:d8:9c:eb:8e: f4:02:c6:fc:74:95:52:72:96:1d:51:c8:66:c4:3b:84:81:3e: df:6d:fb:1c:df:df:4d:90:16:54:e3:6c:5a:92:45:f2:ef:34: 1c:b0:40:93:de:6b:af:a8:62:a0:1f:41:4c:66:ec:e5:68:74: 41:ea:9b:f6:cb:a7:e2:4d:07:d4:e6:5e:55:19:e1:fb:6d:32: 85:8f:2b:ed:7d:f5:97:29:64:54:ea:90:d0:8b:0d:cc:99:b7: 1d:c8:02:bd:e1:e8:b1:cc:ff:b2:0e:21:35:31:e8:44:cc:18: 97:2a:d3:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCNEQxMTAvBgNVBAUTKDE2MzMyOUY1NzA1REU5QkMyMjM1QUM1N0Q3NTRGOTgw NzhDN0Y1MkIwHhcNMjQwNTE5MDAwMDIzWhcNMjQwNTI2MDAwMDIzWjAYMRYwFAYD VQQDEw02NjQ5NDExNy00ODE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NNIKKsR6K76lXyBceYslfuYW/dagQefhBpWSIqdch4YUTldV4+LOAi/jpiq 7uWXfLK08suIGQJP9pCsBy4d+iz+ohhmAGgUp8SWVBF9yEcPeTLYU5M65aExEuNt qeJc5KCZhEOetLxmtCGfrznbg6f6rup0JCSrKvSSJWu1TEKAp2Xd+f5HmCn36iG8 3a7XdmolhL7xlvKxTo3G2s6fCBO1AojRdKywOriqaWkPnpVt2Ie+ptMXK1rkC8Bi eabcGwb0KkLFtWrQPLg0UTHQ85igZUGDk4bODPxb2uZjhnb5EIYnAjEaPY2MgAiZ DkdVlbqkigeaVUV5zEvQP+G3wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNBXGAx/ TikgUvT6xT4YVxODy8G/MB8GA1UdIwQYMBaAFBYzKfVwXem8IjWsV9dU+YB4x/Ur MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkI0RC9DMDdFMUNEMDY1 MjIxMUVCODBGNkU5NEJDNEY5QUUwMi9Gak1wOVhCZDZid2lOYXhYMTFUNWdIakg5 U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZqTXA5WEJkNmJ3aU5heFgxMVQ1Z0hqSDlTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkI0RC9DMDdFMUNEMDY1MjIxMUVCODBGNkU5NEJDNEY5QUUwMi9Gak1wOVhCZDZi d2lOYXhYMTFUNWdIakg5U3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxEQW9leQYsY9s9AohGYDuGYlSPyJmGFVEGJqFO7SEWMi5o1cB4EKD rkqHhpXGJSXQp4HAyAEIJdZAr+0t4Q3WLP2XHJk5iYZRWZHhV0BqBK+c0wz2oSMj R4V/8JMAmBIKDkXNuI7w5kr/SJb/208i3/2/3gjs0kPFtuTio23cl8vjIUIw6jwV tz+1ddic6470Asb8dJVScpYdUchmxDuEgT7fbfsc399NkBZU42xakkXy7zQcsECT 3muvqGKgH0FMZuzlaHRB6pv2y6fiTQfU5l5VGeH7bTKFjyvtffWXKWRU6pDQiw3M mbcdyAK94eixzP+yDiE1MehEzBiXKtPV -----END CERTIFICATE-----Generated at Sun May 19 00:59:42 2024 by rpki-client on console-fra.rpki-client.org