$ rpki-client -vvf rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft File: ex-xujsOyMpeXBOuvPxuuo0g6qc.mft (raw, json) Hash identifier: bBUTxrwGxqMSweyZvr1MtF9P9TyeddDeQMjcmKc0n+E= Subject key identifier: D7:0A:3F:32:E8:94:05:22:52:99:1A:51:6C:81:CC:B9:45:D4:81:BA Authority key identifier: 7B:1F:B1:BA:3B:0E:C8:CA:5E:5C:13:AE:BC:FC:6E:BA:8D:20:EA:A7 Certificate issuer: /CN=A913B4BE/serialNumber=7B1FB1BA3B0EC8CA5E5C13AEBCFC6EBA8D20EAA7 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft Manifest number: 30 Signing time: Sun 19 May 2024 08:22:54 +0000 Manifest this update: Sun 19 May 2024 08:22:53 +0000 Manifest next update: Sun 26 May 2024 08:22:53 +0000 Files and hashes: 1: ex-xujsOyMpeXBOuvPxuuo0g6qc.crl (hash: 2HWpsDYw7BkmOugXHZ+xBLuDG0EQAWTIdZ7SEi4XmcI=) 2: ABCCEBB6CDC711EE8A262C4EC4F9AE02.roa (hash: 7KeTZX545IABA5t2arvNc6G1Z+gSO4ocpijqenr2MLo=) 3: 805DA0BCCCF811EEA9723F27C4F9AE02.roa (hash: D/+xv8jzE11lKaO3hHiOnEDdZgBcBo0atzPE35sFdcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.crl rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B4BE/serialNumber=7B1FB1BA3B0EC8CA5E5C13AEBCFC6EBA8D20EAA7 Validity Not Before: May 19 08:22:53 2024 GMT Not After : May 26 08:22:53 2024 GMT Subject: CN=6649b6de-15b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:14:d9:d0:48:9f:6f:ff:8a:86:db:ac:63:ba: b5:ed:53:17:e7:87:fc:8f:de:6d:10:3a:48:79:13: cb:18:18:9f:8f:01:2f:75:2f:f2:d3:8e:68:47:f7: 0a:48:29:ff:07:e3:fc:bf:23:a5:15:95:c9:72:73: 08:55:e8:bd:83:a2:b2:a6:d2:47:83:2c:ee:4f:8e: db:2c:88:9d:d8:b3:5a:68:c7:ae:a6:6b:7d:49:73: 6c:a1:66:d4:e5:4f:6f:32:cc:13:3c:5c:77:e8:9b: 35:13:fc:dc:09:7e:75:6c:27:10:e0:59:43:bc:e4: 3f:99:5d:de:e9:09:ff:af:46:57:da:a0:ee:c7:ea: 4e:9f:9e:a1:63:f8:9d:0a:f9:ce:3b:42:33:46:c7: 9c:f0:ea:f3:54:0c:95:b0:1a:94:4d:ff:44:e8:e0: a5:d3:8e:6f:61:10:c9:a3:64:1c:77:8f:d5:1c:81: 53:c1:5f:c0:5e:13:46:e3:f6:b4:84:3a:3c:d4:91: ca:6a:4f:66:d3:b8:0c:59:03:56:93:60:e0:c5:21: 84:17:77:dd:bf:48:c4:ed:e5:11:4c:84:7e:4d:cf: f9:6f:41:21:30:63:f1:c9:78:11:25:55:3d:cc:11: cd:a2:a6:72:29:d0:0d:b8:67:2a:92:16:eb:97:38: b1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0A:3F:32:E8:94:05:22:52:99:1A:51:6C:81:CC:B9:45:D4:81:BA X509v3 Authority Key Identifier: keyid:7B:1F:B1:BA:3B:0E:C8:CA:5E:5C:13:AE:BC:FC:6E:BA:8D:20:EA:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:be:9b:ca:9b:ca:c1:f0:0a:0b:4c:6e:c2:8d:17:48:01:78: 