$ rpki-client -vvf rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft File: XQ11AElW7cyrm4QnGnNA5jhV_4o.mft (raw, json) Hash identifier: FV92o5UUvZDkUY0fZtrFU+wJRhw3eYXV0JNYT85L0ws= Subject key identifier: B9:8A:60:DE:F8:36:DC:3B:6E:6B:F8:95:0E:DE:79:D2:32:CB:10:7E Authority key identifier: 5D:0D:75:00:49:56:ED:CC:AB:9B:84:27:1A:73:40:E6:38:55:FF:8A Certificate issuer: /CN=A912BC39/serialNumber=5D0D75004956EDCCAB9B84271A7340E63855FF8A Certificate serial: 0658 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft Manifest number: 064E Signing time: Sat 18 May 2024 23:39:35 +0000 Manifest this update: Sat 18 May 2024 23:39:34 +0000 Manifest next update: Sat 25 May 2024 23:39:34 +0000 Files and hashes: 1: XQ11AElW7cyrm4QnGnNA5jhV_4o.crl (hash: 1TYLnpRGlzE7MpMWhgvqVrUnA2D1GjEVSLCyk1Is3AI=) 2: 8EBA772E3F2B11EB87759716C4F9AE02.roa (hash: q4TouYnOJK9kw6DthKwE6ddGIfkkP54GXsDvT4D8ffw=) 3: 688EAE1E8A1911EC94921D85C4F9AE02.roa (hash: MTlBKQOvD3H5x3p8f5g16DXDYpM2GkLqkKOyF+T4GdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.crl rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1624 (0x658) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BC39/serialNumber=5D0D75004956EDCCAB9B84271A7340E63855FF8A Validity Not Before: May 18 23:39:34 2024 GMT Not After : May 25 23:39:34 2024 GMT Subject: CN=66493c36-8bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:de:3f:5e:e3:b0:30:b7:d5:d5:e9:fd:e9:69: 6f:49:fd:44:ff:c3:70:58:b8:d8:88:2a:2b:09:df: f8:16:28:08:a8:fd:39:02:32:59:88:15:eb:c8:ee: be:c2:1e:0d:ae:91:bf:0c:72:5f:0d:6b:eb:e5:d2: 42:6c:a6:db:e3:4e:e7:75:e9:01:ca:83:d5:56:c6: 9c:9f:40:c1:ce:8b:17:08:d6:9e:2b:a6:2b:14:8b: b8:8e:ec:d4:ad:ce:7b:52:ce:0e:63:62:1e:08:2f: b3:7f:06:30:61:b9:31:22:1c:59:a5:70:cf:ab:bf: f3:a3:0a:52:df:0c:56:9d:97:4b:62:53:9a:45:c2: fb:90:a7:37:97:d8:e6:45:f9:ad:d9:6b:6b:4d:90: 51:a3:7b:9a:62:1c:12:e1:ec:80:3c:37:c0:78:16: 64:01:0d:cd:c8:32:9e:d9:15:83:11:ed:82:8d:75: b2:e0:7a:e4:48:6c:e2:92:23:9b:87:25:70:09:d9: 63:ef:c5:65:92:9a:88:c5:26:e6:bd:30:80:61:a1: 16:57:37:57:6f:0e:21:c2:9a:22:39:d9:e6:62:4d: 3c:97:90:91:b3:4e:33:bd:45:6d:4c:b6:fd:ac:a7: 04:6f:4d:7c:cd:bd:a6:ce:4e:4c:5d:f5:59:e5:bd: ef:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8A:60:DE:F8:36:DC:3B:6E:6B:F8:95:0E:DE:79:D2:32:CB:10:7E X509v3 Authority Key Identifier: keyid:5D:0D:75:00:49:56:ED:CC:AB:9B:84:27:1A:73:40:E6:38:55:FF:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:de:1b:41:81:8f:67:cd:a9:ea:e1:cf:c4:bc:21:21:33:f2: a4:f4:a1:b0:7d:bb:3f:4f:5e:a9:ed:4d:41:4c:ce:50:65:c4: 80:ea:bf:9b:e8:55:78:6b:e9:31:65:f2:9b:5d:91:72:1b:92: c1:ec:f2:df:a1:95:3c:31:52:11:b2:92:80:62:cc:34:bf:10: 87:f2:3c:7e:76:9d:3a:2d:49:03:e2:3f:cc:c9:87:91:54:51: 71:0b:65:0d:ba:be:f8:21:2a:e2:88:a3:91:ce:ef:45:5c:a3: 6a:25:bd:6e:a1:e1:8f:bc:78:71:db:90:8d:d8:ba:c2:e7:a6: c6:7f:47:f3:27:eb:59:ba:88:9b:5f:8a:d3:64:f3:d2:f9:fe: 25:ab:e3:db:4d:be:94:2b:ef:60:2d:30:d2:e4:32:c0:3f:a9: c9:f3:a1:67:ec:cf:da:a2:dd:10:7f:2e:83:74:d3:17:fe:d2: da:94:81:ec:43:e4:1c:9d:41:a8:fb:52:17:59:ee:05:9b:95: 9e:f0:89:a0:7d:24:08:d9:8c:cd:85:78:ce:b2:37:33:33:ef: 70:36:70:00:f9:fe:4d:11:73:c3:58:f7:40:18:ff:1c:b7:02: 8d:d9:59:d7:87:f2:5c:54:c9:91:f2:3c:67:54:e9:9c:16:56: a4:a7:8b:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJDMzkxMTAvBgNVBAUTKDVEMEQ3NTAwNDk1NkVEQ0NBQjlCODQyNzFBNzM0MEU2 Mzg1NUZGOEEwHhcNMjQwNTE4MjMzOTM0WhcNMjQwNTI1MjMzOTM0WjAYMRYwFAYD VQQDEw02NjQ5M2MzNi04YmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArd4/XuOwMLfV1en96WlvSf1E/8NwWLjYiCorCd/4FigIqP05AjJZiBXryO6+ wh4NrpG/DHJfDWvr5dJCbKbb407ndekByoPVVsacn0DBzosXCNaeK6YrFIu4juzU rc57Us4OY2IeCC+zfwYwYbkxIhxZpXDPq7/zowpS3wxWnZdLYlOaRcL7kKc3l9jm Rfmt2WtrTZBRo3uaYhwS4eyAPDfAeBZkAQ3NyDKe2RWDEe2CjXWy4HrkSGzikiOb hyVwCdlj78VlkpqIxSbmvTCAYaEWVzdXbw4hwpoiOdnmYk08l5CRs04zvUVtTLb9 rKcEb018zb2mzk5MXfVZ5b3vUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmKYN74 Ntw7bmv4lQ7eedIyyxB+MB8GA1UdIwQYMBaAFF0NdQBJVu3Mq5uEJxpzQOY4Vf+K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkMzOS9CMzdCMTU4RTNG MjkxMUVCOUI5QTIzMTRDNEY5QUUwMi9YUTExQUVsVzdjeXJtNFFuR25OQTVqaFZf NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hRMTFBRWxXN2N5cm00UW5Hbk5BNWpoVl80by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkMzOS9CMzdCMTU4RTNGMjkxMUVCOUI5QTIzMTRDNEY5QUUwMi9YUTExQUVsVzdj eXJtNFFuR25OQTVqaFZfNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK3htBgY9nzanq4c/EvCEhM/Kk9KGwfbs/T16p7U1BTM5QZcSA6r+b 6FV4a+kxZfKbXZFyG5LB7PLfoZU8MVIRspKAYsw0vxCH8jx+dp06LUkD4j/MyYeR VFFxC2UNur74ISriiKORzu9FXKNqJb1uoeGPvHhx25CN2LrC56bGf0fzJ+tZuoib X4rTZPPS+f4lq+PbTb6UK+9gLTDS5DLAP6nJ86Fn7M/aot0Qfy6DdNMX/tLalIHs Q+QcnUGo+1IXWe4Fm5We8ImgfSQI2YzNhXjOsjczM+9wNnAA+f5NEXPDWPdAGP8c twKN2VnXh/JcVMmR8jxnVOmcFlakp4vM -----END CERTIFICATE-----Generated at Sun May 19 00:30:13 2024 by rpki-client on console-ams.rpki-client.org