$ rpki-client -vvf rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft File: 5xSoFJfIF3hoy7TNszjD72zp6VM.mft (raw, json) Hash identifier: DcPPDtcCfobLoKIJ4BSMscy5h1Sr0dX04Lbgb1StzYM= Subject key identifier: 2B:DC:FE:A9:24:24:06:9A:80:47:63:AD:AA:DF:A5:95:DB:6C:33:23 Authority key identifier: E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53 Certificate issuer: /CN=A9172C8D/serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953 Certificate serial: 0979 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft Manifest number: 0974 Signing time: Tue 30 Apr 2024 21:20:06 +0000 Manifest this update: Tue 30 Apr 2024 21:20:06 +0000 Manifest next update: Tue 07 May 2024 21:20:06 +0000 Files and hashes: 1: 5xSoFJfIF3hoy7TNszjD72zp6VM.crl (hash: PKN+Ls/umX320Q0J5OPk5U8nHbyj5aJI+4VfwIe71A8=) 2: 64AFBE3E69BC11EA97D4FE67C4F9AE02.roa (hash: AGi6WLaD/fMCwEuDk+FFNuutFaq5yGhDQV+II3VrbtE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 21:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2425 (0x979) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172C8D/serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953 Validity Not Before: Apr 30 21:20:06 2024 GMT Not After : May 7 21:20:06 2024 GMT Subject: CN=66316086-5b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7d:9a:a5:19:f4:ae:be:f5:44:17:f3:e8:a4: 28:29:75:92:ea:f2:a0:85:4b:c5:e3:29:d4:e0:f7: 98:f0:a5:a2:4e:cf:2f:64:03:59:c4:3e:14:fa:68: e5:22:69:ef:ee:60:86:3f:6d:5f:06:18:aa:6b:0d: f6:85:85:b5:b7:47:90:1d:14:ce:ef:35:55:90:60: 21:ff:b2:52:c3:da:e0:fd:47:1a:c5:e0:72:60:58: c6:b5:33:f5:91:2c:73:7e:f7:e2:fa:be:5e:f3:2a: 2e:df:15:d8:e6:eb:30:e5:5a:0a:cf:bc:26:c2:10: 01:f9:07:7e:be:27:1e:51:5b:17:a5:e7:c8:15:3e: 7a:69:84:5d:00:e3:af:1f:8b:dd:4d:38:69:11:c6: bf:22:92:ee:46:e1:69:0f:5f:97:62:6f:2e:2b:db: 68:92:28:e1:dd:7c:61:08:f4:61:19:d3:43:92:2f: ce:dc:9a:1d:a6:cb:b3:89:fb:4a:44:72:3b:2a:d5: 4c:8b:a1:39:a8:c1:1b:d3:df:f2:63:17:87:71:06: c4:10:6f:2c:ff:ac:5f:f5:9d:f3:00:1a:1f:f1:3b: da:01:93:c6:63:78:94:7d:98:87:ce:33:25:2b:65: bf:7f:ae:8b:1b:8a:b0:0f:0e:b0:1b:27:60:7f:df: dd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DC:FE:A9:24:24:06:9A:80:47:63:AD:AA:DF:A5:95:DB:6C:33:23 X509v3 Authority Key Identifier: keyid:E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:1f:bf:35:77:eb:21:61:9b:17:bb:90:d3:4d:33:78:56:24: c5:d7:7d:d3:0b:78:bc:31:00:12:7a:2b:22:4f:c8:67:70:a9: 47:e9:18:4e:e0:4b:7d:b4:33:f1:65:fe:a8:3a:0a:e9:cd:a5: 2b:a6:74:e9:c9:08:6d:ab:04:04:24:95:93:7c:79:b1:2f:07: e0:36:e0:17:12:d6:eb:26:af:eb:d1:58:31:fb:f8:d8:7b:af: 8f:13:fa:8c:da:05:4f:51:a9:5d:80:e1:c7:1c:42:0e:57:e6: 77:3f:d5:59:e1:9b:e3:76:ef:3b:65:70:ca:70:07:f2:ee:e8: db:d3:33:58:fa:4c:23:fd:d0:3d:4b:3e:9a:1d:51:bf:2c:19: 6c:07:ef:de:34:77:c5:70:3b:6e:31:3f:6d:e2:b1:1f:54:29: 4b:0b:39:56:3e:ca:b9:96:ef:87:87:aa:f5:eb:05:22:0a:69: 42:d5:70:b2:66:b7:48:e7:39:63:a3:ba:64:72:3a:7f:23:41: 2e:ac:22:cc:96:88:4f:39:b0:0f:a0:39:e0:ac:e3:03:9d:fa: d2:5b:58:91:3a:8c:bd:42:fc:f2:f1:78:1d:1b:65:fb:22:a9: bd:c8:61:a9:1b:df:a0:49:6b:fb:c5:42:7a:78:5a:18:85:89: 09:25:b9:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDOEQxMTAvBgNVBAUTKEU3MTRBODE0OTdDODE3Nzg2OENCQjRDREIzMzhDM0VG NkNFOUU5NTMwHhcNMjQwNDMwMjEyMDA2WhcNMjQwNTA3MjEyMDA2WjAYMRYwFAYD VQQDEw02NjMxNjA4Ni01Yjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqn2apRn0rr71RBfz6KQoKXWS6vKghUvF4ynU4PeY8KWiTs8vZANZxD4U+mjl Imnv7mCGP21fBhiqaw32hYW1t0eQHRTO7zVVkGAh/7JSw9rg/UcaxeByYFjGtTP1 kSxzfvfi+r5e8you3xXY5usw5VoKz7wmwhAB+Qd+viceUVsXpefIFT56aYRdAOOv H4vdTThpEca/IpLuRuFpD1+XYm8uK9tokijh3XxhCPRhGdNDki/O3JodpsuziftK RHI7KtVMi6E5qMEb09/yYxeHcQbEEG8s/6xf9Z3zABof8TvaAZPGY3iUfZiHzjMl K2W/f66LG4qwDw6wGydgf9/dtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvc/qkk JAaagEdjrarfpZXbbDMjMB8GA1UdIwQYMBaAFOcUqBSXyBd4aMu0zbM4w+9s6elT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkM4RC85QTExMDg2NDY5 QkExMUVBQkMwQkQ4NjNDNEY5QUUwMi81eFNvRkpmSUYzaG95N1ROc3pqRDcyenA2 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV4U29GSmZJRjNob3k3VE5zempENzJ6cDZWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkM4RC85QTExMDg2NDY5QkExMUVBQkMwQkQ4NjNDNEY5QUUwMi81eFNvRkpmSUYz aG95N1ROc3pqRDcyenA2Vk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgH781d+shYZsXu5DTTTN4ViTF133TC3i8MQASeisiT8hncKlH6RhO 4Et9tDPxZf6oOgrpzaUrpnTpyQhtqwQEJJWTfHmxLwfgNuAXEtbrJq/r0Vgx+/jY e6+PE/qM2gVPUaldgOHHHEIOV+Z3P9VZ4Zvjdu87ZXDKcAfy7ujb0zNY+kwj/dA9 Sz6aHVG/LBlsB+/eNHfFcDtuMT9t4rEfVClLCzlWPsq5lu+Hh6r16wUiCmlC1XCy ZrdI5zljo7pkcjp/I0EurCLMlohPObAPoDngrOMDnfrSW1iROoy9Qvzy8XgdG2X7 Iqm9yGGpG9+gSWv7xUJ6eFoYhYkJJblX -----END CERTIFICATE-----Generated at Tue Apr 30 22:56:15 2024 by rpki-client on console-fra.rpki-client.org