$ rpki-client -vvf rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft File: xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft (raw, json) Hash identifier: fVRJI77FlKVDy4HxEnBN9FZm+KHWkLiQjw0bn/tWsr8= Subject key identifier: FE:83:17:8D:26:10:7D:18:80:B4:BC:14:14:0B:DF:BA:F9:79:DF:7C Authority key identifier: C6:93:99:B1:32:E1:AE:6B:2E:A3:11:6E:14:B1:00:1C:08:19:DD:A9 Certificate issuer: /CN=A914D05C/serialNumber=C69399B132E1AE6B2EA3116E14B1001C0819DDA9 Certificate serial: 05B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft Manifest number: 05AF Signing time: Sun 19 May 2024 00:13:19 +0000 Manifest this update: Sun 19 May 2024 00:13:19 +0000 Manifest next update: Sun 26 May 2024 00:13:19 +0000 Files and hashes: 1: xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl (hash: leuk/8Xjg5rQBzOh9XKtGe0GJfHnNZ8734haVxyaBFE=) 2: 546C2E447BD711EB8DB97853C4F9AE02.roa (hash: E82g5upMBqwg+8IfZAsvOIRONR3ksBK1tvBTNfLGRrE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1459 (0x5b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D05C/serialNumber=C69399B132E1AE6B2EA3116E14B1001C0819DDA9 Validity Not Before: May 19 00:13:19 2024 GMT Not After : May 26 00:13:19 2024 GMT Subject: CN=6649441f-bae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8a:f6:79:6d:fc:ba:fc:98:c9:69:8d:85:cd: 78:46:e3:1d:c5:9e:4c:a9:33:2f:ee:34:53:72:56: c7:d8:b4:1e:57:e2:20:02:00:65:a0:5f:5d:08:03: 32:aa:fa:33:5f:a1:49:25:96:e0:d6:26:3d:11:46: 69:6d:c4:b1:e8:ff:70:7d:de:c6:3c:82:76:e7:44: 7e:bc:57:80:c6:05:64:b1:e3:f9:31:6d:f7:5b:ee: 83:ee:6f:25:cf:96:0b:80:bd:98:ae:76:76:a9:95: 14:a9:24:2e:6e:1d:3d:b6:c7:41:ba:e0:35:f0:a3: f0:77:63:4a:b4:ba:19:c5:ae:65:91:84:ec:24:66: 99:91:75:01:c4:74:30:07:b3:b8:3c:d0:cc:32:07: fb:b1:a5:19:69:5b:a3:5f:f4:d2:44:1f:86:96:cc: 3b:de:de:9d:12:2f:15:c7:1f:5b:77:38:d2:a2:a0: 5b:c3:f5:16:08:20:66:bd:7c:a9:5e:67:0f:a9:73: 81:82:47:f6:2d:7e:dc:85:53:5c:b1:12:83:92:45: 67:d3:a9:73:cb:00:bf:ff:74:52:f0:bb:3b:f3:3b: d6:f9:b8:8e:e9:8f:e9:22:2f:24:be:89:09:14:f0: 2f:ff:e2:27:51:a7:39:36:67:71:12:29:75:f2:0c: d8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:83:17:8D:26:10:7D:18:80:B4:BC:14:14:0B:DF:BA:F9:79:DF:7C X509v3 Authority Key Identifier: keyid:C6:93:99:B1:32:E1:AE:6B:2E:A3:11:6E:14:B1:00:1C:08:19:DD:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:bf:78:7e:b3:71:dd:fc:90:29:4a:45:9e:9a:40:5b:53:93: 