$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft File: 5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft (raw, json) Hash identifier: va9hajNinWhiJh70D1l9C4xEonV5FrAVrkUmhN2qpq8= Subject key identifier: 1F:86:E5:20:20:8E:57:A4:4B:4C:DC:EF:30:10:C3:9F:B9:2B:17:16 Authority key identifier: E4:6B:BF:01:76:89:56:E8:66:AE:C4:43:F2:BB:13:50:1F:2E:73:79 Certificate issuer: /CN=A91D9F0A/serialNumber=E46BBF01768956E866AEC443F2BB13501F2E7379 Certificate serial: 12DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft Manifest number: 12C0 Signing time: Sun 02 Jun 2024 17:50:18 +0000 Manifest this update: Sun 02 Jun 2024 17:50:18 +0000 Manifest next update: Sun 09 Jun 2024 17:50:18 +0000 Files and hashes: 1: 5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl (hash: BtUw6B9n8yp9f1kGPCcVtF+3MrHqRXWuK2ga3IUFpsA=) 2: D294AC20A65811EE9811D15CC4F9AE02.roa (hash: TAcUpMYt7eFBC8SMOJA/f2cSAghKOANznqFr6KK+H+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 17:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4828 (0x12dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9F0A/serialNumber=E46BBF01768956E866AEC443F2BB13501F2E7379 Validity Not Before: Jun 2 17:50:18 2024 GMT Not After : Jun 9 17:50:18 2024 GMT Subject: CN=665cb0da-e80b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:96:34:25:62:9b:5c:cb:55:92:44:06:10:be: 3c:8e:b1:b5:29:fa:ec:d2:3b:e5:ca:44:8b:ef:08: a6:3a:23:ee:c2:aa:76:24:a2:7c:4b:20:1c:b1:b6: 0a:af:61:fd:94:8b:78:f2:6e:79:b8:cc:2a:69:10: 98:b4:7b:b4:73:04:4d:d8:13:6f:a2:89:d5:ab:df: 14:f5:50:3d:ba:03:58:a4:c2:84:a2:44:be:a7:e3: 62:cc:a5:0f:9d:47:20:f7:f1:99:a9:d2:c2:f7:58: 67:50:15:b9:a3:b5:a4:2e:8b:f6:05:e3:56:41:8a: cc:e2:32:d2:99:fa:57:fe:e0:0e:50:2e:ef:d3:5f: 9d:65:26:15:94:06:ef:54:d9:e1:92:a7:85:64:fa: 0d:11:e8:26:c2:c8:fc:d4:9c:2c:d4:3b:b3:da:cc: 46:5e:0f:7c:a9:03:00:e1:fc:cb:8e:3f:e9:09:eb: 5d:57:96:d0:94:5c:ac:f3:de:a6:5d:ad:2c:9b:ae: f4:4f:8a:24:f7:52:a5:3c:21:51:d1:60:c8:3e:60: 84:42:82:82:61:d1:fa:9d:4d:40:16:1a:07:26:3d: ea:41:69:1b:74:28:c4:05:c8:93:04:e1:e1:a9:69: 2d:2a:b1:8d:fa:41:4a:dd:87:4d:18:b2:73:2a:fe: d6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:86:E5:20:20:8E:57:A4:4B:4C:DC:EF:30:10:C3:9F:B9:2B:17:16 X509v3 Authority Key Identifier: keyid:E4:6B:BF:01:76:89:56:E8:66:AE:C4:43:F2:BB:13:50:1F:2E:73:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:3c:8a:c8:3b:ea:0d:ee:3d:6f:b5:00:47:0e:83:34:3a:31: 