$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft File: 5_fdQJKCmOyeymRGoYSjWaPtXf4.mft (raw, json) Hash identifier: 3nyyLPovWkkrO9fr9lVmYvA+9uZVK0MD/gA7gwSQ9Bw= Subject key identifier: 6E:D6:72:BA:93:88:AB:D8:2D:41:44:43:96:ED:8E:51:D3:D7:A4:B1 Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE Certificate issuer: /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft Manifest number: 0170 Signing time: Fri 03 May 2024 04:55:01 +0000 Manifest this update: Fri 03 May 2024 04:55:01 +0000 Manifest next update: Fri 10 May 2024 04:55:01 +0000 Files and hashes: 1: 5_fdQJKCmOyeymRGoYSjWaPtXf4.crl (hash: myoWtkkHtdXBk7oS5YYLveFLn8/aMAFp1RfMOA72lnw=) 2: B0DF9618599B11ED99A5B776C4F9AE02.roa (hash: pTEiu18qDzSVb2/rNCXmrUIkXiajyei95hW43UZ5kCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE Validity Not Before: May 3 04:55:01 2024 GMT Not After : May 10 04:55:01 2024 GMT Subject: CN=66346e25-076b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:24:9c:85:a7:5d:25:00:64:d9:85:38:bb:23: c3:52:f8:9d:d5:b9:60:77:4b:8e:4f:1c:fe:91:53: 14:e4:e3:75:d6:61:b5:f1:35:2d:58:68:c8:b9:45: 90:8d:2d:08:1d:d5:08:f6:bb:89:67:94:dd:37:6c: ae:5b:f6:78:86:23:7d:25:cd:b1:b1:4b:51:6c:9d: 36:3b:47:0d:57:9b:35:21:20:83:67:6a:87:82:56: f0:90:cb:c6:0d:08:42:87:de:8c:e6:78:0e:8b:e1: 62:87:51:7c:96:e4:36:79:76:59:47:36:22:f6:e5: 0e:86:66:77:a1:ce:70:a8:ef:3e:43:55:83:52:b4: 74:6f:c9:0f:f2:01:90:eb:95:cd:c6:0c:c3:fa:45: 3a:01:8e:dd:ea:0a:c7:db:3f:3d:3f:6a:00:9c:d7: ad:ad:83:3e:72:a6:30:3f:44:e1:e0:c0:81:19:1b: 2c:81:90:70:bf:03:68:43:7d:31:dd:94:5c:37:bd: 00:57:b0:f0:bf:71:d6:3c:33:ac:97:ae:07:41:72: e0:28:28:42:ef:fa:c7:da:2f:88:15:75:02:cd:f0: 2b:c2:cf:e5:d0:bd:08:89:99:8b:28:7a:fc:d6:66: 38:4e:b4:97:52:65:84:1d:39:ec:7c:52:a9:7f:78: 58:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D6:72:BA:93:88:AB:D8:2D:41:44:43:96:ED:8E:51:D3:D7:A4:B1 X509v3 Authority Key Identifier: keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ed:c3:01:b7:83:25:2c:36:db:3d:d8:64:e8:90:95:c5:d7: 82:0e:b9:9b:10:98:26:d3:55:69:d8:69:02:e5:75:2b:00:46: 06:0d:53:c1:2f:75:f3:a6:ee:54:48:82:04:3a:04:76:75:8d: 47:b5:d0:db:1b:b8:dc:5c:5f:f9:19:bc:a1:a8:88:8a:bd:f2: 60:ac:21:cd:bf:8d:19:27:d4:72:9e:e8:1d:f1:04:e1:77:cd: 3c:4e:90:0e:df:a5:39:04:33:c7:fe:42:17:e7:f7:24:ae:e4: d5:80:97:a3:d9:ec:7a:4c:0b:c8:c6:a3:31:34:2a:2e:9f:06: 76:0f:f3:e6:2e:65:b0:b9:bb:78:50:75:6c:d5:d5:1b:ce:fd: 51:05:ed:0f:05:07:af:0d:86:44:c3:80:c0:84:e0:bb:ca:51: 84:48:0f:75:a3:54:15:09:e5:7e:85:b9:ed:45:74:53:b3:fb: 2a:5f:4c:a5:d5:5e:ac:bc:b8:74:7a:9d:54:19:5d:3f:2f:f3: 5e:66:75:85:68:33:03:b2:10:a9:5e:7d:bd:d0:c0:38:de:b3: b9:75:73:c9:13:cc:31:43:7d:81:70:a0:4b:53:7a:34:b5:fb: 38:7f:0a:8f:c3:49:ad:db:d9:c9:77:68:ba:ee:3b:60:ad:7d: 96:a1:2b:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU3REYxMTAvBgNVBAUTKEU3RjdERDQwOTI4Mjk4RUM5RUNBNjQ0NkExODRBMzU5 QTNFRDVERkUwHhcNMjQwNTAzMDQ1NTAxWhcNMjQwNTEwMDQ1NTAxWjAYMRYwFAYD VQQDEw02NjM0NmUyNS0wNzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5CSchaddJQBk2YU4uyPDUvid1blgd0uOTxz+kVMU5ON11mG18TUtWGjIuUWQ jS0IHdUI9ruJZ5TdN2yuW/Z4hiN9Jc2xsUtRbJ02O0cNV5s1ISCDZ2qHglbwkMvG DQhCh96M5ngOi+Fih1F8luQ2eXZZRzYi9uUOhmZ3oc5wqO8+Q1WDUrR0b8kP8gGQ 65XNxgzD+kU6AY7d6grH2z89P2oAnNetrYM+cqYwP0Th4MCBGRssgZBwvwNoQ30x 3ZRcN70AV7Dwv3HWPDOsl64HQXLgKChC7/rH2i+IFXUCzfArws/l0L0IiZmLKHr8 1mY4TrSXUmWEHTnsfFKpf3hYIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7WcrqT iKvYLUFEQ5btjlHT16SxMB8GA1UdIwQYMBaAFOf33UCSgpjsnspkRqGEo1mj7V3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTdERi82RDU1MkQ3MDI3 N0ExMUVEQTZCMUE4MjZDNEY5QUUwMi81X2ZkUUpLQ21PeWV5bVJHb1lTaldhUHRY ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVfZmRRSktDbU95ZXltUkdvWVNqV2FQdFhmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTdERi82RDU1MkQ3MDI3N0ExMUVEQTZCMUE4MjZDNEY5QUUwMi81X2ZkUUpLQ21P eWV5bVJHb1lTaldhUHRYZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN7cMBt4MlLDbbPdhk6JCVxdeCDrmbEJgm01Vp2GkC5XUrAEYGDVPB L3Xzpu5USIIEOgR2dY1HtdDbG7jcXF/5GbyhqIiKvfJgrCHNv40ZJ9Rynugd8QTh d808TpAO36U5BDPH/kIX5/ckruTVgJej2ex6TAvIxqMxNCounwZ2D/PmLmWwubt4 UHVs1dUbzv1RBe0PBQevDYZEw4DAhOC7ylGESA91o1QVCeV+hbntRXRTs/sqX0yl 1V6svLh0ep1UGV0/L/NeZnWFaDMDshCpXn290MA43rO5dXPJE8wxQ32BcKBLU3o0 tfs4fwqPw0mt29nJd2i67jtgrX2WoSv/ -----END CERTIFICATE-----Generated at Fri May 3 06:29:26 2024 by rpki-client on console-fra.rpki-client.org