$ rpki-client -vvf rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.mft File: s5m0raB1Aagp1W8h2o613DIDSlY.mft (raw, json) Hash identifier: 3G6x32HowSo2uRjLsAzTiqr4dnQfn4l9LjVKT5+x/w4= Subject key identifier: D8:04:39:A1:40:07:15:96:B7:93:64:72:64:BE:06:EA:C4:70:43:D8 Authority key identifier: B3:99:B4:AD:A0:75:01:A8:29:D5:6F:21:DA:8E:B5:DC:32:03:4A:56 Certificate issuer: /CN=A91D98FC/serialNumber=B399B4ADA07501A829D56F21DA8EB5DC32034A56 Certificate serial: 0BE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5m0raB1Aagp1W8h2o613DIDSlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.mft Manifest number: 0BD5 Signing time: Mon 06 May 2024 19:11:44 +0000 Manifest this update: Mon 06 May 2024 19:11:43 +0000 Manifest next update: Mon 13 May 2024 19:11:43 +0000 Files and hashes: 1: s5m0raB1Aagp1W8h2o613DIDSlY.crl (hash: 3knsfR8uixewBGfwwqNexpgT0FhU7/lccLlInWgFl/4=) 2: 1752A952B44711EDB021F350C4F9AE02.roa (hash: CmY3H6MLM8sPTwL3Kw+WquoJl8ZVYZgWOsoVa3VE2V8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.crl rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5m0raB1Aagp1W8h2o613DIDSlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 19:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3041 (0xbe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D98FC/serialNumber=B399B4ADA07501A829D56F21DA8EB5DC32034A56 Validity Not Before: May 6 19:11:43 2024 GMT Not After : May 13 19:11:43 2024 GMT Subject: CN=66392b70-09b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:47:74:7c:fa:a5:a7:8a:c9:42:37:4f:f6:19: 53:99:fa:ae:43:4f:fb:9f:ff:29:27:95:56:0e:88: f4:c4:d3:9f:35:5c:62:c3:aa:2c:2b:2c:d2:40:9a: 69:4a:e4:81:df:08:20:88:34:43:6e:ac:ee:a8:3f: 94:14:b1:e6:9a:f0:fa:47:a3:12:42:c2:d1:1c:d1: ba:32:a9:e0:57:fa:c7:14:ef:c5:e3:2d:13:e8:2e: 45:69:05:ce:b1:1c:bc:b7:1e:f6:d0:e6:7e:d9:21: dd:d8:d0:e3:52:6f:53:a3:f9:20:a3:cd:26:cb:b3: 27:ee:01:f2:17:30:86:7f:e8:f8:01:82:81:05:60: 1c:00:f2:7a:ce:f8:f1:2e:fe:a4:e9:ca:39:02:f0: fa:7f:a6:28:4d:84:ce:cf:65:6f:1f:b0:55:2a:82: e6:cb:b2:f3:32:aa:75:e6:76:d9:3a:dd:c6:34:96: 18:f6:cc:cf:97:9e:7b:43:bf:68:0b:a5:f5:05:97: cf:74:85:d2:d5:80:8e:7a:6a:7b:3b:ef:f7:04:b2: 76:e9:4f:e0:48:96:d6:95:ee:25:1a:b6:5b:03:12: 6e:88:0b:8d:d8:f7:da:a4:7f:6a:99:e5:11:ff:d5: ae:92:3f:4c:a5:f7:a6:b1:71:b7:e6:af:c7:0a:64: 8d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:04:39:A1:40:07:15:96:B7:93:64:72:64:BE:06:EA:C4:70:43:D8 X509v3 Authority Key Identifier: