$ rpki-client -vvf rpki.apnic.net/member_repository/A91D94A7/F70588781D8D11E2AD4A04EC08B02CD2/B5ku7PYjoMe42kradUVPo_cWpXA.mft File: B5ku7PYjoMe42kradUVPo_cWpXA.mft (raw, json) Hash identifier: tHQyGK0Td6bFNg3zyVUKlw8nV8hpQDbin3eC8wx5CjA= Subject key identifier: 81:6A:9D:69:A5:F5:9E:15:27:46:58:01:1A:D9:4D:34:BE:ED:09:2A Authority key identifier: 07:99:2E:EC:F6:23:A0:C7:B8:DA:4A:DA:75:45:4F:A3:F7:16:A5:70 Certificate issuer: /CN=A91D94A7/serialNumber=07992EECF623A0C7B8DA4ADA75454FA3F716A570 Certificate serial: 3654 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5ku7PYjoMe42kradUVPo_cWpXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D94A7/F70588781D8D11E2AD4A04EC08B02CD2/B5ku7PYjoMe42kradUVPo_cWpXA.mft Manifest number: 351E Signing time: Thu 02 May 2024 14:42:31 +0000 Manifest this update: Thu 02 May 2024 14:42:30 +0000 Manifest next update: Thu 09 May 2024 14:42:30 +0000 Files and hashes: 1: B5ku7PYjoMe42kradUVPo_cWpXA.crl (hash: xbxw1eSiUmn6BDpU6lOCGFjDlUdkSESW57SnGjeZfII=) 2: 595BA7D0E9DA11EE8633E17AC4F9AE02.roa (hash: A9jpNq/uaOsRgLoZmXt1mV0DrsS+nvD76I0U56Yh6Fs=) 3: 87ED74E42A5F11EC9088405DC4F9AE02.roa (hash: SBfuOEV+cCivcjj+22gUYXGhG9m/oKGBgTQhCdPIKN8=) 4: F84DEE6C6D8311EE80145F5BC4F9AE02.roa (hash: cUtmo6zRiexfUuz5a/lnPW7cbF7lnjRmKmHAh1cbnZ0=) 5: E5913F7878F611ECAF1C286CC4F9AE02.roa (hash: JrrPdsoJpNSaaGFkEzvjmjb7G2E93NaLiJ2GLAagQHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D94A7/F70588781D8D11E2AD4A04EC08B02CD2/B5ku7PYjoMe42kradUVPo_cWpXA.crl rsync://rpki.apnic.net/member_repository/A91D94A7/F70588781D8D11E2AD4A04EC08B02CD2/B5ku7PYjoMe42kradUVPo_cWpXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5ku7PYjoMe42kradUVPo_cWpXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 14:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13908 (0x3654) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D94A7/serialNumber=07992EECF623A0C7B8DA4ADA75454FA3F716A570 Validity Not Before: May 2 14:42:30 2024 GMT Not After : May 9 14:42:30 2024 GMT Subject: CN=6633a656-d928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:52:e2:e7:db:88:ea:9c:5a:f2:d8:0d:43:28: d2:78:b4:52:d0:70:c3:51:2c:e8:4b:d2:03:25:6f: e1:de:58:ff:28:b0:c9:ed:52:64:d0:d8:4d:87:8c: 4f:97:17:24:7c:a8:ad:95:6f:2b:92:c3:d7:02:42: 5b:f4:94:25:14:8a:89:94:33:6a:8c:d0:e2:fe:20: e2:82:e2:c8:2f:09:38:b1:af:22:28:67:9e:cc:3b: f3:db:45:84:86:85:13:95:89:49:a8:74:f8:33:1d: ca:eb:75:98:5c:9b:b1:86:ea:e2:3c:ff:97:b9:51: 03:8e:1c:c8:01:af:ee:97:71:89:c8:77:13:07:e6: 4c:78:e1:97:9f:4b:c4:cc:bd:93:c4:46:b2:55:4f: 66:9f:4c:96:83:e7:87:5c:89:fb:b9:c9:0d:c7:fc: 9e:56:6a:31:ab:76:00:2c:89:84:71:1c:13:da:69: 03:c6:f9:b8:94:c8:06:e0:10:6b:f4:85:d3:59:8b: f5:e1:09:c5:bb:58:86:a2:a5:cd:3f:ae:da:df:55: 98:85:39:bd:fa:ae:12:ee:b4:cf:91:ff:72:8d:39: 3d:ca:85:f7:65:93:2c:27:89:2c:96:55:5a:41:42: 1d:80:a5:a3:89:d9:01:3d:12:22:67:42:d8:68:96: