$ rpki-client -vvf rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft File: xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft (raw, json) Hash identifier: 6raIwsnT8daXMKCwIgywFK8VfuBq4/zKKcaHc2vwQ+Y= Subject key identifier: 98:3D:F0:8D:29:11:ED:30:7F:2D:3E:9D:74:66:44:5C:8F:10:44:A9 Authority key identifier: C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C Certificate issuer: /CN=A9127342/serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C Certificate serial: 2255 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft Manifest number: 223E Signing time: Fri 31 May 2024 16:21:29 +0000 Manifest this update: Fri 31 May 2024 16:21:29 +0000 Manifest next update: Fri 07 Jun 2024 16:21:29 +0000 Files and hashes: 1: xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl (hash: lLl92AT8C9yjxIY2q80vrSQu2La1Ub5bTEV9xgLDbpE=) 2: DA37C95AB14511E5B83D2120C4F9AE02.roa (hash: cZn5O6pwF59j4Vw66uQCp/27di7yfzcFOwcEYvP1wx8=) 3: CBF9AD5449E811E6BAF4525DC4F9AE02.roa (hash: f4EKOmeKepAiODou+eN9xy2W8k6h11p1CV/RVot3uC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 16:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8789 (0x2255) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127342/serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C Validity Not Before: May 31 16:21:29 2024 GMT Not After : Jun 7 16:21:29 2024 GMT Subject: CN=6659f909-565e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e9:fc:52:1f:28:b1:ea:ba:38:7c:7e:af:79: 17:c8:58:44:1d:1c:08:66:98:9a:9e:06:d7:b7:57: ce:ad:ff:2f:76:ac:33:c1:fa:49:94:d0:6c:b4:24: 85:c4:a9:8f:54:86:02:da:ad:e3:92:d8:e6:b9:7a: a0:61:1a:7b:3c:c8:d4:6b:23:e1:9c:96:14:fb:ab: 28:89:c6:34:bb:ea:12:92:65:67:4f:fa:a7:79:05: df:d5:5f:25:64:6a:c7:2c:76:d8:1e:71:be:81:46: 8c:86:15:98:07:51:c6:3b:6a:d2:a1:93:a6:3c:26: 60:e9:11:f5:19:8a:c2:ee:5f:31:a6:b4:d6:eb:e9: 4e:b4:4d:0e:94:84:ab:58:9b:b0:1e:24:9d:ac:be: c0:ef:42:99:fe:9d:a4:b4:a5:ca:d3:a0:68:b2:68: 1d:ba:e7:cb:fc:12:8c:b5:69:74:47:76:3d:f8:ae: 84:b6:0a:c5:bc:cc:00:37:6a:24:9f:ec:b2:3c:30: 58:59:93:a8:47:c3:8e:30:22:bd:37:ae:3e:b6:11: c6:3a:d7:37:80:1a:d8:b5:6b:35:a2:e8:05:1c:b7: 86:16:b7:4c:c8:92:68:13:42:11:10:f4:f4:8a:bf: 36:62:9d:f7:fb:dd:4e:39:ff:e2:39:65:4f:7a:17: e0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3D:F0:8D:29:11:ED:30:7F:2D:3E:9D:74:66:44:5C:8F:10:44:A9 X509v3 Authority Key Identifier: