$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft File: C4E-K7qEBp60NNZWZn_s4fYbSUs.mft (raw, json) Hash identifier: Xp8TyGcPweOE4zy6XRhAsywwHEIHZnd1q6kYM6TOrlY= Subject key identifier: B2:90:D0:C3:F9:D1:9E:58:4D:2D:9F:59:47:BB:E6:E1:11:DE:7C:FA Authority key identifier: 0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B Certificate issuer: /CN=A91E7A8E/serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft Manifest number: 5D Signing time: Wed 15 May 2024 07:47:04 +0000 Manifest this update: Wed 15 May 2024 07:47:03 +0000 Manifest next update: Wed 22 May 2024 07:47:03 +0000 Files and hashes: 1: C4E-K7qEBp60NNZWZn_s4fYbSUs.crl (hash: 0Fd2Je0S+kbQcn6S04i9QuZSbrZ+/6+IzzqsKTk0iA0=) 2: 0120C296835D11EEA3484166C4F9AE02.roa (hash: XnGiaZTL2Hv3YZbAOxRpbKT7n7AsmKwDOuzgfwWiTks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:47:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7A8E/serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B Validity Not Before: May 15 07:47:03 2024 GMT Not After : May 22 07:47:03 2024 GMT Subject: CN=66446877-fe40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c6:f9:05:33:a2:9d:2e:a6:7a:04:14:ad:75: 6b:d8:82:da:d7:98:ba:92:26:34:e5:4e:80:45:8c: b8:3c:58:d8:c5:a4:95:4c:bd:28:fd:6c:be:fe:d1: e4:4b:20:b7:d9:db:69:b8:42:23:e4:5d:b7:a0:ca: 9d:4b:7c:dc:05:90:f0:10:b3:31:07:f8:df:97:19: c6:62:6d:16:17:55:6b:d3:de:b3:25:db:65:14:6a: 51:db:1d:72:ef:97:92:88:11:27:3d:fd:ae:f6:54: 08:16:37:17:48:75:42:24:cd:fb:fa:c1:81:c5:f2: 90:86:19:20:a1:a8:70:d4:08:5a:20:91:42:b4:d8: 27:ab:36:6e:61:fe:37:b5:48:a5:08:28:aa:4f:cc: 1f:07:71:5d:1a:eb:d8:f1:ab:97:e5:6c:e0:b5:ad: 31:d1:91:be:ad:9e:84:8a:de:84:14:14:c7:2b:c1: 6c:1a:89:bc:73:61:ea:ee:8b:1a:b7:27:77:69:85: e5:ff:a1:6f:d3:96:f4:3d:cd:ba:a3:62:bc:0b:ad: d4:ab:78:49:57:6c:91:99:e2:97:6c:9f:9a:9a:89: 1d:5a:0e:99:de:5d:cb:88:12:32:ec:04:45:c9:83: bf:0e:1e:ff:71:8d:c0:40:e9:da:cd:c2:eb:ec:63: b9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:90:D0:C3:F9:D1:9E:58:4D:2D:9F:59:47:BB:E6:E1:11:DE:7C:FA X509v3 Authority Key Identifier: keyid:0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:79:01:a9:d4:92:37:dc:3b:70:1b:be:9f:dc:a6:21:fd:a3: 49:2a:25:ff:89:1c:61:40:5c:2b:78:d2:56:bf:60:89:59:62: 38:7a:b0:78:d0:ec:5a:ee:70:21:57:06:f2:88:22:d5:ba:a8: d6:ac:c6:7f:90:88:d2:59:60:af:63:08:20:13:21:58:f2:46: d5:7f:e5:b1:9b:d2:eb:da:09:e1:c5:dc:4b:45:3e:3c:5f:e2: 40:06:83:8d:4b:86:80:b0:33:6c:88:69:aa:71:a1:a2:38:02: c2:7b:92:93:99:a4:df:8d:f5:e8:5b:d5:56:0c:ec:c1:b9:ae: 32:b0:8b:f6:ac:b7:03:d7:53:ba:36:7e:26:a6:c7:bd:1f:cc: f9:99:ab:aa:9c:1a:92:d3:6e:11:ac:f8:8a:47:d2:e1:00:eb: e0:6f:b0:f3:16:d4:f3:0e:f2:4d:2d:9e:94:a8:0d:ed:d8:69: 0c:9c:82:13:b5:e4:73:ff:29:4c:ca:f9:d4:a9:ab:39:21:8e: 5f:24:43:27:4a:9f:7e:2e:aa:b0:09:5d:1e:95:59:6c:3b:44: 2e:d0:e1:f3:9b:7d:1d:a9:8c:91:98:e7:60:4e:fa:02:42:83: 08:de:38:12:06:80:93:20:d9:28:23:d2:8e:29:20:f9:2d:d5: 97:60:c0:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF N0E4RTExMC8GA1UEBRMoMEI4MTNFMkJCQTg0MDY5RUI0MzRENjU2NjY3RkVDRTFG NjFCNDk0QjAeFw0yNDA1MTUwNzQ3MDNaFw0yNDA1MjIwNzQ3MDNaMBgxFjAUBgNV BAMTDTY2NDQ2ODc3LWZlNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7xvkFM6KdLqZ6BBStdWvYgtrXmLqSJjTlToBFjLg8WNjFpJVMvSj9bL7+0eRL ILfZ22m4QiPkXbegyp1LfNwFkPAQszEH+N+XGcZibRYXVWvT3rMl22UUalHbHXLv l5KIESc9/a72VAgWNxdIdUIkzfv6wYHF8pCGGSChqHDUCFogkUK02CerNm5h/je1 SKUIKKpPzB8HcV0a69jxq5flbOC1rTHRkb6tnoSK3oQUFMcrwWwaibxzYeruixq3 J3dpheX/oW/TlvQ9zbqjYrwLrdSreElXbJGZ4pdsn5qaiR1aDpneXcuIEjLsBEXJ g78OHv9xjcBA6drNwuvsY7lJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUspDQw/nR nlhNLZ9ZR7vm4RHefPowHwYDVR0jBBgwFoAUC4E+K7qEBp60NNZWZn/s4fYbSUsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3QThFL0EwNTE1NkE2ODM1 QzExRUU4OEVBQjg0RkM0RjlBRTAyL0M0RS1LN3FFQnA2ME5OWldabl9zNGZZYlNV cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQzRFLUs3cUVCcDYwTk5aV1puX3M0ZlliU1VzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3 QThFL0EwNTE1NkE2ODM1QzExRUU4OEVBQjg0RkM0RjlBRTAyL0M0RS1LN3FFQnA2 ME5OWldabl9zNGZZYlNVcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMJ5AanUkjfcO3Abvp/cpiH9o0kqJf+JHGFAXCt40la/YIlZYjh6sHjQ 7FrucCFXBvKIItW6qNasxn+QiNJZYK9jCCATIVjyRtV/5bGb0uvaCeHF3EtFPjxf 4kAGg41LhoCwM2yIaapxoaI4AsJ7kpOZpN+N9ehb1VYM7MG5rjKwi/astwPXU7o2 fiamx70fzPmZq6qcGpLTbhGs+IpH0uEA6+BvsPMW1PMO8k0tnpSoDe3YaQycghO1 5HP/KUzK+dSpqzkhjl8kQydKn34uqrAJXR6VWWw7RC7Q4fObfR2pjJGY52BO+gJC gwjeOBIGgJMg2Sgj0o4pIPkt1ZdgwIs= -----END CERTIFICATE-----Generated at Wed May 15 09:04:46 2024 by rpki-client on console-ams.rpki-client.org