$ rpki-client -vvf rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft File: -XxrnwabbALLPY6tWvc-UGwIyjg.mft (raw, json) Hash identifier: NqhsTlH5mZly8DRbl65sXG6+LiKHS+QPCu/Nbd34IMc= Subject key identifier: C8:C2:23:AB:CE:F8:83:07:C8:AC:95:38:63:86:86:40:06:50:7B:B0 Authority key identifier: F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38 Certificate issuer: /CN=A914DB69/serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft Manifest number: 71 Signing time: Sun 19 May 2024 07:29:48 +0000 Manifest this update: Sun 19 May 2024 07:29:48 +0000 Manifest next update: Sun 26 May 2024 07:29:48 +0000 Files and hashes: 1: -XxrnwabbALLPY6tWvc-UGwIyjg.crl (hash: +0WRLa9V+Mozy9E8XPmSQxF0FXGx/e5N7YBuxhEc6iY=) 2: C4AA7A3A6E5F11EE9F66E967C4F9AE02.roa (hash: wDBNzjkcu9/HIOj7kIuRbIYO4j1JlMBpLoGUy634Leo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DB69/serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38 Validity Not Before: May 19 07:29:48 2024 GMT Not After : May 26 07:29:48 2024 GMT Subject: CN=6649aa6c-0d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0f:a1:f4:12:22:17:24:33:a7:6a:6f:c1:37: b5:34:75:0c:3c:21:96:0a:99:b8:80:2c:33:d0:7b: 1f:89:27:a8:95:76:0e:75:16:75:63:2b:67:60:f0: 89:99:65:c1:b5:6a:f7:7e:bc:0a:52:3e:a0:0d:31: ff:d4:e6:57:12:e0:d9:d9:5e:f3:ed:9a:85:9b:6c: 13:35:5f:d9:4d:24:7e:55:f6:d2:7f:05:fe:86:89: 6b:29:77:97:47:a1:27:e1:97:b2:1d:7b:2b:40:3b: 93:60:f4:8f:90:9e:20:1e:3d:59:26:ea:13:72:5a: 85:6d:5a:c7:06:fa:c9:fa:75:6a:e0:52:ca:54:4a: 74:e4:cc:ad:9a:3a:00:c8:13:d4:60:5c:ac:8c:e3: 1d:eb:9b:26:41:88:2b:40:8f:4e:5d:db:79:84:e6: ce:d9:bd:25:94:9a:b0:15:90:08:1a:e0:7a:a8:53: 2d:41:2b:e1:f5:55:1e:9a:0a:10:61:a5:d2:8b:5b: fc:9d:f8:7f:39:dd:38:88:98:24:68:bf:4f:b0:42: 2a:2e:b9:ee:86:9f:31:ea:ee:6d:ef:9c:27:0e:ee: 26:e0:15:0f:2e:3e:9b:92:5f:09:89:33:01:48:16: 0b:e9:fd:78:e2:75:18:0d:39:36:06:d0:37:3b:4b: 9c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C2:23:AB:CE:F8:83:07:C8:AC:95:38:63:86:86:40:06:50:7B:B0 X509v3 Authority Key Identifier: keyid:F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:fc:4e:e0:0c:88:ba:1b:a6:f9:ba:51:1d:e5:d3:b6:b0:e1: e0:b8:c8:a4:9e:5a:f1:d6:2a:a9:11:16:10:72:30:70:10:aa: a1:74:84:04:4a:c9:ce:7e:e8:79:28:d1:fc:4a:b4:b3:9e:c0: 60:75:a8:79:9b:7e:41:d3:37:8d:a6:9e:06:ff:e2:87:11:40: 7d:1f:c6:46:b8:9a:b9:30:ce:4e:04:c2:67:f9:ad:52:dc:6e: 35:cb:64:fd:c7:ea:a7:b2:3f:38:89:02:29:92:87:ac:8f:a5: 44:3e:b5:e8:44:61:d8:fa:aa:5b:ad:d7:d9:3c:e4:27:4c:62: 44:05:6c:9c:1e:08:82:a4:21:c6:07:3a:44:de:66:53:eb:8f: 9f:06:fa:82:c1:a7:ea:96:36:76:5f:a8:eb:8d:11:2e:5f:84: 9f:b2:ae:4f:25:bc:91:7e:c6:72:51:7e:99:06:1b:5b:df:af: e6:72:8e:38:c7:5c:32:b9:42:47:52:43:d1:68:f9:4c:1f:62: 1b:bf:c9:07:8b:f9:fb:9a:0d:16:eb:87:df:7e:1d:a7:a1:8c: 1c:79:72:64:e3:ac:66:77:75:fd:7d:8e:7d:01:69:0c:61:24: ea:a9:cc:89:42:fd:ed:ed:cd:3a:75:b9:49:7b:00:04:5f:c2: 08:6a:7a:58 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 REI2OTExMC8GA1UEBRMoRjk3QzZCOUYwNjlCNkMwMkNCM0Q4RUFENUFGNzNFNTA2 QzA4Q0EzODAeFw0yNDA1MTkwNzI5NDhaFw0yNDA1MjYwNzI5NDhaMBgxFjAUBgNV BAMTDTY2NDlhYTZjLTBkMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClD6H0EiIXJDOnam/BN7U0dQw8IZYKmbiALDPQex+JJ6iVdg51FnVjK2dg8ImZ ZcG1avd+vApSPqANMf/U5lcS4NnZXvPtmoWbbBM1X9lNJH5V9tJ/Bf6GiWspd5dH oSfhl7IdeytAO5Ng9I+QniAePVkm6hNyWoVtWscG+sn6dWrgUspUSnTkzK2aOgDI E9RgXKyM4x3rmyZBiCtAj05d23mE5s7ZvSWUmrAVkAga4HqoUy1BK+H1VR6aChBh pdKLW/yd+H853TiImCRov0+wQiouue6GnzHq7m3vnCcO7ibgFQ8uPpuSXwmJMwFI Fgvp/XjidRgNOTYG0Dc7S5xHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyMIjq874 gwfIrJU4Y4aGQAZQe7AwHwYDVR0jBBgwFoAU+XxrnwabbALLPY6tWvc+UGwIyjgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREQjY5L0RBODYwQ0M4NkU1 QzExRUU5QzAxMzM2MUM0RjlBRTAyLy1YeHJud2FiYkFMTFBZNnRXdmMtVUd3SXlq Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLVh4cm53YWJiQUxMUFk2dFd2Yy1VR3dJeWpnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE QjY5L0RBODYwQ0M4NkU1QzExRUU5QzAxMzM2MUM0RjlBRTAyLy1YeHJud2FiYkFM TFBZNnRXdmMtVUd3SXlqZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACP8TuAMiLobpvm6UR3l07aw4eC4yKSeWvHWKqkRFhByMHAQqqF0hARK yc5+6Hko0fxKtLOewGB1qHmbfkHTN42mngb/4ocRQH0fxka4mrkwzk4Ewmf5rVLc bjXLZP3H6qeyPziJAimSh6yPpUQ+tehEYdj6qlut19k85CdMYkQFbJweCIKkIcYH OkTeZlPrj58G+oLBp+qWNnZfqOuNES5fhJ+yrk8lvJF+xnJRfpkGG1vfr+ZyjjjH XDK5QkdSQ9Fo+UwfYhu/yQeL+fuaDRbrh99+HaehjBx5cmTjrGZ3df19jn0BaQxh JOqpzIlC/e3tzTp1uUl7AARfwghqelg= -----END CERTIFICATE-----Generated at Sun May 19 08:26:43 2024 by rpki-client on console-fra.rpki-client.org