$ rpki-client -vvf rpki.apnic.net/member_repository/A9132DC8/444C6F14ECB511ED9D68C450C4F9AE02/xNJqwGyKZSWK1Ekbad-DKQvhg3s.mft File: xNJqwGyKZSWK1Ekbad-DKQvhg3s.mft (raw, json) Hash identifier: JDhvSnxkyP/BmMxjoM9iWAbwhdsGdw7cvfqG+D31KDQ= Subject key identifier: 3F:2C:9F:63:CD:9C:F0:F7:DE:81:D4:00:08:A6:C8:D0:35:EC:9B:FE Authority key identifier: C4:D2:6A:C0:6C:8A:65:25:8A:D4:49:1B:69:DF:83:29:0B:E1:83:7B Certificate issuer: /CN=A9132DC8/serialNumber=C4D26AC06C8A65258AD4491B69DF83290BE1837B Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNJqwGyKZSWK1Ekbad-DKQvhg3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132DC8/444C6F14ECB511ED9D68C450C4F9AE02/xNJqwGyKZSWK1Ekbad-DKQvhg3s.mft Manifest number: C3 Signing time: Sun 19 May 2024 06:18:24 +0000 Manifest this update: Sun 19 May 2024 06:18:24 +0000 Manifest next update: Sun 26 May 2024 06:18:24 +0000 Files and hashes: 1: xNJqwGyKZSWK1Ekbad-DKQvhg3s.crl (hash: M/yxCB1XqUrS/0w+8FkoJGLfL26IABoB+qcDUZbX78o=) 2: 59AFB718ECB911ED99732649C4F9AE02.roa (hash: SkX1oqIaiC5HoUeOsKwvChHptLiEby9HEHxFbBMkDAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132DC8/444C6F14ECB511ED9D68C450C4F9AE02/xNJqwGyKZSWK1Ekbad-DKQvhg3s.crl rsync://rpki.apnic.net/member_repository/A9132DC8/444C6F14ECB511ED9D68C450C4F9AE02/xNJqwGyKZSWK1Ekbad-DKQvhg3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNJqwGyKZSWK1Ekbad-DKQvhg3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132DC8/serialNumber=C4D26AC06C8A65258AD4491B69DF83290BE1837B Validity Not Before: May 19 06:18:24 2024 GMT Not After : May 26 06:18:24 2024 GMT Subject: CN=664999b0-0f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:19:c1:ac:dd:8b:a4:1e:66:74:a2:6e:8a:f3: 0b:6f:b3:75:de:43:c9:d6:e0:70:17:f5:1a:cf:21: e1:5b:5d:1b:9a:18:13:1d:6d:51:6d:52:2c:c8:2e: 98:d9:c9:7a:58:ff:f7:4d:84:0e:c8:61:6a:02:e1: a8:4b:58:27:b9:a0:04:c5:8e:7b:d7:90:d0:32:b6: b8:72:d6:0f:fa:d1:39:60:58:a1:0c:f0:bc:ae:09: 1c:68:40:b5:b5:17:61:70:39:cb:c5:c5:1f:86:21: bb:6a:29:53:e9:c5:ce:55:a1:f8:1a:d6:35:ed:52: 22:07:fd:b9:9d:8e:af:ab:f6:4c:e3:10:4b:49:73: 98:9f:a4:a6:fd:5d:0e:94:d7:a8:71:88:6f:df:cf: da:95:4b:61:5a:48:1d:a0:77:63:3f:7c:d8:62:35: aa:51:e8:92:fa:4d:6d:f9:61:e3:d2:4d:c7:1a:13: a4:9e:1b:97:24:c6:61:c7:3a:9f:1b:a6:14:af:11: 49:01:f5:96:ae:d0:70:af:16:58:c7:e7:6e:e9:60: e0:01:58:ad:78:c3:6d:9d:59:7c:0a:fa:73:43:f5: 60:c5:b5:92:e0:86:f3:dc:46:9d:84:3d:f1:99:4d: ff:21:4f:d7:d9:be:1e:31:c4:fc:15:47:e6:6e:ad: 2e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:2C:9F:63:CD:9C:F0:F7:DE:81:D4:00:08:A6:C8:D0:35:EC:9B:FE X509v3 Authority Key Identifier: