$ rpki-client -vvf rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft File: exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft (raw, json) Hash identifier: WhJsWmGXI0s7oUlqKUjnwRn739O6Fpf87MGUiekJG0g= Subject key identifier: 8E:B1:34:39:0A:B3:A7:4C:8F:64:6A:6A:7A:A2:63:77:86:62:38:D7 Authority key identifier: 7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C Certificate issuer: /CN=A912D937/serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft Manifest number: 012D Signing time: Sun 19 May 2024 05:04:04 +0000 Manifest this update: Sun 19 May 2024 05:04:04 +0000 Manifest next update: Sun 26 May 2024 05:04:04 +0000 Files and hashes: 1: exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl (hash: Q/yalfGDCJyFbekUHXELrUNPLut9HEH0mOuPiIp6M+c=) 2: D9A5C1BA4DFE11EDBF00BA6BC4F9AE02.roa (hash: tBxHDkOiB4//dJ9enHkPFOOnK+Domc0l/7++tuCkRRU=) 3: 35D174F2C7DF11EDAEC8CE40C4F9AE02.roa (hash: 8rmuQFK/HZ01WV/MLgIzaxs/EppRRtGqthEeXW1wS60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D937/serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C Validity Not Before: May 19 05:04:04 2024 GMT Not After : May 26 05:04:04 2024 GMT Subject: CN=66498844-bb60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:26:a4:c0:7c:64:94:80:17:5a:ae:1f:17:2e: c7:18:2f:ca:72:d1:7f:1a:4b:04:ab:df:0a:22:12: a7:d3:96:ca:66:71:e1:1d:45:c1:51:1b:00:91:f8: 0e:4b:48:d4:b1:bc:a2:77:5a:ee:42:bb:bf:d9:47: 38:3e:4e:a3:1b:61:e7:4a:51:6b:c9:37:b9:4b:78: 9a:10:3d:ba:c0:a6:a1:f5:cb:83:32:1b:aa:ab:2c: 58:53:94:f7:33:d1:8d:d5:27:e2:99:67:e5:7b:a2: 20:06:7b:b4:74:11:53:55:03:51:05:c3:83:b6:43: ad:27:9c:d6:8b:07:eb:bd:c9:c1:76:9c:0f:5c:9c: 0c:b3:c9:5f:b1:b4:b1:bc:a0:5f:db:36:d9:29:cc: 37:1f:d1:1c:83:ea:af:14:c1:16:6e:13:e9:80:a5: f9:e0:cc:de:25:5a:ba:2a:21:1b:8b:f3:4f:e8:8f: 05:1c:45:31:80:fc:07:87:7e:7b:67:21:7d:94:af: d9:9a:ed:7e:d7:9b:f9:2d:3b:6c:b9:1f:b8:17:41: 2b:b8:fc:22:b2:a2:80:39:93:19:e4:63:a9:7a:04: 02:ac:d3:19:80:90:d9:0d:9f:c9:32:67:39:ec:9f: 3f:42:73:4d:c5:aa:e6:03:21:0e:11:9e:ca:41:0c: 4c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B1:34:39:0A:B3:A7:4C:8F:64:6A:6A:7A:A2:63:77:86:62:38:D7 X509v3 Authority Key Identifier: keyid:7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:ad:79:16:82:8f:46:93:65:b5:b3:54:4f:68:29:c6:22:13: 