$ rpki-client -vvf rpki.apnic.net/member_repository/A913F927/AF5211FE00A211EA9A4E8A87C4F9AE02/xctXefg2BxxSgISGkWfLwa4IuRc.mft File: xctXefg2BxxSgISGkWfLwa4IuRc.mft (raw, json) Hash identifier: nuq+rOkfahmoblQuMk/BWT424g+uk3Nn16c4zp04yvI= Subject key identifier: 70:4F:B7:DF:22:B6:C2:22:9E:11:3D:D0:B2:E9:BE:BC:5F:09:FD:85 Authority key identifier: C5:CB:57:79:F8:36:07:1C:52:80:84:86:91:67:CB:C1:AE:08:B9:17 Certificate issuer: /CN=A913F927/serialNumber=C5CB5779F836071C528084869167CBC1AE08B917 Certificate serial: 0BA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xctXefg2BxxSgISGkWfLwa4IuRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F927/AF5211FE00A211EA9A4E8A87C4F9AE02/xctXefg2BxxSgISGkWfLwa4IuRc.mft Manifest number: 0B9C Signing time: Thu 30 May 2024 19:41:01 +0000 Manifest this update: Thu 30 May 2024 19:41:00 +0000 Manifest next update: Thu 06 Jun 2024 19:41:00 +0000 Files and hashes: 1: xctXefg2BxxSgISGkWfLwa4IuRc.crl (hash: FS5ZHLS2UAZ4yhNJOiLOj86rgfIgWFtMupflLRt37nM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F927/AF5211FE00A211EA9A4E8A87C4F9AE02/xctXefg2BxxSgISGkWfLwa4IuRc.crl rsync://rpki.apnic.net/member_repository/A913F927/AF5211FE00A211EA9A4E8A87C4F9AE02/xctXefg2BxxSgISGkWfLwa4IuRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xctXefg2BxxSgISGkWfLwa4IuRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 19:40:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2977 (0xba1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F927/serialNumber=C5CB5779F836071C528084869167CBC1AE08B917 Validity Not Before: May 30 19:41:00 2024 GMT Not After : Jun 6 19:41:00 2024 GMT Subject: CN=6658d64c-8594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:18:3e:df:2e:5a:0c:e5:dc:49:df:73:6c:de: a8:de:23:62:68:b4:86:91:b8:d0:dd:3c:76:2e:af: 20:5a:f8:a9:b8:7d:b7:01:83:cf:0b:fd:1d:00:15: 86:32:9a:23:f8:f8:00:1a:b8:d8:60:b8:39:79:c8: ca:7f:b2:05:ca:6a:69:59:41:f4:68:72:f9:e1:ef: af:4b:d2:c8:4f:67:33:88:8c:a7:23:4d:ff:71:dc: 13:7c:2b:d3:91:04:57:f6:5d:f3:b4:91:aa:d7:ee: 18:36:c0:e7:43:7f:85:3b:93:c9:d9:03:b5:b3:19: 2f:b6:d4:00:c3:d7:bd:49:6d:02:6f:8d:b1:9c:cc: 22:42:81:f0:67:78:ed:ed:82:c8:fa:98:2e:a5:fa: ea:6a:56:4f:26:34:99:96:f5:74:b8:5f:8a:a8:6d: 76:f4:d7:d1:1d:24:cd:11:a2:10:a3:45:72:e2:22: 46:e5:18:04:7a:fd:33:dc:5a:04:43:7e:a6:6c:7b: 2b:34:d5:a4:cd:cc:0d:80:ae:20:fa:5e:6e:e9:9b: 97:5c:3e:92:d6:2c:cb:e4:f5:6e:fa:62:5f:09:ba: 4e:2a:f3:98:b9:28:38:d7:5f:a2:d7:33:85:ac:c1: 60:c8:de:7c:d5:c1:da:3c:31:3c:a3:1a:18:a1:39: ce:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4F:B7:DF:22:B6:C2:22:9E:11:3D:D0:B2:E9:BE:BC:5F:09:FD:85 X509v3 Authority Key Identifier: