$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft File: 5fjJ4D7R71BndlYU2mtRJq1vyz4.mft (raw, json) Hash identifier: pX2wUUdrAD/Sf36GA5rEUGB0gbf/ogLM8z2cdHu0pmQ= Subject key identifier: 85:5D:A2:9D:51:29:1E:DA:12:56:6D:58:13:99:39:50:3D:11:96:E0 Authority key identifier: E5:F8:C9:E0:3E:D1:EF:50:67:76:56:14:DA:6B:51:26:AD:6F:CB:3E Certificate issuer: /CN=A91A6548/serialNumber=E5F8C9E03ED1EF5067765614DA6B5126AD6FCB3E Certificate serial: 043B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5fjJ4D7R71BndlYU2mtRJq1vyz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft Manifest number: 0438 Signing time: Wed 01 May 2024 02:16:54 +0000 Manifest this update: Wed 01 May 2024 02:16:53 +0000 Manifest next update: Wed 08 May 2024 02:16:53 +0000 Files and hashes: 1: 5fjJ4D7R71BndlYU2mtRJq1vyz4.crl (hash: 4FGMFjk3elZ8J2ey6Jbzq/+QdzLhCby1EY7mul74SeQ=) 2: E6EC55EE0D7E11EC94917272C4F9AE02.roa (hash: drqGG9PcuM//NwHPB/+XibzP4BJz4AhNykPzGt6/IAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.crl rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5fjJ4D7R71BndlYU2mtRJq1vyz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 01:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1083 (0x43b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6548/serialNumber=E5F8C9E03ED1EF5067765614DA6B5126AD6FCB3E Validity Not Before: May 1 02:16:53 2024 GMT Not After : May 8 02:16:53 2024 GMT Subject: CN=6631a615-488b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5c:84:d3:f0:18:da:e6:b3:c3:4c:e7:c0:8c: cf:36:ee:e9:6b:e5:51:e5:59:8e:10:1c:30:a0:76: 9b:72:ef:d7:6c:88:0b:8b:74:01:18:8e:5d:01:84: dc:bc:4e:e9:49:69:14:21:c8:3d:59:83:1e:bf:79: 3a:45:7b:91:21:40:b4:bf:c7:31:6a:9d:68:12:13: 50:5a:d3:24:1b:b1:ce:a4:7b:14:29:05:8b:86:75: e9:52:5b:94:08:0c:64:9f:d8:1f:bb:07:55:97:d7: e4:2b:d6:97:45:09:64:47:f5:98:11:1b:c2:9f:2d: ff:88:c9:23:18:a1:82:10:64:91:40:60:bf:be:62: 67:51:0d:15:19:59:a2:0b:af:a6:3e:03:74:5c:8e: ec:68:c3:51:06:c1:20:15:47:d8:8f:43:fb:39:91: e7:96:c8:41:6c:b2:e3:91:cc:a5:19:14:1a:83:60: ff:27:8f:c6:cc:bc:5e:3c:3b:56:bd:a5:5f:67:61: 40:4e:93:28:66:b7:58:e0:e8:ac:bb:66:30:3d:b7: 69:57:5b:73:0a:89:33:74:5e:6a:e1:d5:29:43:42: 5b:9a:fd:34:61:17:12:1d:23:c8:1c:ff:94:40:2a: 0d:3b:08:a9:cf:7d:34:41:e8:e1:87:6f:51:e9:73: ab:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5D:A2:9D:51:29:1E:DA:12:56:6D:58:13:99:39:50:3D:11:96:E0 X509v3 Authority Key Identifier: