$ rpki-client -vvf rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft File: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft (raw, json) Hash identifier: 8XgNIba3j48/M1z0fAvPA8Z0wLwSBykTmh5OKDxuqOw= Subject key identifier: 94:82:FC:27:48:16:88:A7:4E:B1:44:33:58:28:D1:3A:EE:F1:8D:A3 Authority key identifier: C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA Certificate issuer: /CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA Certificate serial: 0D8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft Manifest number: 0D72 Signing time: Fri 31 May 2024 19:08:08 +0000 Manifest this update: Fri 31 May 2024 19:08:08 +0000 Manifest next update: Fri 07 Jun 2024 19:08:08 +0000 Files and hashes: 1: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl (hash: NhAqS4lunS9EDMr3qTPkyFmLLwLncTUHhGjrlHHhRwM=) 2: C16E8E16256511EA98F3D465C4F9AE02.roa (hash: /MAfFsCX3raA/f7POApleax8y0KylFoyhT7LCg2+x5I=) 3: AF573166309511EABE9B5934C4F9AE02.roa (hash: LK9gK8M2L2ZMh3tmQmG2YkeThdi/Q41kPuFCkYYXDA8=) 4: F612D886FB0111E98B628F2BC4F9AE02.roa (hash: pnn8hwOelnSfyfQ/tyqXUGUD6iWsZWLW4T34rUYBJ98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3468 (0xd8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA Validity Not Before: May 31 19:08:08 2024 GMT Not After : Jun 7 19:08:08 2024 GMT Subject: CN=665a2018-11fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:62:f2:9f:24:6a:72:35:ae:17:dc:95:cf:0c: a9:59:32:67:8c:eb:70:11:20:f0:b1:8d:5e:9b:31: 4e:b6:45:3a:67:0c:14:77:63:88:65:94:31:cb:46: 67:e8:01:5d:11:7e:1b:e3:37:0f:ce:79:9d:fd:de: c2:9b:11:08:db:70:11:c3:e1:0c:e1:f1:70:34:9c: bb:df:7d:9c:1b:45:bf:03:71:2b:34:df:a4:29:95: f7:36:91:57:2d:57:bf:a8:74:6c:a1:e2:f6:f3:40: 55:31:fa:d2:ec:63:25:1a:0f:10:5e:63:1a:2e:ce: b4:48:54:85:25:25:2c:e0:72:cc:fd:f0:db:fa:08: ab:29:9f:5b:48:9a:a2:39:96:cb:79:29:b4:48:93: c0:94:78:4a:82:ef:24:d0:22:7d:ac:e8:0c:c7:01: 11:14:6e:ba:55:24:3d:45:24:06:3e:6e:8c:ab:51: fa:2b:0f:f3:78:8a:30:6d:38:5c:ef:5f:49:7d:7b: 3f:d3:2e:52:04:c4:4d:95:3d:a9:d3:e5:b0:24:1c: 88:7f:fa:6b:87:eb:9d:df:03:30:dd:4f:64:19:5d: 79:3d:50:4a:22:1d:ac:f1:f8:b0:19:c6:f4:03:28: dc:18:76:24:5a:33:18:59:ae:8b:c3:96:d3:fa:b6: 4a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:82:FC:27:48:16:88:A7:4E:B1:44:33:58:28:D1:3A:EE:F1:8D:A3 X509v3 Authority Key Identifier: keyid:C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:14:46:fe:ef:33:b7:b3:31:67:31:5f:83:b7:6e:49:20:47: e8:5e:c1:4e:14:b3:03:46:c6:5e:6d:58:34:15:ee:37:c7:7c: f5:49:bc:af:30:3f:87:ff:d1:52:5c:a6:2c:a4:9e:bc:8d:dd: a9:86:89:1f:0d:8a:81:f5:d7:c8:d8:01:67:2c:bf:f0:04:80: cc:60:08:b3:5a:06:03:d2:2a:04:f6:28:03:b0:08:ed:e1:21: 8b:22:c8:c5:81:35:e3:c5:4f:f3:6d:0c:c5:d7:b4:d7:3b:cb: 98:a5:9c:eb:3f:1a:f1:10:d2:a1:8b:9f:7f:b8:42:0e:d0:e0: 73:48:79:ea:4c:d6:1e:eb:90:f3:e6:4b:b0:27:f8:05:3a:38: 43:cf:4c:aa:b8:55:6e:50:3f:ca:21:fd:ad:ed:63:68:76:86: 2a:a6:a8:00:96:5b:1a:27:6e:09:05:7d:d7:7b:04:73:bf:17: 4a:7f:1c:cb:8a:7a:22:1f:79:ea:b1:5d:4d:1f:e2:5a:65:04: ef:75:66:66:9e:92:41:4e:aa:9e:cc:91:35:d7:0c:6b:3c:46: 4c:38:5c:fc:4e:ad:a0:96:92:4c:de:55:19:6b:d8:b5:cb:e9: e3:60:1f:41:53:3a:8f:e3:0a:7c:2d:7c:55:a3:71:bd:35:46: cd:f1:94:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBREExMTAvBgNVBAUTKEM0MTcxNUZFRjIwMDEzM0Q5MTIzMjUwRkJCNjUzMUU4 OEE0QTk5REEwHhcNMjQwNTMxMTkwODA4WhcNMjQwNjA3MTkwODA4WjAYMRYwFAYD VQQDEw02NjVhMjAxOC0xMWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GLynyRqcjWuF9yVzwypWTJnjOtwESDwsY1emzFOtkU6ZwwUd2OIZZQxy0Zn 6AFdEX4b4zcPznmd/d7CmxEI23ARw+EM4fFwNJy7332cG0W/A3ErNN+kKZX3NpFX LVe/qHRsoeL280BVMfrS7GMlGg8QXmMaLs60SFSFJSUs4HLM/fDb+girKZ9bSJqi OZbLeSm0SJPAlHhKgu8k0CJ9rOgMxwERFG66VSQ9RSQGPm6Mq1H6Kw/zeIowbThc 719JfXs/0y5SBMRNlT2p0+WwJByIf/prh+ud3wMw3U9kGV15PVBKIh2s8fiwGcb0 AyjcGHYkWjMYWa6Lw5bT+rZKywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSC/CdI FoinTrFEM1go0Tru8Y2jMB8GA1UdIwQYMBaAFMQXFf7yABM9kSMlD7tlMeiKSpna MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUFEQS9GRjMyMDFDRUE2 QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6MlJJeVVQdTJVeDZJcEtt ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hCY1ZfdklBRXoyUkl5VVB1MlV4NklwS21kby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUFEQS9GRjMyMDFDRUE2QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6 MlJJeVVQdTJVeDZJcEttZG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8FEb+7zO3szFnMV+Dt25JIEfoXsFOFLMDRsZebVg0Fe43x3z1Sbyv MD+H/9FSXKYspJ68jd2phokfDYqB9dfI2AFnLL/wBIDMYAizWgYD0ioE9igDsAjt 4SGLIsjFgTXjxU/zbQzF17TXO8uYpZzrPxrxENKhi59/uEIO0OBzSHnqTNYe65Dz 5kuwJ/gFOjhDz0yquFVuUD/KIf2t7WNodoYqpqgAllsaJ24JBX3XewRzvxdKfxzL inoiH3nqsV1NH+JaZQTvdWZmnpJBTqqezJE11wxrPEZMOFz8Tq2glpJM3lUZa9i1 y+njYB9BUzqP4wp8LXxVo3G9NUbN8ZTx -----END CERTIFICATE-----Generated at Fri May 31 19:47:49 2024 by rpki-client on console-fra.rpki-client.org