$ rpki-client -vvf rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft File: 5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft (raw, json) Hash identifier: uaTNYhpocjzQZ3ccCggdJUjVuaGfuWqieDmyY02VM0M= Subject key identifier: 40:1B:6D:6F:D2:22:24:CF:10:54:0D:D5:9E:A3:54:C9:6C:86:C5:BF Authority key identifier: E6:1F:A1:24:A6:18:E2:56:67:CC:31:CC:FC:49:16:CE:07:6F:DA:57 Certificate issuer: /CN=A91F35BB/serialNumber=E61FA124A618E25667CC31CCFC4916CE076FDA57 Certificate serial: 03F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft Manifest number: 03F5 Signing time: Sun 05 May 2024 02:18:43 +0000 Manifest this update: Sun 05 May 2024 02:18:43 +0000 Manifest next update: Sun 12 May 2024 02:18:43 +0000 Files and hashes: 1: 5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl (hash: s+sS82k4ciyuphCdJJyZMYMwytQiAMereH860qeoAZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1013 (0x3f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F35BB/serialNumber=E61FA124A618E25667CC31CCFC4916CE076FDA57 Validity Not Before: May 5 02:18:43 2024 GMT Not After : May 12 02:18:43 2024 GMT Subject: CN=6636ec83-217e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9b:0b:42:14:c9:51:86:cf:f2:b6:8b:f1:7b: fb:f8:0a:e9:3d:6b:47:47:e5:b8:c4:73:93:5c:ec: f9:29:00:80:31:d5:83:af:12:9d:31:1e:71:5a:66: 08:49:38:69:f5:04:60:63:dc:a5:50:db:85:c2:78: 57:12:42:d3:ab:0d:51:7a:c4:7a:af:a5:86:96:fb: d2:15:99:2b:24:16:13:53:0e:c1:c8:60:27:60:7e: eb:9d:21:b5:6e:1d:17:ce:7f:bf:4e:fc:05:b6:06: 22:87:66:a9:37:74:58:6c:4d:4c:72:a0:a6:4d:26: 17:f6:14:43:ff:49:8d:5d:98:b7:0e:a4:28:c0:f8: 33:2e:41:b6:77:a8:50:99:c9:37:12:27:40:f0:27: 30:86:77:d9:56:e4:5a:38:fa:d6:ea:e3:40:9d:76: b8:24:0c:22:f8:7f:c2:44:3f:ad:57:f9:15:7a:63: f0:a8:36:da:cb:49:16:4b:04:41:ff:97:7e:f6:f6: 38:53:eb:80:23:04:8f:78:fe:02:34:e5:1b:81:3b: 56:f3:94:c2:bc:e8:be:3e:b8:8f:fa:6b:1e:08:9d: 56:5c:14:bb:22:cc:c1:79:2a:1c:20:63:97:ff:9c: 80:49:41:45:0d:a0:b0:d8:91:01:4f:f0:cc:49:3d: ad:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:1B:6D:6F:D2:22:24:CF:10:54:0D:D5:9E:A3:54:C9:6C:86:C5:BF X509v3 Authority Key Identifier: keyid:E6:1F:A1:24:A6:18:E2:56:67:CC:31:CC:FC:49:16:CE:07:6F:DA:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:3b:70:7e:3b:1a:48:2f:fd:ca:68:94:3b:d3:a5:df:60:39: 