$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft File: 53anM2-PZ4WjagEEaEC1FKDUGSk.mft (raw, json) Hash identifier: uXi2EWh0sX+pe1VZzg7/05jeuRVarr67KVxxGsoZ7+4= Subject key identifier: 2A:09:D9:00:00:56:FE:B0:F0:97:3A:6B:81:F8:3F:A4:06:BB:CE:DF Authority key identifier: E7:76:A7:33:6F:8F:67:85:A3:6A:01:04:68:40:B5:14:A0:D4:19:29 Certificate issuer: /CN=A91E1486/serialNumber=E776A7336F8F6785A36A01046840B514A0D41929 Certificate serial: 0B83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft Manifest number: 0B7E Signing time: Fri 31 May 2024 20:03:58 +0000 Manifest this update: Fri 31 May 2024 20:03:57 +0000 Manifest next update: Fri 07 Jun 2024 20:03:57 +0000 Files and hashes: 1: 53anM2-PZ4WjagEEaEC1FKDUGSk.crl (hash: YdEPDe2kNEhpKRsVzL83YMushr91PTvjB++2fHq3Tlk=) 2: 964FB9AE06A111EAAE446E30C4F9AE02.roa (hash: fDoBA5tX/gIfwjCr04P5nFuqx0KgYthMQ9WNuvg3qrk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.crl rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 20:03:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2947 (0xb83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1486/serialNumber=E776A7336F8F6785A36A01046840B514A0D41929 Validity Not Before: May 31 20:03:57 2024 GMT Not After : Jun 7 20:03:57 2024 GMT Subject: CN=665a2d2e-f183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:02:8c:5b:a8:6e:de:0e:ad:79:12:3f:c2:db: b3:7e:ac:26:4e:69:ed:ad:59:70:39:60:39:2b:48: c8:59:8e:28:df:8d:f3:a5:9a:26:29:12:7e:54:32: d4:0b:e1:b4:4a:a1:a7:19:32:1a:e4:c3:28:8a:57: 1a:98:66:6a:e2:0f:1f:a7:6e:da:9b:5c:ef:b8:14: c6:82:88:ad:b9:8f:3e:7c:b9:5d:61:72:ef:24:47: 52:65:71:7b:4a:8d:5b:d0:da:72:14:c5:88:8c:cf: 80:7c:dd:1b:0e:aa:90:1e:c3:99:e9:87:3d:93:4a: d1:4f:8f:df:e2:08:50:b7:e6:3c:47:bd:77:0b:c1: e3:7a:75:64:38:92:04:3c:01:3b:e9:50:ad:20:84: 39:82:5c:6c:55:e8:c9:38:08:ad:09:00:9e:87:f7: a5:5a:95:cd:5e:f4:fd:4d:a5:07:26:e5:d2:c9:c2: a4:36:e1:e9:af:d4:5d:a4:7d:58:76:68:46:a5:ad: d3:f8:09:bf:ee:09:6b:f2:21:7f:93:88:16:0a:da: 10:58:eb:62:17:73:ef:69:26:6a:3e:6c:8a:98:e2: 87:18:dc:bf:55:8b:fa:71:ad:d7:9c:2b:87:63:13: db:05:7b:8f:11:11:d2:34:30:8b:4d:73:18:8b:2b: a2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:09:D9:00:00:56:FE:B0:F0:97:3A:6B:81:F8:3F:A4:06:BB:CE:DF X509v3 Authority Key Identifier: keyid:E7:76:A7:33:6F:8F:67:85:A3:6A:01:04:68:40:B5:14:A0:D4:19:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:95:9f:75:36:fb:c1:86:4a:a8:b8:1f:1c:d1:33:3d:e9:17: 