$ rpki-client -vvf rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft File: xDfVjxI6auBXxgjiFrtr_WWER2o.mft (raw, json) Hash identifier: uJvaPp+e4SHryuvNct8iAUds2+yYPDP1MSqzpHwyH1Q= Subject key identifier: 60:2D:AC:AF:72:10:CF:A5:46:20:BF:F3:D9:89:60:F4:EB:B1:5D:CB Authority key identifier: C4:37:D5:8F:12:3A:6A:E0:57:C6:08:E2:16:BB:6B:FD:65:84:47:6A Certificate issuer: /CN=A9169903/serialNumber=C437D58F123A6AE057C608E216BB6BFD6584476A Certificate serial: 04F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft Manifest number: 04F3 Signing time: Sun 19 May 2024 01:14:34 +0000 Manifest this update: Sun 19 May 2024 01:14:34 +0000 Manifest next update: Sun 26 May 2024 01:14:34 +0000 Files and hashes: 1: xDfVjxI6auBXxgjiFrtr_WWER2o.crl (hash: EVVMZ2YSo0n5p6xhtIT+bBvIHt4XUmI5gdXIHYdMF7Q=) 2: ED31D84EC81D11EBA4C0E321C4F9AE02.roa (hash: jhR9QDlVyj8BS8+j4iE/uh7zPevk6Wzm1xP+iEk0Yvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.crl rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:14:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1272 (0x4f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169903/serialNumber=C437D58F123A6AE057C608E216BB6BFD6584476A Validity Not Before: May 19 01:14:34 2024 GMT Not After : May 26 01:14:34 2024 GMT Subject: CN=6649527a-1580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0a:16:c0:7d:24:52:64:b7:a4:c9:80:81:7a: 24:e9:f4:40:81:a1:58:36:43:61:f6:26:a2:f2:36: 4c:06:cc:60:7f:ca:14:a3:8a:86:66:9b:37:51:5f: 43:49:9f:75:a2:a4:7f:9c:5a:1b:4e:df:22:6f:f3: e8:6d:05:b8:33:4e:9a:48:75:c8:ee:c1:98:7e:cc: 4f:e3:53:0a:cd:0a:ae:6c:eb:00:23:7d:c2:c4:ce: 1d:02:46:53:92:1c:4d:82:c1:c9:e9:3a:a9:1f:8a: 10:0a:86:e8:23:ce:d7:ad:46:c3:63:b6:94:21:21: d4:2b:96:09:98:56:55:67:20:89:8d:87:bf:29:02: 53:01:7a:cd:c7:19:93:5b:e7:d3:87:7c:ab:fb:2d: c0:b4:00:d4:ec:0b:24:d9:28:88:26:7f:9a:a0:d6: e5:ce:a8:f8:b3:b6:84:4b:85:15:9d:6e:9b:fa:66: 79:08:3e:69:d8:e5:1e:79:3c:b0:0b:f4:e1:18:7f: 53:d9:d0:90:e2:a0:e9:8a:40:51:74:8e:85:60:13: 66:21:38:35:c4:3c:fd:b8:1b:62:50:93:50:a9:2f: ce:26:39:21:a9:58:ec:86:7b:5a:b7:62:68:65:ef: fe:02:db:06:1a:a3:25:34:e3:3b:b9:be:44:26:9f: 8e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:2D:AC:AF:72:10:CF:A5:46:20:BF:F3:D9:89:60:F4:EB:B1:5D:CB X509v3 Authority Key Identifier: keyid:C4:37:D5:8F:12:3A:6A:E0:57:C6:08:E2:16:BB:6B:FD:65:84:47:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:64:fa:9f:63:01:85:b6:43:14:7b:3b:0b:b7:2e:c3:8b:b8: 