$ rpki-client -vvf rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft File: XJzBFCqQdWDNmfBuXdAt5OIulEU.mft (raw, json) Hash identifier: 4mV7/yNItwJ9CJYeZEq+K73TZDSIOe8pJiPN/X+W4hQ= Subject key identifier: 11:69:3E:D6:42:5D:03:CF:03:31:B2:C3:B6:78:76:31:8A:96:4C:D2 Authority key identifier: 5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45 Certificate issuer: /CN=A911636A/serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445 Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft Manifest number: 011A Signing time: Sun 19 May 2024 05:15:51 +0000 Manifest this update: Sun 19 May 2024 05:15:50 +0000 Manifest next update: Sun 26 May 2024 05:15:50 +0000 Files and hashes: 1: XJzBFCqQdWDNmfBuXdAt5OIulEU.crl (hash: fjlxy84Wh1jFwTnUUn1vDNsuWSIIydmH9kZkdErKYO8=) 2: 17C7450485BD11ED8E81A718C4F9AE02.roa (hash: RVP4lv2jgOA5qLIAetF9W+fminYgrgOlPH3C8MHE6is=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911636A/serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445 Validity Not Before: May 19 05:15:50 2024 GMT Not After : May 26 05:15:50 2024 GMT Subject: CN=66498b07-d379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c2:5a:4c:16:9e:7a:f2:5a:24:68:70:51:6f: d4:06:ee:e3:34:32:3d:12:bd:0e:47:56:a3:28:b4: 80:22:62:8d:bd:93:98:aa:76:9c:cd:9c:e3:e6:de: d4:e5:3e:21:c7:4a:4a:fe:6c:d2:b6:78:80:d2:b8: cf:96:b2:a2:a5:0a:8e:24:ee:b7:78:62:7b:96:d0: 61:25:03:11:ec:b9:b2:d1:1b:ea:21:f1:f2:1b:03: a0:1d:6a:9c:de:9f:51:f0:f1:17:e7:ca:97:cb:16: 9c:39:67:f1:78:29:b4:d8:2d:3a:6b:18:14:e4:f8: 15:80:b8:48:45:46:1c:50:cb:9a:73:9b:95:d1:8c: e1:43:2f:3a:22:62:bb:91:bc:38:38:b0:8b:43:b7: e8:dd:bc:22:48:df:05:25:a5:51:eb:b8:9f:6b:9b: 69:d7:b0:ea:0e:34:41:ad:04:c5:f0:ba:d6:06:48: c3:a8:f0:29:17:f4:4b:53:8c:74:b8:8f:22:7d:07: ba:80:c1:a3:2f:45:7d:96:0a:29:7e:d2:44:86:ba: d1:a4:be:b9:7b:72:50:bd:fe:2d:c9:4c:75:0b:24: ee:bb:29:1f:ec:30:5d:4c:a6:33:83:3d:07:c1:b1: a7:65:1c:08:fb:01:1e:4d:45:4b:46:67:4b:3c:54: 20:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:69:3E:D6:42:5D:03:CF:03:31:B2:C3:B6:78:76:31:8A:96:4C:D2 X509v3 Authority Key Identifier: keyid:5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:54:6a:10:a7:d3:c4:3c:55:fc:2b:8b:e2:e5:53:1e:0b:2e: ba:a5:17:14:5a:64:86:48:a9:05:65:0f:68:97:30:d2:6b:6b: c6:02:28:41:1f:4b:96:e0:d5:94:31:6c:f7:61:97:ed:18:94: 57:d6:2c:dd:d6:ae:20:a9:a7:b0:37:e2:c6:fc:1a:bb:10:e7: 9b:4c:96:a9:06:1b:08:2f:8c:ec:a3:75:aa:3c:c8:c1:8a:c0: 5f:aa:6c:eb:b9:15:b4:cc:ee:e4:ee:6f:eb:f6:26:51:23:3b: e7:b2:23:87:84:21:27:e8:bc:8d:11:96:58:79:33:ad:98:6f: e2:12:a4:81:fa:6b:da:d9:cf:40:0e:29:bf:d6:7d:00:26:c4: d8:dc:ce:e3:84:fe:65:7f:ef:a4:74:b9:7b:ee:a9:d5:4b:5d: 78:b7:bc:42:52:b2:a7:22:93:fb:63:9e:cd:5a:e1:76:68:d9: 1a:ca:2b:4e:23:f3:45:02:ec:6b:77:4b:6b:4a:80:69:31:7b: ec:59:8c:59:34:95:f8:3f:ef:76:b2:82:69:dd:22:81:ad:bc: ab:ff:fb:29:b4:16:f6:fd:f4:a4:7d:d0:3b:7b:74:da:63:1f: 4f:6e:7e:1b:38:71:ca:37:01:a4:e8:e7:bb:4d:f9:e0:fa:e3: f6:0a:9c:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYzNkExMTAvBgNVBAUTKDVDOUNDMTE0MkE5MDc1NjBDRDk5RjA2RTVERDAyREU0 RTIyRTk0NDUwHhcNMjQwNTE5MDUxNTUwWhcNMjQwNTI2MDUxNTUwWjAYMRYwFAYD VQQDEw02NjQ5OGIwNy1kMzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAncJaTBaeevJaJGhwUW/UBu7jNDI9Er0OR1ajKLSAImKNvZOYqnaczZzj5t7U 5T4hx0pK/mzStniA0rjPlrKipQqOJO63eGJ7ltBhJQMR7Lmy0RvqIfHyGwOgHWqc 3p9R8PEX58qXyxacOWfxeCm02C06axgU5PgVgLhIRUYcUMuac5uV0YzhQy86ImK7 kbw4OLCLQ7fo3bwiSN8FJaVR67ifa5tp17DqDjRBrQTF8LrWBkjDqPApF/RLU4x0 uI8ifQe6gMGjL0V9lgopftJEhrrRpL65e3JQvf4tyUx1CyTuuykf7DBdTKYzgz0H wbGnZRwI+wEeTUVLRmdLPFQg+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFpPtZC XQPPAzGyw7Z4djGKlkzSMB8GA1UdIwQYMBaAFFycwRQqkHVgzZnwbl3QLeTiLpRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjM2QS9CMEYzM0QyQTY2 RUUxMUVEQjNCNDFBNURDNEY5QUUwMi9YSnpCRkNxUWRXRE5tZkJ1WGRBdDVPSXVs RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hKekJGQ3FRZFdETm1mQnVYZEF0NU9JdWxFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjM2QS9CMEYzM0QyQTY2RUUxMUVEQjNCNDFBNURDNEY5QUUwMi9YSnpCRkNxUWRX RE5tZkJ1WGRBdDVPSXVsRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClVGoQp9PEPFX8K4vi5VMeCy66pRcUWmSGSKkFZQ9olzDSa2vGAihB H0uW4NWUMWz3YZftGJRX1izd1q4gqaewN+LG/Bq7EOebTJapBhsIL4zso3WqPMjB isBfqmzruRW0zO7k7m/r9iZRIzvnsiOHhCEn6LyNEZZYeTOtmG/iEqSB+mva2c9A Dim/1n0AJsTY3M7jhP5lf++kdLl77qnVS114t7xCUrKnIpP7Y57NWuF2aNkayitO I/NFAuxrd0trSoBpMXvsWYxZNJX4P+92soJp3SKBrbyr//sptBb2/fSkfdA7e3Ta Yx9Pbn4bOHHKNwGk6Oe7Tfng+uP2Cpzy -----END CERTIFICATE-----Generated at Sun May 19 05:48:49 2024 by rpki-client on console-fra.rpki-client.org