$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft File: XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft (raw, json) Hash identifier: OxoWS1bCOQDalUYQQenqJxx0cBMvTpoTXWOqe5HK6kE= Subject key identifier: AE:E2:C0:46:66:ED:C2:73:94:F1:94:05:A1:FB:F6:4A:9F:7B:55:90 Authority key identifier: 5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 Certificate issuer: /CN=A914CB9F/serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Certificate serial: 0B7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft Manifest number: 0B78 Signing time: Sat 18 May 2024 19:27:14 +0000 Manifest this update: Sat 18 May 2024 19:27:14 +0000 Manifest next update: Sat 25 May 2024 19:27:14 +0000 Files and hashes: 1: XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl (hash: zrRRUeAQ4dqhn/iorElJhMs0VW8+ynRGmt8omuOG2S0=) 2: 4EE9B36406C711EA84978821C4F9AE02.roa (hash: fao/hFsNql3tmc5i90I+VfUoLICi/LhhbgNAajPLVkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2942 (0xb7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CB9F/serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Validity Not Before: May 18 19:27:14 2024 GMT Not After : May 25 19:27:14 2024 GMT Subject: CN=66490112-0415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:df:d3:52:0e:4a:be:0b:9f:ec:d0:f4:dd:7c: 7d:61:20:7a:11:ff:73:bd:ad:a8:c2:d7:3a:6c:78: 55:4f:83:60:2c:39:51:22:7e:89:5b:66:64:24:ff: 7d:3c:e7:c2:07:0d:0a:b8:dc:38:db:5b:2f:10:b1: 87:65:4a:08:3d:8b:42:f6:d0:c7:a5:3a:93:d4:d6: 74:4e:ec:02:59:37:24:67:b8:c6:5b:7d:22:3f:49: 13:08:f8:49:4d:31:fd:a6:b9:e8:09:e0:58:5c:d3: 61:0a:c5:ac:8f:fd:5b:10:eb:9b:74:05:99:32:3f: 28:be:a2:63:d3:87:43:2c:86:b2:28:76:20:63:f0: 6b:19:16:aa:8e:10:75:24:fc:be:a7:bb:58:48:38: e4:b9:26:f2:69:88:f9:5f:07:ea:37:0d:c7:71:76: e9:8f:8e:87:ff:89:8f:fd:bf:d0:c9:90:d3:1b:61: ca:f9:11:83:c3:55:db:ff:3e:36:b0:12:8e:2b:c5: 03:30:dd:0f:6d:ee:b5:27:86:a0:f5:1b:df:d4:7f: 41:4a:62:75:42:89:3b:60:c2:38:2f:b5:d0:60:03: 6a:c7:11:80:31:72:87:92:ab:9c:df:1f:c4:3b:b6: 48:04:5f:a8:3a:e6:bf:7c:10:7d:99:60:a4:0a:ff: 2f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E2:C0:46:66:ED:C2:73:94:F1:94:05:A1:FB:F6:4A:9F:7B:55:90 X509v3 Authority Key Identifier: keyid:5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:26:97:0b:ac:77:ba:76:44:fc:11:2e:a7:20:85:aa:90:03: 6b:63:56:36:e9:df:fa:b9:4a:38:21:64:a7:e6:67:7e:f8:09: 97:4a:22:3c:66:63:e1:e2:c4:7f:7d:7d:d9:68:a1:de:eb:cf: f6:82:f6:5c:38:62:bb:bb:6d:d0:97:cc:36:d6:a9:51:b3:f5: 3a:6c:0c:45:e5:44:f0:a5:b5:96:d1:8d:77:1f:e9:2b:c3:b0: 59:3a:d6:48:d7:15:ce:62:83:82:4d:c5:db:5c:bc:65:aa:19: 7d:65:4a:60:34:17:ff:3a:1c:4e:49:42:14:2f:9f:25:10:cf: ec:94:62:28:a9:82:cc:f3:5d:18:b8:45:ee:20:d0:c8:0e:d1: 49:40:ef:8b:35:d7:f6:56:61:ec:00:77:d1:71:51:e9:4c:98: 7f:99:e5:33:7c:b9:3e:bf:1a:92:b3:f2:d4:1d:f4:4b:b2:a7: 03:42:7c:cf:d4:3d:7c:f7:c0:4f:38:9d:37:86:93:3e:a9:61: f9:09:5a:ff:f9:d2:cc:d2:80:bc:81:82:e1:36:05:3e:c3:1a: 0d:88:97:9f:0b:e6:de:d9:29:68:37:41:ff:a2:21:0f:bd:b6: e7:f1:b2:e4:b8:64:fc:8b:71:ad:46:09:fc:0d:44:38:51:f2: c6:24:a7:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCOUYxMTAvBgNVBAUTKDVENjJERjE5MjFERTFCNTk4QkFGQjg1N0Q0OUQyMzZE MkUxNUYyQjYwHhcNMjQwNTE4MTkyNzE0WhcNMjQwNTI1MTkyNzE0WjAYMRYwFAYD VQQDEw02NjQ5MDExMi0wNDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyt/TUg5Kvguf7ND03Xx9YSB6Ef9zva2owtc6bHhVT4NgLDlRIn6JW2ZkJP99 POfCBw0KuNw421svELGHZUoIPYtC9tDHpTqT1NZ0TuwCWTckZ7jGW30iP0kTCPhJ TTH9prnoCeBYXNNhCsWsj/1bEOubdAWZMj8ovqJj04dDLIayKHYgY/BrGRaqjhB1 JPy+p7tYSDjkuSbyaYj5XwfqNw3HcXbpj46H/4mP/b/QyZDTG2HK+RGDw1Xb/z42 sBKOK8UDMN0Pbe61J4ag9Rvf1H9BSmJ1Qok7YMI4L7XQYANqxxGAMXKHkquc3x/E O7ZIBF+oOua/fBB9mWCkCv8vIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7iwEZm 7cJzlPGUBaH79kqfe1WQMB8GA1UdIwQYMBaAFF1i3xkh3htZi6+4V9SdI20uFfK2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0I5Ri8xMTU3MzlGQTA2 QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcxbUxyN2hYMUowamJTNFY4 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hXTGZHU0hlRzFtTHI3aFgxSjBqYlM0VjhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0I5Ri8xMTU3MzlGQTA2QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcx bUxyN2hYMUowamJTNFY4clkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUJpcLrHe6dkT8ES6nIIWqkANrY1Y26d/6uUo4IWSn5md++AmXSiI8 ZmPh4sR/fX3ZaKHe68/2gvZcOGK7u23Ql8w21qlRs/U6bAxF5UTwpbWW0Y13H+kr w7BZOtZI1xXOYoOCTcXbXLxlqhl9ZUpgNBf/OhxOSUIUL58lEM/slGIoqYLM810Y uEXuINDIDtFJQO+LNdf2VmHsAHfRcVHpTJh/meUzfLk+vxqSs/LUHfRLsqcDQnzP 1D1898BPOJ03hpM+qWH5CVr/+dLM0oC8gYLhNgU+wxoNiJefC+be2SloN0H/oiEP vbbn8bLkuGT8i3GtRgn8DUQ4UfLGJKfQ -----END CERTIFICATE-----Generated at Sat May 18 19:56:05 2024 by rpki-client on console-fra.rpki-client.org