$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft File: x5ESx8WsNlgyIdH5RnUZbCE26r4.mft (raw, json) Hash identifier: hpbCzUUysZSN0yLSmo1Kzwl7a5vb0cUnwnu1kw1qItQ= Subject key identifier: 52:FD:5A:C9:17:D6:83:75:7C:76:13:40:25:99:34:39:72:12:61:77 Authority key identifier: C7:91:12:C7:C5:AC:36:58:32:21:D1:F9:46:75:19:6C:21:36:EA:BE Certificate issuer: /CN=A91C6BB9/serialNumber=C79112C7C5AC36583221D1F94675196C2136EABE Certificate serial: 0662 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft Manifest number: 065A Signing time: Tue 30 Apr 2024 23:56:12 +0000 Manifest this update: Tue 30 Apr 2024 23:56:11 +0000 Manifest next update: Tue 07 May 2024 23:56:11 +0000 Files and hashes: 1: x5ESx8WsNlgyIdH5RnUZbCE26r4.crl (hash: JKySIRG/d4sJ8QlLFnNY3uXcYZ8vZjjRggEiI4RZtlY=) 2: E0C0044C01A011EDB7451815C4F9AE02.roa (hash: fuV0ltN9FdyQnQni4iIs9QSvGLpI9rJU9J9GJ/aSYXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.crl rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 23:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1634 (0x662) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BB9/serialNumber=C79112C7C5AC36583221D1F94675196C2136EABE Validity Not Before: Apr 30 23:56:11 2024 GMT Not After : May 7 23:56:11 2024 GMT Subject: CN=6631851b-6d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:16:8a:f9:ca:ee:41:d7:28:92:39:b1:5e:95: bf:91:f6:23:a0:c5:c0:a5:30:2e:f9:c0:7f:95:b3: 06:9d:62:58:d1:5d:8b:df:eb:b0:d4:88:a0:a9:22: 6c:29:f5:ef:59:0b:28:f2:b7:5c:04:46:35:7f:ae: 42:82:47:fd:79:b1:05:56:0e:42:7f:3b:28:98:82: 07:73:fd:e8:cc:31:87:32:f8:3c:be:e1:68:35:c2: 59:0f:11:fb:d1:fa:8d:b0:16:0c:9e:91:19:95:89: 97:32:0c:13:87:15:d0:cc:61:b3:e1:45:81:9b:4b: 50:97:ad:23:d3:0a:d9:41:9b:56:7e:10:62:33:a2: 65:dd:7c:fc:4e:35:53:8e:be:d2:62:d6:bb:f5:11: d1:ba:f2:82:ee:cc:1d:69:ec:62:d8:60:9f:1e:04: 6d:0c:25:42:47:ae:50:14:34:f0:5c:56:3e:94:9b: af:d3:99:84:a5:79:af:86:a5:bf:75:61:b3:aa:d3: ef:de:87:14:ab:2e:7e:e9:17:4c:4e:70:5e:9c:4c: 1d:65:da:f1:80:25:6e:ab:b4:dd:7c:90:b8:c1:19: e4:ee:4b:87:d7:5a:54:d9:79:4e:3d:58:45:13:53: 11:bd:6c:a4:72:61:4c:b7:33:ab:c4:f6:43:43:a5: e4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FD:5A:C9:17:D6:83:75:7C:76:13:40:25:99:34:39:72:12:61:77 X509v3 Authority Key Identifier: keyid:C7:91:12:C7:C5:AC:36:58:32:21:D1:F9:46:75:19:6C:21:36:EA:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:07:cb:43:ab:29:f2:52:fe:8b:30:df:13:18:e1:62:d4:2e: