$ rpki-client -vvf rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft File: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft (raw, json) Hash identifier: NH6tVMxCLEivvGP69+OjPQmF7McpnOv91apWq/VMC0U= Subject key identifier: CF:D9:79:C7:90:5E:0B:A2:33:00:77:6C:D2:57:04:0F:95:D6:69:EF Authority key identifier: C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE Certificate issuer: /CN=A9118166/serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Certificate serial: 06F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft Manifest number: 06F1 Signing time: Sat 18 May 2024 22:45:15 +0000 Manifest this update: Sat 18 May 2024 22:45:15 +0000 Manifest next update: Sat 25 May 2024 22:45:15 +0000 Files and hashes: 1: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl (hash: 5EGH6wJAMtoqqNls3DucjIsDBv+h/6sp9rMjWBQ4KHg=) 2: 6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa (hash: 83uKV8NOL2BY9kc7wJyQMfTaq8IDhnRH5V2vY6Igkd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1781 (0x6f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118166/serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Validity Not Before: May 18 22:45:15 2024 GMT Not After : May 25 22:45:15 2024 GMT Subject: CN=66492f7b-e07b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fd:66:30:97:16:5e:ec:c7:e5:32:c6:10:1f: d8:2a:8c:9d:5c:1b:13:cc:e8:cc:89:0a:a5:20:55: 29:28:b7:ba:07:1e:61:a2:73:2b:a2:76:5c:be:b4: 91:e1:b5:ff:95:96:bf:08:e8:c8:8d:a1:f0:48:dd: 89:e7:ac:e7:52:e5:ee:c7:53:7e:92:ce:52:76:a3: ec:16:8b:84:f4:4f:59:73:82:bf:57:5b:d6:a5:63: 8a:cf:0c:64:2c:fc:16:c5:7a:24:ff:7f:71:f7:8c: 3c:ab:ef:f1:a1:91:c4:c7:49:86:dd:45:45:2b:03: fd:ae:a7:0e:7b:b4:35:b9:46:a9:32:41:a9:34:22: 64:01:80:15:9c:b4:75:f8:07:5a:1d:59:9d:ca:c2: 87:42:49:e5:a0:17:0e:2e:a9:aa:7b:7c:3a:98:2f: ac:32:c2:ca:fb:94:d3:04:b1:c6:ef:b9:a0:d0:77: a9:a7:12:3d:1e:1a:1b:0b:92:ca:2c:5c:fd:b9:36: 07:24:cb:46:f7:ec:a2:07:b1:a8:9b:c5:8b:40:d7: 1e:0c:c6:ad:30:04:6e:18:31:e7:94:b5:59:00:23: 49:07:45:ac:a7:06:23:b8:d7:64:02:82:1e:ad:54: 05:44:f0:c2:f2:7e:44:52:0f:b8:5e:c5:1a:2d:24: eb:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D9:79:C7:90:5E:0B:A2:33:00:77:6C:D2:57:04:0F:95:D6:69:EF X509v3 Authority Key Identifier: keyid:C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:45:3f:21:87:7f:73:b0:b7:d8:a2:82:e1:21:54:ae:16:65: f1:96:88:fb:d1:3c:4a:f9:25:55:cd:ba:37:1d:94:6b:39:a1: 89:21:8a:91:f3:26:d5:db:cd:a7:79:9d:1a:97:48:a5:48:ca: 29:12:98:f1:2f:89:d5:09:32:f1:08:5f:fb:71:f4:c4:a5:e2: 5d:89:c2:25:a0:f5:91:1c:7e:f8:ed:2c:50:25:80:bb:6e:b3: 87:1b:12:e7:fc:34:fa:2d:b6:84:79:43:92:1a:f7:98:43:58: dd:7b:ed:c6:3b:a9:90:c3:f5:6f:b9:be:ad:37:0e:db:d6:31: ac:c1:d6:b2:c4:82:2e:90:e4:5b:4e:ab:7a:b3:dc:f0:9b:8f: 71:15:3f:31:8f:b7:29:07:97:4a:0f:8b:1d:b1:bd:e4:68:a6: d9:aa:12:59:ed:7c:6e:32:cb:71:68:d1:3c:f5:dd:0c:62:e1: 99:a6:ff:47:e2:69:01:1f:d8:3e:00:0d:38:47:29:58:24:17: 72:1e:e1:8e:a0:5a:d4:9d:cb:09:ba:db:97:7e:89:f7:d8:88: c1:ac:2c:13:ee:34:22:5e:4f:a4:71:1b:c0:bc:ea:8d:97:6f: a5:1b:a5:f6:c6:a2:16:60:30:78:42:4c:8a:ab:fa:ee:ba:01: 03:d9:3b:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgxNjYxMTAvBgNVBAUTKEM2RDAwNjdGMjQyODFDRTFGNDlDOTA4MTJEMTVCMUY1 NjFCOTVEREUwHhcNMjQwNTE4MjI0NTE1WhcNMjQwNTI1MjI0NTE1WjAYMRYwFAYD VQQDEw02NjQ5MmY3Yi1lMDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/1mMJcWXuzH5TLGEB/YKoydXBsTzOjMiQqlIFUpKLe6Bx5honMronZcvrSR 4bX/lZa/COjIjaHwSN2J56znUuXux1N+ks5SdqPsFouE9E9Zc4K/V1vWpWOKzwxk LPwWxXok/39x94w8q+/xoZHEx0mG3UVFKwP9rqcOe7Q1uUapMkGpNCJkAYAVnLR1 +AdaHVmdysKHQknloBcOLqmqe3w6mC+sMsLK+5TTBLHG77mg0HeppxI9HhobC5LK LFz9uTYHJMtG9+yiB7Gom8WLQNceDMatMARuGDHnlLVZACNJB0WspwYjuNdkAoIe rVQFRPDC8n5EUg+4XsUaLSTrOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/ZeceQ XguiMwB3bNJXBA+V1mnvMB8GA1UdIwQYMBaAFMbQBn8kKBzh9JyQgS0VsfVhuV3e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODE2Ni8yOEMxRDAyMkZE ODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hPSDBuSkNCTFJXeDlXRzVY ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h0QUdmeVFvSE9IMG5KQ0JMUld4OVdHNVhkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODE2Ni8yOEMxRDAyMkZEODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hP SDBuSkNCTFJXeDlXRzVYZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAORT8hh39zsLfYooLhIVSuFmXxloj70TxK+SVVzbo3HZRrOaGJIYqR 8ybV282neZ0al0ilSMopEpjxL4nVCTLxCF/7cfTEpeJdicIloPWRHH747SxQJYC7 brOHGxLn/DT6LbaEeUOSGveYQ1jde+3GO6mQw/Vvub6tNw7b1jGswdayxIIukORb Tqt6s9zwm49xFT8xj7cpB5dKD4sdsb3kaKbZqhJZ7XxuMstxaNE89d0MYuGZpv9H 4mkBH9g+AA04RylYJBdyHuGOoFrUncsJutuXfon32IjBrCwT7jQiXk+kcRvAvOqN l2+lG6X2xqIWYDB4QkyKq/ruugED2TvT -----END CERTIFICATE-----Generated at Sun May 19 00:30:12 2024 by rpki-client on console-ams.rpki-client.org