$ rpki-client -vvf rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft File: P-xz79qKnlyT0KYKshWc4HCDC3E.mft (raw, json) Hash identifier: T/fB+kU4706K8O3ngmUu+ZdYxhXOFK4JZ5r1uw1b14I= Subject key identifier: 59:3A:CE:36:49:C9:B9:8E:99:73:9E:7E:BA:A0:1B:76:0B:B2:AD:AF Authority key identifier: 3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 Certificate issuer: /CN=A9135597/serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft Manifest number: FE Signing time: Sun 19 May 2024 05:42:33 +0000 Manifest this update: Sun 19 May 2024 05:42:32 +0000 Manifest next update: Sun 26 May 2024 05:42:32 +0000 Files and hashes: 1: P-xz79qKnlyT0KYKshWc4HCDC3E.crl (hash: 8UTMmXfv9KWwXmh5GXE8hQWEBlF9uMw2ULKXaxENRwU=) 2: 14BB63805EC111EEBE63A109C4F9AE02.roa (hash: LAZ+vxPxEiGrZJLl8ywMAh3pLnZsqfIjoFLKBGbQiz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135597/serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Validity Not Before: May 19 05:42:32 2024 GMT Not After : May 26 05:42:32 2024 GMT Subject: CN=66499149-67ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a0:86:d8:68:99:57:28:f8:05:a2:bd:19:df: 53:97:54:7f:67:46:85:93:1f:18:79:65:65:2b:88: 7b:a2:c9:d0:a6:61:fe:45:b9:c6:4b:6a:25:1f:99: ae:d6:bb:b8:97:d6:49:38:4e:09:4f:49:f8:1b:0d: f8:ae:57:64:67:dd:12:c1:59:5d:2c:11:37:f6:42: 4e:71:11:92:7b:53:87:48:0c:c7:4a:db:a0:ca:f3: d5:b7:8e:aa:90:7d:aa:bc:45:de:1b:31:ae:ca:39: 45:94:ec:1a:15:81:6c:c3:af:99:6c:62:5e:f1:6f: f0:ed:25:32:a4:fd:1f:09:d9:54:41:41:1f:12:1d: 20:f7:3e:92:5e:05:68:b7:27:64:d8:24:8e:9a:8c: b9:ee:9e:75:bf:4e:de:44:44:18:c6:6b:5e:44:99: bc:46:5d:95:d9:e8:1d:2a:7a:d2:c6:a3:3a:c1:35: 0a:7e:53:7a:c1:eb:cd:cb:c8:7d:cb:26:f4:23:f2: 1d:d8:22:38:70:2f:11:33:c8:9c:7d:ba:38:51:b2: a0:83:a6:2a:db:9e:19:b3:4f:f0:94:d6:38:f1:ec: ab:dc:ec:3c:c6:16:14:4b:9c:bb:92:8c:12:c0:c4: c7:4e:cd:26:ff:ec:8d:14:b4:4f:2e:f4:1d:75:57: f2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:3A:CE:36:49:C9:B9:8E:99:73:9E:7E:BA:A0:1B:76:0B:B2:AD:AF X509v3 Authority Key Identifier: keyid:3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:30:94:a0:87:c9:ab:37:fd:4c:83:a3:04:fd:ac:b3:ab:d5: 1b:b6:79:70:69:21:bc:04:7b:0a:b7:64:3b:77:fd:cf:a0:14: 7d:8a:6c:db:90:d9:ac:ee:3b:ec:ea:cd:13:60:2d:22:75:cb: 95:d0:ff:76:31:ce:5e:ce:e0:fa:44:f0:dc:62:e8:17:47:39: 3c:5c:9a:54:11:2d:2c:42:84:a4:a5:a2:8f:65:bf:22:3c:81: ec:60:44:a6:ee:37:0a:64:87:61:cb:ae:ab:09:e3:d7:e4:6a: ac:38:dd:53:05:b3:10:71:d1:c1:76:d0:29:db:78:f9:7b:df: 14:e5:bf:62:e5:47:e4:93:6b:06:b4:94:6a:da:6d:a5:81:e0: 5b:21:19:54:4d:6f:fd:c1:68:4d:80:01:77:f6:20:a8:a7:e5: c4:13:87:71:64:c6:11:36:4a:6e:01:d6:bc:e1:5b:bb:49:da: e9:c5:8d:f4:71:ef:7b:cf:3c:80:0d:8d:3f:0b:6f:61:48:87: 65:cc:e5:04:0f:b2:af:a9:e0:35:90:47:7c:8a:dd:91:48:36: 74:da:e1:88:85:67:e7:b2:f6:24:ef:ea:46:69:27:cd:b7:90: 2c:c1:77:6e:c6:89:6e:20:6b:df:1e:f1:17:e2:a7:cf:64:8d: 7a:13:f8:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU1OTcxMTAvBgNVBAUTKDNGRUM3M0VGREE4QTlFNUM5M0QwQTYwQUIyMTU5Q0Uw NzA4MzBCNzEwHhcNMjQwNTE5MDU0MjMyWhcNMjQwNTI2MDU0MjMyWjAYMRYwFAYD VQQDEw02NjQ5OTE0OS02N2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqCG2GiZVyj4BaK9Gd9Tl1R/Z0aFkx8YeWVlK4h7osnQpmH+RbnGS2olH5mu 1ru4l9ZJOE4JT0n4Gw34rldkZ90SwVldLBE39kJOcRGSe1OHSAzHStugyvPVt46q kH2qvEXeGzGuyjlFlOwaFYFsw6+ZbGJe8W/w7SUypP0fCdlUQUEfEh0g9z6SXgVo tydk2CSOmoy57p51v07eREQYxmteRJm8Rl2V2egdKnrSxqM6wTUKflN6wevNy8h9 yyb0I/Id2CI4cC8RM8icfbo4UbKgg6Yq254Zs0/wlNY48eyr3Ow8xhYUS5y7kowS wMTHTs0m/+yNFLRPLvQddVfy1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFk6zjZJ ybmOmXOefrqgG3YLsq2vMB8GA1UdIwQYMBaAFD/sc+/aip5ck9CmCrIVnOBwgwtx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTU5Ny9FOTcwN0QxRTlB M0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25seVQwS1lLc2hXYzRIQ0RD M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AteHo3OXFLbmx5VDBLWUtzaFdjNEhDREMzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTU5Ny9FOTcwN0QxRTlBM0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25s eVQwS1lLc2hXYzRIQ0RDM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdMJSgh8mrN/1Mg6ME/ayzq9UbtnlwaSG8BHsKt2Q7d/3PoBR9imzb kNms7jvs6s0TYC0idcuV0P92Mc5ezuD6RPDcYugXRzk8XJpUES0sQoSkpaKPZb8i PIHsYESm7jcKZIdhy66rCePX5GqsON1TBbMQcdHBdtAp23j5e98U5b9i5Ufkk2sG tJRq2m2lgeBbIRlUTW/9wWhNgAF39iCop+XEE4dxZMYRNkpuAda84Vu7SdrpxY30 ce97zzyADY0/C29hSIdlzOUED7KvqeA1kEd8it2RSDZ02uGIhWfnsvYk7+pGaSfN t5AswXduxoluIGvfHvEX4qfPZI16E/iU -----END CERTIFICATE-----Generated at Sun May 19 06:14:33 2024 by rpki-client on console-ams.rpki-client.org