$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft File: Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft (raw, json) Hash identifier: bHdRBK2FOlpihmhhzf4G4Yk9KqTg+boJwFrchXE3sT4= Subject key identifier: 68:31:66:37:85:F5:56:58:C0:C6:FD:2E:73:7E:C0:A6:92:17:6F:DE Authority key identifier: 56:8D:17:91:52:47:3C:80:9A:62:E5:85:E5:AD:C9:42:86:6B:E6:59 Certificate issuer: /CN=A91E0D8B/serialNumber=568D179152473C809A62E585E5ADC942866BE659 Certificate serial: 05EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft Manifest number: 05E5 Signing time: Tue 07 May 2024 00:04:59 +0000 Manifest this update: Tue 07 May 2024 00:04:58 +0000 Manifest next update: Tue 14 May 2024 00:04:58 +0000 Files and hashes: 1: Vo0XkVJHPICaYuWF5a3JQoZr5lk.crl (hash: Hq8w8kMx71yt6G/ulqcaFvhJ3SozSjLCjSjRZwgsAsk=) 2: 146FD366653611EB99BE491DC4F9AE02.roa (hash: zHq4FTYpjaRXOiDoDnd+154qUu41MS1ZHnyKS70WNy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.crl rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 00:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1514 (0x5ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0D8B/serialNumber=568D179152473C809A62E585E5ADC942866BE659 Validity Not Before: May 7 00:04:58 2024 GMT Not After : May 14 00:04:58 2024 GMT Subject: CN=6639702a-0e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:41:3f:ce:94:2e:e0:1d:83:3e:f5:c3:6b:4d: 0d:c2:2f:32:86:1e:8e:67:c4:97:19:24:f2:32:63: 39:5d:7a:f9:75:c2:e6:76:a4:23:5f:2b:4f:c6:8c: dc:d2:8c:05:81:5e:c1:c9:10:0c:9c:f5:e2:e3:8c: 18:a4:6a:12:a1:da:30:dc:4e:7a:a6:6e:52:40:a6: a4:8e:a5:fe:ca:66:49:a3:ac:50:36:c2:38:ba:bb: 93:39:70:84:29:20:3a:03:a4:b7:28:92:05:f3:9f: 68:f9:4b:5c:bf:94:f3:7a:48:a4:c0:f4:e0:27:37: 05:ea:ee:ca:42:a7:05:05:c4:4a:e9:e1:c9:61:cd: 2c:10:85:62:7c:d6:d6:b3:18:e0:63:fb:0c:d8:ee: 2d:3a:6f:96:f0:af:e6:27:e2:84:57:de:68:c1:26: 4e:76:95:7c:bf:95:06:02:b7:3a:94:fe:a3:7c:27: a2:f8:28:b2:74:9b:b7:3f:b5:81:69:a4:27:83:5b: 55:22:17:ae:91:2e:a3:8b:43:7e:ed:5f:25:ed:fd: 66:60:80:6e:cb:b8:23:74:3c:48:40:0b:ad:6d:2f: be:cd:91:69:82:44:7f:3e:c7:60:c0:ea:b4:78:32: f9:78:52:d2:02:f8:d7:5b:db:6a:05:64:17:bd:33: 25:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:31:66:37:85:F5:56:58:C0:C6:FD:2E:73:7E:C0:A6:92:17:6F:DE X509v3 Authority Key Identifier: keyid:56:8D:17:91:52:47:3C:80:9A:62:E5:85:E5:AD:C9:42:86:6B:E6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:a2:4c:30:2f:2f:51:77:58:ea:2a:6f:9a:d2:7e:b2:36:38: