$ rpki-client -vvf rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft File: 53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft (raw, json) Hash identifier: QdnAEWGLE5t0tg7UbuKlifeB+egQELrEKOWHAYTt2Lc= Subject key identifier: EE:C4:B2:CF:99:6B:92:B3:3B:A5:1F:B5:39:4E:2E:F5:04:98:68:A6 Authority key identifier: E7:71:32:E4:FE:AD:04:EE:D4:FE:94:6D:60:7A:0D:CB:57:A4:20:65 Certificate issuer: /CN=A91F715C/serialNumber=E77132E4FEAD04EED4FE946D607A0DCB57A42065 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft Manifest number: 95 Signing time: Wed 15 May 2024 07:16:34 +0000 Manifest this update: Wed 15 May 2024 07:16:34 +0000 Manifest next update: Wed 22 May 2024 07:16:34 +0000 Files and hashes: 1: 53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl (hash: eLajW3fqLG1v1nLnOIpwvePS6soLka1AiLXYOzrnBPk=) 2: 290C6478B2BE11EEB3703266C4F9AE02.roa (hash: TizGZv74cc6YwI96YTvJGfgLIKax7KhT9lvi+U6d7lQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:16:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F715C/serialNumber=E77132E4FEAD04EED4FE946D607A0DCB57A42065 Validity Not Before: May 15 07:16:34 2024 GMT Not After : May 22 07:16:34 2024 GMT Subject: CN=66446152-b7d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ed:59:2a:bd:ef:0d:36:8b:9e:5b:77:93:f6: b6:06:67:80:17:a2:ed:1c:24:b9:17:fc:fc:4f:7c: 78:8d:e6:d1:55:63:37:85:a4:00:46:24:93:a4:18: 04:f2:bb:5b:76:86:a1:ee:77:0c:1f:1d:ba:36:08: c6:2e:8b:d6:5d:68:18:90:ea:0c:c9:39:3f:0d:6c: b4:33:e5:57:d6:93:32:e0:42:6b:99:de:ec:91:5a: b9:c4:e1:9e:df:b3:2c:25:b8:70:44:e4:1f:37:24: df:42:79:77:61:d4:83:b5:ee:b1:16:ef:fa:3c:b6: bf:ea:a3:6c:dd:f7:e3:30:8c:32:56:20:04:db:cb: 6e:9a:88:f7:ef:ad:aa:34:b2:91:70:24:c4:8c:4f: 71:84:c3:ed:97:72:f9:7c:67:ed:4d:01:86:db:b5: 1a:e6:e8:fe:1b:76:5f:0e:21:4a:88:af:dd:fb:f8: 5c:39:a4:43:e9:64:ff:9e:c9:72:48:4e:e0:c9:88: de:8c:20:70:30:6f:cf:46:1b:fd:e3:cd:cd:e6:f9: 0c:05:d0:db:19:d8:35:d6:6b:90:e8:32:96:35:10: 21:60:e2:6d:85:86:03:c1:6a:00:26:08:ea:18:77: 1c:d6:c8:ca:9f:c6:d8:7e:67:83:38:57:2f:a0:2d: 70:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C4:B2:CF:99:6B:92:B3:3B:A5:1F:B5:39:4E:2E:F5:04:98:68:A6 X509v3 Authority Key Identifier: keyid:E7:71:32:E4:FE:AD:04:EE:D4:FE:94:6D:60:7A:0D:CB:57:A4:20:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:2e:d7:f7:ab:48:ae:df:ac:b1:b6:da:3c:5f:b6:1c:5c:63: a1:0b:66:c6:d2:b8:59:14:4c:8a:2c:fd:44:98:6b:1d:22:3d: 1d:8f:50:1e:0c:d5:15:e2:4d:68:8a:2e:90:d7:91:9e:32:ce: 4d:eb:1e:fc:c8:fe:96:a6:94:9b:3b:f0:32:56:db:3d:d2:ca: ca:39:f0:95:43:72:e2:84:eb:34:42:93:ec:2c:22:81:a3:1e: 6d:df:98:c1:9e:ab:fc:3b:bc:73:b0:aa:6b:31:3d:94:c5:63: 30:36:91:fc:d0:ee:e8:97:2e:dd:ae:f0:99:9c:63:5c:8f:67: 2b:cd:3d:d6:70:be:8f:9c:d1:74:74:b5:62:f8:af:f5:62:da: f1:94:25:1f:b1:06:a3:d1:ee:ee:f9:49:ba:c8:64:96:4e:5c: a9:76:9d:39:e8:f4:26:11:c7:9c:a9:80:34:38:b6:13:ee:92: 6e:af:71:4b:3d:7b:f6:da:8e:80:a5:b8:ad:34:01:83:9f:b6: 03:42:e6:65:56:7b:3d:04:18:20:ab:c2:7c:80:ee:75:a4:17: d4:97:3c:d4:4c:8b:c6:3b:75:f9:59:bb:54:7e:20:61:71:b4: 93:56:bc:43:40:36:6f:c4:31:1a:cc:0c:11:8d:32:cc:f0:9c: e6:04:2c:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxNUMxMTAvBgNVBAUTKEU3NzEzMkU0RkVBRDA0RUVENEZFOTQ2RDYwN0EwRENC NTdBNDIwNjUwHhcNMjQwNTE1MDcxNjM0WhcNMjQwNTIyMDcxNjM0WjAYMRYwFAYD VQQDEw02NjQ0NjE1Mi1iN2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4u1ZKr3vDTaLnlt3k/a2BmeAF6LtHCS5F/z8T3x4jebRVWM3haQARiSTpBgE 8rtbdoah7ncMHx26NgjGLovWXWgYkOoMyTk/DWy0M+VX1pMy4EJrmd7skVq5xOGe 37MsJbhwROQfNyTfQnl3YdSDte6xFu/6PLa/6qNs3ffjMIwyViAE28tumoj3762q NLKRcCTEjE9xhMPtl3L5fGftTQGG27Ua5uj+G3ZfDiFKiK/d+/hcOaRD6WT/nsly SE7gyYjejCBwMG/PRhv9483N5vkMBdDbGdg11muQ6DKWNRAhYOJthYYDwWoAJgjq GHcc1sjKn8bYfmeDOFcvoC1wJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7Ess+Z a5KzO6UftTlOLvUEmGimMB8GA1UdIwQYMBaAFOdxMuT+rQTu1P6UbWB6DctXpCBl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzE1Qy81RjA3MjYzODRG MzMxMUVFOTY2RTBGNzJDNEY5QUUwMi81M0V5NVA2dEJPN1VfcFJ0WUhvTnkxZWtJ R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUzRXk1UDZ0Qk83VV9wUnRZSG9OeTFla0lHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzE1Qy81RjA3MjYzODRGMzMxMUVFOTY2RTBGNzJDNEY5QUUwMi81M0V5NVA2dEJP N1VfcFJ0WUhvTnkxZWtJR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2Ltf3q0iu36yxtto8X7YcXGOhC2bG0rhZFEyKLP1EmGsdIj0dj1Ae DNUV4k1oii6Q15GeMs5N6x78yP6WppSbO/AyVts90srKOfCVQ3LihOs0QpPsLCKB ox5t35jBnqv8O7xzsKprMT2UxWMwNpH80O7oly7drvCZnGNcj2crzT3WcL6PnNF0 dLVi+K/1YtrxlCUfsQaj0e7u+Um6yGSWTlypdp056PQmEcecqYA0OLYT7pJur3FL PXv22o6ApbitNAGDn7YDQuZlVns9BBggq8J8gO51pBfUlzzUTIvGO3X5WbtUfiBh cbSTVrxDQDZvxDEazAwRjTLM8JzmBCwM -----END CERTIFICATE-----Generated at Wed May 15 09:04:46 2024 by rpki-client on console-ams.rpki-client.org