$ rpki-client -vvf rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft File: x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft (raw, json) Hash identifier: mjD5b+YTUfGocIpf9LdZcsjxPOoNU9KXGBn6J6rUbHM= Subject key identifier: 3E:DE:9C:BD:6F:9C:5F:53:87:DE:B9:7D:41:F1:45:C4:16:8D:EA:56 Authority key identifier: C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26 Certificate issuer: /CN=A9158131/serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026 Certificate serial: 0A3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft Manifest number: 0A32 Signing time: Thu 30 May 2024 20:58:16 +0000 Manifest this update: Thu 30 May 2024 20:58:16 +0000 Manifest next update: Thu 06 Jun 2024 20:58:16 +0000 Files and hashes: 1: x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl (hash: 7y7ngCP3qLUskju+YaQbrj47/peVF4pqMVHiJhoedso=) 2: E2CAB200747311EDABDC9A09C4F9AE02.roa (hash: tczMpXzuNlKMPuNz1GdcamFa9b/9AeLt6mRuOdxR4aA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 20:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2618 (0xa3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158131/serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026 Validity Not Before: May 30 20:58:16 2024 GMT Not After : Jun 6 20:58:16 2024 GMT Subject: CN=6658e868-b44e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ca:14:e9:8a:bc:75:25:bf:8e:05:77:95:8d: e4:c6:56:0b:dd:53:d1:59:c1:48:86:6c:54:66:5b: 37:6b:1c:bb:db:d4:2b:21:56:69:bd:ff:84:56:21: d9:37:97:d1:5b:0a:50:57:16:da:b0:46:7e:31:29: 10:fa:d0:ed:8b:5a:b5:22:40:19:f8:da:7e:2a:08: ee:98:41:31:17:b1:82:ff:9b:ad:57:90:fa:b7:d0: 78:ed:cc:68:c5:1c:e1:29:9d:0e:27:cd:c2:48:e4: 46:64:c2:ee:1d:72:e7:45:b1:fd:c0:6e:68:ff:54: bb:b0:63:62:13:b3:f2:03:66:5b:22:40:4b:71:35: 5f:e9:e1:b8:92:cb:e0:f6:ef:7b:49:ed:ee:45:35: 86:81:34:04:bb:f2:18:3e:95:e7:f1:eb:3e:19:e5: cc:f3:d8:03:96:25:cf:aa:f0:c8:58:92:0c:f2:11: 30:a8:a5:22:2f:83:5a:91:a3:5f:8e:9f:ab:c0:c3: 4f:4f:c2:3b:68:6a:4a:50:e1:a7:d7:4d:44:61:29: 28:b5:8a:01:a1:77:86:98:49:52:6e:c6:e6:96:08: de:6f:9f:c6:4c:72:2f:83:20:a8:48:3e:ad:df:bb: 88:69:57:bc:43:91:d0:63:87:34:3b:bd:65:fe:2f: 48:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:DE:9C:BD:6F:9C:5F:53:87:DE:B9:7D:41:F1:45:C4:16:8D:EA:56 X509v3 Authority Key Identifier: keyid:C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:4e:0a:80:40:30:d3:c6:5c:33:a9:09:31:bf:f7:bf:01:50: d1:20:35:fc:a0:e5:e4:db:da:64:ed:07:f7:02:a5:f9:2c:dc: 73:7d:8a:a3:40:83:14:39:7a:4b:22:4d:09:86:24:63:a7:84: f4:9b:c3:f3:1e:f0:51:72:a7:cc:f4:7a:b2:ff:8b:ea:5f:90: 1d:0c:3b:80:57:1d:c0:ab:a2:60:87:51:0c:78:c6:ae:1c:27: 92:89:19:47:f2:fb:0e:ec:6c:41:5c:b1:6e:f8:8e:60:be:88: 53:f5:c9:74:c9:ee:88:27:44:35:a3:c6:01:d6:27:6a:0f:82: 7e:de:ca:eb:0f:31:bd:9d:0a:00:53:bc:51:48:19:46:21:cb: b3:92:a3:ae:f7:1d:4b:f4:40:2d:af:f7:02:c7:02:21:50:5e: 8c:5c:a4:5b:a9:a6:2f:1a:67:5b:4c:04:42:41:da:00:2f:22: 26:ae:19:9d:97:e8:8c:72:c2:82:8e:f2:97:96:6d:d3:96:03: c6:07:7c:a1:24:b6:ba:e4:2f:6e:cf:e1:0d:8a:1f:9b:46:d6: 6d:80:a2:44:12:d9:ba:e2:fb:9c:b8:65:9a:32:3a:a2:ab:85: 85:13:41:fe:4e:c0:52:b5:5e:52:d5:2c:80:93:88:48:f2:42: a7:46:31:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgxMzExMTAvBgNVBAUTKEM3OUJCRUFBNjYyNDFFRUNGMDFDMzAzMzVEQjE4RUYy QjNGNTYwMjYwHhcNMjQwNTMwMjA1ODE2WhcNMjQwNjA2MjA1ODE2WjAYMRYwFAYD VQQDEw02NjU4ZTg2OC1iNDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo8oU6Yq8dSW/jgV3lY3kxlYL3VPRWcFIhmxUZls3axy729QrIVZpvf+EViHZ N5fRWwpQVxbasEZ+MSkQ+tDti1q1IkAZ+Np+KgjumEExF7GC/5utV5D6t9B47cxo xRzhKZ0OJ83CSORGZMLuHXLnRbH9wG5o/1S7sGNiE7PyA2ZbIkBLcTVf6eG4ksvg 9u97Se3uRTWGgTQEu/IYPpXn8es+GeXM89gDliXPqvDIWJIM8hEwqKUiL4NakaNf jp+rwMNPT8I7aGpKUOGn101EYSkotYoBoXeGmElSbsbmlgjeb5/GTHIvgyCoSD6t 37uIaVe8Q5HQY4c0O71l/i9IpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7enL1v nF9Th965fUHxRcQWjepWMB8GA1UdIwQYMBaAFMebvqpmJB7s8BwwM12xjvKz9WAm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODEzMS85ODJBQjZFNjQ4 QjExMUVBOTZBMDZDN0VDNEY5QUUwMi94NXUtcW1Za0h1endIREF6WGJHTzhyUDFZ Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g1dS1xbVlrSHV6d0hEQXpYYkdPOHJQMVlDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODEzMS85ODJBQjZFNjQ4QjExMUVBOTZBMDZDN0VDNEY5QUUwMi94NXUtcW1Za0h1 endIREF6WGJHTzhyUDFZQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYTgqAQDDTxlwzqQkxv/e/AVDRIDX8oOXk29pk7Qf3AqX5LNxzfYqj QIMUOXpLIk0JhiRjp4T0m8PzHvBRcqfM9Hqy/4vqX5AdDDuAVx3Aq6Jgh1EMeMau HCeSiRlH8vsO7GxBXLFu+I5gvohT9cl0ye6IJ0Q1o8YB1idqD4J+3srrDzG9nQoA U7xRSBlGIcuzkqOu9x1L9EAtr/cCxwIhUF6MXKRbqaYvGmdbTARCQdoALyImrhmd l+iMcsKCjvKXlm3TlgPGB3yhJLa65C9uz+ENih+bRtZtgKJEEtm64vucuGWaMjqi q4WFE0H+TsBStV5S1SyAk4hI8kKnRjFH -----END CERTIFICATE-----Generated at Thu May 30 21:49:32 2024 by rpki-client on console-ams.rpki-client.org