$ rpki-client -vvf rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft File: xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft (raw, json) Hash identifier: mZkItoHxd0RxTZAiTSKvl9anR+I7lyL6Ytwqr6Nq3IA= Subject key identifier: D2:04:69:54:69:FE:E0:5D:1E:49:B6:1E:43:B8:D5:B6:92:65:FB:1E Authority key identifier: C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39 Certificate issuer: /CN=A915786A/serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939 Certificate serial: 0B25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft Manifest number: 0B1C Signing time: Sat 18 May 2024 19:48:43 +0000 Manifest this update: Sat 18 May 2024 19:48:43 +0000 Manifest next update: Sat 25 May 2024 19:48:43 +0000 Files and hashes: 1: xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl (hash: R2/IOvIRF5LBrwZjxLHlXgylAAQeQgybPs4sN9mVOfA=) 2: 7A7B776A1F0E11EA92AA6824C4F9AE02.roa (hash: qdC3RXXI2ese84CT2DZhcrd1tTSHDCaQgi6PpPSd9uA=) 3: FBFF89FC3AC611EEB790D485C4F9AE02.roa (hash: 5QYLkBxS2o7LhwS3CXXj9GJZVFjczDsUJmQHQeSknek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:48:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2853 (0xb25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915786A/serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939 Validity Not Before: May 18 19:48:43 2024 GMT Not After : May 25 19:48:43 2024 GMT Subject: CN=6649061b-af0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3a:42:f8:b8:87:5d:89:dc:81:e5:00:96:c9: e3:61:a2:7a:d0:c1:c8:05:67:00:7d:66:f5:64:76: 50:54:82:5d:42:7e:71:00:80:9a:8b:c8:84:66:56: 5b:6d:d7:7c:fc:ef:a6:24:a0:47:bd:fc:5f:2c:65: 12:b3:9e:51:47:f3:14:46:b7:95:7b:fa:f0:83:66: 7c:98:03:e7:82:ee:2e:7e:77:0f:6d:68:a6:47:ea: 91:2b:56:2b:67:d9:86:f2:33:ba:8e:56:80:24:ca: 30:1a:1d:9e:61:5d:ae:ba:c3:0d:3c:7a:61:dc:1c: ee:29:74:f9:81:4a:4c:4d:80:10:ae:e3:f5:4c:71: fa:09:78:28:c5:75:16:2d:e4:1b:de:b1:ca:82:8a: a3:0e:50:bb:c6:ac:ec:43:07:04:9a:02:f5:c5:6a: d9:fe:d4:86:a4:b1:e5:01:cd:b5:11:b4:6f:e1:da: eb:05:86:17:12:fb:d7:c3:a8:61:dc:1e:96:4e:a7: 7d:b0:5e:1e:98:d7:12:14:18:63:2b:71:6a:07:02: c2:d6:5f:9a:f5:a8:92:bd:9f:d2:46:31:b0:da:89: 64:97:27:40:09:5b:26:39:8f:9d:c3:f4:a0:ba:29: 58:65:d8:7c:50:95:13:75:d9:fe:9e:47:35:67:64: 58:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:04:69:54:69:FE:E0:5D:1E:49:B6:1E:43:B8:D5:B6:92:65:FB:1E X509v3 Authority Key Identifier: keyid:C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:9d:25:f5:e8:f7:a3:1f:32:20:cf:9b:c5:5c:7a:06:9f:fc: 77:d0:25:59:8e:9d:a2:f5:e7:7c:98:f8:49:80:fd:00:45:14: ae:1e:30:e3:94:03:68:10:03:95:ab:1a:1a:95:10:2d:e2:52: 6d:c6:60:91:0c:e2:9c:39:49:25:b5:e2:05:dd:6a:e2:17:04: ba:66:07:8b:91:88:29:1f:40:1f:36:5d:cf:ae:df:5c:85:15: 90:95:27:ec:56:03:27:35:fe:e6:b2:27:c0:fb:81:03:b3:bd: 0c:02:2c:be:22:38:e5:f8:fa:ab:82:e3:20:ed:29:82:c9:dc: eb:7f:39:53:a5:cf:bf:ad:7c:60:0a:e9:78:f0:66:6e:e3:c2: a5:10:1f:7b:af:3c:9c:fa:5c:ec:d6:4f:03:25:67:b8:fc:11: 5b:33:e5:bf:50:32:fd:87:53:30:83:f9:d0:4e:49:55:5e:cb: 56:48:ef:29:12:fc:b3:b5:49:40:0d:f0:35:2d:62:43:b0:87: 67:7e:55:31:c9:54:a9:92:f6:67:84:16:da:d0:bf:a8:83:fa: 2f:7d:02:b0:8c:db:03:50:c2:31:af:8f:f5:8b:d5:4a:ff:12: 6b:56:1c:23:e1:35:ac:b6:f6:cf:95:f1:4b:41:43:e4:6a:77: e3:29:48:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc4NkExMTAvBgNVBAUTKEM3MTUzMUQyNUY4MDU0OEY1QjY1MUY4NjQ5MzI1RjND OEZEODU5MzkwHhcNMjQwNTE4MTk0ODQzWhcNMjQwNTI1MTk0ODQzWjAYMRYwFAYD VQQDEw02NjQ5MDYxYi1hZjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5DpC+LiHXYncgeUAlsnjYaJ60MHIBWcAfWb1ZHZQVIJdQn5xAICai8iEZlZb bdd8/O+mJKBHvfxfLGUSs55RR/MURreVe/rwg2Z8mAPngu4ufncPbWimR+qRK1Yr Z9mG8jO6jlaAJMowGh2eYV2uusMNPHph3BzuKXT5gUpMTYAQruP1THH6CXgoxXUW LeQb3rHKgoqjDlC7xqzsQwcEmgL1xWrZ/tSGpLHlAc21EbRv4drrBYYXEvvXw6hh 3B6WTqd9sF4emNcSFBhjK3FqBwLC1l+a9aiSvZ/SRjGw2olklydACVsmOY+dw/Sg uilYZdh8UJUTddn+nkc1Z2RYswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNIEaVRp /uBdHkm2HkO41baSZfseMB8GA1UdIwQYMBaAFMcVMdJfgFSPW2UfhkkyXzyP2Fk5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Nzg2QS8xMjZERkM5NjFB NTUxMUVBODgwNDIyMTFDNEY5QUUwMi94eFV4MGwtQVZJOWJaUi1HU1RKZlBJX1lX VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h4VXgwbC1BVkk5YlpSLUdTVEpmUElfWVdUay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Nzg2QS8xMjZERkM5NjFBNTUxMUVBODgwNDIyMTFDNEY5QUUwMi94eFV4MGwtQVZJ OWJaUi1HU1RKZlBJX1lXVGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALnSX16PejHzIgz5vFXHoGn/x30CVZjp2i9ed8mPhJgP0ARRSuHjDj lANoEAOVqxoalRAt4lJtxmCRDOKcOUklteIF3WriFwS6ZgeLkYgpH0AfNl3Prt9c hRWQlSfsVgMnNf7msifA+4EDs70MAiy+Ijjl+PqrguMg7SmCydzrfzlTpc+/rXxg Cul48GZu48KlEB97rzyc+lzs1k8DJWe4/BFbM+W/UDL9h1Mwg/nQTklVXstWSO8p EvyztUlADfA1LWJDsIdnflUxyVSpkvZnhBba0L+og/ovfQKwjNsDUMIxr4/1i9VK /xJrVhwj4TWstvbPlfFLQUPkanfjKUi6 -----END CERTIFICATE-----Generated at Sat May 18 20:48:18 2024 by rpki-client on console-fra.rpki-client.org