c9:e7:1c:f7:ae:9d:48:8b:88:03:08:1d:25:e8:d9:b1:13:93: 5d:65:b6:c4:7d:27:98:45:bc:8f:90:da:67:96:f9:5c:fb:c3: 8d:63:a6:65:0b:4e:6b:bf:b7:9a:85:9b:3e:8c:e6:68:a7:13: e2:94:17:1a:9e:b1:99:94:17:3c:37:42:c5:f0:fd:28:92:1a: dc:6e:26:7f:1b:14:b2:a1:93:aa:53:5f:2c:61:4e:82:f4:30: 58:0f:1c:04:ac:67:40:95:cd:6e:54:dd:da:87:ef:19:2c:47: 22:e8:50:9f:64:b0:30:48:88:f4:8e:03:37:a1:bb:43:ed:c0: fb:28:fc:4e:41:f6:84:25:ef:ee:53:83:fa:f1:b5:ae:4a:4e: af:87:d9:56:ab:3e:14:cf:92:c4:4f:e9:6f:63:41:33:7c:08: 0f:79:31:80:3e:e7:65:d6:37:fd:49:2e:b0:03:83:0a:2c:4f: 3f:35:86:cd:a9:35:49:11:0b:1f:bb:d8:6b:2a:26:5d:02:d7: 57:e2:52:23:5c:ee:11:4c:78:e8:28:52:77:12:ed:ad:e1:48: c9:a2:fe:65:36:fa:41:30:f9:8e:37:34:b1:6a:84:17:d4:bd: 27:32:8a:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBEOEIxMTAvBgNVBAUTKDU2OEQxNzkxNTI0NzNDODA5QTYyRTU4NUU1QURDOTQy ODY2QkU2NTkwHhcNMjQwNTA3MDAwNDU4WhcNMjQwNTE0MDAwNDU4WjAYMRYwFAYD VQQDEw02NjM5NzAyYS0wZTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0E/zpQu4B2DPvXDa00Nwi8yhh6OZ8SXGSTyMmM5XXr5dcLmdqQjXytPxozc 0owFgV7ByRAMnPXi44wYpGoSodow3E56pm5SQKakjqX+ymZJo6xQNsI4uruTOXCE KSA6A6S3KJIF859o+Utcv5TzekikwPTgJzcF6u7KQqcFBcRK6eHJYc0sEIVifNbW sxjgY/sM2O4tOm+W8K/mJ+KEV95owSZOdpV8v5UGArc6lP6jfCei+CiydJu3P7WB aaQng1tVIheukS6ji0N+7V8l7f1mYIBuy7gjdDxIQAutbS++zZFpgkR/PsdgwOq0 eDL5eFLSAvjXW9tqBWQXvTMlOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGgxZjeF 9VZYwMb9LnN+wKaSF2/eMB8GA1UdIwQYMBaAFFaNF5FSRzyAmmLlheWtyUKGa+ZZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Qi80QTZENkMwQTY1 MzQxMUVCQjZCOEYwMTlDNEY5QUUwMi9WbzBYa1ZKSFBJQ2FZdVdGNWEzSlFvWnI1 bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZvMFhrVkpIUElDYVl1V0Y1YTNKUW9acjVsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEQ4Qi80QTZENkMwQTY1MzQxMUVCQjZCOEYwMTlDNEY5QUUwMi9WbzBYa1ZKSFBJ Q2FZdVdGNWEzSlFvWnI1bGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRokwwLy9Rd1jqKm+a0n6yNjjJ5xz3rp1Ii4gDCB0l6NmxE5NdZbbE fSeYRbyPkNpnlvlc+8ONY6ZlC05rv7eahZs+jOZopxPilBcanrGZlBc8N0LF8P0o khrcbiZ/GxSyoZOqU18sYU6C9DBYDxwErGdAlc1uVN3ah+8ZLEci6FCfZLAwSIj0 jgM3obtD7cD7KPxOQfaEJe/uU4P68bWuSk6vh9lWqz4Uz5LET+lvY0EzfAgPeTGA Pudl1jf9SS6wA4MKLE8/NYbNqTVJEQsfu9hrKiZdAtdX4lIjXO4RTHjoKFJ3Eu2t 4UjJov5lNvpBMPmONzSxaoQX1L0nMooL -----END CERTIFICATE-----Generated at Tue May 7 01:58:30 2024 by rpki-client on console-fra.rpki-client.org