keyid:C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:cf:d4:2d:55:5b:98:08:3c:dc:7a:71:02:fa:62:4a:b5:19: 90:ca:de:60:e9:b4:19:db:52:81:26:39:ad:bf:06:d3:39:bc: 1d:6b:3f:11:12:75:92:bb:55:76:5f:0c:2f:42:4e:15:e2:9c: be:47:3e:43:62:eb:68:e1:d5:6e:ba:cb:39:f0:cb:43:ac:69: 07:8f:c9:0c:e4:eb:74:1b:df:48:1d:22:01:66:da:78:a6:69: f3:6e:b1:60:7e:b7:0a:bc:f0:1f:bf:e0:a5:a4:d5:6d:40:e8: 37:74:9b:69:c4:ec:3c:1c:42:0b:d1:c0:cc:d7:89:1f:51:a7: eb:eb:13:d1:db:1a:48:1c:41:45:9f:77:09:4e:2f:77:b8:99: cf:54:cc:98:4c:e2:49:11:43:86:8c:2e:e8:ca:5e:b2:d7:e6: c7:d6:04:a9:32:fe:e9:1c:2c:62:16:13:8c:8c:ed:3f:42:e0: e1:ef:b7:83:df:c5:7e:11:47:87:02:e7:87:4e:c4:81:57:62: 03:03:d0:03:c8:45:e6:65:db:d7:e4:55:b0:47:6f:ae:c1:cf: 6b:26:14:a0:07:ab:42:fd:13:3c:3a:9d:c7:56:17:73:46:2d: ca:18:4c:ff:48:ac:83:bd:88:d9:7a:91:ed:bc:1f:ba:24:fc: 04:b3:62:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczNDIxMTAvBgNVBAUTKEM0OTY2M0Q5NkJDOTMyRDc0Mzg0MEJDNjdGRDg3QkY4 RTAxNTQ2N0MwHhcNMjQwNTMxMTYyMTI5WhcNMjQwNjA3MTYyMTI5WjAYMRYwFAYD VQQDEw02NjU5ZjkwOS01NjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+n8Uh8oseq6OHx+r3kXyFhEHRwIZpiangbXt1fOrf8vdqwzwfpJlNBstCSF xKmPVIYC2q3jktjmuXqgYRp7PMjUayPhnJYU+6soicY0u+oSkmVnT/qneQXf1V8l ZGrHLHbYHnG+gUaMhhWYB1HGO2rSoZOmPCZg6RH1GYrC7l8xprTW6+lOtE0OlISr WJuwHiSdrL7A70KZ/p2ktKXK06BosmgduufL/BKMtWl0R3Y9+K6EtgrFvMwAN2ok n+yyPDBYWZOoR8OOMCK9N64+thHGOtc3gBrYtWs1ougFHLeGFrdMyJJoE0IREPT0 ir82Yp33+91OOf/iOWVPehfgWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJg98I0p Ee0wfy0+nXRmRFyPEESpMB8GA1UdIwQYMBaAFMSWY9lryTLXQ4QLxn/Ye/jgFUZ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzM0Mi82RERCQzdGQzkz MjcxMUU1QTgxRjMwM0VDNEY5QUUwMi94SlpqMld2Sk10ZERoQXZHZjloNy1PQVZS bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hKWmoyV3ZKTXRkRGhBdkdmOWg3LU9BVlJudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzM0Mi82RERCQzdGQzkzMjcxMUU1QTgxRjMwM0VDNEY5QUUwMi94SlpqMld2Sk10 ZERoQXZHZjloNy1PQVZSbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPz9QtVVuYCDzcenEC+mJKtRmQyt5g6bQZ21KBJjmtvwbTObwdaz8R EnWSu1V2XwwvQk4V4py+Rz5DYuto4dVuuss58MtDrGkHj8kM5Ot0G99IHSIBZtp4 pmnzbrFgfrcKvPAfv+ClpNVtQOg3dJtpxOw8HEIL0cDM14kfUafr6xPR2xpIHEFF n3cJTi93uJnPVMyYTOJJEUOGjC7oyl6y1+bH1gSpMv7pHCxiFhOMjO0/QuDh77eD 38V+EUeHAueHTsSBV2IDA9ADyEXmZdvX5FWwR2+uwc9rJhSgB6tC/RM8Op3HVhdz Ri3KGEz/SKyDvYjZepHtvB+6JPwEs2Ii -----END CERTIFICATE-----Generated at Fri May 31 20:33:59 2024 by rpki-client on console-ams.rpki-client.org