$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft File: 5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft (raw, json) Hash identifier: OXGvVSOef8pf1hyUWYgEnqPfEaJfuIGBMuaq5lqpjVg= Subject key identifier: B5:78:71:4B:9F:0C:96:72:75:AA:C0:1E:C0:2F:06:C8:E7:66:C5:22 Authority key identifier: E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30 Certificate issuer: /CN=A91EEEB8/serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930 Certificate serial: 33EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft Manifest number: 33D0 Signing time: Sat 04 May 2024 15:18:53 +0000 Manifest this update: Sat 04 May 2024 15:18:53 +0000 Manifest next update: Sat 11 May 2024 15:18:53 +0000 Files and hashes: 1: 5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl (hash: UaDvQ+zmHlufLLGz/PKcAnsBFuoNFgj/6GfFiFqFWhU=) 2: 32DFCCDCEB8011EAAB806163C4F9AE02.roa (hash: LuMXWjGVkOAFMr7y1JipZb37cvnj1AkgOmeR14XQOTc=) 3: 9A4EE834EB8111EA87E2C165C4F9AE02.roa (hash: Fy6xqv5na3HgQasuL0cruqcvb2fBlGE564xe2jgQvbA=) 4: FC75A532DBAC11EA9FF2FA1FC4F9AE02.roa (hash: nc7dTJZdG3NMZxoKathNuflUax+bKbbvz3Dh9X4qKLA=) 5: 60DA0694D9E111EA82120960C4F9AE02.roa (hash: eF4YndkxMR5mkDPzt0ay4vD7NL5uyIf5gVPkSh26pBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13292 (0x33ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEEB8/serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930 Validity Not Before: May 4 15:18:53 2024 GMT Not After : May 11 15:18:53 2024 GMT Subject: CN=663651dd-4c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c2:5f:6c:6e:28:a1:df:df:d1:91:d8:97:f1: 0e:b5:a8:5d:03:36:30:2b:ec:bd:a2:a2:5b:d7:7c: 6d:d4:6f:4e:12:71:ce:47:e5:20:e1:f8:d4:e5:53: 68:71:e3:80:e1:a9:77:fd:b3:5b:c4:00:c5:02:1f: e8:89:00:8e:74:23:ad:3b:f5:2f:ab:cd:43:73:98: 17:3a:82:de:7a:26:53:69:f7:4c:49:d5:df:ce:6e: da:07:b2:b6:c9:4c:52:92:1e:34:7e:35:c2:ea:88: 1f:cf:d8:78:43:c9:61:30:48:8e:dd:80:bf:b5:c3: 25:c0:60:5c:33:98:01:8e:ef:ce:f8:35:af:26:44: 0a:58:18:12:8f:8c:7e:02:9d:51:a0:1b:0b:be:d3: 22:d0:26:4d:11:60:00:17:e2:9a:c8:99:01:ec:c9: 52:04:8e:8a:54:16:f0:65:d7:6b:80:a0:de:d8:8e: ec:91:de:05:4f:be:cb:b6:58:dc:6e:b2:a7:9d:15: 6e:c8:61:30:da:70:52:7f:81:00:1c:7c:8f:b8:22: 87:78:28:0b:00:2b:af:ef:a1:9f:a9:89:41:f6:96: 1d:48:56:55:3b:dd:82:d7:b4:cf:17:1a:87:c3:a6: 62:46:36:46:30:d9:df:9c:80:aa:27:02:66:3a:8f: bc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:78:71:4B:9F:0C:96:72:75:AA:C0:1E:C0:2F:06:C8:E7:66:C5:22 X509v3 Authority