$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft File: 5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft (raw, json) Hash identifier: x4uKAFQ2gNAFH5JF6r9tUdHgcs/Xajkavj066M4B8ds= Subject key identifier: B5:A0:0B:09:56:E3:1A:8C:C3:7F:7E:71:4E:5C:58:7A:59:54:2A:D2 Authority key identifier: E6:AC:F4:F5:94:A4:43:8F:89:7A:ED:AA:B4:A3:D3:8C:86:5C:CE:22 Certificate issuer: /CN=A91B6395/serialNumber=E6ACF4F594A4438F897AEDAAB4A3D38C865CCE22 Certificate serial: 06B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft Manifest number: 06AD Signing time: Fri 26 Apr 2024 23:07:54 +0000 Manifest this update: Fri 26 Apr 2024 23:07:54 +0000 Manifest next update: Fri 03 May 2024 23:07:54 +0000 Files and hashes: 1: 5qz09ZSkQ4-Jeu2qtKPTjIZcziI.crl (hash: OJcClm06DxdFanPxvpP5OC55RSifcXlS1B3tzAhaTTw=) 2: 09664BCE144D11EBA0AF3555C4F9AE02.roa (hash: ii67Jch3IPpSr1jFs70EgOgCpWFqYIN+6OGJYDaPBR8=) 3: 08CE75A6144D11EBA0AF3555C4F9AE02.roa (hash: 78kB9R6VIc9r4MuLiB+UNYmK00ikgakQODVz5BYm5+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.crl rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 23:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1717 (0x6b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6395/serialNumber=E6ACF4F594A4438F897AEDAAB4A3D38C865CCE22 Validity Not Before: Apr 26 23:07:54 2024 GMT Not After : May 3 23:07:54 2024 GMT Subject: CN=662c33ca-fb79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3e:ac:28:75:1f:2e:ee:81:fb:37:09:40:32: 37:22:98:6d:25:ac:c0:e8:e3:35:35:02:3b:51:0c: 83:bc:42:b9:81:47:a3:48:8c:c8:12:96:ef:b4:82: 5d:a0:40:fb:be:3e:ee:d0:e6:46:38:36:a4:a4:ca: 51:bf:c6:dd:3e:8b:c3:0d:72:05:57:8f:8a:2b:d2: 84:f9:0c:13:83:20:91:2d:dc:e8:b3:01:1d:10:90: 14:2a:c4:7e:f6:49:37:11:9d:d7:02:4f:63:d3:76: b2:e8:2e:2f:40:ee:bc:e1:da:70:62:57:1c:a7:ba: d1:70:0a:9b:4f:e3:62:a8:ec:7a:f6:b4:12:0c:80: 19:8d:db:9a:0d:13:5c:21:ee:91:1e:23:49:3b:99: 25:69:8d:ed:e1:51:ac:d0:ad:d8:b7:c3:2e:49:45: a1:97:d8:d1:58:3f:b7:22:ef:49:1d:ac:8c:74:42: 2b:13:0a:49:2f:92:e4:f0:b1:2c:95:4f:5e:9d:35: 00:9e:db:41:f3:10:c7:89:0d:9a:df:56:82:eb:ae: e9:8f:9c:39:95:bd:30:76:3e:9c:f9:eb:21:42:3c: 3e:8e:21:46:83:5c:c2:01:04:95:43:5d:bc:89:95: 71:86:7d:86:96:1e:b1:bf:59:ae:59:79:bb:e1:f8: eb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A0:0B:09:56:E3:1A:8C:C3:7F:7E:71:4E:5C:58:7A:59:54:2A:D2 X509v3 Authority Key Identifier: