$ rpki-client -vvf rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft File: 5hI_ServZkwi-UzV67rqztOHoW8.mft (raw, json) Hash identifier: FDTtSmg+PTY3V3GIPdWrikZiqhRSNZDt6ptyQnHj+J4= Subject key identifier: DB:62:8D:AF:28:EA:C2:7C:17:5A:5E:11:86:9E:0C:04:B3:B0:41:79 Authority key identifier: E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F Certificate issuer: /CN=A91B861D/serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F Certificate serial: 0533 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft Manifest number: 052F Signing time: Wed 01 May 2024 01:18:16 +0000 Manifest this update: Wed 01 May 2024 01:18:16 +0000 Manifest next update: Wed 08 May 2024 01:18:16 +0000 Files and hashes: 1: 5hI_ServZkwi-UzV67rqztOHoW8.crl (hash: RvtEPB0jFT1MJvHoUWl8eUxkUYDuGG5E4TA3klrTEQ8=) 2: A9AA1A5E30AB11EC876F1B41C4F9AE02.roa (hash: WbEnl0/p9DW5LSQBfY/eVybwxbm+uFz2TgwUcU/Waio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 01:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1331 (0x533) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B861D/serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F Validity Not Before: May 1 01:18:16 2024 GMT Not After : May 8 01:18:16 2024 GMT Subject: CN=66319858-01f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4b:ee:4f:5d:ec:0b:40:b3:95:a1:43:7b:05: f1:d8:3d:3a:b8:49:ab:21:66:d8:80:80:90:6b:f9: 3a:f9:a7:99:0e:89:61:85:b8:cf:36:1e:dc:5d:46: 8c:65:bd:2f:53:63:e9:34:c6:4e:dc:6e:96:a6:7d: a7:4c:9f:0b:dc:a5:c2:a9:63:e1:08:39:af:7c:65: 4d:1c:9f:8f:dc:eb:16:8e:bf:a8:e7:7b:77:27:9a: 85:d2:68:01:85:d3:e1:b0:48:31:9c:3e:23:95:40: ba:57:23:16:a2:bf:c8:88:19:bd:4f:95:df:e6:32: c2:70:78:16:a6:3e:b8:b1:08:df:93:7a:fa:24:16: 3d:6e:e4:fd:d0:57:f8:34:9d:30:32:67:5b:46:0e: 5b:23:ea:f4:bf:ea:49:2a:10:70:d4:ba:ab:f2:1b: dc:6e:44:29:72:26:71:90:c7:bc:54:0f:73:2b:46: ca:85:0a:c1:ae:38:df:c4:2d:2f:2c:e9:1f:0c:f9: 07:b1:ff:d4:c1:8c:a1:86:f4:17:3b:31:fb:61:70: dd:1a:b4:80:69:b1:66:00:f7:51:fd:cd:22:a2:0f: 9e:4a:f8:00:15:51:0f:25:77:7c:b4:44:32:de:3e: 37:2a:35:c4:6e:64:cc:09:35:bd:b4:4c:e2:54:be: d0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:62:8D:AF:28:EA:C2:7C:17:5A:5E:11:86:9E:0C:04:B3:B0:41:79 X509v3 Authority Key Identifier: keyid:E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d7:96:f0:74:26:41:12:ee:0c:ab:89:48:e0:5c:c5:2b:a0: