$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft File: S5pjiBqFVgIQVOlL3DInTse33fI.mft (raw, json) Hash identifier: nJKOjSrvJNO6BP+h161NW1DkfZ7IRY2cFG6M/Whv5S4= Subject key identifier: 31:0A:D1:02:96:1C:21:61:07:6C:B9:3D:0B:97:83:E2:49:F9:CE:3A Authority key identifier: 4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2 Certificate issuer: /CN=A91FD90A/serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2 Certificate serial: 0521 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft Manifest number: 051A Signing time: Wed 01 May 2024 01:23:35 +0000 Manifest this update: Wed 01 May 2024 01:23:34 +0000 Manifest next update: Wed 08 May 2024 01:23:34 +0000 Files and hashes: 1: S5pjiBqFVgIQVOlL3DInTse33fI.crl (hash: bcTByd+11rTh2AiIKfOjbK1c1nn8g5+zYgWU4Kulx0M=) 2: 49951B2AC32D11EEAAF20861C4F9AE02.roa (hash: FMw0U06uUm4b8o38GGmUX3lFGIr+xn2SkK182xLY3ew=) 3: 410F8C0EDBC611EEA717194DC4F9AE02.roa (hash: NpRv4nSvL2qU30toBOmsMfdrtlIrA2s/hC52yn09WRw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 01:23:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1313 (0x521) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD90A/serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2 Validity Not Before: May 1 01:23:34 2024 GMT Not After : May 8 01:23:34 2024 GMT Subject: CN=66319996-4cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e9:eb:b7:17:b4:97:6b:0e:f7:ea:13:c3:0a: bd:3c:63:a1:0c:80:f8:c3:91:5a:6d:bc:8d:8f:56: 19:84:43:65:07:13:8e:59:f7:4e:e6:7d:04:58:40: 77:91:59:89:b1:ba:b4:fd:c8:80:0a:f4:9b:0c:1f: 46:48:71:36:a9:d0:36:cd:34:46:e2:ae:4d:d2:1c: cb:34:a1:a5:87:85:97:b1:d3:f1:bc:4d:57:30:36: 19:b9:b9:70:d5:5c:cb:90:10:0c:35:11:cb:98:30: ab:20:39:46:59:f0:53:62:93:e1:c2:88:15:2d:e1: f9:29:90:83:6d:a8:db:93:19:53:ce:a8:1c:0f:66: 4f:6d:b1:ee:6d:8e:23:99:84:69:8b:66:c3:87:27: e7:dc:88:2b:2c:c4:46:26:fb:d9:63:9b:eb:5b:7e: 99:e4:e4:38:24:b4:fe:15:2f:b3:bd:f3:2a:30:78: 87:3f:f7:7c:5d:ad:f4:7a:1f:b4:b4:2b:c2:73:3c: bd:cb:ac:6c:12:de:24:4c:77:b5:01:b8:45:98:17: 59:f3:a5:e9:0f:71:42:55:95:d3:bd:d6:9d:2d:7a: 05:79:6d:3b:93:16:0f:4c:1e:b6:d7:fb:28:4f:8a: 8c:cd:0a:ad:9a:9d:82:76:8a:2d:63:93:21:5d:61: 84:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:0A:D1:02:96:1C:21:61:07:6C:B9:3D:0B:97:83:E2:49:F9:CE:3A X509v3 Authority Key Identifier: keyid:4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b7:b3:2e:08:8d:fb:19:66:d5:46:cd:8e:aa:98:9d:64:ef: