$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft File: xr-JcJivRIalTii6Pv9TXUUolBE.mft (raw, json) Hash identifier: UgPxqLZRT9n/kI934lJ+uCr1Y7vhXPm9/DfyXJQTdJo= Subject key identifier: 87:4D:FA:4E:59:C4:41:FF:FD:D0:C8:53:7A:99:0C:6B:D8:BF:1D:45 Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 Certificate issuer: /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Certificate serial: 224A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft Manifest number: 2220 Signing time: Sat 04 May 2024 16:14:58 +0000 Manifest this update: Sat 04 May 2024 16:14:57 +0000 Manifest next update: Sat 11 May 2024 16:14:57 +0000 Files and hashes: 1: xr-JcJivRIalTii6Pv9TXUUolBE.crl (hash: b5WiGiixi4Gug/ElmgsQRY2vl+EDA/MYS0ta315W8OQ=) 2: 3CB9EF84BF9511EEAD184E59C4F9AE02.roa (hash: 0E6kCAbBWjOzpnldz+3yyTPwXBQYeelPRq++GjN98pI=) 3: 1A519CD615DD11EBAA7C4D52C4F9AE02.roa (hash: LvnN9fDKCVzFVLCsoE1cCwf8BQyVry4uoLmQQxu2nXs=) 4: 05473E9EF28911EAB006D11BC4F9AE02.roa (hash: 0oH2mmU5r5IU4xxxT30t56WYPFMGsM6PNMn8tM27vV4=) 5: 3DD736B0BF9511EEAD184E59C4F9AE02.roa (hash: ZjyNbUjTEmXclvfkUsDawMAFcngwwS/cepT6NtuGViI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8778 (0x224a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Validity Not Before: May 4 16:14:57 2024 GMT Not After : May 11 16:14:57 2024 GMT Subject: CN=66365f01-9545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b1:53:9a:ed:f4:57:f1:d9:57:bc:9e:76:f5: cf:13:c0:fd:42:f2:fe:0e:f7:ed:33:c2:bd:c0:a2: fb:98:21:f4:b9:34:be:63:ae:32:b3:ea:41:99:99: a8:72:c0:1c:ca:62:91:8b:49:1f:66:85:f1:fa:25: 37:d2:ae:ca:58:cd:03:52:8c:66:67:0e:66:65:94: cc:08:4a:5f:d6:fe:c1:54:31:6f:73:87:87:92:cf: ba:da:b5:93:ac:17:04:3c:fe:19:2f:35:2d:88:96: 34:86:34:fc:83:c3:e9:1c:e0:eb:13:84:e5:a0:a7: fe:a3:b8:40:60:8a:a0:0d:0b:6e:a0:38:63:a0:0b: 2d:7d:95:db:ad:e2:f7:e5:60:47:1c:83:47:29:72: 53:5a:5a:6d:18:6c:ca:0c:40:4b:b2:94:df:d2:b5: 47:e5:5d:74:ff:e2:a5:2d:1a:bf:2b:b0:db:e6:ee: 4b:71:ef:14:f3:04:03:db:e1:65:b4:9d:f6:ff:a1: 51:c9:32:ad:14:d7:64:d8:41:77:bb:fc:b7:b3:09: 4a:34:45:28:b0:7d:aa:37:4f:33:0c:29:18:68:05: 90:52:94:d6:23:5b:5a:34:e7:7b:0e:f5:33:1a:aa: 00:37:67:23:c9:6f:de:45:49:e8:95:60:ce:cf:32: 68:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:4D:FA:4E:59:C4:41:FF:FD:D0:C8:53:7A:99:0C:6B:D8:BF:1D:45 X509v3 Authority Key Identifier: keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:9a:fd:be:70:15:2c:40:0a:87:ee:fd:54:29:7a:a8:02:94: