$ rpki-client -vvf rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft File: 5L99WWC2svPFIUHvK2Aq0RT0DKg.mft (raw, json) Hash identifier: eHkBmTKWvwYV6QKhgR1wN+dG7jfGpYHmZiEaIzQ6050= Subject key identifier: 39:CD:43:E7:E4:C2:FB:D8:A9:9E:07:DA:79:69:C3:5D:04:2F:CD:9C Authority key identifier: E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8 Certificate issuer: /CN=A91F53A5/serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8 Certificate serial: 0232 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft Manifest number: 0230 Signing time: Wed 01 May 2024 04:19:46 +0000 Manifest this update: Wed 01 May 2024 04:19:46 +0000 Manifest next update: Wed 08 May 2024 04:19:46 +0000 Files and hashes: 1: 5L99WWC2svPFIUHvK2Aq0RT0DKg.crl (hash: og0ClGdzIrHVn6PYFUm7ygjYQez96OEJ/uEHmfoYDnc=) 2: 99C51F96DA6D11EC86CE4D59C4F9AE02.roa (hash: aKXqkqaiNI3kpyMCWhSWZRWPKcgpASMcfqReP/RZldE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 562 (0x232) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F53A5/serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8 Validity Not Before: May 1 04:19:46 2024 GMT Not After : May 8 04:19:46 2024 GMT Subject: CN=6631c2e2-66cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:07:dd:48:74:97:13:b6:7e:96:44:2a:db:ea: 23:1a:a0:a8:cd:08:38:b9:46:b3:7f:cf:e8:e6:95: 5d:2c:c4:cb:7f:8e:b4:12:a9:27:6c:0d:f2:e1:34: ea:61:9b:81:df:99:57:58:04:9d:33:e5:e9:80:77: 0b:88:b1:c2:28:37:ca:fe:ca:de:1a:24:0b:4e:cf: 9e:f6:55:6a:17:50:9b:21:21:33:23:23:ca:0c:1e: 05:d6:3f:9f:5a:64:7a:65:36:06:26:74:37:59:15: 8b:f6:45:9c:ae:05:1f:13:39:7c:86:a7:b4:67:2f: 41:fe:6d:cd:1f:f4:96:0c:ea:96:c0:9f:64:55:31: 41:fb:7d:db:d2:4e:ae:bf:54:6e:93:9b:82:b3:6f: 20:a5:ce:bb:5c:4b:d0:4a:08:07:ba:b4:88:0d:93: 60:e3:a5:3a:04:98:0b:0a:de:81:04:6c:2f:21:ee: 81:c3:c7:c0:e6:be:e1:30:21:2a:2c:8d:7a:6e:22: 05:1d:68:e7:4e:00:35:90:0a:8a:51:ee:e9:f3:59: d4:a7:c3:58:69:a3:71:04:30:d5:98:77:f0:26:24: 06:0c:f3:aa:fc:6b:27:5e:c3:ed:d0:04:27:48:ab: e5:4e:8e:6f:b2:d3:09:a2:94:40:e5:db:83:12:05: e7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CD:43:E7:E4:C2:FB:D8:A9:9E:07:DA:79:69:C3:5D:04:2F:CD:9C X509v3 Authority Key Identifier: keyid:E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:1a:be:2f:62:af:b0:83:cc:6e:63:a4:1f:70:14:55:0b:1a: a1:10:1b:e9:65:79:bc:72:a8:36:62:72:44:ff:f1:1c:02:7a: df:7c:e5:a3:56:b8:fe:4c:7a:71:4a:98:57:98:3d:17:6d:9b: b2:51:4f:34:7f:35:65:fe:fb:04:01:09:05:58:35:ca:cc:06: 15:a1:43:d0:16:04:de:c2:e4:c6:77:4b:42:9f:d5:60:2c:c6: fd:fe:6d:ad:ac:4f:17:d7:90:4b:28:a4:b7:4d:df:af:39:45: dd:b5:62:08:d0:3a:d8:c7:90:02:ab:c4:48:27:f4:fd:c3:08: f4:b6:a6:4b:d6:e3:53:86:62:30:92:e3:d7:5b:bc:ef:ec:ce: a8:c8:1e:b1:41:dc:46:61:e4:8b:c1:e9:d3:8d:6c:77:9b:f8: e0:4a:2f:97:eb:41:bd:27:4f:49:0f:9f:00:3a:bd:68:8f:a6: 38:ca:b3:d2:a9:40:d2:fb:7d:f0:b0:2c:4d:6c:f3:89:59:6e: b6:0d:e1:68:7b:22:20:4e:fd:6f:22:b1:10:23:49:67:6b:5e: 60:25:eb:8d:19:00:fd:17:c9:c0:ab:e7:76:b8:f8:53:6f:4b: 78:b8:63:19:15:2b:9e:f6:3d:65:07:b4:53:f4:fa:2e:a2:9e: 61:c9:db:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUzQTUxMTAvBgNVBAUTKEU0QkY3RDU5NjBCNkIyRjNDNTIxNDFFRjJCNjAyQUQx MTRGNDBDQTgwHhcNMjQwNTAxMDQxOTQ2WhcNMjQwNTA4MDQxOTQ2WjAYMRYwFAYD VQQDEw02NjMxYzJlMi02NmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQfdSHSXE7Z+lkQq2+ojGqCozQg4uUazf8/o5pVdLMTLf460EqknbA3y4TTq YZuB35lXWASdM+XpgHcLiLHCKDfK/sreGiQLTs+e9lVqF1CbISEzIyPKDB4F1j+f WmR6ZTYGJnQ3WRWL9kWcrgUfEzl8hqe0Zy9B/m3NH/SWDOqWwJ9kVTFB+33b0k6u v1Ruk5uCs28gpc67XEvQSggHurSIDZNg46U6BJgLCt6BBGwvIe6Bw8fA5r7hMCEq LI16biIFHWjnTgA1kAqKUe7p81nUp8NYaaNxBDDVmHfwJiQGDPOq/GsnXsPt0AQn SKvlTo5vstMJopRA5duDEgXnIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnNQ+fk wvvYqZ4H2nlpw10EL82cMB8GA1UdIwQYMBaAFOS/fVlgtrLzxSFB7ytgKtEU9Ayo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTNBNS81MDBDRkU5OERB NjYxMUVDODBERkU3MzZDNEY5QUUwMi81TDk5V1dDMnN2UEZJVUh2SzJBcTBSVDBE S2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVMOTlXV0Myc3ZQRklVSHZLMkFxMFJUMERLZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTNBNS81MDBDRkU5OERBNjYxMUVDODBERkU3MzZDNEY5QUUwMi81TDk5V1dDMnN2 UEZJVUh2SzJBcTBSVDBES2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABGr4vYq+wg8xuY6QfcBRVCxqhEBvpZXm8cqg2YnJE//EcAnrffOWj Vrj+THpxSphXmD0XbZuyUU80fzVl/vsEAQkFWDXKzAYVoUPQFgTewuTGd0tCn9Vg LMb9/m2trE8X15BLKKS3Td+vOUXdtWII0DrYx5ACq8RIJ/T9wwj0tqZL1uNThmIw kuPXW7zv7M6oyB6xQdxGYeSLwenTjWx3m/jgSi+X60G9J09JD58AOr1oj6Y4yrPS qUDS+33wsCxNbPOJWW62DeFoeyIgTv1vIrEQI0lna15gJeuNGQD9F8nAq+d2uPhT b0t4uGMZFSue9j1lB7RT9Pouop5hydtl -----END CERTIFICATE-----Generated at Wed May 1 05:55:47 2024 by rpki-client on console-ams.rpki-client.org