Key Identifier: keyid:E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:7b:7a:dd:00:58:31:d5:6a:03:cb:4e:47:82:88:6b:e3:a8: 26:ad:c8:fa:e7:77:79:8e:53:64:7f:32:a2:05:11:65:8c:76: 5a:9f:87:3a:69:28:23:bb:8b:ac:3b:d9:82:7e:8e:25:88:69: 5d:fc:88:41:e3:d2:36:da:7b:9f:84:5b:3d:61:93:0e:62:0e: 33:5a:4a:58:80:64:5a:2a:21:0d:c9:66:2b:4a:5e:a6:c4:54: af:52:54:30:bc:fe:6d:98:75:93:ae:83:0f:e8:60:76:83:20: 35:1a:d1:11:86:d9:fb:b1:3e:e8:29:fe:16:f1:92:56:52:78: 25:00:32:23:52:28:61:58:e6:84:13:aa:09:a0:ec:da:54:01: ca:3e:16:7f:0f:69:78:d4:e9:2f:4a:36:8d:ef:ee:71:e5:32: d5:ed:25:95:25:d4:11:f1:7f:50:58:c6:51:f0:96:fd:96:6e: 24:02:df:c0:ef:8b:0b:a2:6c:fb:2d:5b:bc:04:4b:23:4a:99: 52:42:16:40:3a:7b:93:5f:3d:25:22:ed:63:95:f4:9c:cb:ea: 1f:fd:e6:53:f5:11:a3:c8:98:45:59:5f:94:7e:bd:60:18:bf: d4:7e:4d:78:45:fb:a7:57:4b:28:ec:5d:75:55:dd:9d:ee:cb: ff:85:89:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFQjgxMTAvBgNVBAUTKEU2MjJDODExNEYzRjI0QUE2QTgwN0M4MTQxRTM5NjRC NTUxQkI5MzAwHhcNMjQwNTA0MTUxODUzWhcNMjQwNTExMTUxODUzWjAYMRYwFAYD VQQDEw02NjM2NTFkZC00Yzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo8JfbG4ood/f0ZHYl/EOtahdAzYwK+y9oqJb13xt1G9OEnHOR+Ug4fjU5VNo ceOA4al3/bNbxADFAh/oiQCOdCOtO/Uvq81Dc5gXOoLeeiZTafdMSdXfzm7aB7K2 yUxSkh40fjXC6ogfz9h4Q8lhMEiO3YC/tcMlwGBcM5gBju/O+DWvJkQKWBgSj4x+ Ap1RoBsLvtMi0CZNEWAAF+KayJkB7MlSBI6KVBbwZddrgKDe2I7skd4FT77Ltljc brKnnRVuyGEw2nBSf4EAHHyPuCKHeCgLACuv76GfqYlB9pYdSFZVO92C17TPFxqH w6ZiRjZGMNnfnICqJwJmOo+8BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLV4cUuf DJZydarAHsAvBsjnZsUiMB8GA1UdIwQYMBaAFOYiyBFPPySqaoB8gUHjlktVG7kw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUVCOC84RTBGMkNCNjFE QTExMUUyQjkwNkJDOTMwOEIwMkNEMi81aUxJRVU4X0pLcHFnSHlCUWVPV1MxVWJ1 VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVpTElFVThfSktwcWdIeUJRZU9XUzFVYnVUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUVCOC84RTBGMkNCNjFEQTExMUUyQjkwNkJDOTMwOEIwMkNEMi81aUxJRVU4X0pL cHFnSHlCUWVPV1MxVWJ1VEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3e3rdAFgx1WoDy05Hgohr46gmrcj653d5jlNkfzKiBRFljHZan4c6 aSgju4usO9mCfo4liGld/IhB49I22nufhFs9YZMOYg4zWkpYgGRaKiENyWYrSl6m xFSvUlQwvP5tmHWTroMP6GB2gyA1GtERhtn7sT7oKf4W8ZJWUnglADIjUihhWOaE E6oJoOzaVAHKPhZ/D2l41OkvSjaN7+5x5TLV7SWVJdQR8X9QWMZR8Jb9lm4kAt/A 74sLomz7LVu8BEsjSplSQhZAOnuTXz0lIu1jlfScy+of/eZT9RGjyJhFWV+Ufr1g GL/Ufk14RfunV0so7F11Vd2d7sv/hYn0 -----END CERTIFICATE-----Generated at Sat May 4 15:45:50 2024 by rpki-client on console-fra.rpki-client.org