21:ea:79:43:f2:28:9a:2c:4d:be:7d:64:20:4d:f7:8c:e0:3a: ff:ee:5e:29:e1:d7:a3:be:44:33:0d:ad:44:a8:ef:8e:7d:fb: d6:eb:8c:2a:95:de:6e:95:33:30:e3:c2:6b:72:93:03:9a:4d: 90:d8:da:f9:dc:b1:0a:a8:d1:b8:fe:62:30:5f:7a:1b:2c:a1: 42:69:3d:21:25:a3:26:25:2e:11:0b:4c:fa:39:19:d8:36:75: 39:b3:86:e2:71:be:8a:12:8d:b0:90:8f:01:d5:95:4d:3c:aa: e2:ec:9e:b2:61:74:b2:c2:4e:43:7b:5f:25:1d:d2:c6:f2:18: c6:d9:85:a8:4b:09:2a:4c:67:82:69:b1:6b:c7:ff:c0:af:0a: b1:20:27:e5:65:7c:5b:47:35:e8:d5:9a:95:cc:10:af:a6:fd: 5a:60:2f:43:c3:46:46:63:3c:f9:01:dd:b4:74:20:db:4e:9d: 98:b9:2a:10:76:28:ef:8b:60:10:5d:77:1d:a4:84:59:f7:06: 4a:30:6a:45:99:5d:9d:50:ab:fd:06:fa:41:dc:0e:54:91:a6: f3:ef:d7:32:2e:a8:bb:35:4e:f0:8b:1d:8e:48:f8:92:ab:92: d6:d6:dc:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM1QkIxMTAvBgNVBAUTKEU2MUZBMTI0QTYxOEUyNTY2N0NDMzFDQ0ZDNDkxNkNF MDc2RkRBNTcwHhcNMjQwNTA1MDIxODQzWhcNMjQwNTEyMDIxODQzWjAYMRYwFAYD VQQDEw02NjM2ZWM4My0yMTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5sLQhTJUYbP8raL8Xv7+ArpPWtHR+W4xHOTXOz5KQCAMdWDrxKdMR5xWmYI SThp9QRgY9ylUNuFwnhXEkLTqw1ResR6r6WGlvvSFZkrJBYTUw7ByGAnYH7rnSG1 bh0Xzn+/TvwFtgYih2apN3RYbE1McqCmTSYX9hRD/0mNXZi3DqQowPgzLkG2d6hQ mck3EidA8CcwhnfZVuRaOPrW6uNAnXa4JAwi+H/CRD+tV/kVemPwqDbay0kWSwRB /5d+9vY4U+uAIwSPeP4CNOUbgTtW85TCvOi+PriP+mseCJ1WXBS7IszBeSocIGOX /5yASUFFDaCw2JEBT/DMST2t0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEAbbW/S IiTPEFQN1Z6jVMlshsW/MB8GA1UdIwQYMBaAFOYfoSSmGOJWZ8wxzPxJFs4Hb9pX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzVCQi8wNzYzN0QwMjI3 RkIxMUVDODg4MEQxNzBDNEY5QUUwMi81aC1oSktZWTRsWm56REhNX0VrV3pnZHYy bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVoLWhKS1lZNGxabnpESE1fRWtXemdkdjJsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzVCQi8wNzYzN0QwMjI3RkIxMUVDODg4MEQxNzBDNEY5QUUwMi81aC1oSktZWTRs Wm56REhNX0VrV3pnZHYybGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOO3B+OxpIL/3KaJQ706XfYDkh6nlD8iiaLE2+fWQgTfeM4Dr/7l4p 4dejvkQzDa1EqO+OffvW64wqld5ulTMw48JrcpMDmk2Q2Nr53LEKqNG4/mIwX3ob LKFCaT0hJaMmJS4RC0z6ORnYNnU5s4bicb6KEo2wkI8B1ZVNPKri7J6yYXSywk5D e18lHdLG8hjG2YWoSwkqTGeCabFrx//ArwqxICflZXxbRzXo1ZqVzBCvpv1aYC9D w0ZGYzz5Ad20dCDbTp2YuSoQdijvi2AQXXcdpIRZ9wZKMGpFmV2dUKv9BvpB3A5U kabz79cyLqi7NU7wix2OSPiSq5LW1tyb -----END CERTIFICATE-----Generated at Sun May 5 03:47:50 2024 by rpki-client on console-fra.rpki-client.org