$ rpki-client -vvf rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft File: XSeFtU0WPtAepUGLz6NPG3RWtxM.mft (raw, json) Hash identifier: QVHlsUtC4ht2yOFgozz7RXr21YR1rjUZbl5pNTvsA+Q= Subject key identifier: E3:85:7A:A0:AA:D6:26:00:BD:DE:95:62:01:39:29:60:BC:B6:20:41 Authority key identifier: 5D:27:85:B5:4D:16:3E:D0:1E:A5:41:8B:CF:A3:4F:1B:74:56:B7:13 Certificate issuer: /CN=A9167CC5/serialNumber=5D2785B54D163ED01EA5418BCFA34F1B7456B713 Certificate serial: 03D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft Manifest number: 03BB Signing time: Sun 19 May 2024 02:30:05 +0000 Manifest this update: Sun 19 May 2024 02:30:05 +0000 Manifest next update: Sun 26 May 2024 02:30:05 +0000 Files and hashes: 1: XSeFtU0WPtAepUGLz6NPG3RWtxM.crl (hash: 3aGxZJb938eRA4nliySlrNIDwrC/XBMs1XksvKIIOMY=) 2: 6337963E4C3D11ECB5FF844FC4F9AE02.roa (hash: GQCSA6QyrQT61zgUzzq3IA+DEvS1M9WVjoPYcq1Bd4c=) 3: ACE844F047AA11ECA0F05026C4F9AE02.roa (hash: RB7zIrr0vmaPJFrKM5hv3nF1tNHSBNjXihwLxIeXId8=) 4: 1F77EFA44C4011EC952D5A23C4F9AE02.roa (hash: 3nJLpeMdcFe+Gds2ygUBHLssUTU630EavjtxrzJszKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.crl rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:30:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 976 (0x3d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167CC5/serialNumber=5D2785B54D163ED01EA5418BCFA34F1B7456B713 Validity Not Before: May 19 02:30:05 2024 GMT Not After : May 26 02:30:05 2024 GMT Subject: CN=6649642d-e391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b1:fa:ee:67:46:8b:0c:60:ce:57:f7:72:fd: 22:24:f7:a7:6d:de:03:44:00:1b:06:6c:4f:8f:21: ba:c0:91:66:dd:fc:59:7b:fd:3e:08:ce:c1:e5:7d: 32:f5:88:95:a8:fb:13:55:6b:55:87:08:78:80:f3: b1:f0:5b:7c:4b:4a:df:24:5b:c3:a0:32:e6:08:23: d1:c9:f1:3f:e6:bb:13:97:d5:62:d8:5f:b0:af:6d: 71:81:f6:30:e8:b0:92:8f:61:a8:7a:7c:f9:76:13: 19:92:6c:ef:d1:61:d8:36:47:33:6d:2d:36:10:ce: 62:68:ed:4d:6a:c1:da:07:b7:98:ec:4a:94:75:92: dc:9c:9d:ca:83:66:88:e2:10:f3:95:3f:db:d8:74: 9a:df:ee:62:1c:c1:48:6c:4f:b3:a3:dd:70:44:d2: 27:bf:23:92:4b:19:e5:01:bc:16:a4:88:f1:d1:71: c6:5e:70:fb:24:0b:d3:dd:9b:2b:a0:22:b2:a1:53: b7:4d:b0:59:68:df:5b:12:53:23:9c:6a:7a:04:a1: 24:44:5d:c4:a6:0e:9f:b0:3f:96:e4:79:e7:64:22: 6d:a9:da:a3:6f:42:f5:52:d0:c6:11:92:d8:d4:1e: 08:87:b5:d3:63:d5:77:29:de:b2:b1:fb:58:12:5b: e2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:85:7A:A0:AA:D6:26:00:BD:DE:95:62:01:39:29:60:BC:B6:20:41 X509v3 Authority Key Identifier: keyid:5D:27:85:B5:4D:16:3E:D0:1E:A5:41:8B:CF:A3:4F:1B:74:56:B7:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e9:77:d1:71:8a:30:21:5a:b4:81:e9:f9:3c:ac:5f:cc:49: 6d:a5:c8:58:0b:82:eb:59:1a:6b:d6:5f:15:38:50:e6:0b:9d: 39:6f:24:05:1a:82:78:65:a7:60:b5:42:95:52:a9:c0:ef:77: d9:df:01:c6:92:88:2a:2b:71:77:f2:c2:39:46:4f:bc:82:1d: 20:9e:61:17:1e:5d:55:e0:a9:57:65:ae:20:d1:06:d2:ef:ef: fc:cd:f1:6b:a8:6d:a7:0b:96:ec:1b:8e:99:cc:3d:09:26:a3: 65:2a:50:23:24:d4:a6:e9:60:63:7b:c9:c1:4d:73:7e:b5:1e: a6:49:82:87:45:9b:52:1d:8e:32:75:3e:15:c1:b6:fe:f6:0a: d5:be:0d:13:3e:83:35:76:dd:d5:c2:0b:4d:4f:8b:59:b7:db: 9f:9e:46:aa:f2:88:e0:18:ea:ed:52:a0:69:ec:a9:a3:8e:83: 1b:4e:12:02:0f:13:e6:38:52:df:3c:ac:5f:81:54:06:da:a0: d5:74:aa:3d:55:8a:bf:3f:6b:68:c9:4b:83:c3:66:f8:49:17: 6b:f4:90:d2:8e:c9:72:20:26:e0:d3:69:aa:77:64:b3:13:fb: 20:ae:ab:22:e5:58:0a:5e:82:a6:bb:78:f2:5f:ed:c6:07:99: 6c:fa:21:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdDQzUxMTAvBgNVBAUTKDVEMjc4NUI1NEQxNjNFRDAxRUE1NDE4QkNGQTM0RjFC NzQ1NkI3MTMwHhcNMjQwNTE5MDIzMDA1WhcNMjQwNTI2MDIzMDA1WjAYMRYwFAYD VQQDEw02NjQ5NjQyZC1lMzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrH67mdGiwxgzlf3cv0iJPenbd4DRAAbBmxPjyG6wJFm3fxZe/0+CM7B5X0y 9YiVqPsTVWtVhwh4gPOx8Ft8S0rfJFvDoDLmCCPRyfE/5rsTl9Vi2F+wr21xgfYw 6LCSj2Goenz5dhMZkmzv0WHYNkczbS02EM5iaO1NasHaB7eY7EqUdZLcnJ3Kg2aI 4hDzlT/b2HSa3+5iHMFIbE+zo91wRNInvyOSSxnlAbwWpIjx0XHGXnD7JAvT3Zsr oCKyoVO3TbBZaN9bElMjnGp6BKEkRF3Epg6fsD+W5HnnZCJtqdqjb0L1UtDGEZLY 1B4Ih7XTY9V3Kd6ysftYElviUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOFeqCq 1iYAvd6VYgE5KWC8tiBBMB8GA1UdIwQYMBaAFF0nhbVNFj7QHqVBi8+jTxt0VrcT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0NDNS8yQUM0RDMzRTQ2 QjExMUVDOTQ1QjRGNTdDNEY5QUUwMi9YU2VGdFUwV1B0QWVwVUdMejZOUEczUld0 eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hTZUZ0VTBXUHRBZXBVR0x6Nk5QRzNSV3R4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0NDNS8yQUM0RDMzRTQ2QjExMUVDOTQ1QjRGNTdDNEY5QUUwMi9YU2VGdFUwV1B0 QWVwVUdMejZOUEczUld0eE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa6XfRcYowIVq0gen5PKxfzEltpchYC4LrWRpr1l8VOFDmC505byQF GoJ4ZadgtUKVUqnA73fZ3wHGkogqK3F38sI5Rk+8gh0gnmEXHl1V4KlXZa4g0QbS 7+/8zfFrqG2nC5bsG46ZzD0JJqNlKlAjJNSm6WBje8nBTXN+tR6mSYKHRZtSHY4y dT4Vwbb+9grVvg0TPoM1dt3VwgtNT4tZt9ufnkaq8ojgGOrtUqBp7KmjjoMbThIC DxPmOFLfPKxfgVQG2qDVdKo9VYq/P2toyUuDw2b4SRdr9JDSjslyICbg02mqd2Sz E/sgrqsi5VgKXoKmu3jyX+3GB5ls+iFF -----END CERTIFICATE-----Generated at Sun May 19 03:14:49 2024 by rpki-client on console-fra.rpki-client.org