8e:97:64:3d:cf:66:b6:54:2e:09:2c:89:ea:2b:f3:12:9b:da: e3:d7:35:d1:c7:ca:e5:4e:11:59:7b:05:ba:dc:ba:7d:44:34: f6:ce:12:5d:7d:47:70:d7:c6:15:88:84:d4:04:0d:c7:0c:95: a6:6e:f4:d8:70:32:5a:98:e1:fe:7f:fe:34:be:2a:ec:be:67: eb:6f:2b:09:f8:ab:a9:e0:4a:6c:44:b3:93:37:17:0f:e8:d3: 06:b7:18:90:e0:69:2c:44:f1:15:6c:e8:33:3d:40:40:bf:2a: 90:ed:96:34:ac:01:94:d7:e9:de:c2:bc:8d:ed:9d:78:03:17: f9:8b:ad:53:56:c8:52:3f:95:e5:12:fe:35:33:69:df:f7:fe: 0d:86:9f:40:2c:47:28:b0:06:15:89:9b:d3:a6:ec:c8:06:06: 42:1f:ef:03:af:68:e7:8c:b7:86:7a:b7:0f:e9:4b:a1:77:b4: be:46:fc:4f:19:d4:a5:6f:8e:ba:c5:ae:c4:04:57:2c:2a:4b: e2:06:d1:67:4c:9a:57:6b:10:06:aa:3f:89:9c:9d:4e:d5:f0: a5:8d:25:a6:9e:95:f2:2d:d1:3f:1e:f8:cf:cd:2c:82:b3:ee: 6e:3d:2c:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ5MzcxMTAvBgNVBAUTKDdCMUM2RTJGNDQyRDJEMERERUZBNDk5NDAyODBDMkQ3 MEVGMkIxNEMwHhcNMjQwNTE5MDUwNDA0WhcNMjQwNTI2MDUwNDA0WjAYMRYwFAYD VQQDEw02NjQ5ODg0NC1iYjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3iakwHxklIAXWq4fFy7HGC/KctF/GksEq98KIhKn05bKZnHhHUXBURsAkfgO S0jUsbyid1ruQru/2Uc4Pk6jG2HnSlFryTe5S3iaED26wKah9cuDMhuqqyxYU5T3 M9GN1SfimWfle6IgBnu0dBFTVQNRBcODtkOtJ5zWiwfrvcnBdpwPXJwMs8lfsbSx vKBf2zbZKcw3H9Ecg+qvFMEWbhPpgKX54MzeJVq6KiEbi/NP6I8FHEUxgPwHh357 ZyF9lK/Zmu1+15v5LTtsuR+4F0EruPwisqKAOZMZ5GOpegQCrNMZgJDZDZ/JMmc5 7J8/QnNNxarmAyEOEZ7KQQxMXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6xNDkK s6dMj2RqanqiY3eGYjjXMB8GA1UdIwQYMBaAFHscbi9ELS0N3vpJlAKAwtcO8rFM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDkzNy9CRjJEQUI2QTRE RkMxMUVEOTRCRDY2NkJDNEY5QUUwMi9leHh1TDBRdExRM2Uta21VQW9EQzF3N3lz VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4eHVMMFF0TFEzZS1rbVVBb0RDMXc3eXNVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDkzNy9CRjJEQUI2QTRERkMxMUVEOTRCRDY2NkJDNEY5QUUwMi9leHh1TDBRdExR M2Uta21VQW9EQzF3N3lzVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFrXkWgo9Gk2W1s1RPaCnGIhOOl2Q9z2a2VC4JLInqK/MSm9rj1zXR x8rlThFZewW63Lp9RDT2zhJdfUdw18YViITUBA3HDJWmbvTYcDJamOH+f/40virs vmfrbysJ+Kup4EpsRLOTNxcP6NMGtxiQ4GksRPEVbOgzPUBAvyqQ7ZY0rAGU1+ne wryN7Z14Axf5i61TVshSP5XlEv41M2nf9/4Nhp9ALEcosAYViZvTpuzIBgZCH+8D r2jnjLeGercP6Uuhd7S+RvxPGdSlb466xa7EBFcsKkviBtFnTJpXaxAGqj+JnJ1O 1fCljSWmnpXyLdE/HvjPzSyCs+5uPSwU -----END CERTIFICATE-----Generated at Sun May 19 06:14:33 2024 by rpki-client on console-ams.rpki-client.org