c6:0f:b0:c6:44:7c:92:e3:45:89:67:32:1a:ee:5e:6e:9f:0b: 24:80:f1:55:87:74:cf:c4:23:ac:f8:79:4f:a2:9d:65:2a:61: 42:e0:71:b1:85:d9:03:df:28:d1:b4:74:f8:fd:be:d6:0a:a4: dc:ea:7a:88:87:19:8a:88:42:b0:78:75:58:70:0f:84:7b:43: df:aa:e0:3a:cc:dc:3a:8f:d3:8d:27:6f:f0:7a:98:8c:ce:4a: 0e:f7:b2:57:dc:b0:7d:d4:0d:72:fb:86:48:ed:85:84:f8:59: a2:5b:06:d3:71:d9:3c:91:6e:19:fe:b8:4b:a0:e8:7f:8f:6c: dd:9a:5a:93:2c:5d:0a:a8:a7:fa:f1:30:e8:3e:a9:f0:06:2c: 43:7f:a7:71:9f:b3:6e:d9:ab:3c:39:59:30:a3:04:bc:21:67: 8d:98:fc:34:ef:6e:f5:d8:14:0b:56:49:22:a8:ca:2a:13:17: 5a:6c:c3:f4:41:47:fe:59:70:29:26:29:c5:f7:ec:43:22:7e: c1:69:aa:af:47:e8:e7:2b:8e:f6:8b:1f:bc:aa:84:52:1f:a3: 45:ca:f1:cf:98:d4:a7:90:d6:e8:94:7f:e7:eb:a6:a7:01:2c: bf:84:62:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCQjkxMTAvBgNVBAUTKEM3OTExMkM3QzVBQzM2NTgzMjIxRDFGOTQ2NzUxOTZD MjEzNkVBQkUwHhcNMjQwNDMwMjM1NjExWhcNMjQwNTA3MjM1NjExWjAYMRYwFAYD VQQDEw02NjMxODUxYi02ZDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoBaK+cruQdcokjmxXpW/kfYjoMXApTAu+cB/lbMGnWJY0V2L3+uw1IigqSJs KfXvWQso8rdcBEY1f65Cgkf9ebEFVg5CfzsomIIHc/3ozDGHMvg8vuFoNcJZDxH7 0fqNsBYMnpEZlYmXMgwThxXQzGGz4UWBm0tQl60j0wrZQZtWfhBiM6Jl3Xz8TjVT jr7SYta79RHRuvKC7swdaexi2GCfHgRtDCVCR65QFDTwXFY+lJuv05mEpXmvhqW/ dWGzqtPv3ocUqy5+6RdMTnBenEwdZdrxgCVuq7TdfJC4wRnk7kuH11pU2XlOPVhF E1MRvWykcmFMtzOrxPZDQ6XkRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFL9WskX 1oN1fHYTQCWZNDlyEmF3MB8GA1UdIwQYMBaAFMeREsfFrDZYMiHR+UZ1GWwhNuq+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJCOS82QkRFQUE3RTM5 MEMxMUVCQjIxODFENjNDNEY5QUUwMi94NUVTeDhXc05sZ3lJZEg1Um5VWmJDRTI2 cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g1RVN4OFdzTmxneUlkSDVSblVaYkNFMjZyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkJCOS82QkRFQUE3RTM5MEMxMUVCQjIxODFENjNDNEY5QUUwMi94NUVTeDhXc05s Z3lJZEg1Um5VWmJDRTI2cjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvB8tDqynyUv6LMN8TGOFi1C7GD7DGRHyS40WJZzIa7l5unwskgPFV h3TPxCOs+HlPop1lKmFC4HGxhdkD3yjRtHT4/b7WCqTc6nqIhxmKiEKweHVYcA+E e0PfquA6zNw6j9ONJ2/wepiMzkoO97JX3LB91A1y+4ZI7YWE+FmiWwbTcdk8kW4Z /rhLoOh/j2zdmlqTLF0KqKf68TDoPqnwBixDf6dxn7Nu2as8OVkwowS8IWeNmPw0 72712BQLVkkiqMoqExdabMP0QUf+WXApJinF9+xDIn7BaaqvR+jnK472ix+8qoRS H6NFyvHPmNSnkNbolH/n66anASy/hGIB -----END CERTIFICATE-----Generated at Wed May 1 00:24:03 2024 by rpki-client on console-fra.rpki-client.org