$ rpki-client -vvf rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.mft File: xem-kywNTgcfsYgsriUoEEdzKVA.mft (raw, json) Hash identifier: rz1lOw0ByWzw0Tm/gDZSPpL5FR+l94Ifgu0slH0Q6k8= Subject key identifier: 0C:DA:6D:C7:F2:79:56:66:BD:B8:F3:56:8A:AE:C9:B9:0B:B4:D1:5D Authority key identifier: C5:E9:BE:93:2C:0D:4E:07:1F:B1:88:2C:AE:25:28:10:47:73:29:50 Certificate issuer: /CN=A9121AB0/serialNumber=C5E9BE932C0D4E071FB1882CAE25281047732950 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xem-kywNTgcfsYgsriUoEEdzKVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.mft Manifest number: 012A Signing time: Sat 01 Jun 2024 06:23:07 +0000 Manifest this update: Sat 01 Jun 2024 06:23:06 +0000 Manifest next update: Sat 08 Jun 2024 06:23:06 +0000 Files and hashes: 1: xem-kywNTgcfsYgsriUoEEdzKVA.crl (hash: uY/xESlDp+w994a3wBGk3ZG1lpVW4H59ZMYljkBW4fA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.crl rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xem-kywNTgcfsYgsriUoEEdzKVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 05:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121AB0/serialNumber=C5E9BE932C0D4E071FB1882CAE25281047732950 Validity Not Before: Jun 1 06:23:06 2024 GMT Not After : Jun 8 06:23:06 2024 GMT Subject: CN=665abe4b-0d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:67:ec:fb:08:de:bf:f9:c2:10:5e:44:61:f4: 4f:e9:cc:df:54:91:0a:6e:fb:4e:fc:10:b2:8d:f8: 7e:ce:6e:da:cd:03:bb:20:eb:96:80:d6:be:32:bd: 40:76:68:51:51:12:7a:0d:6d:cd:19:ab:26:a7:6c: a1:ff:a0:68:30:52:f5:06:dc:58:fb:de:12:d2:3c: 81:6f:25:95:54:17:c8:5f:b4:3d:86:9c:6a:be:0a: 04:8e:37:fb:a2:10:4f:2a:2b:68:0e:8b:c8:1f:32: 04:23:c8:de:19:dc:f3:e4:d3:c7:6e:ba:be:81:9c: 6f:df:33:38:6e:b7:ed:3b:52:b7:58:a9:48:0f:19: e3:10:23:07:49:c4:b2:0a:fb:1e:84:fc:07:85:ec: b7:19:5e:b9:01:d1:04:e2:2a:b3:5c:25:74:1a:2e: ab:61:e4:94:1a:7d:99:c6:6f:03:9f:92:2a:82:5c: f3:94:e2:ef:f2:76:8c:29:af:65:bf:0b:65:be:31: 3e:70:42:ca:a1:96:56:0f:6a:ef:a4:18:f9:2e:b6: a3:64:66:af:83:a2:e5:d1:81:66:04:c4:ce:b5:b4: 5a:0f:fa:71:50:01:56:2c:ed:d0:69:ee:99:a9:e4: 4e:d2:4b:d1:8e:ba:17:1f:3d:0e:4f:27:c6:09:d3: b9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:DA:6D:C7:F2:79:56:66:BD:B8:F3:56:8A:AE:C9:B9:0B:B4:D1:5D X509v3 Authority Key Identifier: keyid:C5:E9:BE:93:2C:0D:4E:07:1F:B1:88:2C:AE:25:28:10:47:73:29:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xem-kywNTgcfsYgsriUoEEdzKVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:6a:94:9c:04:98:c8:56:06:54:ff:e9:a3:c2:6c:8b:7e:17: 