keyid:C4:D2:6A:C0:6C:8A:65:25:8A:D4:49:1B:69:DF:83:29:0B:E1:83:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132DC8/444C6F14ECB511ED9D68C450C4F9AE02/xNJqwGyKZSWK1Ekbad-DKQvhg3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNJqwGyKZSWK1Ekbad-DKQvhg3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132DC8/444C6F14ECB511ED9D68C450C4F9AE02/xNJqwGyKZSWK1Ekbad-DKQvhg3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:35:ba:d7:ae:c6:47:9b:7a:c1:21:a6:bb:8f:e1:2a:c0:87: 5c:ae:ef:2f:5b:6e:23:66:73:9f:ff:8c:44:eb:be:35:7d:3c: 92:7b:50:bf:4b:b9:da:5e:05:16:32:60:ff:cf:10:ad:dc:02: ed:35:e8:08:f8:ce:f2:2e:48:88:b0:fd:5c:27:fc:05:50:8a: 6a:aa:53:85:b4:77:f4:e3:7d:34:23:26:89:1d:a4:5e:b3:83: 9d:f1:c4:d6:7f:a8:c1:3d:c8:e4:c6:fb:f9:1a:66:0f:08:33: 33:b0:b0:2b:00:c7:7f:37:45:94:71:f8:89:32:24:cd:1f:d8: d4:36:7b:ae:e7:ba:ab:ea:e5:b2:4f:d3:66:19:e4:12:66:78: c1:51:d3:66:b0:e0:19:5d:d3:8b:74:33:96:ae:57:81:51:9b: 25:7f:51:74:c2:2c:f3:8e:10:73:38:c4:2d:c0:15:4e:75:ee: 63:98:f4:a8:3e:e5:bc:5c:94:cf:3d:de:53:45:49:76:52:1d: 05:e9:ff:ef:10:5c:fb:30:7c:a2:89:8a:aa:aa:f0:d4:26:d0: 5b:9a:c2:86:63:9b:f7:71:a6:2f:c4:c5:d5:60:6b:2e:8b:65: cf:f4:15:3c:84:c1:ff:fb:46:85:e4:e5:ed:4c:f5:e8:7f:25: a2:63:29:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJEQzgxMTAvBgNVBAUTKEM0RDI2QUMwNkM4QTY1MjU4QUQ0NDkxQjY5REY4MzI5 MEJFMTgzN0IwHhcNMjQwNTE5MDYxODI0WhcNMjQwNTI2MDYxODI0WjAYMRYwFAYD VQQDEw02NjQ5OTliMC0wZjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxnBrN2LpB5mdKJuivMLb7N13kPJ1uBwF/UazyHhW10bmhgTHW1RbVIsyC6Y 2cl6WP/3TYQOyGFqAuGoS1gnuaAExY5715DQMra4ctYP+tE5YFihDPC8rgkcaEC1 tRdhcDnLxcUfhiG7ailT6cXOVaH4GtY17VIiB/25nY6vq/ZM4xBLSXOYn6Sm/V0O lNeocYhv38/alUthWkgdoHdjP3zYYjWqUeiS+k1t+WHj0k3HGhOknhuXJMZhxzqf G6YUrxFJAfWWrtBwrxZYx+du6WDgAViteMNtnVl8CvpzQ/VgxbWS4Ibz3EadhD3x mU3/IU/X2b4eMcT8FUfmbq0uTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD8sn2PN nPD33oHUAAimyNA17Jv+MB8GA1UdIwQYMBaAFMTSasBsimUlitRJG2nfgykL4YN7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkRDOC80NDRDNkYxNEVD QjUxMUVEOUQ2OEM0NTBDNEY5QUUwMi94Tkpxd0d5S1pTV0sxRWtiYWQtREtRdmhn M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOSnF3R3lLWlNXSzFFa2JhZC1ES1F2aGczcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkRDOC80NDRDNkYxNEVDQjUxMUVEOUQ2OEM0NTBDNEY5QUUwMi94Tkpxd0d5S1pT V0sxRWtiYWQtREtRdmhnM3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5NbrXrsZHm3rBIaa7j+EqwIdcru8vW24jZnOf/4xE6741fTySe1C/ S7naXgUWMmD/zxCt3ALtNegI+M7yLkiIsP1cJ/wFUIpqqlOFtHf04300IyaJHaRe s4Od8cTWf6jBPcjkxvv5GmYPCDMzsLArAMd/N0WUcfiJMiTNH9jUNnuu57qr6uWy T9NmGeQSZnjBUdNmsOAZXdOLdDOWrleBUZslf1F0wizzjhBzOMQtwBVOde5jmPSo PuW8XJTPPd5TRUl2Uh0F6f/vEFz7MHyiiYqqqvDUJtBbmsKGY5v3caYvxMXVYGsu i2XP9BU8hMH/+0aF5OXtTPXofyWiYykn -----END CERTIFICATE-----Generated at Sun May 19 08:25:00 2024 by rpki-client on console-ams.rpki-client.org