86:db:27:bf:23:8b:6e:62:8a:bd:fe:b6:52:e7:b7:e8:13:1f: 93:75:af:77:96:5f:d1:7c:ae:d3:b9:e7:90:e4:4b:8a:14:30: 89:97:dc:57:13:86:85:d9:fc:4d:11:ad:1f:b3:a5:86:93:d4: f4:8a:91:03:69:51:1e:6e:01:0c:c0:0e:8e:db:6d:35:cc:fb: 00:7d:e6:4a:ea:67:7c:49:aa:af:fa:e4:f4:6a:6b:93:f9:4b: 80:b0:f6:1d:b5:20:ea:06:d3:e8:83:09:70:da:d7:0f:a4:35: b5:28:e1:89:65:41:11:30:b9:9b:84:a3:e0:d7:d1:35:98:a5: 81:9e:45:9f:28:dd:9b:b5:a7:3b:1a:fb:80:db:82:44:45:30: f1:85:a1:20:ec:06:27:1d:20:05:39:8f:6a:00:97:e5:b1:91: b1:f1:7f:4d:15:c0:6f:3f:d9:16:dc:84:20:8e:b1:7c:db:db: 1f:5a:b1:8a:f8:78:df:49:93:4a:8a:0f:5a:47:7c:11:d4:fc: c5:54:a2:0e:f7:02:03:34:c0:eb:b3:82:67:8b:12:7e:32:3c: e3:b4:e8:a3:42:55:cb:c0:6c:03:66:23:fe:3d:e6:7d:11:4b: 26:b3:83:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk5MDMxMTAvBgNVBAUTKEM0MzdENThGMTIzQTZBRTA1N0M2MDhFMjE2QkI2QkZE NjU4NDQ3NkEwHhcNMjQwNTE5MDExNDM0WhcNMjQwNTI2MDExNDM0WjAYMRYwFAYD VQQDEw02NjQ5NTI3YS0xNTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwoWwH0kUmS3pMmAgXok6fRAgaFYNkNh9iai8jZMBsxgf8oUo4qGZps3UV9D SZ91oqR/nFobTt8ib/PobQW4M06aSHXI7sGYfsxP41MKzQqubOsAI33CxM4dAkZT khxNgsHJ6TqpH4oQCoboI87XrUbDY7aUISHUK5YJmFZVZyCJjYe/KQJTAXrNxxmT W+fTh3yr+y3AtADU7Ask2SiIJn+aoNblzqj4s7aES4UVnW6b+mZ5CD5p2OUeeTyw C/ThGH9T2dCQ4qDpikBRdI6FYBNmITg1xDz9uBtiUJNQqS/OJjkhqVjshntat2Jo Ze/+AtsGGqMlNOM7ub5EJp+ONQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGAtrK9y EM+lRiC/89mJYPTrsV3LMB8GA1UdIwQYMBaAFMQ31Y8SOmrgV8YI4ha7a/1lhEdq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTkwMy9FRTZCNzQxOEM4 MTgxMUVCODNDRUVCNEFDNEY5QUUwMi94RGZWanhJNmF1Qlh4Z2ppRnJ0cl9XV0VS Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEZlZqeEk2YXVCWHhnamlGcnRyX1dXRVIyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTkwMy9FRTZCNzQxOEM4MTgxMUVCODNDRUVCNEFDNEY5QUUwMi94RGZWanhJNmF1 Qlh4Z2ppRnJ0cl9XV0VSMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADZPqfYwGFtkMUezsLty7Di7iG2ye/I4tuYoq9/rZS57foEx+Tda93 ll/RfK7TueeQ5EuKFDCJl9xXE4aF2fxNEa0fs6WGk9T0ipEDaVEebgEMwA6O2201 zPsAfeZK6md8Saqv+uT0amuT+UuAsPYdtSDqBtPogwlw2tcPpDW1KOGJZUERMLmb hKPg19E1mKWBnkWfKN2btac7GvuA24JERTDxhaEg7AYnHSAFOY9qAJflsZGx8X9N FcBvP9kW3IQgjrF829sfWrGK+HjfSZNKig9aR3wR1PzFVKIO9wIDNMDrs4JnixJ+ MjzjtOijQlXLwGwDZiP+PeZ9EUsms4PX -----END CERTIFICATE-----Generated at Sun May 19 02:59:08 2024 by rpki-client on console-ams.rpki-client.org