$ rpki-client -vvf rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft File: 509GTECGWe0lidtmTOjvamxgDEc.mft (raw, json) Hash identifier: WuO1YfMdPmhJsp/1bxr6vaXoUFZZiZcta119wLm2lZo= Subject key identifier: E8:A9:32:7D:BE:D6:5B:FE:1C:77:2C:8A:0E:D2:E3:10:01:FA:D2:F6 Authority key identifier: E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47 Certificate issuer: /CN=A91A06F2/serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47 Certificate serial: 0A59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft Manifest number: 0A52 Signing time: Sat 04 May 2024 20:33:56 +0000 Manifest this update: Sat 04 May 2024 20:33:55 +0000 Manifest next update: Sat 11 May 2024 20:33:55 +0000 Files and hashes: 1: 509GTECGWe0lidtmTOjvamxgDEc.crl (hash: yThkMH+qNEFwfwjsbeS/73azef5MN7RZquFkvZVcfXA=) 2: 3BFE8CEC3F4911EAA91D9A7FC4F9AE02.roa (hash: ReFTt+TXKiTCWQ2EeZN5sYY0hJNr3cSRmJoP/SBVLqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2649 (0xa59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A06F2/serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47 Validity Not Before: May 4 20:33:55 2024 GMT Not After : May 11 20:33:55 2024 GMT Subject: CN=66369bb4-7677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ed:cb:a7:e8:80:7d:69:48:66:e6:ce:cd:f2: 81:72:e6:53:f3:e6:16:18:00:73:f0:b6:8a:e8:e4: 02:b2:bf:95:6a:39:cc:8a:f3:61:d6:52:3a:63:74: af:76:8a:1b:06:34:ec:ab:5b:86:07:d2:eb:28:06: 5d:6e:f3:c6:cb:5f:6e:ff:e5:13:79:be:ef:70:3c: ab:dd:e4:d9:1d:2b:d2:b0:07:e5:50:cf:1f:48:a4: d1:11:a7:13:8a:e4:f3:14:69:9b:c4:1e:71:91:ed: 73:a7:74:81:37:42:13:73:a0:67:fc:f4:62:03:8c: e6:a1:f6:af:8d:3e:dd:ff:0b:7c:49:22:1a:67:23: 7e:7b:89:a7:4b:7e:46:9a:86:b0:0d:31:39:de:73: 3e:ef:6e:f0:40:a9:30:aa:8f:c3:cb:73:a1:02:de: 24:86:c3:98:cf:37:b9:dc:43:67:4c:95:d0:79:c0: d4:a6:b5:dc:84:11:65:24:d1:5b:59:1b:5d:3e:23: eb:d3:a6:ed:e9:56:87:40:5f:83:36:96:a6:5d:f2: d1:f2:78:27:1e:ca:1e:4a:c9:30:88:d4:c3:d3:92: 18:5d:c4:ac:dd:40:da:b2:f1:6f:e7:b0:c4:25:23: ad:8d:73:85:55:8f:1e:76:b3:9a:1b:6b:f4:38:30: 1b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A9:32:7D:BE:D6:5B:FE:1C:77:2C:8A:0E:D2:E3:10:01:FA:D2:F6 X509v3 Authority Key Identifier: keyid:E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:67:68:21:73:8d:de:f6:29:65:79:92:30:12:99:a9:55:39: 85:bb:c5:c4:8b:83:3b:e3:2a:23:7a:11:f0:a1:08:9a:4f:bc: 6c:cf:ff:a0:b1:06:b4:c2:98:91:70:49:38:8c:09:ad:63:da: 93:06:4a:01:b9:42:87:12:60:eb:b7:c7:b5:89:45:16:46:0e: ca:35:28:f4:95:fc:91:c8:df:c0:1b:3a:6c:eb:1d:7b:88:df: da:54:38:6f:17:4e:87:1e:3a:e6:96:aa:bf:b2:37:e8:a3:87: cd:c6:c9:2d:2d:16:f0:b3:78:da:ff:d0:63:83:6b:6f:cb:8b: 5f:70:c8:ca:a1:39:2c:ae:1d:70:86:d6:d1:ab:4a:62:85:51: ea:9a:1e:c2:a9:ba:33:32:21:39:93:53:e7:d7:61:14:00:81: 30:96:6d:69:42:5c:16:01:47:3d:ca:fd:e4:81:ba:7b:3a:d6: df:c5:85:7c:1e:53:95:d9:ed:02:ec:08:c8:dc:4d:88:b4:c7: 7f:a3:77:6e:6b:89:06:fc:15:ab:29:41:f7:dd:1f:eb:50:67: 4d:f1:70:8f:e9:7b:c3:20:5e:50:41:70:c7:c0:ad:0b:6d:8d: dc:5e:91:84:cf:66:f0:f2:27:8c:e4:83:1d:e5:12:66:94:5d: 2d:2c:a6:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA2RjIxMTAvBgNVBAUTKEU3NEY0NjRDNDA4NjU5RUQyNTg5REI2NjRDRThFRjZB NkM2MDBDNDcwHhcNMjQwNTA0MjAzMzU1WhcNMjQwNTExMjAzMzU1WjAYMRYwFAYD VQQDEw02NjM2OWJiNC03Njc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAre3Lp+iAfWlIZubOzfKBcuZT8+YWGABz8LaK6OQCsr+VajnMivNh1lI6Y3Sv doobBjTsq1uGB9LrKAZdbvPGy19u/+UTeb7vcDyr3eTZHSvSsAflUM8fSKTREacT iuTzFGmbxB5xke1zp3SBN0ITc6Bn/PRiA4zmofavjT7d/wt8SSIaZyN+e4mnS35G moawDTE53nM+727wQKkwqo/Dy3OhAt4khsOYzze53ENnTJXQecDUprXchBFlJNFb WRtdPiPr06bt6VaHQF+DNpamXfLR8ngnHsoeSskwiNTD05IYXcSs3UDasvFv57DE JSOtjXOFVY8edrOaG2v0ODAbFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOipMn2+ 1lv+HHcsig7S4xAB+tL2MB8GA1UdIwQYMBaAFOdPRkxAhlntJYnbZkzo72psYAxH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDZGMi84QjhDNEREMjNG NDcxMUVBOEU1REE4N0NDNEY5QUUwMi81MDlHVEVDR1dlMGxpZHRtVE9qdmFteGdE RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUwOUdURUNHV2UwbGlkdG1UT2p2YW14Z0RFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDZGMi84QjhDNEREMjNGNDcxMUVBOEU1REE4N0NDNEY5QUUwMi81MDlHVEVDR1dl MGxpZHRtVE9qdmFteGdERWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaZ2ghc43e9illeZIwEpmpVTmFu8XEi4M74yojehHwoQiaT7xsz/+g sQa0wpiRcEk4jAmtY9qTBkoBuUKHEmDrt8e1iUUWRg7KNSj0lfyRyN/AGzps6x17 iN/aVDhvF06HHjrmlqq/sjfoo4fNxsktLRbws3ja/9Bjg2tvy4tfcMjKoTksrh1w htbRq0pihVHqmh7CqbozMiE5k1Pn12EUAIEwlm1pQlwWAUc9yv3kgbp7OtbfxYV8 HlOV2e0C7AjI3E2ItMd/o3dua4kG/BWrKUH33R/rUGdN8XCP6XvDIF5QQXDHwK0L bY3cXpGEz2bw8ieM5IMd5RJmlF0tLKbX -----END CERTIFICATE-----Generated at Sat May 4 21:33:00 2024 by rpki-client on console-fra.rpki-client.org