$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft File: XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft (raw, json) Hash identifier: 78wHiwBFd0xbD2/7WhcQdZt0sSyedXHbQyGJtCuP4yQ= Subject key identifier: 07:C4:1F:59:08:21:C1:0D:7E:16:7A:34:86:D2:97:B4:A9:67:1F:1E Authority key identifier: 5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E Certificate issuer: /CN=A9127EAD/serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E Certificate serial: 0733 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft Manifest number: 072E Signing time: Fri 31 May 2024 23:17:53 +0000 Manifest this update: Fri 31 May 2024 23:17:52 +0000 Manifest next update: Fri 07 Jun 2024 23:17:52 +0000 Files and hashes: 1: XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl (hash: Fu9ip1QpkXVwLH3TYueQshRHBDcbBh0kQpZQP3u0Tvs=) 2: 6CAC2064EA2211EA9C2F064AC4F9AE02.roa (hash: XGsG2WppuGsYzRA+dyO/oVLOqUZBMZXNaRvnvpM13Yc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 22:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1843 (0x733) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127EAD/serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E Validity Not Before: May 31 23:17:52 2024 GMT Not After : Jun 7 23:17:52 2024 GMT Subject: CN=665a5aa1-03ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5d:aa:ed:ab:94:0a:08:f8:46:20:26:cc:b6: 84:59:e8:cc:22:7e:5c:1b:cc:fe:0b:75:d1:f8:02: 9e:36:77:f9:0b:16:de:bb:be:ea:9b:1b:a6:f1:76: 81:27:98:2e:f2:5d:c8:18:ea:3f:05:2d:ce:60:ae: bc:ac:0d:98:b9:74:1e:55:86:b8:ce:81:fb:86:1b: 40:fa:0e:70:94:1b:5d:e9:da:93:74:8d:58:79:fe: 8d:f7:71:81:aa:15:6a:72:fc:36:3d:ea:a6:02:45: 7f:e6:d7:56:08:cd:05:c7:9f:d6:32:cd:51:01:40: e5:db:0b:26:34:a3:ba:83:9b:01:4d:b7:20:c2:53: c7:dd:cd:94:d9:8e:0d:34:68:66:fb:30:ad:5b:c0: 70:a2:df:68:6e:08:ac:d0:62:00:6b:b5:a1:02:0b: 3d:84:e7:71:04:73:87:ed:c2:f3:ae:df:ab:85:71: 73:2e:d7:9d:da:f8:41:b6:c2:57:43:82:b4:c4:33: 53:8a:1d:c9:d4:f2:ce:b4:58:ce:66:e4:9c:36:ae: 7a:ed:2d:40:c6:b6:84:65:3d:24:59:5a:77:f9:43: 81:9c:bd:d1:0a:c2:39:8b:75:76:ff:a4:98:2f:fd: 41:08:a9:d3:87:17:37:c1:a3:fb:ba:6d:a1:5b:41: e0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C4:1F:59:08:21:C1:0D:7E:16:7A:34:86:D2:97:B4:A9:67:1F:1E X509v3 Authority Key Identifier: keyid:5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:0e:56:4f:8c:49:32:58:cb:58:19:21:87:03:e0:3b:81:52: 53:e9:26:c4:61:73:17:91:86:ff:6d:7f:78:53:de:96:f0:78: 01:6a:59:ed:a0:dd:7c:b9:59:7b:dc:ce:fa:0b:55:db:2e:37: e2:a9:39:46:88:9c:fd:4f:9f:c2:45:e6:ab:83:13:5d:db:d6: 08:e1:76:02:4b:c3:92:70:50:a8:7b:80:27:f1:df:6a:b9:78: b5:0e:cc:57:14:9d:dd:9f:ae:9b:01:82:b1:21:66:4b:6f:c6: 20:9d:10:d3:fa:eb:be:3a:6b:ff:14:a7:b4:67:c5:69:3b:ff: c9:3e:e0:48:3e:89:18:bd:0d:1f:08:69:cb:62:6d:f5:71:c5: 6b:12:c6:58:b2:08:ad:52:d3:e2:a6:cf:cd:07:36:48:95:4a: 59:20:30:47:e0:03:42:69:fd:4f:f7:f6:46:a9:56:51:d0:c3: 7a:aa:2b:ba:58:5e:6c:8f:88:96:f1:1f:a3:13:65:fc:04:6d: af:d7:a2:57:ee:10:c4:b8:d9:66:22:b9:13:fd:cc:37:e3:31: d0:77:8e:47:aa:90:29:6d:96:17:41:f5:a4:a9:f1:6d:99:85: 52:78:f8:08:88:ff:c5:2b:e6:8c:81:6f:3d:60:f4:75:e9:6c: b7:91:0c:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdFQUQxMTAvBgNVBAUTKDVFODQyNTE2NjU3MDRDRERERjJGM0Y5QkU4MkUzMUZG QjA3NEE1OEUwHhcNMjQwNTMxMjMxNzUyWhcNMjQwNjA3MjMxNzUyWjAYMRYwFAYD VQQDEw02NjVhNWFhMS0wM2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxV2q7auUCgj4RiAmzLaEWejMIn5cG8z+C3XR+AKeNnf5Cxbeu77qmxum8XaB J5gu8l3IGOo/BS3OYK68rA2YuXQeVYa4zoH7hhtA+g5wlBtd6dqTdI1Yef6N93GB qhVqcvw2PeqmAkV/5tdWCM0Fx5/WMs1RAUDl2wsmNKO6g5sBTbcgwlPH3c2U2Y4N NGhm+zCtW8Bwot9obgis0GIAa7WhAgs9hOdxBHOH7cLzrt+rhXFzLted2vhBtsJX Q4K0xDNTih3J1PLOtFjOZuScNq567S1AxraEZT0kWVp3+UOBnL3RCsI5i3V2/6SY L/1BCKnThxc3waP7um2hW0HghQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfEH1kI IcENfhZ6NIbSl7SpZx8eMB8GA1UdIwQYMBaAFF6EJRZlcEzd3y8/m+guMf+wdKWO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0VBRC9FOUI3MDY2NkVB MjAxMUVBOUNCRkFENDhDNEY5QUUwMi9Yb1FsRm1Wd1ROM2ZMei1iNkM0eF83QjBw WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hvUWxGbVZ3VE4zZkx6LWI2QzR4XzdCMHBZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0VBRC9FOUI3MDY2NkVBMjAxMUVBOUNCRkFENDhDNEY5QUUwMi9Yb1FsRm1Wd1RO M2ZMei1iNkM0eF83QjBwWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDfDlZPjEkyWMtYGSGHA+A7gVJT6SbEYXMXkYb/bX94U96W8HgBalnt oN18uVl73M76C1XbLjfiqTlGiJz9T5/CReargxNd29YI4XYCS8OScFCoe4An8d9q uXi1DsxXFJ3dn66bAYKxIWZLb8YgnRDT+uu+Omv/FKe0Z8VpO//JPuBIPokYvQ0f CGnLYm31ccVrEsZYsgitUtPips/NBzZIlUpZIDBH4ANCaf1P9/ZGqVZR0MN6qiu6 WF5sj4iW8R+jE2X8BG2v16JX7hDEuNlmIrkT/cw34zHQd45HqpApbZYXQfWkqfFt mYVSePgIiP/FK+aMgW89YPR16Wy3kQxc -----END CERTIFICATE-----Generated at Fri May 31 23:53:04 2024 by rpki-client on console-fra.rpki-client.org