$ rpki-client -vvf rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft File: XEFCLE7PHfpomnDePAORsdR-Vew.mft (raw, json) Hash identifier: xc1shH0dMk1PJ3E6rn/Wi0ydAkls6XrT6cdqKIDWp8g= Subject key identifier: C4:CD:14:7B:F2:7C:D9:DB:9C:EE:06:B0:FE:47:3D:F2:E0:A8:89:A7 Authority key identifier: 5C:41:42:2C:4E:CF:1D:FA:68:9A:70:DE:3C:03:91:B1:D4:7E:55:EC Certificate issuer: /CN=A916B19D/serialNumber=5C41422C4ECF1DFA689A70DE3C0391B1D47E55EC Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft Manifest number: 01B0 Signing time: Sun 19 May 2024 04:34:40 +0000 Manifest this update: Sun 19 May 2024 04:34:39 +0000 Manifest next update: Sun 26 May 2024 04:34:39 +0000 Files and hashes: 1: XEFCLE7PHfpomnDePAORsdR-Vew.crl (hash: cABGJy8/h23m1gLA5CgQU+FLgk+TkDqZYRZFx2m6ugI=) 2: D11B9044112011EDAC1D3B15C4F9AE02.roa (hash: 0zySdDZENX2d9VaJ1qvaHkGW8wiopLuipSWyRH3iMdc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.crl rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B19D/serialNumber=5C41422C4ECF1DFA689A70DE3C0391B1D47E55EC Validity Not Before: May 19 04:34:39 2024 GMT Not After : May 26 04:34:39 2024 GMT Subject: CN=6649815f-f6fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:9c:9a:f8:3f:ed:a8:c3:32:5c:b1:2c:29:b8: 3b:b5:06:d5:4e:ae:ca:b1:1e:2e:dd:97:8a:69:41: cc:27:57:13:98:c1:8e:77:23:03:b8:69:6d:1e:84: 37:e6:b6:7b:d9:23:d2:ef:30:35:32:27:f4:c4:31: e4:c5:5e:9c:78:86:03:b0:e4:5c:48:02:a0:04:08: af:d7:6e:0e:f0:4d:a1:8a:56:c1:bf:9a:ce:52:45: 96:bc:54:1b:1b:73:1a:4a:0a:1c:2a:83:dd:8f:3b: c7:9c:74:b7:f2:67:50:6e:b9:85:ec:31:27:a9:d2: 69:42:91:d0:9e:1b:b0:5c:37:13:b8:ed:f7:19:c7: 01:45:88:4b:76:91:ff:67:a9:6d:19:19:0c:64:26: 18:8a:b1:0e:4a:25:96:8d:dd:fb:d3:15:ec:42:ef: 41:a0:b0:89:0a:9c:96:c8:50:b8:0d:00:57:4e:77: 2a:fa:12:f0:9b:be:da:98:58:03:e8:a6:c1:5e:ac: 61:29:30:d0:c2:22:35:45:25:68:23:de:f2:a0:5f: 9b:84:87:a4:60:df:91:55:9a:cf:63:34:b5:d3:4c: 4a:c4:5a:12:50:1d:7f:e9:9a:b6:eb:a5:8e:11:3c: 1b:d4:da:fa:58:08:70:a1:99:8b:2b:48:74:96:80: f3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:CD:14:7B:F2:7C:D9:DB:9C:EE:06:B0:FE:47:3D:F2:E0:A8:89:A7 X509v3 Authority Key Identifier: keyid:5C:41:42:2C:4E:CF:1D:FA:68:9A:70:DE:3C:03:91:B1:D4:7E:55:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:40:17:6f:b9:d0:ee:ef:41:4e:00:17:79:ca:a7:83:81:af: 