$ rpki-client -vvf rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft File: Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft (raw, json) Hash identifier: etL+m3PMtqiuTwwPGJPPD2RNM0tCscj+nZ39knGG26M= Subject key identifier: 07:59:32:33:45:1A:13:DC:55:D0:E2:A4:7E:CD:54:09:2A:B3:65:C0 Authority key identifier: 5D:EE:16:EF:85:A2:BF:84:DA:D8:87:66:67:59:B1:EC:15:D1:B9:4C Certificate issuer: /CN=A91569FB/serialNumber=5DEE16EF85A2BF84DAD887666759B1EC15D1B94C Certificate serial: 05CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft Manifest number: 05C8 Signing time: Sat 01 Jun 2024 01:00:20 +0000 Manifest this update: Sat 01 Jun 2024 01:00:20 +0000 Manifest next update: Sat 08 Jun 2024 01:00:20 +0000 Files and hashes: 1: Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.crl (hash: sQrf7a29qAZf4hhLFLrLtc8IDF4O2Z94M35sobEDMVo=) 2: 154E7E02762211EBA80A6D61C4F9AE02.roa (hash: qkyN60ECu4BYWQ3TkIsHpS5OSWIDmixvU/RZxjOnAoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.crl rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 01:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1486 (0x5ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91569FB/serialNumber=5DEE16EF85A2BF84DAD887666759B1EC15D1B94C Validity Not Before: Jun 1 01:00:20 2024 GMT Not After : Jun 8 01:00:20 2024 GMT Subject: CN=665a72a4-5ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:48:98:a2:18:e6:67:44:af:39:14:59:9a:f5: 04:ae:36:62:cc:9f:90:a1:6a:c4:5e:fc:fb:c6:4d: ec:c2:a8:48:5a:99:21:7e:72:08:39:8f:41:71:8f: a3:34:13:0f:56:05:1e:a5:2c:94:6c:40:e6:f9:a4: ec:b7:d0:a0:69:af:30:94:0b:00:23:42:89:09:ea: 2a:40:f9:12:c3:db:09:e4:65:1d:02:a8:e3:07:4d: ea:ed:ee:3f:fc:6c:46:bc:a0:6e:e0:6f:95:4c:ff: 86:c1:0c:b9:39:8f:de:be:4f:18:e2:b9:a4:87:4c: c6:1d:d6:6a:29:10:fe:28:c5:ca:98:1e:63:b2:3f: 24:ec:e3:5b:07:6c:fe:ed:37:29:14:83:56:95:b8: 19:30:5d:c9:24:40:73:25:58:f5:a8:7e:02:29:d0: 80:0f:8e:cb:f8:3e:e8:dd:cb:16:a7:2a:c1:ab:49: 71:30:ff:1b:18:84:83:a2:06:41:63:d9:df:79:33: e3:c9:b5:d0:d0:69:51:68:2c:26:0c:d6:d0:7c:76: 23:3a:84:15:20:2c:93:44:27:f7:27:bf:e5:80:da: d5:34:72:c3:d4:25:17:d4:ae:f2:a0:53:51:f6:35: 62:2a:59:b0:a5:ca:ff:53:68:49:c7:84:07:44:a2: 13:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:59:32:33:45:1A:13:DC:55:D0:E2:A4:7E:CD:54:09:2A:B3:65:C0 X509v3 Authority Key Identifier: keyid:5D:EE:16:EF:85:A2:BF:84:DA:D8:87:66:67:59:B1:EC:15:D1:B9:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:55:52:9a:64:40:13:48:6e:14:ef:59:ce:87:2c:c2:e6:96: d9:d5:93:78:5a:38:91:a5:f2:98:f0:e1:13:30:ae:cd:e6:34: f4:50:7f:a1:33:d8:96:00:ff:8d:e5:77:3f:96:ec:f9:a5:8a: d2:6b:d6:7b:dd:74:6e:ab:e7:5d:64:c0:d8:c5:e7:fd:3b:0d: 64:17:9b:34:71:69:1e:5d:fd:7f:ed:c2:30:f6:d2:b1:f9:c6: 3b:f0:7c:fa:12:8c:97:af:89:cc:58:ba:33:30:76:e0:f7:c8: d3:ff:9b:37:5d:83:d3:60:6e:14:b0:83:d4:d1:ec:c0:de:04: 56:27:68:c4:90:d3:63:b1:a6:1b:95:6e:b4:bb:96:84:37:6a: e7:34:f8:1f:19:a3:da:9d:d6:dd:4f:4d:67:94:f5:d9:68:d1: f4:95:fd:b1:ac:26:07:f0:a5:0b:80:99:21:09:4e:68:ed:98: 69:ac:14:95:e4:31:44:f8:86:c4:a2:18:df:2b:1a:22:9c:58: f1:5f:d1:11:91:33:81:54:d7:e0:a7:08:0b:f0:71:51:65:80: 16:1e:93:3e:d8:22:6c:c6:d8:ff:18:ab:e6:f7:9b:18:12:d1: b3:05:c9:57:dc:5c:59:0a:4d:52:78:eb:ba:4e:49:f4:ec:b0: 76:ec:b1:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY5RkIxMTAvBgNVBAUTKDVERUUxNkVGODVBMkJGODREQUQ4ODc2NjY3NTlCMUVD MTVEMUI5NEMwHhcNMjQwNjAxMDEwMDIwWhcNMjQwNjA4MDEwMDIwWjAYMRYwFAYD VQQDEw02NjVhNzJhNC01Y2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0iYohjmZ0SvORRZmvUErjZizJ+QoWrEXvz7xk3swqhIWpkhfnIIOY9BcY+j NBMPVgUepSyUbEDm+aTst9Cgaa8wlAsAI0KJCeoqQPkSw9sJ5GUdAqjjB03q7e4/ /GxGvKBu4G+VTP+GwQy5OY/evk8Y4rmkh0zGHdZqKRD+KMXKmB5jsj8k7ONbB2z+ 7TcpFINWlbgZMF3JJEBzJVj1qH4CKdCAD47L+D7o3csWpyrBq0lxMP8bGISDogZB Y9nfeTPjybXQ0GlRaCwmDNbQfHYjOoQVICyTRCf3J7/lgNrVNHLD1CUX1K7yoFNR 9jViKlmwpcr/U2hJx4QHRKITFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdZMjNF GhPcVdDipH7NVAkqs2XAMB8GA1UdIwQYMBaAFF3uFu+For+E2tiHZmdZsewV0blM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjlGQi84REUxRENEQTc2 MjAxMUVCQkM1NTNDNjBDNEY5QUUwMi9YZTRXNzRXaXY0VGEySWRtWjFteDdCWFJ1 VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hlNFc3NFdpdjRUYTJJZG1aMW14N0JYUnVVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjlGQi84REUxRENEQTc2MjAxMUVCQkM1NTNDNjBDNEY5QUUwMi9YZTRXNzRXaXY0 VGEySWRtWjFteDdCWFJ1VXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFVVKaZEATSG4U71nOhyzC5pbZ1ZN4WjiRpfKY8OETMK7N5jT0UH+h M9iWAP+N5Xc/luz5pYrSa9Z73XRuq+ddZMDYxef9Ow1kF5s0cWkeXf1/7cIw9tKx +cY78Hz6EoyXr4nMWLozMHbg98jT/5s3XYPTYG4UsIPU0ezA3gRWJ2jEkNNjsaYb lW60u5aEN2rnNPgfGaPandbdT01nlPXZaNH0lf2xrCYH8KULgJkhCU5o7ZhprBSV 5DFE+IbEohjfKxoinFjxX9ERkTOBVNfgpwgL8HFRZYAWHpM+2CJsxtj/GKvm95sY EtGzBclX3FxZCk1SeOu6Tkn07LB27LEZ -----END CERTIFICATE-----Generated at Sat Jun 1 02:01:14 2024 by rpki-client on console-ams.rpki-client.org