$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft File: 5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft (raw, json) Hash identifier: LOWy0Yx5d7AIq19LZ+aadXGLKiBtSk+rEnUGvsUl4NM= Subject key identifier: 74:04:26:C5:73:CD:44:AB:A8:B0:78:9C:3C:1F:7B:28:3B:8A:6B:B2 Authority key identifier: E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C Certificate issuer: /CN=A91C3ABA/serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C Certificate serial: 03DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft Manifest number: 03D8 Signing time: Fri 03 May 2024 02:26:42 +0000 Manifest this update: Fri 03 May 2024 02:26:42 +0000 Manifest next update: Fri 10 May 2024 02:26:42 +0000 Files and hashes: 1: 5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl (hash: xAzeMnQZ+qn8NyqMk+ralRC6Ncv+1nhBME/cu17+cTk=) 2: 4B9F1AA6354F11EC8531C34DC4F9AE02.roa (hash: 8D/20Uwr6gsdj74w8re/Pl0pD6S5jZ4kXrR8EA86scs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 988 (0x3dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3ABA/serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C Validity Not Before: May 3 02:26:42 2024 GMT Not After : May 10 02:26:42 2024 GMT Subject: CN=66344b62-8112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:15:42:59:3e:27:55:cb:5a:63:55:39:d1:2b: 73:41:d2:45:d7:b7:0f:03:0a:e5:62:6e:c8:c2:6c: 36:22:0e:de:f6:a6:5d:0b:92:f6:e7:95:98:a4:a7: a8:06:9d:22:db:aa:66:55:7a:36:65:2a:65:a2:fa: 97:3c:2e:00:80:a0:df:44:40:e1:56:63:b4:ef:75: 63:6f:4e:b2:4c:0a:08:a0:d8:e0:39:a1:37:9e:37: 06:9c:3b:8b:25:2b:6e:ea:f9:2f:fd:e1:71:eb:20: 25:fe:04:5e:93:e6:f6:6e:de:f7:34:37:c8:e9:81: 1c:de:5b:50:39:42:aa:a8:ba:04:d5:78:cc:8e:7e: 90:19:43:f0:94:96:47:54:db:3a:47:77:e6:84:de: ab:1f:ad:ca:de:4e:5b:f6:a7:e1:25:2d:97:0e:06: b1:87:09:07:05:50:21:23:ca:0d:99:ae:b3:e3:0e: 93:d8:08:f8:95:f4:25:2d:04:d2:7c:3d:e0:ce:5b: 0d:38:42:45:04:4c:84:6d:4d:f5:60:91:10:09:19: ce:d3:ea:97:1b:03:52:1f:97:dc:95:ff:23:65:45: 34:ea:d2:51:0b:6e:71:aa:ad:e8:57:44:26:be:b1: 51:28:ed:67:69:d1:65:46:e5:3e:cc:8b:93:29:f3: ed:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:04:26:C5:73:CD:44:AB:A8:B0:78:9C:3C:1F:7B:28:3B:8A:6B:B2 X509v3 Authority Key Identifier: keyid:E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:ca:ae:fc:63:20:79:0d:61:56:22:37:73:b0:2e:95:5c:ef: 71:c6:a9:7a:43:a8:c9:35:e0:59:45:3c:25:32:22:ed:e0:9b: 2a:43:f3:81:a1:6e:90:1f:d2:19:a8:1f:fe:11:36:26:18:b1: 81:c2:eb:68:7a:a6:b7:f7:7b:a0:7f:58:33:35:dc:68:a5:55: 85:65:1a:92:bf:d4:5f:cb:f5:76:c0:0d:7a:95:8f:72:5a:43: bd:f5:e0:a9:56:df:b4:53:1f:da:6b:90:c6:9e:04:c8:94:ef: 8c:f7:d2:6d:2b:8d:14:29:59:6e:d9:81:33:0a:3f:ae:a9:ae: 2c:36:94:9e:21:41:9f:af:de:6b:0b:b5:68:e1:63:07:d7:0d: 3d:55:50:0a:de:2f:6a:c4:ba:cd:2b:69:df:1b:3b:b2:cd:ba: 6b:5d:1e:60:12:d6:1d:72:50:6c:f1:67:9c:c7:7c:e3:7e:e9: 20:f5:2a:2c:52:0a:0f:0d:50:ce:84:96:25:2f:3a:6f:60:99: 5f:1b:37:11:ad:2a:76:c7:c1:d0:92:a9:1e:d5:36:fd:72:de: f8:4d:6a:63:e9:cc:01:49:bd:2c:d9:be:f6:89:37:86:de:91: 12:34:9a:cf:18:82:32:25:45:f2:e9:d6:a7:8d:61:5f:5c:81: ca:f7:40:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNBQkExMTAvBgNVBAUTKEU1OTkzMTU1QzQ0NDNBMkU1NkMwREUyMzMzQTQ0QjU2 Q0FENDkxOUMwHhcNMjQwNTAzMDIyNjQyWhcNMjQwNTEwMDIyNjQyWjAYMRYwFAYD VQQDEw02NjM0NGI2Mi04MTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthVCWT4nVctaY1U50StzQdJF17cPAwrlYm7Iwmw2Ig7e9qZdC5L255WYpKeo Bp0i26pmVXo2ZSplovqXPC4AgKDfREDhVmO073Vjb06yTAoIoNjgOaE3njcGnDuL JStu6vkv/eFx6yAl/gRek+b2bt73NDfI6YEc3ltQOUKqqLoE1XjMjn6QGUPwlJZH VNs6R3fmhN6rH63K3k5b9qfhJS2XDgaxhwkHBVAhI8oNma6z4w6T2Aj4lfQlLQTS fD3gzlsNOEJFBEyEbU31YJEQCRnO0+qXGwNSH5fclf8jZUU06tJRC25xqq3oV0Qm vrFRKO1nadFlRuU+zIuTKfPtQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQEJsVz zUSrqLB4nDwfeyg7imuyMB8GA1UdIwQYMBaAFOWZMVXERDouVsDeIzOkS1bK1JGc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0FCQS85ODVGMDkyMjM1 NEIxMUVDQjYyREJENDhDNEY5QUUwMi81Wmt4VmNSRU9pNVd3TjRqTTZSTFZzclVr WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVaa3hWY1JFT2k1V3dONGpNNlJMVnNyVWtady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0FCQS85ODVGMDkyMjM1NEIxMUVDQjYyREJENDhDNEY5QUUwMi81Wmt4VmNSRU9p NVd3TjRqTTZSTFZzclVrWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUyq78YyB5DWFWIjdzsC6VXO9xxql6Q6jJNeBZRTwlMiLt4JsqQ/OB oW6QH9IZqB/+ETYmGLGBwutoeqa393ugf1gzNdxopVWFZRqSv9Rfy/V2wA16lY9y WkO99eCpVt+0Ux/aa5DGngTIlO+M99JtK40UKVlu2YEzCj+uqa4sNpSeIUGfr95r C7Vo4WMH1w09VVAK3i9qxLrNK2nfGzuyzbprXR5gEtYdclBs8Wecx3zjfukg9Sos UgoPDVDOhJYlLzpvYJlfGzcRrSp2x8HQkqke1Tb9ct74TWpj6cwBSb0s2b72iTeG 3pESNJrPGIIyJUXy6danjWFfXIHK90Ai -----END CERTIFICATE-----Generated at Fri May 3 03:10:56 2024 by rpki-client on console-ams.rpki-client.org