d5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:6A:9D:69:A5:F5:9E:15:27:46:58:01:1A:D9:4D:34:BE:ED:09:2A X509v3 Authority Key Identifier: keyid:07:99:2E:EC:F6:23:A0:C7:B8:DA:4A:DA:75:45:4F:A3:F7:16:A5:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D94A7/F70588781D8D11E2AD4A04EC08B02CD2/B5ku7PYjoMe42kradUVPo_cWpXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5ku7PYjoMe42kradUVPo_cWpXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94A7/F70588781D8D11E2AD4A04EC08B02CD2/B5ku7PYjoMe42kradUVPo_cWpXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:5d:95:32:06:db:0e:9b:0e:e1:42:b4:24:72:84:1c:f2:bd: 46:0a:b8:6e:02:fd:3d:ad:c6:ae:0c:1d:e8:5a:33:e2:1d:90: a4:2c:6b:9f:34:ee:91:e0:dd:91:1d:90:cb:06:97:e8:76:0a: 17:c9:9f:50:bc:4c:47:bb:9e:7b:64:80:a8:95:3a:0b:e0:67: ba:47:8e:00:5a:cf:d2:9d:ad:0e:86:a0:44:44:ff:d4:56:1f: 82:40:20:ea:e1:83:4f:13:61:69:f1:d6:51:ef:f9:f4:de:ae: 14:46:7f:50:96:47:c8:18:d8:7d:f6:42:60:75:7b:69:66:93: 2a:bc:ed:a8:a1:8a:d3:04:91:02:8e:0a:a6:9e:b3:83:36:68: 23:b5:b2:d1:75:6a:92:1d:74:e4:a8:3e:70:48:60:ba:f2:22: e9:cd:1b:48:27:43:d7:46:1c:02:d9:0a:72:ca:a8:38:8a:88: b8:89:c2:37:f3:7f:31:e4:8c:46:91:51:ef:a6:0b:e3:c5:54: 8f:a2:24:7d:2c:57:23:1a:5b:18:59:bf:27:e0:38:4c:cc:aa: d2:7f:35:a3:ab:cc:7f:fb:b1:6e:71:3f:f3:e6:89:da:b4:ea: b1:ca:5e:7a:c4:0f:8a:89:2e:c2:ee:92:c1:75:b8:e7:9e:3d: 3b:12:45:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk0QTcxMTAvBgNVBAUTKDA3OTkyRUVDRjYyM0EwQzdCOERBNEFEQTc1NDU0RkEz RjcxNkE1NzAwHhcNMjQwNTAyMTQ0MjMwWhcNMjQwNTA5MTQ0MjMwWjAYMRYwFAYD VQQDEw02NjMzYTY1Ni1kOTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA11Li59uI6pxa8tgNQyjSeLRS0HDDUSzoS9IDJW/h3lj/KLDJ7VJk0NhNh4xP lxckfKitlW8rksPXAkJb9JQlFIqJlDNqjNDi/iDiguLILwk4sa8iKGeezDvz20WE hoUTlYlJqHT4Mx3K63WYXJuxhuriPP+XuVEDjhzIAa/ul3GJyHcTB+ZMeOGXn0vE zL2TxEayVU9mn0yWg+eHXIn7uckNx/yeVmoxq3YALImEcRwT2mkDxvm4lMgG4BBr 9IXTWYv14QnFu1iGoqXNP67a31WYhTm9+q4S7rTPkf9yjTk9yoX3ZZMsJ4ksllVa QUIdgKWjidkBPRIiZ0LYaJbVvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIFqnWml 9Z4VJ0ZYARrZTTS+7QkqMB8GA1UdIwQYMBaAFAeZLuz2I6DHuNpK2nVFT6P3FqVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTRBNy9GNzA1ODg3ODFE OEQxMUUyQUQ0QTA0RUMwOEIwMkNEMi9CNWt1N1BZam9NZTQya3JhZFVWUG9fY1dw WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I1a3U3UFlqb01lNDJrcmFkVVZQb19jV3BYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTRBNy9GNzA1ODg3ODFEOEQxMUUyQUQ0QTA0RUMwOEIwMkNEMi9CNWt1N1BZam9N ZTQya3JhZFVWUG9fY1dwWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEXZUyBtsOmw7hQrQkcoQc8r1GCrhuAv09rcauDB3oWjPiHZCkLGuf NO6R4N2RHZDLBpfodgoXyZ9QvExHu557ZIColToL4Ge6R44AWs/Sna0OhqBERP/U Vh+CQCDq4YNPE2Fp8dZR7/n03q4URn9QlkfIGNh99kJgdXtpZpMqvO2ooYrTBJEC jgqmnrODNmgjtbLRdWqSHXTkqD5wSGC68iLpzRtIJ0PXRhwC2Qpyyqg4ioi4icI3 838x5IxGkVHvpgvjxVSPoiR9LFcjGlsYWb8n4DhMzKrSfzWjq8x/+7FucT/z5ona tOqxyl56xA+KiS7C7pLBdbjnnj07EkV3 -----END CERTIFICATE-----Generated at Thu May 2 17:18:57 2024 by rpki-client on console-ams.rpki-client.org