keyid:B3:99:B4:AD:A0:75:01:A8:29:D5:6F:21:DA:8E:B5:DC:32:03:4A:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5m0raB1Aagp1W8h2o613DIDSlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:74:44:8b:82:c5:c9:44:c8:3a:60:6c:fe:1a:8f:8b:58:22: d4:7f:c6:66:e7:fe:61:76:9f:a5:51:d4:f6:9b:10:f5:9d:30: 4f:56:56:5c:46:19:cb:22:68:af:43:18:fe:7b:35:4b:3d:70: 24:f1:33:1c:36:b0:6a:e0:de:87:a7:2a:d8:8e:aa:8b:4d:a7: 57:b4:a6:e1:21:15:50:0f:39:65:84:6e:f3:e3:62:ac:49:2a: 69:88:4a:4e:e3:b6:10:1d:d9:49:8e:a2:e5:ba:2a:c3:61:89: 5c:ef:cb:ed:59:3c:38:54:e0:68:07:01:51:95:6a:4d:4e:42: 6b:04:c5:43:00:9d:70:34:3f:8d:62:34:50:c4:60:27:99:31: 9c:08:5d:e1:20:a8:fd:c9:64:d1:d9:31:bf:ba:e4:2e:f6:12: ee:3e:2a:66:ea:b3:78:c6:b9:69:c3:87:93:aa:5f:03:2a:cb: 3b:ee:0d:bf:a3:0f:2f:ed:66:18:06:12:90:d2:ca:52:7c:ee: 55:c0:3a:c9:45:2e:af:ec:79:b9:a8:85:da:e1:bf:d8:62:36: 6e:ba:14:61:cf:8b:cb:23:f4:a0:17:b4:79:28:95:c1:60:6d: 33:38:58:23:d2:2e:74:17:0e:67:a2:52:2a:ca:24:ea:46:ea: 92:f8:22:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk4RkMxMTAvBgNVBAUTKEIzOTlCNEFEQTA3NTAxQTgyOUQ1NkYyMURBOEVCNURD MzIwMzRBNTYwHhcNMjQwNTA2MTkxMTQzWhcNMjQwNTEzMTkxMTQzWjAYMRYwFAYD VQQDEw02NjM5MmI3MC0wOWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0d0fPqlp4rJQjdP9hlTmfquQ0/7n/8pJ5VWDoj0xNOfNVxiw6osKyzSQJpp SuSB3wggiDRDbqzuqD+UFLHmmvD6R6MSQsLRHNG6MqngV/rHFO/F4y0T6C5FaQXO sRy8tx720OZ+2SHd2NDjUm9To/kgo80my7Mn7gHyFzCGf+j4AYKBBWAcAPJ6zvjx Lv6k6co5AvD6f6YoTYTOz2VvH7BVKoLmy7LzMqp15nbZOt3GNJYY9szPl557Q79o C6X1BZfPdIXS1YCOemp7O+/3BLJ26U/gSJbWle4lGrZbAxJuiAuN2PfapH9qmeUR /9Wukj9MpfemsXG35q/HCmSNPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgEOaFA BxWWt5NkcmS+BurEcEPYMB8GA1UdIwQYMBaAFLOZtK2gdQGoKdVvIdqOtdwyA0pW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOThGQy8xQzg5OUUyNkY0 RUMxMUU5OEZCRTlCMEZDNEY5QUUwMi9zNW0wcmFCMUFhZ3AxVzhoMm82MTNESURT bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M1bTByYUIxQWFncDFXOGgybzYxM0RJRFNsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OThGQy8xQzg5OUUyNkY0RUMxMUU5OEZCRTlCMEZDNEY5QUUwMi9zNW0wcmFCMUFh Z3AxVzhoMm82MTNESURTbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMdESLgsXJRMg6YGz+Go+LWCLUf8Zm5/5hdp+lUdT2mxD1nTBPVlZc RhnLImivQxj+ezVLPXAk8TMcNrBq4N6HpyrYjqqLTadXtKbhIRVQDzllhG7z42Ks SSppiEpO47YQHdlJjqLluirDYYlc78vtWTw4VOBoBwFRlWpNTkJrBMVDAJ1wND+N YjRQxGAnmTGcCF3hIKj9yWTR2TG/uuQu9hLuPipm6rN4xrlpw4eTql8DKss77g2/ ow8v7WYYBhKQ0spSfO5VwDrJRS6v7Hm5qIXa4b/YYjZuuhRhz4vLI/SgF7R5KJXB YG0zOFgj0i50Fw5nolIqyiTqRuqS+CL3 -----END CERTIFICATE-----Generated at Mon May 6 20:19:21 2024 by rpki-client on console-fra.rpki-client.org