$ rpki-client -vvf rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft File: Xx0w6XO1wcioD2BH3FKXeJQETD8.mft (raw, json) Hash identifier: NpJrDDm5GeWf6o+vf3wSuTMHgD6fO7W51hkVTacHMLk= Subject key identifier: 6F:91:AB:D3:78:EB:72:CD:6F:51:A6:EE:A2:A5:EC:B8:19:B1:56:03 Authority key identifier: 5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F Certificate issuer: /CN=A9122E09/serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Certificate serial: 06CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft Manifest number: 06C5 Signing time: Sat 18 May 2024 23:02:43 +0000 Manifest this update: Sat 18 May 2024 23:02:43 +0000 Manifest next update: Sat 25 May 2024 23:02:43 +0000 Files and hashes: 1: Xx0w6XO1wcioD2BH3FKXeJQETD8.crl (hash: Se0ZhSql2RYc+XYR0HXRbw8uL58FKRZas4OqRwgaCX8=) 2: BE35EDD80CCA11EF9AEDB96EC4F9AE02.roa (hash: E5jmKJdzQgxUHrtv1Oip5ICxqlkKjRkxmhBGJa6Wy3U=) 3: 0226D57A0CCB11EF8AE6276FC4F9AE02.roa (hash: NRgjOB61REqnsBz8yKZLdAxMTU+2Lv3IXI/z4BOJUuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1739 (0x6cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122E09/serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Validity Not Before: May 18 23:02:43 2024 GMT Not After : May 25 23:02:43 2024 GMT Subject: CN=66493393-b262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ec:a9:95:fb:1f:7d:c3:de:83:a2:d8:78:68: b4:1e:ba:78:c3:c4:c2:c6:28:fa:0d:f1:d3:7d:67: a9:29:a0:df:91:7a:0c:29:ee:1e:8f:c8:15:92:19: 68:b6:35:3b:61:36:e2:eb:51:a3:5a:32:b8:94:0e: a1:d9:74:e1:e3:72:0f:98:39:1f:07:e9:e4:55:2a: 73:06:2a:e3:a5:f2:eb:96:27:df:db:c2:e0:f5:bb: 9d:a0:5e:cd:05:ab:47:43:49:de:c7:85:e3:d0:e3: e0:91:ec:ee:47:59:9d:88:fd:3b:41:51:fd:d0:15: ca:38:3a:7e:5e:12:16:2c:93:fe:7b:0f:99:23:91: d8:1e:c7:fe:31:c6:75:18:4e:6e:f3:38:9e:aa:39: 69:e2:c8:c9:57:fc:bc:c4:06:c7:25:d4:28:e7:f5: 59:94:d7:c0:87:d3:6a:b6:78:40:04:da:2c:78:c1: cd:d0:2c:2b:3b:4a:49:de:be:f0:0a:a9:b0:fd:db: ec:a0:34:df:11:32:87:89:b0:9f:9d:3d:68:38:b4: 87:7d:1f:62:a5:70:e4:c1:cf:bd:cb:72:a6:9a:d3: 7c:58:19:52:e1:a8:92:47:05:32:e4:96:0f:67:be: cf:95:d4:a1:bc:be:21:4d:08:d2:03:ad:b4:dc:03: af:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:91:AB:D3:78:EB:72:CD:6F:51:A6:EE:A2:A5:EC:B8:19:B1:56:03 X509v3 Authority Key Identifier: keyid:5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:20:b1:e5:4c:bb:c6:af:0d:9c:bf:ec:2e:ed:e9:e7:1b:f2: 