$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft File: xNT7D_AneW6dqhe3VVH9C3fxmC8.mft (raw, json) Hash identifier: 7XqGdM//7mQrOtTfTQk9EVLjoh6DEE4mUd41MPGEN1Y= Subject key identifier: 9F:06:EE:1D:67:21:29:CB:65:92:33:83:2B:7B:6D:81:60:42:B3:17 Authority key identifier: C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F Certificate issuer: /CN=A916EB94/serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F Certificate serial: 0345 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft Manifest number: 0331 Signing time: Fri 31 May 2024 03:40:08 +0000 Manifest this update: Fri 31 May 2024 03:40:07 +0000 Manifest next update: Fri 07 Jun 2024 03:40:07 +0000 Files and hashes: 1: xNT7D_AneW6dqhe3VVH9C3fxmC8.crl (hash: 7DAWww7Mf+7lJLxoyM/4+MXiexV2+VeK7UpuDicuGYE=) 2: 51FE6D48D27011ECB30F1F0DC4F9AE02.roa (hash: tR0+y/d5FZ2cGAcUlJ8aZC/pZ+V9r2S3iivbdgrCJrg=) 3: D694BD82DBBA11EEB4125A3EC4F9AE02.roa (hash: jxyEyTXxNEt2ME9TFpCSQpKfhsVyiDSVl85O+pvZcGs=) 4: D7A47474DBBA11EEB4125A3EC4F9AE02.roa (hash: NOimUc1lpuwEBdxcN28vPJn205E7T6qH6uMq9K5B4v4=) 5: 38D5F796961B11EC9851F811C4F9AE02.roa (hash: Wu/raIqiLXeLrFzinEV8lC3QKdj63U6GAueKn4pEfZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 03:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 837 (0x345) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EB94/serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F Validity Not Before: May 31 03:40:07 2024 GMT Not After : Jun 7 03:40:07 2024 GMT Subject: CN=66594698-649d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:01:1b:94:61:5c:c8:b0:e2:a5:f1:7f:42:e8: a9:7d:fd:0a:b3:81:b0:9a:df:3e:18:0e:1f:41:88: 78:8c:61:99:b9:95:ff:30:d9:0c:b1:d0:18:d5:6f: 73:2f:85:18:bb:65:10:6f:a8:41:cd:64:ea:e9:a3: 77:3a:38:09:95:1f:eb:97:15:7d:08:19:6f:43:2d: 2e:89:91:b7:57:6b:df:bc:c2:da:87:59:dc:90:d9: 6b:e0:82:b3:d4:eb:77:b3:87:6b:5d:16:bc:53:fb: 25:fe:ca:2e:2e:ca:bc:ab:d1:09:24:7a:9d:9e:c0: 79:da:63:92:3c:5b:cb:69:c6:68:6f:e4:84:b4:10: 32:c5:28:a9:69:9d:08:2d:4f:43:fb:5a:44:e4:a0: 31:a2:aa:50:87:f4:d1:25:4e:5d:be:84:44:97:89: 56:1b:26:01:dd:04:7d:96:13:96:b4:b2:b0:4c:11: 0f:a9:7f:51:f3:1b:71:6b:6e:cd:d9:6e:d7:c1:88: 0f:b6:9d:e8:4c:e7:ae:da:5c:d0:45:69:43:82:a7: 06:58:9a:d6:ad:a9:a9:60:bc:8b:e4:82:8f:ce:67: 31:99:6e:de:1a:0c:e3:0a:cc:bd:a5:9a:68:4c:c9: 8d:34:f1:35:37:89:25:2e:a2:4b:3e:16:e8:d6:aa: 4b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:06:EE:1D:67:21:29:CB:65:92:33:83:2B:7B:6D:81:60:42:B3:17 X509v3 Authority