e9:66:7f:03:61:60:48:d3:a0:93:12:cb:db:0c:4d:a5:a5:6d: 40:d0:7a:37:a4:78:63:6f:10:80:07:a1:b2:5e:34:e1:33:aa: d1:9e:d5:5d:b7:22:00:4c:50:bb:c5:0b:8b:41:de:21:3f:61: b7:c7:a4:80:8c:6c:9d:4c:70:fb:b0:28:b4:44:80:24:88:4d: ea:52:06:0c:45:d0:df:a8:60:78:0e:70:6d:e2:2a:16:de:2b: e1:e0:55:e6:71:b3:de:25:81:50:69:50:57:ff:91:1c:6e:2e: f6:05:ce:17:77:e3:df:4d:25:b2:02:d1:35:c1:90:f5:bf:18: 2a:8d:a0:fc:5c:dd:6b:c8:c2:89:df:bf:ec:31:27:13:41:da: d5:ba:21:b6:53:65:87:36:54:6d:13:16:bd:38:5c:b9:28:74: 8a:1c:7a:27:8b:d8:50:c3:53:62:db:a2:1b:9f:57:51:34:96: fd:ba:22:9a:6b:12:8d:93:5a:63:3e:4a:26:84:83:8c:a9:b0: 12:83:26:61:43:bd:42:7a:18:cc:79:15:37:36:aa:ef:f2:2b: 57:72:92:71:ba:7b:78:ef:8e:98:7b:79:c0:9a:2e:f2:35:2e: 37:18:14:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ5MEExMTAvBgNVBAUTKDRCOUE2Mzg4MUE4NTU2MDIxMDU0RTk0QkRDMzIyNzRF QzdCN0RERjIwHhcNMjQwNTAxMDEyMzM0WhcNMjQwNTA4MDEyMzM0WjAYMRYwFAYD VQQDEw02NjMxOTk5Ni00Y2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4unrtxe0l2sO9+oTwwq9PGOhDID4w5FabbyNj1YZhENlBxOOWfdO5n0EWEB3 kVmJsbq0/ciACvSbDB9GSHE2qdA2zTRG4q5N0hzLNKGlh4WXsdPxvE1XMDYZublw 1VzLkBAMNRHLmDCrIDlGWfBTYpPhwogVLeH5KZCDbajbkxlTzqgcD2ZPbbHubY4j mYRpi2bDhyfn3IgrLMRGJvvZY5vrW36Z5OQ4JLT+FS+zvfMqMHiHP/d8Xa30eh+0 tCvCczy9y6xsEt4kTHe1AbhFmBdZ86XpD3FCVZXTvdadLXoFeW07kxYPTB621/so T4qMzQqtmp2CdootY5MhXWGEmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDEK0QKW HCFhB2y5PQuXg+JJ+c46MB8GA1UdIwQYMBaAFEuaY4gahVYCEFTpS9wyJ07Ht93y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDkwQS8xN0UyQ0Y1MEI1 QzUxMUVCQjU0RTAxNDZDNEY5QUUwMi9TNXBqaUJxRlZnSVFWT2xMM0RJblRzZTMz ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M1cGppQnFGVmdJUVZPbEwzREluVHNlMzNmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDkwQS8xN0UyQ0Y1MEI1QzUxMUVCQjU0RTAxNDZDNEY5QUUwMi9TNXBqaUJxRlZn SVFWT2xMM0RJblRzZTMzZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/t7MuCI37GWbVRs2OqpidZO/pZn8DYWBI06CTEsvbDE2lpW1A0Ho3 pHhjbxCAB6GyXjThM6rRntVdtyIATFC7xQuLQd4hP2G3x6SAjGydTHD7sCi0RIAk iE3qUgYMRdDfqGB4DnBt4ioW3ivh4FXmcbPeJYFQaVBX/5Ecbi72Bc4Xd+PfTSWy AtE1wZD1vxgqjaD8XN1ryMKJ37/sMScTQdrVuiG2U2WHNlRtExa9OFy5KHSKHHon i9hQw1Ni26Ibn1dRNJb9uiKaaxKNk1pjPkomhIOMqbASgyZhQ71CehjMeRU3Nqrv 8itXcpJxunt4746Ye3nAmi7yNS43GBSH -----END CERTIFICATE-----Generated at Wed May 1 02:46:23 2024 by rpki-client on console-ams.rpki-client.org