25:73:bc:61:a2:7b:8e:20:4f:75:e3:08:90:21:7f:ff:0c:92: 9a:6f:42:6b:e8:ed:4d:c8:c2:58:5e:8a:b8:51:bb:5c:0a:65: 1e:06:4c:28:a6:e4:90:42:fd:93:9f:bf:a1:1b:63:f9:3a:5a: ee:23:a4:02:d7:07:3f:9a:74:4a:cd:3d:3a:7f:5e:33:42:80: 23:e8:51:66:30:60:bc:2e:cd:7a:48:1f:28:02:09:af:e1:a3: af:d6:ab:59:b9:65:64:0c:7d:f2:00:66:52:5b:3a:1e:0d:eb: 4c:54:4a:9f:61:7c:6a:84:5c:0c:d0:c6:50:77:21:b5:10:8f: f7:ea:02:fa:4e:f3:f7:67:99:bc:39:06:23:ff:9a:fa:bc:dd: 9f:81:85:57:90:43:f0:44:71:36:31:ca:b9:1c:9e:77:b6:0e: b9:94:7d:a7:72:b9:e8:0c:1f:5e:cb:91:d5:9e:90:d3:72:c0: 0a:80:78:3f:ca:3c:e5:e8:07:ea:51:07:d1:d9:1d:be:9d:94: 40:22:3b:f8:9a:d4:11:99:0b:63:13:f9:4f:a2:72:d2:85:6f: 25:15:f7:d5:8f:ee:7b:e1:69:f8:0e:87:84:45:93:ff:8c:27: 38:90:e9:84 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjRCRTExMC8GA1UEBRMoN0IxRkIxQkEzQjBFQzhDQTVFNUMxM0FFQkNGQzZFQkE4 RDIwRUFBNzAeFw0yNDA1MTkwODIyNTNaFw0yNDA1MjYwODIyNTNaMBgxFjAUBgNV BAMTDTY2NDliNmRlLTE1YjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5FNnQSJ9v/4qG26xjurXtUxfnh/yP3m0QOkh5E8sYGJ+PAS91L/LTjmhH9wpI Kf8H4/y/I6UVlclycwhV6L2DorKm0keDLO5PjtssiJ3Ys1pox66ma31Jc2yhZtTl T28yzBM8XHfomzUT/NwJfnVsJxDgWUO85D+ZXd7pCf+vRlfaoO7H6k6fnqFj+J0K +c47QjNGx5zw6vNUDJWwGpRN/0To4KXTjm9hEMmjZBx3j9UcgVPBX8BeE0bj9rSE OjzUkcpqT2bTuAxZA1aTYODFIYQXd92/SMTt5RFMhH5Nz/lvQSEwY/HJeBElVT3M Ec2ipnIp0A24ZyqSFuuXOLFvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1wo/MuiU BSJSmRpRbIHMuUXUgbowHwYDVR0jBBgwFoAUex+xujsOyMpeXBOuvPxuuo0g6qcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCNEJFLzZGMkZEMzM4Q0NG NzExRUU5RTg5RDY3QUM0RjlBRTAyL2V4LXh1anNPeU1wZVhCT3V2UHh1dW8wZzZx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZXgteHVqc095TXBlWEJPdXZQeHV1bzBnNnFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC NEJFLzZGMkZEMzM4Q0NGNzExRUU5RTg5RDY3QUM0RjlBRTAyL2V4LXh1anNPeU1w ZVhCT3V2UHh1dW8wZzZxYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGe+m8qbysHwCgtMbsKNF0gBeCVzvGGie44gT3XjCJAhf/8MkppvQmvo 7U3IwlheirhRu1wKZR4GTCim5JBC/ZOfv6EbY/k6Wu4jpALXBz+adErNPTp/XjNC gCPoUWYwYLwuzXpIHygCCa/ho6/Wq1m5ZWQMffIAZlJbOh4N60xUSp9hfGqEXAzQ xlB3IbUQj/fqAvpO8/dnmbw5BiP/mvq83Z+BhVeQQ/BEcTYxyrkcnne2DrmUfady uegMH17LkdWekNNywAqAeD/KPOXoB+pRB9HZHb6dlEAiO/ia1BGZC2MT+U+ictKF byUV99WP7nvhafgOh4RFk/+MJziQ6YQ= -----END CERTIFICATE-----Generated at Sun May 19 09:32:15 2024 by rpki-client on console-ams.rpki-client.org