89:84:d4:8a:b1:ed:72:7d:d9:78:db:dc:38:d0:75:5c:a9:ec: 32:12:12:62:93:9f:a6:f4:b6:19:52:cd:d8:b6:a8:3a:63:67: 31:f2:2e:19:69:34:79:8a:23:b5:a6:9a:7d:0a:b8:d8:6c:b4: cf:b9:62:81:f7:12:75:b0:4b:44:d0:69:00:09:96:ab:a1:30: 96:01:31:c4:18:54:3a:a1:16:f2:5a:24:6c:62:19:92:dd:fa: 11:63:f8:7e:a4:55:c8:3e:63:42:88:69:5b:4b:ec:a5:a3:2c: 62:3d:27:30:1a:7f:6d:37:5e:6f:a3:03:ff:cd:d9:5d:92:9c: 05:a8:30:01:c7:7b:e0:b1:1e:13:10:36:4b:82:a8:8e:71:1e: 73:fd:08:dd:17:aa:5b:d8:1d:8c:c7:1f:4a:8d:9f:b9:1a:a9: 08:8f:c5:f6:b5:e0:ca:52:61:50:fb:b6:95:eb:c1:ae:34:45: 65:97:52:ca:b1:7f:eb:f7:0e:d8:63:48:ed:83:61:b6:66:b1: 1b:c8:81:ed:37:c3:d6:c8:2d:77:1d:e2:31:ee:20:58:43:76: 05:1f:6b:87:9a:00:5a:68:b8:90:cc:48:ea:08:91:93:3a:bd: 81:23:af:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQwNUMxMTAvBgNVBAUTKEM2OTM5OUIxMzJFMUFFNkIyRUEzMTE2RTE0QjEwMDFD MDgxOUREQTkwHhcNMjQwNTE5MDAxMzE5WhcNMjQwNTI2MDAxMzE5WjAYMRYwFAYD VQQDEw02NjQ5NDQxZi1iYWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoIr2eW38uvyYyWmNhc14RuMdxZ5MqTMv7jRTclbH2LQeV+IgAgBloF9dCAMy qvozX6FJJZbg1iY9EUZpbcSx6P9wfd7GPIJ250R+vFeAxgVkseP5MW33W+6D7m8l z5YLgL2YrnZ2qZUUqSQubh09tsdBuuA18KPwd2NKtLoZxa5lkYTsJGaZkXUBxHQw B7O4PNDMMgf7saUZaVujX/TSRB+Glsw73t6dEi8Vxx9bdzjSoqBbw/UWCCBmvXyp XmcPqXOBgkf2LX7chVNcsRKDkkVn06lzywC//3RS8Ls78zvW+biO6Y/pIi8kvokJ FPAv/+InUac5NmdxEil18gzYVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP6DF40m EH0YgLS8FBQL37r5ed98MB8GA1UdIwQYMBaAFMaTmbEy4a5rLqMRbhSxABwIGd2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDA1Qy9ERUNFMEYwQTdC RDUxMUVCQjkxMjNENTJDNEY5QUUwMi94cE9ac1RMaHJtc3VveEZ1RkxFQUhBZ1oz YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hwT1pzVExocm1zdW94RnVGTEVBSEFnWjNhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDA1Qy9ERUNFMEYwQTdCRDUxMUVCQjkxMjNENTJDNEY5QUUwMi94cE9ac1RMaHJt c3VveEZ1RkxFQUhBZ1ozYWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSv3h+s3Hd/JApSkWemkBbU5OJhNSKse1yfdl429w40HVcqewyEhJi k5+m9LYZUs3Ytqg6Y2cx8i4ZaTR5iiO1ppp9CrjYbLTPuWKB9xJ1sEtE0GkACZar oTCWATHEGFQ6oRbyWiRsYhmS3foRY/h+pFXIPmNCiGlbS+yloyxiPScwGn9tN15v owP/zdldkpwFqDABx3vgsR4TEDZLgqiOcR5z/QjdF6pb2B2Mxx9KjZ+5GqkIj8X2 teDKUmFQ+7aV68GuNEVll1LKsX/r9w7YY0jtg2G2ZrEbyIHtN8PWyC13HeIx7iBY Q3YFH2uHmgBaaLiQzEjqCJGTOr2BI6/1 -----END CERTIFICATE-----Generated at Sun May 19 01:47:09 2024 by rpki-client on console-ams.rpki-client.org