$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft File: I_XZOoLn14QGebHGTaN8N8_-d-8.mft (raw, json) Hash identifier: NqulbFK2/oIChM9rqw95QwLy+0a8qp0qcoQr2UIg15I= Subject key identifier: 74:5A:45:64:FE:1A:B3:26:72:B2:4C:CE:2E:27:E8:51:BD:76:D9:6E Authority key identifier: 23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF Certificate issuer: /CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Certificate serial: 0599 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft Manifest number: 0567 Signing time: Sun 19 May 2024 00:59:54 +0000 Manifest this update: Sun 19 May 2024 00:59:53 +0000 Manifest next update: Sun 26 May 2024 00:59:53 +0000 Files and hashes: 1: I_XZOoLn14QGebHGTaN8N8_-d-8.crl (hash: UJFcbeDVyt62gxMc9Advk/+Q/iFqEz7wMMlNdCghw7I=) 2: B4B1A742BE4C11EEB1327A54C4F9AE02.roa (hash: wKLWNuRTWdHZ+FYW6NBJf7517//f9bbqxj5BE5RLIbI=) 3: B3E4DCF8BE4C11EEB1327A54C4F9AE02.roa (hash: oYXJQm/bjAibaz8nsXjKJt8mNmtyiHFVv07p/FS+Uv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1433 (0x599) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Validity Not Before: May 19 00:59:53 2024 GMT Not After : May 26 00:59:53 2024 GMT Subject: CN=66494f0a-4a9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:90:5b:02:17:ce:5e:e4:68:09:e8:f6:82:a2: 32:09:9c:42:e7:32:da:e9:41:96:03:c4:cb:2c:de: 1a:14:18:ab:90:20:04:69:94:e2:d3:4e:11:4b:bd: da:bd:1d:c1:60:62:25:79:1e:c0:7c:68:c0:83:ed: ac:bf:a8:3d:83:22:66:ac:31:56:8f:89:4a:b6:ca: a7:e8:80:4b:66:aa:9e:16:9e:c0:1a:2b:b4:80:1a: 43:e0:88:75:90:2c:c8:79:36:26:2d:f1:b2:76:78: 97:a9:60:56:45:ee:b5:bd:d6:f5:d4:7d:7d:d8:dc: cb:e0:2b:48:c9:9e:3d:be:10:d7:8d:74:ea:4b:de: 1f:cb:5d:5e:dc:83:9b:32:85:66:49:5e:73:6e:b9: e0:51:d2:e1:d8:6a:74:c1:d7:dd:28:b5:48:cc:51: 84:d8:87:ea:f5:43:c1:ed:01:6b:38:83:46:af:bf: 85:80:4c:f2:95:80:f7:c9:e3:5c:c6:9d:df:9d:42: 57:bc:05:cc:7b:e8:23:96:93:bc:00:cf:71:44:cb: ff:ab:f8:99:a9:2a:49:41:27:ba:88:c2:7f:6d:64: 17:a4:4a:83:12:eb:c8:86:5e:a8:9c:2f:c9:5b:2e: ba:d5:fb:a9:9e:4f:56:7e:dc:bf:69:3e:27:1f:57: 10:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:5A:45:64:FE:1A:B3:26:72:B2:4C:CE:2E:27:E8:51:BD:76:D9:6E X509v3 Authority Key Identifier: keyid:23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:c3:83:ec:23:62:58:96:02:8f:49:ec:68:13:34:e6:e2:49: 80:85:2d:dd:a0:64:dc:a1:1a:67:20:15:2d:83:37:43:e0:e3: 2d:72:f4:4d:3f:e9:7a:89:bb:fd:c6:17:f2:f7:ab:da:1a:94: d8:2d:3e:df:3b:17:2a:9b:0f:7b:2a:3c:b9:4b:ba:0f:99:07: ab:d0:9f:e0:25:16:4f:b8:9f:14:ed:54:23:de:48:ef:2a:ee: 01:78:3a:dc:6b:1c:d3:c9:84:52:b6:25:46:4d:4c:3e:d2:01: 94:9e:ff:bf:5e:7e:3a:c2:a3:fb:dc:b0:ba:41:34:7a:ae:79: f3:00:ce:2e:98:59:25:f0:b0:53:d6:55:a2:99:24:bb:60:c2: 42:98:d2:38:5f:cc:4c:e7:b1:7c:4b:dd:4a:81:bd:7d:3d:7a: 17:c9:77:80:52:98:a5:c9:b5:bc:c8:49:6a:44:6e:d6:1e:94: 4a:cf:f7:e5:b3:7b:40:c1:f5:ad:bb:85:d4:0d:75:cf:9c:c7: 79:ff:f1:6c:63:a2:72:b3:4f:49:8b:68:86:15:99:b5:8a:93: 67:83:c6:46:92:89:98:a3:5e:27:66:9b:79:b3:14:9b:50:9c: 60:61:af:c8:9e:e0:95:26:82:0d:74:25:49:1d:32:db:26:c9: 0b:cf:13:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCNEQxMTAvBgNVBAUTKDIzRjVEOTNBODJFN0Q3ODQwNjc5QjFDNjREQTM3QzM3 Q0ZGRTc3RUYwHhcNMjQwNTE5MDA1OTUzWhcNMjQwNTI2MDA1OTUzWjAYMRYwFAYD VQQDEw02NjQ5NGYwYS00YTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZBbAhfOXuRoCej2gqIyCZxC5zLa6UGWA8TLLN4aFBirkCAEaZTi004RS73a vR3BYGIleR7AfGjAg+2sv6g9gyJmrDFWj4lKtsqn6IBLZqqeFp7AGiu0gBpD4Ih1 kCzIeTYmLfGydniXqWBWRe61vdb11H192NzL4CtIyZ49vhDXjXTqS94fy11e3IOb MoVmSV5zbrngUdLh2Gp0wdfdKLVIzFGE2Ifq9UPB7QFrOINGr7+FgEzylYD3yeNc xp3fnUJXvAXMe+gjlpO8AM9xRMv/q/iZqSpJQSe6iMJ/bWQXpEqDEuvIhl6onC/J Wy661fupnk9Wfty/aT4nH1cQKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHRaRWT+ GrMmcrJMzi4n6FG9dtluMB8GA1UdIwQYMBaAFCP12TqC59eEBnmxxk2jfDfP/nfv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkI0RC9DMTk5RTAwNkIy MDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0UUdlYkhHVGFOOE44Xy1k LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lfWFpPb0xuMTRRR2ViSEdUYU44TjhfLWQtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkI0RC9DMTk5RTAwNkIyMDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0 UUdlYkhHVGFOOE44Xy1kLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAw4PsI2JYlgKPSexoEzTm4kmAhS3doGTcoRpnIBUtgzdD4OMtcvRN P+l6ibv9xhfy96vaGpTYLT7fOxcqmw97Kjy5S7oPmQer0J/gJRZPuJ8U7VQj3kjv Ku4BeDrcaxzTyYRStiVGTUw+0gGUnv+/Xn46wqP73LC6QTR6rnnzAM4umFkl8LBT 1lWimSS7YMJCmNI4X8xM57F8S91Kgb19PXoXyXeAUpilybW8yElqRG7WHpRKz/fl s3tAwfWtu4XUDXXPnMd5//FsY6Jys09Ji2iGFZm1ipNng8ZGkomYo14nZpt5sxSb UJxgYa/InuCVJoINdCVJHTLbJskLzxMk -----END CERTIFICATE-----Generated at Sun May 19 01:47:12 2024 by rpki-client on console-fra.rpki-client.org