51:db:c2:b3:5a:cb:6d:40:53:77:67:ff:33:48:cf:4e:2a:ee: c2:b4:06:96:d7:42:d0:80:10:81:97:1a:07:e2:66:27:a1:0d: d4:18:67:ad:d2:07:30:bf:32:03:d8:2f:21:e6:f4:09:ae:5d: 9c:a0:04:59:53:64:03:8c:ab:6f:03:5f:c5:d5:3f:44:fd:da: f3:c9:cb:a5:e6:86:48:04:c3:97:8c:c9:cd:9a:5a:ba:13:df: 16:ed:ad:26:bd:a2:dd:5a:c2:22:d6:40:d5:ed:5e:38:9a:1d: c3:98:59:06:e1:72:5f:50:b1:5d:4c:c8:7f:9b:0a:7f:68:cb: 84:fd:3c:e6:65:16:fb:c3:30:16:82:96:a1:1e:ea:94:46:30: 92:b0:cc:1e:e6:08:3e:29:1b:9f:32:10:16:55:a3:f2:fe:28: ed:42:14:3e:11:ac:fb:c5:74:ff:e2:ac:c9:7b:ba:f5:10:82: 4d:84:1f:39:46:bf:8d:0f:f9:9d:1a:a1:7b:6e:fd:39:14:82: 19:be:93:ce:41:93:00:f5:70:27:25:c6:10:97:69:47:bb:90: 65:e5:3d:11:c4:a7:96:bb:50:0d:23:da:bb:d7:ea:15:8e:17: 97:49:41:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE0ODYxMTAvBgNVBAUTKEU3NzZBNzMzNkY4RjY3ODVBMzZBMDEwNDY4NDBCNTE0 QTBENDE5MjkwHhcNMjQwNTMxMjAwMzU3WhcNMjQwNjA3MjAwMzU3WjAYMRYwFAYD VQQDEw02NjVhMmQyZS1mMTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwKMW6hu3g6teRI/wtuzfqwmTmntrVlwOWA5K0jIWY4o343zpZomKRJ+VDLU C+G0SqGnGTIa5MMoilcamGZq4g8fp27am1zvuBTGgoituY8+fLldYXLvJEdSZXF7 So1b0NpyFMWIjM+AfN0bDqqQHsOZ6Yc9k0rRT4/f4ghQt+Y8R713C8HjenVkOJIE PAE76VCtIIQ5glxsVejJOAitCQCeh/elWpXNXvT9TaUHJuXSycKkNuHpr9RdpH1Y dmhGpa3T+Am/7glr8iF/k4gWCtoQWOtiF3PvaSZqPmyKmOKHGNy/VYv6ca3XnCuH YxPbBXuPERHSNDCLTXMYiyui9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCoJ2QAA Vv6w8Jc6a4H4P6QGu87fMB8GA1UdIwQYMBaAFOd2pzNvj2eFo2oBBGhAtRSg1Bkp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTQ4Ni8wNkM0QjJGRTA2 QTAxMUVBQUQ2OURDMkFDNEY5QUUwMi81M2FuTTItUFo0V2phZ0VFYUVDMUZLRFVH U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUzYW5NMi1QWjRXamFnRUVhRUMxRktEVUdTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTQ4Ni8wNkM0QjJGRTA2QTAxMUVBQUQ2OURDMkFDNEY5QUUwMi81M2FuTTItUFo0 V2phZ0VFYUVDMUZLRFVHU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtlZ91NvvBhkqouB8c0TM96RdR28KzWsttQFN3Z/8zSM9OKu7CtAaW 10LQgBCBlxoH4mYnoQ3UGGet0gcwvzID2C8h5vQJrl2coARZU2QDjKtvA1/F1T9E /drzycul5oZIBMOXjMnNmlq6E98W7a0mvaLdWsIi1kDV7V44mh3DmFkG4XJfULFd TMh/mwp/aMuE/TzmZRb7wzAWgpahHuqURjCSsMwe5gg+KRufMhAWVaPy/ijtQhQ+ Eaz7xXT/4qzJe7r1EIJNhB85Rr+ND/mdGqF7bv05FIIZvpPOQZMA9XAnJcYQl2lH u5Bl5T0RxKeWu1ANI9q71+oVjheXSUG+ -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:30 2024 by rpki-client on console-ams.rpki-client.org