$ rpki-client -vvf rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft File: XCJQF8zJYrDnOQswzwpWIvfN-u0.mft (raw, json) Hash identifier: 3NCLzTtj076+6kI0efWkuLjvJP2yUHWrBtl+kduzC7A= Subject key identifier: 4E:14:84:4A:41:E3:CC:88:A7:67:E1:D0:7C:6F:D0:2C:C9:35:4B:28 Authority key identifier: 5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED Certificate issuer: /CN=A9154330/serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED Certificate serial: 11EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft Manifest number: 11EB Signing time: Sat 18 May 2024 17:42:18 +0000 Manifest this update: Sat 18 May 2024 17:42:18 +0000 Manifest next update: Sat 25 May 2024 17:42:18 +0000 Files and hashes: 1: XCJQF8zJYrDnOQswzwpWIvfN-u0.crl (hash: XB5tSo3aJNBXgj1D1PpPQRZFDkckbJwBMGp7PMoswUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4588 (0x11ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154330/serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED Validity Not Before: May 18 17:42:18 2024 GMT Not After : May 25 17:42:18 2024 GMT Subject: CN=6648e87a-82bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:81:19:5b:b5:68:4d:d0:c6:9e:cd:11:48:67: 88:c3:c2:7f:cf:e7:32:0a:62:f1:f2:5e:53:b5:24: 68:06:5d:a0:aa:e2:f6:5a:a0:2a:2e:38:1b:ac:b3: 42:6e:02:a0:32:a6:bc:49:2c:f9:87:4b:54:43:19: cf:9f:da:21:e7:43:88:0e:62:f9:be:4d:df:26:49: 02:ea:55:f0:24:d0:fe:36:f6:60:bb:3f:7f:26:89: c9:d4:bb:0c:3c:17:6a:0f:e6:48:0b:b2:49:05:9e: 4a:1e:49:b5:95:fb:fb:a2:aa:77:d9:33:3e:78:b5: c2:95:8a:81:8c:e8:8a:f9:65:00:eb:0f:66:f4:1d: d2:d4:12:0e:b5:be:0d:bd:fb:b3:53:24:ca:6c:bd: 75:27:0e:b1:c9:40:67:ef:37:99:17:c5:8d:8a:52: 8a:31:c4:89:19:bc:13:45:66:f7:51:5c:23:4d:5a: a4:59:4a:1f:d4:7f:ed:58:5a:4d:87:e1:bb:b2:3c: 79:19:e1:f5:d2:2c:6a:18:ae:96:78:3f:4b:fe:f7: fa:0b:5c:32:1f:dd:f5:13:f9:bb:7b:b7:3a:21:66: a1:7e:3c:63:04:b1:9e:5e:ef:f8:a8:8c:58:78:7a: e3:83:af:8e:3a:21:0d:82:12:9f:17:19:74:35:b4: 16:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:14:84:4A:41:E3:CC:88:A7:67:E1:D0:7C:6F:D0:2C:C9:35:4B:28 X509v3 Authority Key Identifier: keyid:5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:5c:57:b1:aa:be:4d:46:48:32:e1:f8:b5:24:ad:d7:83:d1: a0:2d:d5:35:aa:d3:7b:ee:be:86:9f:82:8f:0f:a9:14:7a:1b: 10:e6:6d:23:3b:7e:1b:9e:22:3b:db:34:9b:c7:85:b3:77:c9: b5:ca:11:1d:47:5d:86:2f:d0:11:85:41:78:bc:35:91:53:70: 51:94:d4:5b:45:61:74:48:f8:76:73:94:72:b6:84:3f:6d:9b: bd:a2:13:bc:21:eb:2e:c2:3e:5c:ee:cc:2f:96:ef:da:75:8f: bd:39:a6:35:f2:29:20:b3:f1:d2:82:f3:6d:db:d8:58:1f:ee: 21:68:6c:97:50:46:d1:fd:a9:6a:59:61:2c:91:a6:bd:fe:5e: 61:3e:5f:6e:49:36:af:21:dc:45:a6:c5:0e:e6:25:98:29:96: 3e:67:31:f3:8e:a0:fb:27:45:60:3a:4b:53:10:49:5a:4b:e3: e9:87:67:11:0c:e3:f7:7d:46:3a:15:74:f7:ca:b4:b7:80:86: d8:3d:d7:0c:a5:b9:73:3d:84:cd:1e:bb:a9:d1:99:4b:0d:4c: 36:c6:55:01:18:16:20:59:79:cc:ee:cc:a0:ff:46:e5:60:94: d0:9f:ac:98:91:57:f7:2e:f5:6b:7a:e9:7f:11:6f:51:0e:83: 59:09:e7:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzMzAxMTAvBgNVBAUTKDVDMjI1MDE3Q0NDOTYyQjBFNzM5MEIzMENGMEE1NjIy RjdDREZBRUQwHhcNMjQwNTE4MTc0MjE4WhcNMjQwNTI1MTc0MjE4WjAYMRYwFAYD VQQDEw02NjQ4ZTg3YS04MmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4EZW7VoTdDGns0RSGeIw8J/z+cyCmLx8l5TtSRoBl2gquL2WqAqLjgbrLNC bgKgMqa8SSz5h0tUQxnPn9oh50OIDmL5vk3fJkkC6lXwJND+NvZguz9/JonJ1LsM PBdqD+ZIC7JJBZ5KHkm1lfv7oqp32TM+eLXClYqBjOiK+WUA6w9m9B3S1BIOtb4N vfuzUyTKbL11Jw6xyUBn7zeZF8WNilKKMcSJGbwTRWb3UVwjTVqkWUof1H/tWFpN h+G7sjx5GeH10ixqGK6WeD9L/vf6C1wyH931E/m7e7c6IWahfjxjBLGeXu/4qIxY eHrjg6+OOiENghKfFxl0NbQWiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4UhEpB 48yIp2fh0Hxv0CzJNUsoMB8GA1UdIwQYMBaAFFwiUBfMyWKw5zkLMM8KViL3zfrt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDMzMC9FQUQ4NzYzQ0Mw OTMxMUU4ODBFNTJEMjNDNEY5QUUwMi9YQ0pRRjh6SllyRG5PUXN3endwV0l2Zk4t dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hDSlFGOHpKWXJEbk9Rc3d6d3BXSXZmTi11MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDMzMC9FQUQ4NzYzQ0MwOTMxMUU4ODBFNTJEMjNDNEY5QUUwMi9YQ0pRRjh6Slly RG5PUXN3endwV0l2Zk4tdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZXFexqr5NRkgy4fi1JK3Xg9GgLdU1qtN77r6Gn4KPD6kUehsQ5m0j O34bniI72zSbx4Wzd8m1yhEdR12GL9ARhUF4vDWRU3BRlNRbRWF0SPh2c5RytoQ/ bZu9ohO8Iesuwj5c7swvlu/adY+9OaY18ikgs/HSgvNt29hYH+4haGyXUEbR/alq WWEskaa9/l5hPl9uSTavIdxFpsUO5iWYKZY+ZzHzjqD7J0VgOktTEElaS+Pph2cR DOP3fUY6FXT3yrS3gIbYPdcMpblzPYTNHrup0ZlLDUw2xlUBGBYgWXnM7syg/0bl YJTQn6yYkVf3LvVreul/EW9RDoNZCeeZ -----END CERTIFICATE-----Generated at Sat May 18 18:12:32 2024 by rpki-client on console-fra.rpki-client.org