$ rpki-client -vvf rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft File: xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft (raw, json) Hash identifier: 7od6LDLc/0eNy3xAMe61RPU4XlPGC9ZygrgEjvEmcFY= Subject key identifier: 18:16:99:5E:0E:D3:69:44:1C:F8:82:01:AE:46:32:E5:CE:82:6D:46 Authority key identifier: C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C Certificate issuer: /CN=A91423FF/serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft Manifest number: 84 Signing time: Sun 19 May 2024 07:08:38 +0000 Manifest this update: Sun 19 May 2024 07:08:38 +0000 Manifest next update: Sun 26 May 2024 07:08:38 +0000 Files and hashes: 1: xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl (hash: RJZdKImiBLxc81IHxw/8IHsWx45ye6ABh0MA+JNFbMc=) 2: 278C467E4DF911EE8927F265C4F9AE02.roa (hash: E5EaPgzQKieBmui3X8e7CimD9DBjVpDLM/BQrpD2ci4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91423FF/serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C Validity Not Before: May 19 07:08:38 2024 GMT Not After : May 26 07:08:38 2024 GMT Subject: CN=6649a576-212c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:94:a6:3e:bf:eb:af:26:25:80:dd:6c:a5:f1: ce:28:16:cb:ea:6b:be:8c:98:4f:f8:7a:4e:8f:86: ff:1a:a2:2b:1a:34:2c:ee:43:d7:52:71:d4:87:bc: 07:c6:78:d6:02:7c:b4:7d:3f:8f:42:bd:44:01:a0: ce:05:ae:ca:80:ea:d5:fd:04:79:6d:4a:69:22:cd: 5e:96:02:5e:73:61:a7:f2:b0:8f:f8:cb:23:ba:f7: 44:9f:00:cd:22:b3:f9:ab:bf:3a:1a:10:ad:fe:f1: d9:65:39:c0:10:47:a3:05:dc:f8:f3:d5:93:1b:0b: 11:a2:36:f7:3d:93:38:80:51:22:bd:1a:b8:4d:2a: 0e:8b:2b:ad:75:63:2b:72:c0:e4:c9:86:c8:33:16: 5e:99:2a:60:bd:6f:50:3d:d6:96:2f:c8:0a:37:87: 4c:bc:fe:7a:a5:29:b3:1b:3f:c5:20:af:45:6d:af: 7c:76:5f:c4:95:98:b8:40:7e:85:58:d0:81:8d:f6: ba:49:52:9a:0d:42:6a:28:e4:57:c3:59:c7:9c:6d: a7:c5:b4:d2:7c:70:dd:e4:48:d1:79:5a:7a:6e:bf: ce:67:b6:6c:93:fe:f1:ec:ec:08:79:c0:56:fd:98: de:a9:cc:f8:01:6c:46:a0:e4:1b:36:58:2f:98:48: ae:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:16:99:5E:0E:D3:69:44:1C:F8:82:01:AE:46:32:E5:CE:82:6D:46 X509v3 Authority Key Identifier: keyid:C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:9d:bd:0f:38:8e:5e:c0:60:6c:33:b4:8f:43:88:cb:7b:70: f2:30:2b:01:ff:e8:7b:70:87:14:18:da:93:d0:1d:3f:c5:77: 4e:ee:45:21:90:78:4b:8f:d6:42:36:3c:3a:ea:c8:66:a4:12: 6f:4c:b4:c6:10:03:ad:3e:c1:e9:1d:87:9c:fe:97:71:83:27: 4a:60:4e:25:37:cc:7e:a1:0a:de:9b:eb:8b:86:e5:a9:57:ee: 74:d2:00:53:60:57:13:6b:10:6b:76:98:62:dd:84:f3:b5:c3: b7:f0:5a:df:c0:39:81:87:21:e4:38:b7:c1:70:34:a7:35:a2: 93:3d:0e:08:bc:06:b6:e1:79:4c:e8:2a:48:19:df:7d:37:0f: d1:33:17:a6:32:90:09:69:18:f6:1a:23:c8:9c:35:f4:1c:f9: 65:ee:c7:4f:5e:33:27:78:89:af:55:bc:09:04:a2:7c:55:71: d7:a3:eb:83:f8:18:c5:d5:af:e4:8f:a0:a3:c9:d9:06:c8:66: d5:ca:8a:6b:69:e5:de:32:65:79:37:3d:0a:86:cd:c5:3c:84: 35:70:56:0d:79:91:36:7c:7d:dc:74:e5:21:d3:6d:ff:81:2a: a5:9d:0e:e6:2c:0d:5d:ee:33:de:88:40:ce:5b:2b:b2:4c:38: 95:6c:a5:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzRkYxMTAvBgNVBAUTKEM2QTU3NkYwOENENEE3M0VBOUREOTc1MDNCQzlEMjhC MDU5MTFCOUMwHhcNMjQwNTE5MDcwODM4WhcNMjQwNTI2MDcwODM4WjAYMRYwFAYD VQQDEw02NjQ5YTU3Ni0yMTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypSmPr/rryYlgN1spfHOKBbL6mu+jJhP+HpOj4b/GqIrGjQs7kPXUnHUh7wH xnjWAny0fT+PQr1EAaDOBa7KgOrV/QR5bUppIs1elgJec2Gn8rCP+MsjuvdEnwDN IrP5q786GhCt/vHZZTnAEEejBdz489WTGwsRojb3PZM4gFEivRq4TSoOiyutdWMr csDkyYbIMxZemSpgvW9QPdaWL8gKN4dMvP56pSmzGz/FIK9Fba98dl/ElZi4QH6F WNCBjfa6SVKaDUJqKORXw1nHnG2nxbTSfHDd5EjReVp6br/OZ7Zsk/7x7OwIecBW /Zjeqcz4AWxGoOQbNlgvmEiuSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgWmV4O 02lEHPiCAa5GMuXOgm1GMB8GA1UdIwQYMBaAFMaldvCM1Kc+qd2XUDvJ0osFkRuc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjNGRi9EODVBMEI3QzRE RjgxMUVFODg2ODdCNjVDNEY5QUUwMi94cVYyOEl6VXB6NnAzWmRRTzhuU2l3V1JH NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hxVjI4SXpVcHo2cDNaZFFPOG5TaXdXUkc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjNGRi9EODVBMEI3QzRERjgxMUVFODg2ODdCNjVDNEY5QUUwMi94cVYyOEl6VXB6 NnAzWmRRTzhuU2l3V1JHNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAonb0POI5ewGBsM7SPQ4jLe3DyMCsB/+h7cIcUGNqT0B0/xXdO7kUh kHhLj9ZCNjw66shmpBJvTLTGEAOtPsHpHYec/pdxgydKYE4lN8x+oQrem+uLhuWp V+500gBTYFcTaxBrdphi3YTztcO38FrfwDmBhyHkOLfBcDSnNaKTPQ4IvAa24XlM 6CpIGd99Nw/RMxemMpAJaRj2GiPInDX0HPll7sdPXjMneImvVbwJBKJ8VXHXo+uD +BjF1a/kj6CjydkGyGbVyopraeXeMmV5Nz0Khs3FPIQ1cFYNeZE2fH3cdOUh023/ gSqlnQ7mLA1d7jPeiEDOWyuyTDiVbKUf -----END CERTIFICATE-----Generated at Sun May 19 08:25:00 2024 by rpki-client on console-ams.rpki-client.org