$ rpki-client -vvf rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft File: X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft (raw, json) Hash identifier: 4mLQJTvzNb8YuIDR/qjL56IOcbxzuNAfqMjS7RihcEw= Subject key identifier: AE:F5:E3:18:50:DD:6D:39:8A:F2:0F:90:54:3B:E1:EC:8B:83:F3:57 Authority key identifier: 5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76 Certificate issuer: /CN=A9156255/serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft Manifest number: 0129 Signing time: Sun 19 May 2024 05:05:48 +0000 Manifest this update: Sun 19 May 2024 05:05:48 +0000 Manifest next update: Sun 26 May 2024 05:05:48 +0000 Files and hashes: 1: X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl (hash: 86EVT3RhtVAwMJseau+LAlnwIvqo6aYSBkbHGYf4i8I=) 2: 5637146C507611EDB59D9E2EC4F9AE02.roa (hash: OY0zr2n6spxnIHGbL3oStlwDmEG60mOZ/pJc1RRwfOk=) 3: D1FCB742514711ED92E3885EC4F9AE02.roa (hash: YxeOVJUAGpB4uR8Uh6hpe+MVw/LDcqDhKKHxSAXAZM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156255/serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76 Validity Not Before: May 19 05:05:48 2024 GMT Not After : May 26 05:05:48 2024 GMT Subject: CN=664988ac-25ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c3:c6:95:3c:8e:19:f7:f3:af:5e:c1:56:c1: 00:d1:84:eb:8e:92:cc:e4:72:57:1e:61:59:d0:6f: d2:28:df:9e:9d:79:e4:ba:cd:00:ff:d7:ad:ee:82: f9:c9:85:3c:5e:4f:9a:44:6d:7b:05:03:0f:56:b2: 6c:33:c3:0b:6e:77:a5:35:a8:c8:18:be:e9:06:52: 14:50:de:30:9c:39:99:66:1f:57:9b:58:ab:ed:25: 2b:8e:e2:bc:1b:cd:74:8b:c4:2a:92:a0:33:03:5a: 4c:76:2b:20:1d:f8:d4:83:54:33:eb:49:ae:95:e7: 47:fd:cd:06:00:1a:7d:10:a1:4c:3a:22:1d:6c:59: 35:5c:ec:a1:2d:04:f9:b4:9c:ac:9a:df:f3:49:9b: 3a:b3:78:f1:82:2c:9c:75:bd:0b:21:d3:9d:85:ec: ad:25:e5:c5:81:7c:c0:24:cd:56:2e:3d:d6:89:8d: ec:e9:28:76:a1:06:44:00:da:27:e6:42:73:a2:4f: d4:48:3c:b3:fe:a4:fd:e5:f9:13:94:c5:7e:67:69: 15:11:7e:ed:6a:1b:6e:f2:91:e6:e4:7e:71:31:65: c7:0d:2c:ce:c9:fe:28:2f:5e:f6:d5:2f:1c:b9:84: 11:b7:ee:a6:03:c2:f6:5c:e6:ac:c7:cb:3a:c4:1b: 52:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F5:E3:18:50:DD:6D:39:8A:F2:0F:90:54:3B:E1:EC:8B:83:F3:57 X509v3 Authority Key Identifier: keyid:5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:06:61:a1:4e:5f:f2:be:58:1c:ae:5a:51:d8:ec:00:76:5a: 