f8:8b:9b:8e:14:94:f3:35:b1:02:ee:33:19:1f:2c:15:e3:ef: 7a:77:e4:21:19:ca:a3:e7:a4:a7:d5:84:01:1f:81:53:68:41: 64:7c:db:86:04:18:83:b2:5c:10:61:39:a0:6f:00:bb:9b:36: 65:f3:70:85:f3:0d:38:57:70:d3:a8:04:97:1a:97:8f:53:48: 5d:f9:36:8c:ef:65:ec:91:2d:4d:2e:ca:1e:39:ae:5a:07:ed: 29:77:f8:df:aa:b6:c4:64:41:74:9d:fd:34:9b:fa:a7:8a:d7: fb:c5:4b:95:ee:b2:27:4c:78:8e:13:3b:bd:69:fa:52:a6:1f: 54:61:26:41:bc:3d:e3:ce:a4:a3:83:70:b0:90:85:cb:bb:fa: 7d:c8:11:b5:cb:e3:71:f3:e1:e0:08:b5:83:95:8f:77:6d:85: 8f:df:b2:ef:9a:81:86:7f:d7:3e:19:a5:55:6b:e2:1b:22:1c: d5:5a:db:f2:1a:7a:49:cb:a9:3e:ee:a2:bd:78:50:00:e4:5c: dd:6a:4e:e3:1f:45:02:9f:dc:d3:da:ed:d9:a0:87:f4:c1:18: 12:54:98:79:61:c4:cf:1b:85:93:f8:46:0b:c8:e6:f5:63:cc: b3:27:c0:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg2MUQxMTAvBgNVBAUTKEU2MTIzRjQ5RUFFRjY2NEMyMkY5NENENUVCQkFFQUNF RDM4N0ExNkYwHhcNMjQwNTAxMDExODE2WhcNMjQwNTA4MDExODE2WjAYMRYwFAYD VQQDEw02NjMxOTg1OC0wMWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0vuT13sC0CzlaFDewXx2D06uEmrIWbYgICQa/k6+aeZDolhhbjPNh7cXUaM Zb0vU2PpNMZO3G6Wpn2nTJ8L3KXCqWPhCDmvfGVNHJ+P3OsWjr+o53t3J5qF0mgB hdPhsEgxnD4jlUC6VyMWor/IiBm9T5Xf5jLCcHgWpj64sQjfk3r6JBY9buT90Ff4 NJ0wMmdbRg5bI+r0v+pJKhBw1Lqr8hvcbkQpciZxkMe8VA9zK0bKhQrBrjjfxC0v LOkfDPkHsf/UwYyhhvQXOzH7YXDdGrSAabFmAPdR/c0iog+eSvgAFVEPJXd8tEQy 3j43KjXEbmTMCTW9tEziVL7QUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNtija8o 6sJ8F1peEYaeDASzsEF5MB8GA1UdIwQYMBaAFOYSP0nq72ZMIvlM1eu66s7Th6Fv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODYxRC9EMjk5N0Y2MEFC RTMxMUVCOUMyQjExNTZDNEY5QUUwMi81aElfU2Vydlprd2ktVXpWNjdycXp0T0hv VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVoSV9TZXJ2Wmt3aS1VelY2N3JxenRPSG9XOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODYxRC9EMjk5N0Y2MEFCRTMxMUVCOUMyQjExNTZDNEY5QUUwMi81aElfU2Vydlpr d2ktVXpWNjdycXp0T0hvVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP15bwdCZBEu4Mq4lI4FzFK6D4i5uOFJTzNbEC7jMZHywV4+96d+Qh Gcqj56Sn1YQBH4FTaEFkfNuGBBiDslwQYTmgbwC7mzZl83CF8w04V3DTqASXGpeP U0hd+TaM72XskS1NLsoeOa5aB+0pd/jfqrbEZEF0nf00m/qnitf7xUuV7rInTHiO Ezu9afpSph9UYSZBvD3jzqSjg3CwkIXLu/p9yBG1y+Nx8+HgCLWDlY93bYWP37Lv moGGf9c+GaVVa+IbIhzVWtvyGnpJy6k+7qK9eFAA5Fzdak7jH0UCn9zT2u3ZoIf0 wRgSVJh5YcTPG4WT+EYLyOb1Y8yzJ8Am -----END CERTIFICATE-----Generated at Wed May 1 02:46:22 2024 by rpki-client on console-ams.rpki-client.org