9e:16:03:0f:cc:02:46:f5:00:5a:5a:fa:12:f6:69:8e:6f:0b: c5:51:b8:ec:0c:e5:15:40:f0:a3:66:ea:cf:c5:81:d6:1c:12: 84:2d:a8:d7:e1:e8:1a:04:05:cb:ea:d6:2d:6c:16:44:e5:c6: da:14:3b:5b:ce:0b:71:42:3f:90:28:73:59:fd:8e:af:f8:40: 8c:c7:62:94:03:77:b0:46:e3:b5:d4:a6:d0:d1:1d:ab:82:44: eb:5a:30:67:dd:6f:9c:4e:54:b4:ce:e8:b5:60:fc:8f:09:e8: b0:72:9f:02:a3:ef:4c:69:6c:55:76:09:1f:93:d6:a3:a7:70: 60:06:73:fb:db:f3:71:30:41:76:87:45:34:f8:6c:db:f1:25: 7c:e2:be:18:2e:fc:4b:c4:e1:7c:3b:82:db:b0:04:37:57:9c: a5:86:e5:0e:ff:70:98:0c:46:60:44:e3:4a:7e:d4:8b:53:6e: 97:b9:68:fb:5e:5f:c1:33:ce:d7:1c:0c:eb:a3:e8:a5:c6:d7: 6a:f7:f1:f6:57:31:f2:df:46:81:74:66:37:de:62:c8:8b:4e: af:2b:f2:c7:df:35:e9:b8:b7:a1:f6:07:c0:63:85:fa:63:f3: 73:f2:5c:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFBQjAxMTAvBgNVBAUTKEM1RTlCRTkzMkMwRDRFMDcxRkIxODgyQ0FFMjUyODEw NDc3MzI5NTAwHhcNMjQwNjAxMDYyMzA2WhcNMjQwNjA4MDYyMzA2WjAYMRYwFAYD VQQDEw02NjVhYmU0Yi0wZDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApGfs+wjev/nCEF5EYfRP6czfVJEKbvtO/BCyjfh+zm7azQO7IOuWgNa+Mr1A dmhRURJ6DW3NGasmp2yh/6BoMFL1BtxY+94S0jyBbyWVVBfIX7Q9hpxqvgoEjjf7 ohBPKitoDovIHzIEI8jeGdzz5NPHbrq+gZxv3zM4brftO1K3WKlIDxnjECMHScSy CvsehPwHhey3GV65AdEE4iqzXCV0Gi6rYeSUGn2Zxm8Dn5IqglzzlOLv8naMKa9l vwtlvjE+cELKoZZWD2rvpBj5LrajZGavg6Ll0YFmBMTOtbRaD/pxUAFWLO3Qae6Z qeRO0kvRjroXHz0OTyfGCdO5AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzabcfy eVZmvbjzVoquybkLtNFdMB8GA1UdIwQYMBaAFMXpvpMsDU4HH7GILK4lKBBHcylQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUFCMC8xRkY4ODgzMjVD QkUxMUVEQjFGMEMwNENDNEY5QUUwMi94ZW0ta3l3TlRnY2ZzWWdzcmlVb0VFZHpL VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hlbS1reXdOVGdjZnNZZ3NyaVVvRUVkektWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUFCMC8xRkY4ODgzMjVDQkUxMUVEQjFGMEMwNENDNEY5QUUwMi94ZW0ta3l3TlRn Y2ZzWWdzcmlVb0VFZHpLVkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWapScBJjIVgZU/+mjwmyLfheeFgMPzAJG9QBaWvoS9mmObwvFUbjs DOUVQPCjZurPxYHWHBKELajX4egaBAXL6tYtbBZE5cbaFDtbzgtxQj+QKHNZ/Y6v +ECMx2KUA3ewRuO11KbQ0R2rgkTrWjBn3W+cTlS0zui1YPyPCeiwcp8Co+9MaWxV dgkfk9ajp3BgBnP72/NxMEF2h0U0+Gzb8SV84r4YLvxLxOF8O4LbsAQ3V5ylhuUO /3CYDEZgRONKftSLU26XuWj7Xl/BM87XHAzro+ilxtdq9/H2VzHy30aBdGY33mLI i06vK/LH3zXpuLeh9gfAY4X6Y/Nz8lxY -----END CERTIFICATE-----Generated at Sat Jun 1 07:09:18 2024 by rpki-client on console-fra.rpki-client.org