79:db:42:28:d9:bb:2e:a3:71:1d:b4:7d:76:e4:c1:18:93:18: 0c:da:1d:e8:5e:f1:08:cd:73:d4:25:5b:8e:28:23:63:1c:73: da:f8:50:da:ec:3a:bb:fe:72:e5:b1:fd:49:e1:bb:7b:10:8d: 86:41:fd:fc:bf:d3:54:47:1a:0d:46:df:80:2b:64:52:11:59: a3:c4:03:16:07:15:2b:6d:8f:6c:6f:59:0e:6d:2b:cb:71:e1: e8:ce:8d:2b:0d:ee:de:7c:45:db:db:ae:b7:7c:9f:c9:38:5e: 1f:a0:1a:d2:13:fb:dc:ce:e1:e0:c8:96:10:4b:18:89:0f:3b: 83:4c:88:72:b3:4f:45:0a:c1:67:83:d0:68:e2:8e:54:6a:16: d9:24:20:a9:af:84:32:5d:6b:26:f4:ba:28:f7:93:e3:60:82: 1e:70:a0:d1:c1:b4:fc:bc:33:9b:61:9f:0b:ae:2e:60:80:7f: 47:ff:7e:5e:5d:38:d6:72:91:c3:f1:58:f4:3a:05:29:58:d0: 3d:d0:aa:90:36:7e:fa:20:c3:c9:95:4e:1a:8b:7e:09:d2:d2: 3e:fe:87:76:d2:0f:93:6f:98:81:ba:f7:53:8d:86:4d:a3:9c: 2b:54:3b:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGMEExMTAvBgNVBAUTKEU0NkJCRjAxNzY4OTU2RTg2NkFFQzQ0M0YyQkIxMzUw MUYyRTczNzkwHhcNMjQwNjAyMTc1MDE4WhcNMjQwNjA5MTc1MDE4WjAYMRYwFAYD VQQDEw02NjVjYjBkYS1lODBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZY0JWKbXMtVkkQGEL48jrG1Kfrs0jvlykSL7wimOiPuwqp2JKJ8SyAcsbYK r2H9lIt48m55uMwqaRCYtHu0cwRN2BNvoonVq98U9VA9ugNYpMKEokS+p+NizKUP nUcg9/GZqdLC91hnUBW5o7WkLov2BeNWQYrM4jLSmfpX/uAOUC7v01+dZSYVlAbv VNnhkqeFZPoNEegmwsj81Jws1Duz2sxGXg98qQMA4fzLjj/pCetdV5bQlFys896m Xa0sm670T4ok91KlPCFR0WDIPmCEQoKCYdH6nU1AFhoHJj3qQWkbdCjEBciTBOHh qWktKrGN+kFK3YdNGLJzKv7WfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+G5SAg jlekS0zc7zAQw5+5KxcWMB8GA1UdIwQYMBaAFORrvwF2iVboZq7EQ/K7E1AfLnN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUYwQS9FODYwMjFENkEy M0MxMUU4OEE2RkU2NkNDNEY5QUUwMi81R3VfQVhhSlZ1aG1yc1JEOHJzVFVCOHVj M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVHdV9BWGFKVnVobXJzUkQ4cnNUVUI4dWMzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUYwQS9FODYwMjFENkEyM0MxMUU4OEE2RkU2NkNDNEY5QUUwMi81R3VfQVhhSlZ1 aG1yc1JEOHJzVFVCOHVjM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3PIrIO+oN7j1vtQBHDoM0OjF520Io2bsuo3EdtH125MEYkxgM2h3o XvEIzXPUJVuOKCNjHHPa+FDa7Dq7/nLlsf1J4bt7EI2GQf38v9NURxoNRt+AK2RS EVmjxAMWBxUrbY9sb1kObSvLceHozo0rDe7efEXb2663fJ/JOF4foBrSE/vczuHg yJYQSxiJDzuDTIhys09FCsFng9Bo4o5UahbZJCCpr4QyXWsm9Loo95PjYIIecKDR wbT8vDObYZ8Lri5ggH9H/35eXTjWcpHD8Vj0OgUpWNA90KqQNn76IMPJlU4ai34J 0tI+/od20g+Tb5iBuvdTjYZNo5wrVDvv -----END CERTIFICATE-----Generated at Sun Jun 2 18:40:08 2024 by rpki-client on console-fra.rpki-client.org