b9:44:dd:bb:4a:fb:4b:3b:bd:28:b0:ed:49:12:a1:73:b7:67: 6d:be:e4:0e:da:a1:5b:ce:84:03:f9:ac:4f:d2:01:db:96:47: 89:1d:97:07:0b:69:3f:43:98:5d:c8:36:8e:e0:eb:72:8c:3f: e5:bc:94:41:ef:c2:95:ff:ef:18:77:ac:b2:5a:ff:ac:de:b6: 34:61:de:e3:f0:0d:26:1e:1a:eb:8b:fb:a7:42:6e:8e:cf:d7: 94:84:e5:13:db:dd:7f:89:4f:02:3f:41:04:0f:b3:15:78:30: 63:9e:dd:6b:61:53:21:31:ac:25:61:5b:09:f7:76:b8:ce:c4: 5d:00:57:07:0f:1b:e6:11:9f:7f:14:73:ab:87:b2:a7:68:32: e0:ff:97:1b:8c:f6:db:0e:9d:34:d7:43:ad:7c:41:74:77:88: 6f:19:f8:44:8d:77:43:95:fe:80:48:2e:79:a0:59:c4:36:84: f9:18:f4:54:3c:a6:c0:f1:e4:43:b1:40:ed:9b:e8:4c:a7:c3: 9a:62:ce:da:31:dc:83:cb:36:f1:8d:83:61:9a:84:c6:cd:c8: 3e:a1:cd:07:4e:ae:88:a4:89:2f:d7:8d:73:19:dc:34:ea:20: 51:5c:06:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAxQ0UxMTAvBgNVBAUTKEM2QkY4OTcwOThBRjQ0ODZBNTRFMjhCQTNFRkY1MzVE NDUyODk0MTEwHhcNMjQwNTA0MTYxNDU3WhcNMjQwNTExMTYxNDU3WjAYMRYwFAYD VQQDEw02NjM2NWYwMS05NTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnrFTmu30V/HZV7yedvXPE8D9QvL+DvftM8K9wKL7mCH0uTS+Y64ys+pBmZmo csAcymKRi0kfZoXx+iU30q7KWM0DUoxmZw5mZZTMCEpf1v7BVDFvc4eHks+62rWT rBcEPP4ZLzUtiJY0hjT8g8PpHODrE4TloKf+o7hAYIqgDQtuoDhjoAstfZXbreL3 5WBHHINHKXJTWlptGGzKDEBLspTf0rVH5V10/+KlLRq/K7Db5u5Lce8U8wQD2+Fl tJ32/6FRyTKtFNdk2EF3u/y3swlKNEUosH2qN08zDCkYaAWQUpTWI1taNOd7DvUz GqoAN2cjyW/eRUnolWDOzzJoLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdN+k5Z xEH//dDIU3qZDGvYvx1FMB8GA1UdIwQYMBaAFMa/iXCYr0SGpU4ouj7/U11FKJQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFDRS85M0JBODUzQTk3 RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJYWxUaWk2UHY5VFhVVW9s QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hyLUpjSml2UklhbFRpaTZQdjlUWFVVb2xCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDFDRS85M0JBODUzQTk3RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJ YWxUaWk2UHY5VFhVVW9sQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjmv2+cBUsQAqH7v1UKXqoApS5RN27SvtLO70osO1JEqFzt2dtvuQO 2qFbzoQD+axP0gHblkeJHZcHC2k/Q5hdyDaO4OtyjD/lvJRB78KV/+8Yd6yyWv+s 3rY0Yd7j8A0mHhrri/unQm6Oz9eUhOUT291/iU8CP0EED7MVeDBjnt1rYVMhMawl YVsJ93a4zsRdAFcHDxvmEZ9/FHOrh7KnaDLg/5cbjPbbDp0010OtfEF0d4hvGfhE jXdDlf6ASC55oFnENoT5GPRUPKbA8eRDsUDtm+hMp8OaYs7aMdyDyzbxjYNhmoTG zcg+oc0HTq6IpIkv141zGdw06iBRXAbK -----END CERTIFICATE-----Generated at Sat May 4 17:19:48 2024 by rpki-client on console-fra.rpki-client.org