keyid:E6:AC:F4:F5:94:A4:43:8F:89:7A:ED:AA:B4:A3:D3:8C:86:5C:CE:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:de:f3:db:8f:61:f5:f7:c2:b7:86:4e:6a:40:66:13:55:ad: 44:55:70:43:3d:ac:61:36:63:21:50:fd:89:61:2e:12:d4:cc: db:03:76:cb:b2:f4:a0:30:6b:13:6d:8d:5a:d3:ad:08:d3:13: 40:3a:32:b7:c9:f9:0d:c8:40:d7:61:9b:c8:26:2d:8c:e3:7d: 58:5d:76:bc:e8:ca:e3:23:fe:4d:64:97:61:4f:78:4a:52:8e: 13:94:39:72:26:5b:dd:b2:0f:ab:f9:96:91:64:69:4a:e1:ee: de:6c:62:5b:cc:73:21:96:c6:6a:f2:e5:c2:9a:7e:3e:40:8c: 70:b9:de:9f:7c:51:03:83:89:e7:6a:de:ec:0f:e8:f2:fe:03: 8e:b8:46:2a:d2:3c:14:cc:61:25:32:b7:f1:7d:8a:27:6a:1a: b9:de:ac:72:34:42:bd:8c:b2:ac:1a:ee:70:e7:dd:22:23:43: 41:aa:f0:b3:43:6f:16:9c:9b:64:7b:50:d8:e0:db:15:77:2e: d8:fd:87:f7:94:0f:da:a2:c0:9b:77:cd:90:ae:71:70:6c:d3: 6d:4a:63:71:d8:ce:d9:3b:09:f8:a6:7a:85:59:25:2d:da:dd: f4:f6:e5:30:45:33:ae:11:2c:7b:52:94:e9:b1:bb:0f:00:6e: 59:fd:c5:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYzOTUxMTAvBgNVBAUTKEU2QUNGNEY1OTRBNDQzOEY4OTdBRURBQUI0QTNEMzhD ODY1Q0NFMjIwHhcNMjQwNDI2MjMwNzU0WhcNMjQwNTAzMjMwNzU0WjAYMRYwFAYD VQQDEw02NjJjMzNjYS1mYjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwj6sKHUfLu6B+zcJQDI3IphtJazA6OM1NQI7UQyDvEK5gUejSIzIEpbvtIJd oED7vj7u0OZGODakpMpRv8bdPovDDXIFV4+KK9KE+QwTgyCRLdzoswEdEJAUKsR+ 9kk3EZ3XAk9j03ay6C4vQO684dpwYlccp7rRcAqbT+NiqOx69rQSDIAZjduaDRNc Ie6RHiNJO5klaY3t4VGs0K3Yt8MuSUWhl9jRWD+3Iu9JHayMdEIrEwpJL5Lk8LEs lU9enTUAnttB8xDHiQ2a31aC667pj5w5lb0wdj6c+eshQjw+jiFGg1zCAQSVQ128 iZVxhn2Glh6xv1muWXm74fjr+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWgCwlW 4xqMw39+cU5cWHpZVCrSMB8GA1UdIwQYMBaAFOas9PWUpEOPiXrtqrSj04yGXM4i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjM5NS9EQzQ1NjU3ODE0 NEExMUVCOTQwNzY2NTJDNEY5QUUwMi81cXowOVpTa1E0LUpldTJxdEtQVGpJWmN6 aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVxejA5WlNrUTQtSmV1MnF0S1BUaklaY3ppSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjM5NS9EQzQ1NjU3ODE0NEExMUVCOTQwNzY2NTJDNEY5QUUwMi81cXowOVpTa1E0 LUpldTJxdEtQVGpJWmN6aUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB73vPbj2H198K3hk5qQGYTVa1EVXBDPaxhNmMhUP2JYS4S1MzbA3bL svSgMGsTbY1a060I0xNAOjK3yfkNyEDXYZvIJi2M431YXXa86MrjI/5NZJdhT3hK Uo4TlDlyJlvdsg+r+ZaRZGlK4e7ebGJbzHMhlsZq8uXCmn4+QIxwud6ffFEDg4nn at7sD+jy/gOOuEYq0jwUzGElMrfxfYonahq53qxyNEK9jLKsGu5w590iI0NBqvCz Q28WnJtke1DY4NsVdy7Y/Yf3lA/aosCbd82QrnFwbNNtSmNx2M7ZOwn4pnqFWSUt 2t309uUwRTOuESx7UpTpsbsPAG5Z/cXc -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:19 2024 by rpki-client on console-ams.rpki-client.org