$ rpki-client -vvf rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft File: 5NzsWVobtnOJciNlasY5uVNS3XM.mft (raw, json) Hash identifier: hJpQwwMvJTDjncdI7s/b+LM9RSU4a/8gFFKU1cmtChM= Subject key identifier: 0D:33:2D:11:F9:B0:81:32:68:14:FF:F4:ED:11:D7:69:84:EC:D3:10 Authority key identifier: E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73 Certificate issuer: /CN=A91D604E/serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73 Certificate serial: 0BE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft Manifest number: 0BD6 Signing time: Sat 04 May 2024 19:16:24 +0000 Manifest this update: Sat 04 May 2024 19:16:23 +0000 Manifest next update: Sat 11 May 2024 19:16:23 +0000 Files and hashes: 1: 5NzsWVobtnOJciNlasY5uVNS3XM.crl (hash: 9JJ8JQY33/88YID4B5QzjkJmUYMdm7OeZb+rF+kzhsY=) 2: 6D038264CA7111EDB1BB3134C4F9AE02.roa (hash: 2E8/AWLpy77125ZL0KO5JRYgnp8VfhvABCC3aZVqCdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:16:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3041 (0xbe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D604E/serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73 Validity Not Before: May 4 19:16:23 2024 GMT Not After : May 11 19:16:23 2024 GMT Subject: CN=66368988-4d44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fc:98:52:6a:5e:32:18:43:bd:17:7e:d9:5d: 6c:ef:95:9d:67:be:75:ae:9c:36:37:c8:85:24:8b: b3:74:3a:02:6b:46:83:0b:3c:34:69:b6:1d:72:c3: 63:0d:c2:ed:f4:a3:86:3d:a4:66:71:0d:1a:d0:8e: 1e:72:d6:72:11:f7:7f:74:b2:d3:b1:dc:7c:65:e2: 06:b2:d2:1e:7b:22:17:85:85:0e:84:9e:a2:e3:a9: d4:9f:e9:5d:8c:b5:27:13:b7:d4:c9:46:88:e6:de: e3:d8:f5:e5:9a:cd:64:2f:73:a3:70:99:e9:0f:69: 02:24:11:24:75:80:b6:b3:02:08:43:83:d0:8b:cb: be:9a:05:e1:62:b9:f7:8d:1a:79:f4:31:f2:c9:cb: 3f:4f:97:1b:46:69:40:01:63:81:cd:c6:51:8f:a7: ef:c6:5e:de:a0:4c:ab:8c:5e:af:5e:ae:dc:8d:51: b5:9e:fe:0c:8d:48:3e:1d:44:93:bd:f8:c8:da:57: 3d:b0:a7:f8:d4:34:c3:7f:0f:37:0b:e3:cc:e0:5c: 34:4e:43:87:2d:a5:fb:0e:a2:fa:7f:e0:4b:58:e8: d4:9a:27:b0:c7:eb:e8:97:28:4b:0c:96:34:99:59: 22:d4:fa:a8:0e:41:bb:db:5f:91:93:c5:e5:5b:0c: 0a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:33:2D:11:F9:B0:81:32:68:14:FF:F4:ED:11:D7:69:84:EC:D3:10 X509v3 Authority Key Identifier: keyid:E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:0f:b8:8f:8e:bc:97:df:e1:c4:0d:27:e6:c7:72:2b:87:d7: 