Key Identifier: keyid:C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:df:9b:7b:e7:0d:a5:e5:d4:a4:56:2b:f9:e8:dd:ab:f4:e5: 0c:0e:48:8e:d7:de:37:bc:de:0c:1e:43:79:e1:5a:bd:0b:2b: 79:04:04:0f:fc:d6:6e:e1:19:a8:54:e9:33:b1:db:23:ee:56: 46:3c:39:09:78:a8:3e:5b:b2:53:8a:9f:f1:c6:9e:fb:4f:90: 2e:41:4a:58:75:74:12:b7:86:3c:de:00:ae:86:82:2d:7d:d0: f5:44:d1:bd:82:79:9c:7e:eb:7d:c7:d5:2d:1c:83:a2:3c:5f: 56:7b:cf:76:ba:3a:68:2b:b3:38:7e:49:39:eb:1d:64:83:bb: b4:9c:fe:da:b2:db:73:3b:3b:ad:3d:7f:15:22:b3:2e:4f:d7: f1:c7:9f:2d:10:c0:5c:9d:71:3a:1d:3d:9f:f7:17:31:a6:89: 47:2d:65:a9:3b:d7:70:4b:eb:84:e2:02:64:64:9e:6e:9f:7e: 5a:63:ae:4e:00:1c:4e:60:1e:66:5c:f9:71:80:bb:b9:e3:a7: 5e:9f:ea:1b:84:75:ff:2a:ae:db:ac:b0:0b:dc:6a:47:5c:b4: 13:3f:57:8f:36:89:a1:99:23:65:56:c1:ba:b2:86:d1:36:25: 5f:af:bf:be:46:17:03:ea:eb:b0:95:de:ca:79:c1:c8:d8:f6: a0:5d:a0:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCOTQxMTAvBgNVBAUTKEM0RDRGQjBGRjAyNzc5NkU5REFBMTdCNzU1NTFGRDBC NzdGMTk4MkYwHhcNMjQwNTMxMDM0MDA3WhcNMjQwNjA3MDM0MDA3WjAYMRYwFAYD VQQDEw02NjU5NDY5OC02NDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAEblGFcyLDipfF/Quipff0Ks4Gwmt8+GA4fQYh4jGGZuZX/MNkMsdAY1W9z L4UYu2UQb6hBzWTq6aN3OjgJlR/rlxV9CBlvQy0uiZG3V2vfvMLah1nckNlr4IKz 1Ot3s4drXRa8U/sl/souLsq8q9EJJHqdnsB52mOSPFvLacZob+SEtBAyxSipaZ0I LU9D+1pE5KAxoqpQh/TRJU5dvoREl4lWGyYB3QR9lhOWtLKwTBEPqX9R8xtxa27N 2W7XwYgPtp3oTOeu2lzQRWlDgqcGWJrWrampYLyL5IKPzmcxmW7eGgzjCsy9pZpo TMmNNPE1N4klLqJLPhbo1qpLNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8G7h1n ISnLZZIzgyt7bYFgQrMXMB8GA1UdIwQYMBaAFMTU+w/wJ3lunaoXt1VR/Qt38Zgv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUI5NC9FM0NDMjVEODgx MUUxMUVDOTIwMjU1NTFDNEY5QUUwMi94TlQ3RF9BbmVXNmRxaGUzVlZIOUMzZnht QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOVDdEX0FuZVc2ZHFoZTNWVkg5QzNmeG1DOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUI5NC9FM0NDMjVEODgxMUUxMUVDOTIwMjU1NTFDNEY5QUUwMi94TlQ3RF9BbmVX NmRxaGUzVlZIOUMzZnhtQzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA735t75w2l5dSkViv56N2r9OUMDkiO1943vN4MHkN54Vq9Cyt5BAQP /NZu4RmoVOkzsdsj7lZGPDkJeKg+W7JTip/xxp77T5AuQUpYdXQSt4Y83gCuhoIt fdD1RNG9gnmcfut9x9UtHIOiPF9We892ujpoK7M4fkk56x1kg7u0nP7asttzOzut PX8VIrMuT9fxx58tEMBcnXE6HT2f9xcxpolHLWWpO9dwS+uE4gJkZJ5un35aY65O ABxOYB5mXPlxgLu546den+obhHX/Kq7brLAL3GpHXLQTP1ePNomhmSNlVsG6sobR NiVfr7++RhcD6uuwld7KecHI2PagXaAA -----END CERTIFICATE-----Generated at Fri May 31 04:53:59 2024 by rpki-client on console-fra.rpki-client.org