keyid:C5:CB:57:79:F8:36:07:1C:52:80:84:86:91:67:CB:C1:AE:08:B9:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F927/AF5211FE00A211EA9A4E8A87C4F9AE02/xctXefg2BxxSgISGkWfLwa4IuRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xctXefg2BxxSgISGkWfLwa4IuRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F927/AF5211FE00A211EA9A4E8A87C4F9AE02/xctXefg2BxxSgISGkWfLwa4IuRc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:c7:7f:8c:03:3b:02:f5:84:01:e0:cd:c6:89:c4:69:e9:a2: 8d:bf:db:28:bd:12:a3:63:9d:fc:90:6e:74:77:38:69:76:d5: d4:fa:b4:57:40:fc:e6:69:57:97:e2:9b:db:dc:ba:45:11:00: 81:fe:d4:16:86:87:ec:4a:47:8d:2e:59:de:45:4b:ba:00:a4: 7a:99:96:5e:00:8b:af:0d:43:06:cc:d8:92:fd:45:f9:7a:cd: 81:84:50:81:2f:f6:7c:0b:26:59:83:71:a4:0d:68:12:20:7e: 6e:6a:b6:df:89:5d:df:29:63:81:70:ff:28:ca:ef:dd:3c:16: b7:b1:16:bb:b2:2c:ab:97:39:85:ad:19:31:b0:fb:4f:92:5b: 12:ff:6f:c5:ad:14:59:5e:5b:bf:11:3a:21:f1:24:63:b7:e6: b9:ca:10:ec:e0:2c:ee:b4:f1:12:41:6d:dc:8a:fa:82:6a:c1: a4:20:7e:7c:eb:89:8a:30:fa:a5:97:1d:df:0b:34:4d:a0:8b: ea:b8:ac:7f:61:ff:0a:bc:dd:a6:1b:43:ba:f7:55:16:29:bf: ac:f9:13:c9:2d:3d:9a:57:53:7e:53:79:84:ed:53:7e:d1:22: 58:82:cd:94:fe:3e:93:2c:81:7e:0c:a4:ff:e1:42:13:da:b6: 10:a4:58:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y5MjcxMTAvBgNVBAUTKEM1Q0I1Nzc5RjgzNjA3MUM1MjgwODQ4NjkxNjdDQkMx QUUwOEI5MTcwHhcNMjQwNTMwMTk0MTAwWhcNMjQwNjA2MTk0MTAwWjAYMRYwFAYD VQQDEw02NjU4ZDY0Yy04NTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBg+3y5aDOXcSd9zbN6o3iNiaLSGkbjQ3Tx2Lq8gWvipuH23AYPPC/0dABWG Mpoj+PgAGrjYYLg5ecjKf7IFymppWUH0aHL54e+vS9LIT2cziIynI03/cdwTfCvT kQRX9l3ztJGq1+4YNsDnQ3+FO5PJ2QO1sxkvttQAw9e9SW0Cb42xnMwiQoHwZ3jt 7YLI+pgupfrqalZPJjSZlvV0uF+KqG129NfRHSTNEaIQo0Vy4iJG5RgEev0z3FoE Q36mbHsrNNWkzcwNgK4g+l5u6ZuXXD6S1izL5PVu+mJfCbpOKvOYuSg411+i1zOF rMFgyN581cHaPDE8oxoYoTnOsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHBPt98i tsIinhE90LLpvrxfCf2FMB8GA1UdIwQYMBaAFMXLV3n4NgccUoCEhpFny8GuCLkX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjkyNy9BRjUyMTFGRTAw QTIxMUVBOUE0RThBODdDNEY5QUUwMi94Y3RYZWZnMkJ4eFNnSVNHa1dmTHdhNEl1 UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hjdFhlZmcyQnh4U2dJU0drV2ZMd2E0SXVSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjkyNy9BRjUyMTFGRTAwQTIxMUVBOUE0RThBODdDNEY5QUUwMi94Y3RYZWZnMkJ4 eFNnSVNHa1dmTHdhNEl1UmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwx3+MAzsC9YQB4M3GicRp6aKNv9sovRKjY538kG50dzhpdtXU+rRX QPzmaVeX4pvb3LpFEQCB/tQWhofsSkeNLlneRUu6AKR6mZZeAIuvDUMGzNiS/UX5 es2BhFCBL/Z8CyZZg3GkDWgSIH5uarbfiV3fKWOBcP8oyu/dPBa3sRa7siyrlzmF rRkxsPtPklsS/2/FrRRZXlu/EToh8SRjt+a5yhDs4CzutPESQW3civqCasGkIH58 64mKMPqllx3fCzRNoIvquKx/Yf8KvN2mG0O691UWKb+s+RPJLT2aV1N+U3mE7VN+ 0SJYgs2U/j6TLIF+DKT/4UIT2rYQpFgS -----END CERTIFICATE-----Generated at Thu May 30 20:35:31 2024 by rpki-client on console-fra.rpki-client.org