$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft File: XOWb6kBJP8xXRnFpIvGYjZYpH74.mft (raw, json) Hash identifier: /fRTXS9V0tf1XnYmoE06F8m78Vn8OkB5CQOga5nmc88= Subject key identifier: 55:6D:A7:17:B3:FB:FD:10:71:F9:2D:91:57:94:21:EC:93:4A:9C:09 Authority key identifier: 5C:E5:9B:EA:40:49:3F:CC:57:46:71:69:22:F1:98:8D:96:29:1F:BE Certificate issuer: /CN=A9116D68/serialNumber=5CE59BEA40493FCC5746716922F1988D96291FBE Certificate serial: 07A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft Manifest number: 15E1 Signing time: Fri 31 May 2024 18:56:25 +0000 Manifest this update: Fri 31 May 2024 18:56:24 +0000 Manifest next update: Fri 07 Jun 2024 18:56:24 +0000 Files and hashes: 1: XOWb6kBJP8xXRnFpIvGYjZYpH74.crl (hash: DYYkOVNUZs2nfSuaHgkSDK6FpyxZxcpdLf3ViHjMtXY=) 2: 98A1BAB6E9B611EE89994B66C4F9AE02.roa (hash: BZiR4Dc1ddblUQXJsTaFKfSdrUTvmlQ8LVKV+/pLZz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.crl rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:56:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1952 (0x7a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116D68/serialNumber=5CE59BEA40493FCC5746716922F1988D96291FBE Validity Not Before: May 31 18:56:24 2024 GMT Not After : Jun 7 18:56:24 2024 GMT Subject: CN=665a1d58-245a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8f:2e:04:eb:41:1a:00:5f:4e:e9:b0:82:6a: fc:9c:9e:4d:ee:3b:f4:98:d6:70:eb:7b:18:cc:28: 7f:b4:d4:0c:4d:14:bc:6a:db:79:dd:79:a7:e2:88: ec:92:ed:f6:53:e9:20:a3:99:2a:03:a3:7d:1e:1e: 9b:c9:eb:9c:db:ef:07:d7:e8:37:05:e7:43:49:f2: 60:f6:49:b2:5e:19:5c:fe:77:ae:c1:23:a5:3f:9c: de:4e:2d:2d:2e:c6:6d:c8:34:cb:bd:80:5c:11:66: 4e:4a:7c:e9:f4:c0:50:07:db:a6:41:8f:43:65:e1: c2:4d:7b:66:92:34:7e:60:3f:54:6b:43:c9:cc:5c: 61:ac:27:5d:9a:50:16:e2:af:e8:cd:d5:d7:3c:21: 01:50:61:18:31:82:ab:7c:25:bc:de:09:66:3e:9a: 3f:bf:2a:1b:71:2e:d3:83:65:19:f5:c3:4d:22:24: 6b:50:7d:26:35:3c:07:d6:ac:55:08:b8:f8:3a:85: 14:c3:f6:9d:15:ca:85:13:6b:a9:84:15:e6:d7:73: 0b:95:fe:26:82:9f:02:7e:0b:dc:f1:2f:54:29:13: 5b:92:f1:98:93:a9:6e:5b:55:93:f7:c3:60:e5:8b: 7a:4d:e7:2e:08:e4:f6:c9:b6:10:a1:35:29:45:a6: a7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:6D:A7:17:B3:FB:FD:10:71:F9:2D:91:57:94:21:EC:93:4A:9C:09 X509v3 Authority Key Identifier: keyid:5C:E5:9B:EA:40:49:3F:CC:57:46:71:69:22:F1:98:8D:96:29:1F:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:8a:86:94:7d:5e:91:c3:fa:13:58:11:36:e7:25:df:56:50: 