$ rpki-client -vvf rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft File: xz6_TxX6Jikr9a24ioZXfsOnHN4.mft (raw, json) Hash identifier: PtvTbnxRPEe9JuMUYiWrOM1mjRd2ARfA8+evnzH7zpA= Subject key identifier: 73:D1:8E:2C:F5:23:7F:E8:F9:1B:9C:51:8C:52:C0:7C:89:96:6B:75 Authority key identifier: C7:3E:BF:4F:15:FA:26:29:2B:F5:AD:B8:8A:86:57:7E:C3:A7:1C:DE Certificate issuer: /CN=A9161EA6/serialNumber=C73EBF4F15FA26292BF5ADB88A86577EC3A71CDE Certificate serial: 1236 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft Manifest number: 122D Signing time: Sat 18 May 2024 17:41:24 +0000 Manifest this update: Sat 18 May 2024 17:41:23 +0000 Manifest next update: Sat 25 May 2024 17:41:23 +0000 Files and hashes: 1: xz6_TxX6Jikr9a24ioZXfsOnHN4.crl (hash: OqnIFYUhFq4GOQEiVIu79UeRccmr6lP+J8yhmfaITes=) 2: FF3B3F84B63311E8BAD5A95EC4F9AE02.roa (hash: uFyvztQzxevciuQ6NLXE4AsYEtpQjXVKdG3AXeRRVx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.crl rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4662 (0x1236) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161EA6/serialNumber=C73EBF4F15FA26292BF5ADB88A86577EC3A71CDE Validity Not Before: May 18 17:41:23 2024 GMT Not After : May 25 17:41:23 2024 GMT Subject: CN=6648e844-bb72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b1:05:23:72:1c:6f:40:88:51:d2:54:90:22: a7:f9:5c:2d:63:c0:63:05:f7:f8:17:49:63:55:ad: 84:12:f9:d2:e1:13:80:52:aa:cd:bb:61:78:58:46: 79:67:bd:96:66:13:26:0d:33:f3:c9:dc:60:1d:65: 96:1f:16:2c:38:76:74:ee:78:30:3f:ec:ee:54:24: 30:6f:0a:1a:ea:c9:07:89:bf:16:0e:4f:2f:05:73: a0:5e:7e:45:1b:2c:17:4e:6a:60:e2:c3:87:03:6e: 62:cf:0c:72:aa:8e:39:77:48:92:30:e7:eb:79:d5: a1:2e:15:ae:b4:47:77:29:5f:63:a5:bf:41:72:03: 84:d0:30:c7:e7:5c:07:8d:ac:29:31:d7:38:75:45: 49:3c:5c:29:cf:23:b2:d9:40:f5:2c:41:68:40:31: e1:d3:4b:b9:91:30:3b:2d:05:85:eb:f8:e0:8f:ad: 10:07:a2:bb:00:75:28:25:e4:76:fc:bb:59:89:0a: 85:55:5d:16:3e:5c:4b:0a:06:03:d3:54:b5:a9:24: 6e:04:e5:d5:ad:bc:45:a7:63:ad:16:f3:e3:cd:0a: dd:21:20:83:37:fb:cc:46:60:a0:4e:19:46:8b:95: c8:0f:8b:4a:38:a1:8d:95:1b:80:eb:34:8e:9f:00: 2b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D1:8E:2C:F5:23:7F:E8:F9:1B:9C:51:8C:52:C0:7C:89:96:6B:75 X509v3 Authority Key Identifier: keyid:C7:3E:BF:4F:15:FA:26:29:2B:F5:AD:B8:8A:86:57:7E:C3:A7:1C:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:65:de:6c:f3:45:d3:a9:f2:2e:92:f5:ac:e6:dc:aa:12:e0: 