9e:78:3c:76:39:8c:10:87:01:02:fb:ee:1c:bf:68:20:4a:06: 2f:91:4c:0b:8e:b6:0a:b6:f3:3b:8a:10:1b:34:1d:ea:03:e2: f0:e7:0c:8a:0f:1e:cc:8d:bb:56:e5:16:ca:6e:f5:8d:c4:e8: a6:85:d9:63:db:d6:93:55:9b:74:f4:4a:bf:a1:55:88:f8:b3: 32:02:8c:e2:3d:14:62:71:c6:48:67:d4:a5:f7:02:2b:7a:09: aa:83:1f:70:03:1d:4a:79:84:8e:29:b7:9d:c4:8a:d4:52:a2: 35:e6:db:03:15:de:34:b5:63:ff:49:17:4a:e0:4e:be:0b:7d: d9:1a:f7:7b:75:02:ba:78:20:0f:d9:8c:00:7d:4f:46:3a:99: f2:41:8e:e7:7a:17:f8:19:eb:b8:09:15:7e:3c:3d:40:13:45: db:4a:c2:19:9b:43:5e:f0:97:e4:45:31:3d:76:df:1f:2c:66: 9a:80:0e:7f:a0:ab:39:f1:79:e2:ba:c9:60:5d:0c:6f:9e:0c: ff:d1:1e:0f:1b:44:ac:97:e1:cc:a0:e8:e0:3f:19:a8:01:ea: a8:f4:c6:e5:7b:c2:5d:14:e5:aa:52:08:29:4a:d6:af:ea:8c: 5c:d1:61:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIxOUQxMTAvBgNVBAUTKDVDNDE0MjJDNEVDRjFERkE2ODlBNzBERTNDMDM5MUIx RDQ3RTU1RUMwHhcNMjQwNTE5MDQzNDM5WhcNMjQwNTI2MDQzNDM5WjAYMRYwFAYD VQQDEw02NjQ5ODE1Zi1mNmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Jya+D/tqMMyXLEsKbg7tQbVTq7KsR4u3ZeKaUHMJ1cTmMGOdyMDuGltHoQ3 5rZ72SPS7zA1Mif0xDHkxV6ceIYDsORcSAKgBAiv124O8E2hilbBv5rOUkWWvFQb G3MaSgocKoPdjzvHnHS38mdQbrmF7DEnqdJpQpHQnhuwXDcTuO33GccBRYhLdpH/ Z6ltGRkMZCYYirEOSiWWjd370xXsQu9BoLCJCpyWyFC4DQBXTncq+hLwm77amFgD 6KbBXqxhKTDQwiI1RSVoI97yoF+bhIekYN+RVZrPYzS100xKxFoSUB1/6Zq266WO ETwb1Nr6WAhwoZmLK0h0loDz9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMTNFHvy fNnbnO4GsP5HPfLgqImnMB8GA1UdIwQYMBaAFFxBQixOzx36aJpw3jwDkbHUflXs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjE5RC9EMjY5NURERTEx MUUxMUVEOUI1OEZEMTRDNEY5QUUwMi9YRUZDTEU3UEhmcG9tbkRlUEFPUnNkUi1W ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hFRkNMRTdQSGZwb21uRGVQQU9Sc2RSLVZldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjE5RC9EMjY5NURERTExMUUxMUVEOUI1OEZEMTRDNEY5QUUwMi9YRUZDTEU3UEhm cG9tbkRlUEFPUnNkUi1WZXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVQBdvudDu70FOABd5yqeDga+eeDx2OYwQhwEC++4cv2ggSgYvkUwL jrYKtvM7ihAbNB3qA+Lw5wyKDx7MjbtW5RbKbvWNxOimhdlj29aTVZt09Eq/oVWI +LMyAoziPRRiccZIZ9Sl9wIregmqgx9wAx1KeYSOKbedxIrUUqI15tsDFd40tWP/ SRdK4E6+C33ZGvd7dQK6eCAP2YwAfU9GOpnyQY7nehf4Geu4CRV+PD1AE0XbSsIZ m0Ne8JfkRTE9dt8fLGaagA5/oKs58XniuslgXQxvngz/0R4PG0Ssl+HMoOjgPxmo Aeqo9Mble8JdFOWqUggpStav6oxc0WGC -----END CERTIFICATE-----Generated at Sun May 19 05:08:04 2024 by rpki-client on console-ams.rpki-client.org