2f:20:7d:04:e6:8c:41:af:5d:54:0e:2d:5f:17:d4:78:33:32: 4c:ee:1f:80:ce:ac:13:22:be:94:cb:83:37:78:f4:fa:27:8d: 84:98:2f:dc:df:7f:ad:fa:7b:66:b0:ed:58:ab:3b:4f:78:ac: 67:6a:b3:db:d6:61:32:14:22:62:05:7e:73:e5:72:5f:fe:e9: 69:2b:1d:07:5f:97:6c:18:df:67:3c:73:ca:0d:21:84:f1:7c: bb:64:d6:66:e1:8c:d3:84:c8:07:62:99:a4:d6:7a:04:83:c8: 7b:e2:05:9f:55:08:bf:37:93:c1:b4:2e:c4:ad:d4:14:b1:c7: 10:e4:21:62:91:34:48:89:e8:13:37:5e:33:6f:cd:13:db:9b: 4e:22:d6:9b:01:50:95:e3:54:15:c6:34:b7:f1:8a:50:6b:83: c5:2c:2d:cd:e4:40:df:d1:f7:87:1f:c8:5b:8d:79:0d:23:92: c8:f8:09:be:51:cf:ec:e6:fe:4e:ae:98:ff:ad:6f:ca:7b:f3: 56:e6:83:e2:df:f8:5f:f8:c9:c3:75:f2:cf:72:7f:06:bb:fa: 52:e9:76:3f:f2:13:62:4b:15:fe:3f:15:4d:53:be:b7:fa:a8: b1:2c:36:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZENjgxMTAvBgNVBAUTKDVDRTU5QkVBNDA0OTNGQ0M1NzQ2NzE2OTIyRjE5ODhE OTYyOTFGQkUwHhcNMjQwNTMxMTg1NjI0WhcNMjQwNjA3MTg1NjI0WjAYMRYwFAYD VQQDEw02NjVhMWQ1OC0yNDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyY8uBOtBGgBfTumwgmr8nJ5N7jv0mNZw63sYzCh/tNQMTRS8att53Xmn4ojs ku32U+kgo5kqA6N9Hh6byeuc2+8H1+g3BedDSfJg9kmyXhlc/neuwSOlP5zeTi0t LsZtyDTLvYBcEWZOSnzp9MBQB9umQY9DZeHCTXtmkjR+YD9Ua0PJzFxhrCddmlAW 4q/ozdXXPCEBUGEYMYKrfCW83glmPpo/vyobcS7Tg2UZ9cNNIiRrUH0mNTwH1qxV CLj4OoUUw/adFcqFE2uphBXm13MLlf4mgp8Cfgvc8S9UKRNbkvGYk6luW1WT98Ng 5Yt6TecuCOT2ybYQoTUpRaanOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVtpxez +/0QcfktkVeUIeyTSpwJMB8GA1UdIwQYMBaAFFzlm+pAST/MV0ZxaSLxmI2WKR++ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2OC83MjRDQzg0Qzc4 ODcxMUU5QTA4QUVDNjBDNEY5QUUwMi9YT1diNmtCSlA4eFhSbkZwSXZHWWpaWXBI NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hPV2I2a0JKUDh4WFJuRnBJdkdZalpZcEg3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkQ2OC83MjRDQzg0Qzc4ODcxMUU5QTA4QUVDNjBDNEY5QUUwMi9YT1diNmtCSlA4 eFhSbkZwSXZHWWpaWXBINzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNioaUfV6Rw/oTWBE25yXfVlAvIH0E5oxBr11UDi1fF9R4MzJM7h+A zqwTIr6Uy4M3ePT6J42EmC/c33+t+ntmsO1YqztPeKxnarPb1mEyFCJiBX5z5XJf /ulpKx0HX5dsGN9nPHPKDSGE8Xy7ZNZm4YzThMgHYpmk1noEg8h74gWfVQi/N5PB tC7ErdQUsccQ5CFikTRIiegTN14zb80T25tOItabAVCV41QVxjS38YpQa4PFLC3N 5EDf0feHH8hbjXkNI5LI+Am+Uc/s5v5Orpj/rW/Ke/NW5oPi3/hf+MnDdfLPcn8G u/pS6XY/8hNiSxX+PxVNU763+qixLDYb -----END CERTIFICATE-----Generated at Fri May 31 20:33:56 2024 by rpki-client on console-ams.rpki-client.org