00:a3:66:e6:e2:1c:c8:f0:25:2d:3a:a9:d4:53:73:a9:c1:98: 5e:89:53:f3:4b:ba:6d:32:5f:bc:86:d8:d5:4a:2f:1e:45:2e: 1f:84:4e:0c:3a:87:b0:9d:7e:0a:5c:ce:69:b1:13:60:0d:e5: 38:76:a5:49:0a:7f:35:d6:85:6f:fc:f4:83:66:d8:14:16:1f: bc:96:9a:ff:3c:c3:39:e3:0f:db:11:13:c8:32:52:3d:f9:64: 36:ab:13:82:8b:bd:0f:da:c9:53:43:cf:67:ea:06:b1:6c:79: 76:e6:6f:e9:95:c4:f4:17:c7:c0:d8:4e:8c:dd:ea:da:28:34: 34:05:f9:7c:69:10:01:40:c6:70:7b:9f:60:a3:8c:79:62:34: 96:f8:78:f2:d4:a4:64:c9:c5:e3:c3:54:45:cf:0b:2f:d0:29: fe:52:6e:24:11:4c:e2:4b:d9:f2:68:93:ba:3d:4c:46:86:d3: fa:d5:cd:ca:bf:a7:83:cc:0e:76:c7:64:18:8d:be:2f:75:3c: 5b:c0:8c:22:ea:8b:a6:76:8a:ff:05:48:df:f5:05:6d:87:8d: ea:ef:1c:76:ad:5a:69:9c:d8:d8:d0:b4:ea:47:52:01:65:2d: a7:91:1c:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFFQTYxMTAvBgNVBAUTKEM3M0VCRjRGMTVGQTI2MjkyQkY1QURCODhBODY1NzdF QzNBNzFDREUwHhcNMjQwNTE4MTc0MTIzWhcNMjQwNTI1MTc0MTIzWjAYMRYwFAYD VQQDEw02NjQ4ZTg0NC1iYjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7EFI3Icb0CIUdJUkCKn+VwtY8BjBff4F0ljVa2EEvnS4ROAUqrNu2F4WEZ5 Z72WZhMmDTPzydxgHWWWHxYsOHZ07ngwP+zuVCQwbwoa6skHib8WDk8vBXOgXn5F GywXTmpg4sOHA25izwxyqo45d0iSMOfredWhLhWutEd3KV9jpb9BcgOE0DDH51wH jawpMdc4dUVJPFwpzyOy2UD1LEFoQDHh00u5kTA7LQWF6/jgj60QB6K7AHUoJeR2 /LtZiQqFVV0WPlxLCgYD01S1qSRuBOXVrbxFp2OtFvPjzQrdISCDN/vMRmCgThlG i5XID4tKOKGNlRuA6zSOnwArwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPRjiz1 I3/o+RucUYxSwHyJlmt1MB8GA1UdIwQYMBaAFMc+v08V+iYpK/WtuIqGV37Dpxze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUVBNi8xQURFMkUyNkI2 MzAxMUU4OTgyQUJDNTNDNEY5QUUwMi94ejZfVHhYNkppa3I5YTI0aW9aWGZzT25I TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h6Nl9UeFg2SmlrcjlhMjRpb1pYZnNPbkhONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUVBNi8xQURFMkUyNkI2MzAxMUU4OTgyQUJDNTNDNEY5QUUwMi94ejZfVHhYNkpp a3I5YTI0aW9aWGZzT25ITjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQZd5s80XTqfIukvWs5tyqEuAAo2bm4hzI8CUtOqnUU3OpwZheiVPz S7ptMl+8htjVSi8eRS4fhE4MOoewnX4KXM5psRNgDeU4dqVJCn811oVv/PSDZtgU Fh+8lpr/PMM54w/bERPIMlI9+WQ2qxOCi70P2slTQ89n6gaxbHl25m/plcT0F8fA 2E6M3eraKDQ0Bfl8aRABQMZwe59go4x5YjSW+Hjy1KRkycXjw1RFzwsv0Cn+Um4k EUziS9nyaJO6PUxGhtP61c3Kv6eDzA52x2QYjb4vdTxbwIwi6oumdor/BUjf9QVt h43q7xx2rVppnNjY0LTqR1IBZS2nkRwQ -----END CERTIFICATE-----Generated at Sat May 18 18:21:37 2024 by rpki-client on console-ams.rpki-client.org