$ rpki-client -vvf rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft File: XA0XaoArLkVX6IWmwOq10NBw16c.mft (raw, json) Hash identifier: eK74l83EAzTEsXNRXzw/vkpkY25GDsiLp7Jm1CUWxkI= Subject key identifier: 0C:57:C7:55:78:AB:21:21:75:09:78:A2:A0:5B:FA:95:97:44:FB:B4 Authority key identifier: 5C:0D:17:6A:80:2B:2E:45:57:E8:85:A6:C0:EA:B5:D0:D0:70:D7:A7 Certificate issuer: /CN=A911959A/serialNumber=5C0D176A802B2E4557E885A6C0EAB5D0D070D7A7 Certificate serial: 050B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft Manifest number: 0507 Signing time: Fri 31 May 2024 01:43:14 +0000 Manifest this update: Fri 31 May 2024 01:43:13 +0000 Manifest next update: Fri 07 Jun 2024 01:43:13 +0000 Files and hashes: 1: XA0XaoArLkVX6IWmwOq10NBw16c.crl (hash: t9FGkRdD51FxHKSHsQoC9YMjslrS0cOzzelatRiAywI=) 2: E390F83EC1CD11EB86A00568C4F9AE02.roa (hash: 8fmP3q/tRlUiuDRZxlZ0fXa+w3jsV7pt1fVklolWc1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.crl rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1291 (0x50b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911959A/serialNumber=5C0D176A802B2E4557E885A6C0EAB5D0D070D7A7 Validity Not Before: May 31 01:43:13 2024 GMT Not After : Jun 7 01:43:13 2024 GMT Subject: CN=66592b31-f3d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fa:63:d9:39:12:66:06:71:fb:ed:7f:c3:1a: 19:b2:25:f8:ca:18:f0:01:02:50:29:38:6f:ce:78: e5:9d:6d:06:4a:01:3a:37:04:b2:e3:f7:48:e9:30: 71:17:e2:35:d5:a2:60:2a:e6:ed:44:36:e9:ff:ce: 10:70:9a:e5:6a:cd:a0:3b:62:de:63:fc:18:e3:51: 15:c0:12:4a:0c:d6:53:c5:2f:dd:d4:4b:28:43:6b: 51:8c:9c:e9:56:2f:23:36:5a:dd:78:6c:d7:61:3d: 1c:30:7e:78:2c:e6:81:40:26:f6:23:cc:98:21:1a: a3:9b:49:53:b7:16:c7:c2:c3:bf:dd:15:17:d5:ea: 11:c4:50:37:e8:54:a1:82:db:af:2e:95:16:09:62: b2:75:69:7c:09:8d:b2:1f:c5:0a:4e:42:bd:28:d9: ed:00:db:cd:67:19:4c:a6:b9:7b:ac:08:76:c3:0e: 6e:64:13:68:97:f9:5b:28:e5:2b:23:19:3f:0c:20: 40:73:c9:46:9f:d3:4e:2c:a8:9d:1e:47:40:d2:41: fd:ac:a8:e9:9c:5d:bf:89:de:65:1d:f3:63:02:91: 7e:49:39:6c:d7:f8:14:36:f4:36:43:8a:e3:11:79: 0f:d6:8a:14:c5:e0:7d:3d:a6:4f:91:c1:94:b7:a8: 07:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:57:C7:55:78:AB:21:21:75:09:78:A2:A0:5B:FA:95:97:44:FB:B4 X509v3 Authority Key Identifier: keyid:5C:0D:17:6A:80:2B:2E:45:57:E8:85:A6:C0:EA:B5:D0:D0:70:D7:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:96:33:a4:27:ae:2e:14:18:0b:50:ea:ef:82:35:97:d2:0e: e9:0e:4f:cd:e7:c4:95:3b:34:c6:83:fe:09:12:dd:f8:db:8b: 09:ef:51:99:34:3d:ee:1b:72:b3:53:43:32:c3:b6:74:61:df: 1b:0b:71:b9:ba:34:d0:58:a7:5d:d6:e4:c9:77:09:45:fe:22: a2:be:3d:ba:18:fa:c0:fa:3b:7c:6c:d1:38:fb:c6:4b:14:70: 54:4e:09:00:bd:ef:b6:11:eb:fe:97:e7:0e:7c:a7:a7:4a:74: 18:43:56:02:9d:c9:70:ff:64:7d:08:f3:3c:c3:ba:17:26:8f: 43:78:a9:30:ec:6e:31:ae:ad:53:60:39:c1:bb:a2:a0:03:b4: 0a:69:37:2c:07:99:ae:73:22:77:78:2d:81:3e:ae:41:d4:96: 3c:ed:a5:64:31:41:b4:3e:53:00:3e:22:41:48:f5:ce:23:9f: c9:f5:fd:9c:75:9f:dd:40:77:24:5a:c1:24:8d:15:95:a5:cd: 7e:5d:e2:3f:84:f8:ad:12:79:db:60:f5:ea:65:fb:2b:7c:88: 5e:de:02:01:79:fa:dd:23:07:5c:c7:ed:05:cb:d1:f1:91:f7: 7a:59:d6:72:5c:30:17:7c:e9:85:20:69:76:4a:7d:ff:d3:38: 07:a4:c4:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1OUExMTAvBgNVBAUTKDVDMEQxNzZBODAyQjJFNDU1N0U4ODVBNkMwRUFCNUQw RDA3MEQ3QTcwHhcNMjQwNTMxMDE0MzEzWhcNMjQwNjA3MDE0MzEzWjAYMRYwFAYD VQQDEw02NjU5MmIzMS1mM2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPpj2TkSZgZx++1/wxoZsiX4yhjwAQJQKThvznjlnW0GSgE6NwSy4/dI6TBx F+I11aJgKubtRDbp/84QcJrlas2gO2LeY/wY41EVwBJKDNZTxS/d1EsoQ2tRjJzp Vi8jNlrdeGzXYT0cMH54LOaBQCb2I8yYIRqjm0lTtxbHwsO/3RUX1eoRxFA36FSh gtuvLpUWCWKydWl8CY2yH8UKTkK9KNntANvNZxlMprl7rAh2ww5uZBNol/lbKOUr Ixk/DCBAc8lGn9NOLKidHkdA0kH9rKjpnF2/id5lHfNjApF+STls1/gUNvQ2Q4rj EXkP1ooUxeB9PaZPkcGUt6gHAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxXx1V4 qyEhdQl4oqBb+pWXRPu0MB8GA1UdIwQYMBaAFFwNF2qAKy5FV+iFpsDqtdDQcNen MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTU5QS8yRjhEQ0IwMkMx Q0IxMUVCOTE3NUNFNjZDNEY5QUUwMi9YQTBYYW9BckxrVlg2SVdtd09xMTBOQncx NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBMFhhb0FyTGtWWDZJV213T3ExME5CdzE2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTU5QS8yRjhEQ0IwMkMxQ0IxMUVCOTE3NUNFNjZDNEY5QUUwMi9YQTBYYW9Bckxr Vlg2SVdtd09xMTBOQncxNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNljOkJ64uFBgLUOrvgjWX0g7pDk/N58SVOzTGg/4JEt3424sJ71GZ ND3uG3KzU0Myw7Z0Yd8bC3G5ujTQWKdd1uTJdwlF/iKivj26GPrA+jt8bNE4+8ZL FHBUTgkAve+2Eev+l+cOfKenSnQYQ1YCnclw/2R9CPM8w7oXJo9DeKkw7G4xrq1T YDnBu6KgA7QKaTcsB5mucyJ3eC2BPq5B1JY87aVkMUG0PlMAPiJBSPXOI5/J9f2c dZ/dQHckWsEkjRWVpc1+XeI/hPitEnnbYPXqZfsrfIhe3gIBefrdIwdcx+0Fy9Hx kfd6WdZyXDAXfOmFIGl2Sn3/0zgHpMR2 -----END CERTIFICATE-----Generated at Fri May 31 02:50:43 2024 by rpki-client on console-fra.rpki-client.org