9a:78:6f:03:ae:70:55:98:24:ff:4d:48:fb:95:bd:7f:0d:d2: d1:a9:72:98:bd:4d:e8:81:7a:bb:23:43:39:c5:44:32:b9:d8: aa:8d:f0:cc:34:f2:0b:6c:f0:56:fd:c3:7e:43:a5:8f:d1:11: 23:a8:c6:b9:e4:ea:10:c4:1c:ac:f1:f6:68:5f:9c:8a:ad:ae: c2:b7:6c:df:ec:ba:2f:ed:7a:a7:a5:2a:55:6b:d0:73:6c:77: a4:c4:06:0e:31:1d:b0:72:c1:02:94:e4:69:1d:ec:bc:3b:3b: 82:c0:78:e0:a5:76:55:28:3a:2f:d8:e8:02:dd:0a:86:03:68: 98:d2:2f:ab:9f:83:6a:e3:d9:52:a7:fd:de:5a:95:9c:8c:5e: 77:7a:9a:cd:09:75:24:ea:8c:ff:27:04:17:3d:70:85:e4:b3: cd:da:1d:c1:d6:49:d8:52:1e:cf:f0:e8:46:ea:5a:a0:8d:ef: 69:59:42:41:78:42:8b:e2:eb:49:e3:b6:29:5a:8a:08:14:ac: 2d:c2:5c:65:44:db:42:7b:10:9d:28:cd:b2:f5:42:9b:0e:c0: 5b:65:99:6f:e1:9f:e9:b4:e3:9f:14:67:77:c1:ac:25:1b:6e: 1f:7c:54:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFMDkxMTAvBgNVBAUTKDVGMUQzMEU5NzNCNUMxQzhBODBGNjA0N0RDNTI5Nzc4 OTQwNDRDM0YwHhcNMjQwNTE4MjMwMjQzWhcNMjQwNTI1MjMwMjQzWjAYMRYwFAYD VQQDEw02NjQ5MzM5My1iMjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3uyplfsffcPeg6LYeGi0Hrp4w8TCxij6DfHTfWepKaDfkXoMKe4ej8gVkhlo tjU7YTbi61GjWjK4lA6h2XTh43IPmDkfB+nkVSpzBirjpfLrliff28Lg9budoF7N BatHQ0nex4Xj0OPgkezuR1mdiP07QVH90BXKODp+XhIWLJP+ew+ZI5HYHsf+McZ1 GE5u8zieqjlp4sjJV/y8xAbHJdQo5/VZlNfAh9NqtnhABNoseMHN0CwrO0pJ3r7w Cqmw/dvsoDTfETKHibCfnT1oOLSHfR9ipXDkwc+9y3KmmtN8WBlS4aiSRwUy5JYP Z77PldShvL4hTQjSA6203AOvTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+Rq9N4 63LNb1Gm7qKl7LgZsVYDMB8GA1UdIwQYMBaAFF8dMOlztcHIqA9gR9xSl3iUBEw/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkUwOS8wMUE1ODM3QTBG NjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdjaW9EMkJIM0ZLWGVKUUVU RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h4MHc2WE8xd2Npb0QyQkgzRktYZUpRRVREOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkUwOS8wMUE1ODM3QTBGNjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdj aW9EMkJIM0ZLWGVKUUVURDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPILHlTLvGrw2cv+wu7ennG/KaeG8DrnBVmCT/TUj7lb1/DdLRqXKY vU3ogXq7I0M5xUQyudiqjfDMNPILbPBW/cN+Q6WP0REjqMa55OoQxBys8fZoX5yK ra7Ct2zf7Lov7XqnpSpVa9BzbHekxAYOMR2wcsEClORpHey8OzuCwHjgpXZVKDov 2OgC3QqGA2iY0i+rn4Nq49lSp/3eWpWcjF53eprNCXUk6oz/JwQXPXCF5LPN2h3B 1knYUh7P8OhG6lqgje9pWUJBeEKL4utJ47YpWooIFKwtwlxlRNtCexCdKM2y9UKb DsBbZZlv4Z/ptOOfFGd3wawlG24ffFQQ -----END CERTIFICATE-----Generated at Sun May 19 00:16:12 2024 by rpki-client on console-fra.rpki-client.org