7f:8d:19:b2:ee:00:97:96:2f:06:c2:9f:8b:93:12:ea:4c:32: 21:b2:31:70:a9:6e:c4:68:d4:4e:df:65:6f:7a:c1:e5:48:d0: ff:99:1d:3b:c1:80:89:a4:32:c8:23:91:d0:72:24:da:15:dd: af:e3:9a:cc:b5:fa:e5:5a:84:15:e0:ec:0f:01:85:dc:2e:2a: 9d:6a:a3:26:ed:ac:44:ec:44:85:9b:f7:af:18:85:0c:bb:5b: 3f:3c:77:b5:84:6c:7b:3b:e9:81:be:33:ee:85:32:cc:fe:3b: 71:95:39:04:fe:d4:89:d9:18:69:26:90:4f:af:b0:3f:ca:e9: 6e:d5:25:8e:88:af:4a:d9:6a:7d:8a:94:ab:c2:3e:11:5d:1c: bb:26:af:f2:2a:d6:16:49:f5:15:96:d5:cd:8a:c1:4b:b0:3d: d2:8c:b1:8f:0f:7e:54:19:e4:80:ee:f7:10:73:d6:d2:ec:87: a8:be:83:18:e8:c8:02:9f:55:4d:04:4e:6f:3f:89:a2:42:20: c1:33:a5:38:25:18:13:60:1e:23:d7:5a:d5:8f:02:12:ea:99: 78:e3:5b:fe:a3:cc:56:04:ee:10:cc:b3:e2:c6:69:b3:30:c6: 42:bb:45:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwNEUxMTAvBgNVBAUTKEU0RENFQzU5NUExQkI2NzM4OTcyMjM2NTZBQzYzOUI5 NTM1MkRENzMwHhcNMjQwNTA0MTkxNjIzWhcNMjQwNTExMTkxNjIzWjAYMRYwFAYD VQQDEw02NjM2ODk4OC00ZDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/yYUmpeMhhDvRd+2V1s75WdZ751rpw2N8iFJIuzdDoCa0aDCzw0abYdcsNj DcLt9KOGPaRmcQ0a0I4ectZyEfd/dLLTsdx8ZeIGstIeeyIXhYUOhJ6i46nUn+ld jLUnE7fUyUaI5t7j2PXlms1kL3OjcJnpD2kCJBEkdYC2swIIQ4PQi8u+mgXhYrn3 jRp59DHyycs/T5cbRmlAAWOBzcZRj6fvxl7eoEyrjF6vXq7cjVG1nv4MjUg+HUST vfjI2lc9sKf41DTDfw83C+PM4Fw0TkOHLaX7DqL6f+BLWOjUmiewx+volyhLDJY0 mVki1PqoDkG721+Rk8XlWwwK7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA0zLRH5 sIEyaBT/9O0R12mE7NMQMB8GA1UdIwQYMBaAFOTc7FlaG7ZziXIjZWrGOblTUt1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjA0RS85MUI1QzBDMEY0 RUQxMUU5OENCRkEwMTNDNEY5QUUwMi81TnpzV1ZvYnRuT0pjaU5sYXNZNXVWTlMz WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVOenNXVm9idG5PSmNpTmxhc1k1dVZOUzNYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjA0RS85MUI1QzBDMEY0RUQxMUU5OENCRkEwMTNDNEY5QUUwMi81TnpzV1ZvYnRu T0pjaU5sYXNZNXVWTlMzWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwD7iPjryX3+HEDSfmx3Irh9d/jRmy7gCXli8Gwp+LkxLqTDIhsjFw qW7EaNRO32VvesHlSND/mR07wYCJpDLII5HQciTaFd2v45rMtfrlWoQV4OwPAYXc LiqdaqMm7axE7ESFm/evGIUMu1s/PHe1hGx7O+mBvjPuhTLM/jtxlTkE/tSJ2Rhp JpBPr7A/yulu1SWOiK9K2Wp9ipSrwj4RXRy7Jq/yKtYWSfUVltXNisFLsD3SjLGP D35UGeSA7vcQc9bS7IeovoMY6MgCn1VNBE5vP4miQiDBM6U4JRgTYB4j11rVjwIS 6pl441v+o8xWBO4QzLPixmmzMMZCu0WK -----END CERTIFICATE-----Generated at Sat May 4 20:37:18 2024 by rpki-client on console-fra.rpki-client.org