7f:66:e3:d3:c0:ea:39:cf:b2:72:ab:b2:5a:9d:49:3d:64:e2: 1e:09:ca:70:84:ba:f7:3c:fa:5e:5e:5c:ce:e1:5d:80:db:44: 43:27:49:5e:94:17:c0:48:ef:dc:60:c6:7f:70:c4:00:79:9a: 19:85:ec:34:8e:dc:c9:cb:38:a4:a2:a0:63:4a:07:83:36:cb: 97:91:31:8e:e7:07:df:ad:56:b1:f3:66:d6:9d:81:b8:c2:15: 7c:40:1a:9f:57:a3:85:a0:cf:93:3f:a3:1c:a8:53:8d:72:49: 37:af:9d:2b:05:4f:89:f1:c7:71:55:f0:49:1d:cb:fa:5d:04: cf:00:78:06:87:aa:a5:74:fd:74:2a:75:ce:10:ca:cf:88:55: 06:8f:75:45:f0:2a:c3:e4:0d:fb:67:28:3f:56:17:14:1e:e0: 2c:73:9c:f7:05:9d:09:d4:73:81:a8:90:ed:87:35:7b:0c:fd: 4c:e8:d4:ff:1f:24:8f:dc:d4:4c:1d:b5:34:32:4f:20:b0:0f: 58:8d:36:c2:b3:7c:41:a2:08:28:bc:82:7a:85:d3:2c:7e:38: 13:10:cc:39:6e:bd:5c:1d:31:b4:1e:b9:60:18:f2:66:91:48: 07:b0:41:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYyNTUxMTAvBgNVBAUTKDVGNkM4RkEzQTY1ODc0MDIzMUIyQzRCMTM0ODFCRTEx NTAwQURDNzYwHhcNMjQwNTE5MDUwNTQ4WhcNMjQwNTI2MDUwNTQ4WjAYMRYwFAYD VQQDEw02NjQ5ODhhYy0yNWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcPGlTyOGffzr17BVsEA0YTrjpLM5HJXHmFZ0G/SKN+enXnkus0A/9et7oL5 yYU8Xk+aRG17BQMPVrJsM8MLbnelNajIGL7pBlIUUN4wnDmZZh9Xm1ir7SUrjuK8 G810i8QqkqAzA1pMdisgHfjUg1Qz60muledH/c0GABp9EKFMOiIdbFk1XOyhLQT5 tJysmt/zSZs6s3jxgiycdb0LIdOdheytJeXFgXzAJM1WLj3WiY3s6Sh2oQZEANon 5kJzok/USDyz/qT95fkTlMV+Z2kVEX7tahtu8pHm5H5xMWXHDSzOyf4oL1721S8c uYQRt+6mA8L2XOasx8s6xBtSVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK714xhQ 3W05ivIPkFQ74eyLg/NXMB8GA1UdIwQYMBaAFF9sj6OmWHQCMbLEsTSBvhFQCtx2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjI1NS85MTYyMDg0QzUw NzMxMUVEOUI4QzE0MkRDNEY5QUUwMi9YMnlQbzZaWWRBSXhzc1N4TklHLUVWQUsz SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gyeVBvNlpZZEFJeHNzU3hOSUctRVZBSzNIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjI1NS85MTYyMDg0QzUwNzMxMUVEOUI4QzE0MkRDNEY5QUUwMi9YMnlQbzZaWWRB SXhzc1N4TklHLUVWQUszSFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHBmGhTl/yvlgcrlpR2OwAdlp/ZuPTwOo5z7Jyq7JanUk9ZOIeCcpw hLr3PPpeXlzO4V2A20RDJ0lelBfASO/cYMZ/cMQAeZoZhew0jtzJyzikoqBjSgeD NsuXkTGO5wffrVax82bWnYG4whV8QBqfV6OFoM+TP6McqFONckk3r50rBU+J8cdx VfBJHcv6XQTPAHgGh6qldP10KnXOEMrPiFUGj3VF8CrD5A37Zyg/VhcUHuAsc5z3 BZ0J1HOBqJDthzV7DP1M6NT/HySP3NRMHbU0Mk8gsA9YjTbCs3xBoggovIJ6hdMs fjgTEMw5br1cHTG0HrlgGPJmkUgHsEHZ -----END CERTIFICATE-----Generated at Sun May 19 05:48:50 2024 by rpki-client on console-fra.rpki-client.org