keyid:E5:F8:C9:E0:3E:D1:EF:50:67:76:56:14:DA:6B:51:26:AD:6F:CB:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5fjJ4D7R71BndlYU2mtRJq1vyz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:44:70:3d:ce:ab:5a:4e:69:9b:43:bc:2f:18:a1:24:b3:90: 18:e0:f1:8b:3f:1b:70:c9:a2:52:8d:a8:f7:01:10:e5:a6:42: 0f:18:9b:49:62:15:43:eb:ef:d9:ca:0a:83:c2:10:c7:c1:a1: 50:50:ec:a2:04:ae:fa:4d:fb:1c:28:83:f3:1d:7e:ce:88:ea: a8:76:f9:fd:68:33:2f:e9:70:f9:95:1d:a3:e0:37:b5:b1:12: f0:2a:4f:d4:ee:a5:16:0e:b7:b5:22:03:20:83:77:10:34:74: 06:84:d3:54:8b:f4:9b:be:09:71:44:dc:c6:78:be:03:1e:fa: 6d:e1:c2:55:1b:1d:83:d9:c0:20:55:06:c7:90:d0:49:19:13: d0:6a:3e:57:21:e6:41:2d:a7:a7:ec:8d:94:e4:d2:01:92:43: ce:d4:7c:86:31:c3:7c:2a:cb:58:d3:11:d4:5a:c1:d1:f0:61: d5:87:e9:9b:4a:0a:89:f3:7e:b4:58:12:4d:36:7e:54:af:bc: 39:21:e1:65:97:53:d7:d7:a6:ec:ee:93:61:2f:e2:2d:92:50: bd:dc:55:58:67:cc:a5:ff:5e:0e:e5:3d:2a:06:40:de:c4:68: a5:fb:43:62:ad:a2:12:f0:b1:e3:e1:f3:d4:83:9a:c9:44:58: e8:b9:57:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY1NDgxMTAvBgNVBAUTKEU1RjhDOUUwM0VEMUVGNTA2Nzc2NTYxNERBNkI1MTI2 QUQ2RkNCM0UwHhcNMjQwNTAxMDIxNjUzWhcNMjQwNTA4MDIxNjUzWjAYMRYwFAYD VQQDEw02NjMxYTYxNS00ODhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1yE0/AY2uazw0znwIzPNu7pa+VR5VmOEBwwoHabcu/XbIgLi3QBGI5dAYTc vE7pSWkUIcg9WYMev3k6RXuRIUC0v8cxap1oEhNQWtMkG7HOpHsUKQWLhnXpUluU CAxkn9gfuwdVl9fkK9aXRQlkR/WYERvCny3/iMkjGKGCEGSRQGC/vmJnUQ0VGVmi C6+mPgN0XI7saMNRBsEgFUfYj0P7OZHnlshBbLLjkcylGRQag2D/J4/GzLxePDtW vaVfZ2FATpMoZrdY4Oisu2YwPbdpV1tzCokzdF5q4dUpQ0Jbmv00YRcSHSPIHP+U QCoNOwipz300Qejhh29R6XOrCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVdop1R KR7aElZtWBOZOVA9EZbgMB8GA1UdIwQYMBaAFOX4yeA+0e9QZ3ZWFNprUSatb8s+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjU0OC83RENGMjQ4QTBE N0MxMUVDQkFCREQ1NkRDNEY5QUUwMi81ZmpKNEQ3UjcxQm5kbFlVMm10UkpxMXZ5 ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVmako0RDdSNzFCbmRsWVUybXRSSnExdnl6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjU0OC83RENGMjQ4QTBEN0MxMUVDQkFCREQ1NkRDNEY5QUUwMi81ZmpKNEQ3Ujcx Qm5kbFlVMm10UkpxMXZ5ejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtRHA9zqtaTmmbQ7wvGKEks5AY4PGLPxtwyaJSjaj3ARDlpkIPGJtJ YhVD6+/ZygqDwhDHwaFQUOyiBK76TfscKIPzHX7OiOqodvn9aDMv6XD5lR2j4De1 sRLwKk/U7qUWDre1IgMgg3cQNHQGhNNUi/SbvglxRNzGeL4DHvpt4cJVGx2D2cAg VQbHkNBJGRPQaj5XIeZBLaen7I2U5NIBkkPO1HyGMcN8KstY0xHUWsHR8GHVh+mb SgqJ8360WBJNNn5Ur7w5IeFll1PX16bs7pNhL+ItklC93FVYZ8yl/14O5T0qBkDe xGil+0NiraIS8LHj4fPUg5rJRFjouVfB -----END CERTIFICATE-----Generated at Wed May 1 02:46:20 2024 by rpki-client on console-ams.rpki-client.org