$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft File: XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft (raw, json) Hash identifier: knGrv5ZQZ10+0jrnqCwDedoDfdZ75pTPs3hQ4fUfZhw= Subject key identifier: B7:0A:78:41:F2:2C:AF:06:C6:86:D8:CE:72:95:12:A3:94:23:5D:83 Authority key identifier: 5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44 Certificate issuer: /CN=A9175F54/serialNumber=5DB57ED386039EA664D1EFF7570736D6F9F04C44 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft Manifest number: 54 Signing time: Fri 31 May 2024 08:48:49 +0000 Manifest this update: Fri 31 May 2024 08:48:49 +0000 Manifest next update: Fri 07 Jun 2024 08:48:49 +0000 Files and hashes: 1: XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl (hash: GrTl5KOflHvS7mwFvqFa8gfv/6bQGjDeV4tmTXorlNs=) 2: F6EB41429F2811EE91032D2AC4F9AE02.roa (hash: yxO8Q4SCvnLCFfrQRy7nPNmvXi4dwi3Ipp3jxwvR68c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F54/serialNumber=5DB57ED386039EA664D1EFF7570736D6F9F04C44 Validity Not Before: May 31 08:48:49 2024 GMT Not After : Jun 7 08:48:49 2024 GMT Subject: CN=66598ef1-5d26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:28:7a:a5:95:0e:d0:57:e9:f7:de:d8:8f:d5: 3c:61:9f:94:97:79:66:19:1f:77:5c:c6:aa:67:d9: 4c:ce:3f:33:ec:38:bc:da:1e:a4:13:24:ec:4e:e8: 89:83:75:4b:2b:68:3a:d8:47:32:bf:8e:d0:1a:eb: 83:fa:f5:78:1f:53:11:d6:f8:96:a2:65:89:58:85: d3:ff:91:8e:ae:64:16:3b:2d:16:bc:39:b6:49:4d: 45:26:c1:a4:00:5e:7a:0b:84:77:4c:2e:2d:b9:5f: de:07:9c:47:00:44:75:b5:0a:e1:96:5d:1f:3f:c4: b4:bf:77:4d:7d:20:ac:3c:eb:fc:d2:0b:e1:2a:65: e3:c2:20:21:9a:3a:31:cf:52:24:34:0d:d3:b6:a6: 73:a1:bb:be:67:ca:b1:09:8e:59:17:bf:6b:b1:a7: f1:02:db:d6:99:20:16:27:15:e9:a4:3e:47:54:ce: 5d:6c:d4:b8:63:98:ea:ce:e9:fd:f5:70:08:a8:eb: 5c:e1:43:b8:6a:2c:e5:92:be:25:c2:f4:f6:89:43: 1f:16:db:db:c0:66:f4:cb:e0:c7:af:1b:9e:c1:39: 9f:18:d1:22:31:27:37:34:a4:dc:f7:8c:15:f9:ff: 17:38:10:6b:d6:f6:9a:18:34:d8:57:11:b4:6a:bf: 6c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0A:78:41:F2:2C:AF:06:C6:86:D8:CE:72:95:12:A3:94:23:5D:83 X509v3 Authority Key Identifier: keyid:5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:25:a5:10:9d:8c:ae:b0:08:0e:62:2b:19:2e:5a:57:dd:d2: a8:11:20:52:e6:ba:67:e0:eb:27:34:64:14:4b:cf:86:27:16: 81:23:2d:bd:c5:52:72:5e:ed:c2:f9:b8:d7:af:57:7c:d9:5e: 7a:19:24:b6:57:ad:b6:93:5d:0f:c1:d4:cf:cd:d8:d9:c6:9f: 34:b0:57:4c:cf:23:14:eb:e8:c5:d0:92:e7:e3:8c:de:d8:15: da:a3:a8:ce:6b:25:fb:d2:68:a1:d5:f2:3b:2a:f2:c0:7f:b7: 80:b9:20:eb:9d:3e:c6:dd:33:15:28:3b:64:c3:67:22:b0:3f: 4e:39:35:21:e6:89:67:d3:d3:1c:56:72:2f:c1:b1:77:48:79: f0:70:e5:0f:3b:2a:25:30:4e:ce:8e:b7:ec:0b:2c:9f:ea:66: 9c:bc:8a:60:c1:e8:82:0a:ff:6b:52:16:7b:ba:b2:cb:59:86: 58:5f:49:ab:36:97:9e:2b:bb:e3:12:5f:b9:53:09:4d:16:3d: 27:c7:06:6b:3e:89:a5:ea:99:f0:0f:b4:4e:e9:41:f6:77:0a: 7e:83:57:7e:25:32:a0:76:8b:6d:50:c6:cd:6b:3c:2b:b0:8a: 1d:42:11:42:dd:8f:4a:db:3e:e7:65:70:f4:a9:91:ba:bc:31: 8f:c7:ca:98 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NUY1NDExMC8GA1UEBRMoNURCNTdFRDM4NjAzOUVBNjY0RDFFRkY3NTcwNzM2RDZG OUYwNEM0NDAeFw0yNDA1MzEwODQ4NDlaFw0yNDA2MDcwODQ4NDlaMBgxFjAUBgNV BAMTDTY2NTk4ZWYxLTVkMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkKHqllQ7QV+n33tiP1Txhn5SXeWYZH3dcxqpn2UzOPzPsOLzaHqQTJOxO6ImD dUsraDrYRzK/jtAa64P69XgfUxHW+JaiZYlYhdP/kY6uZBY7LRa8ObZJTUUmwaQA XnoLhHdMLi25X94HnEcARHW1CuGWXR8/xLS/d019IKw86/zSC+EqZePCICGaOjHP UiQ0DdO2pnOhu75nyrEJjlkXv2uxp/EC29aZIBYnFemkPkdUzl1s1LhjmOrO6f31 cAio61zhQ7hqLOWSviXC9PaJQx8W29vAZvTL4MevG57BOZ8Y0SIxJzc0pNz3jBX5 /xc4EGvW9poYNNhXEbRqv2xrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtwp4QfIs rwbGhtjOcpUSo5QjXYMwHwYDVR0jBBgwFoAUXbV+04YDnqZk0e/3Vwc21vnwTEQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1RjU0LzUxQjZFQ0U0OUYy ODExRUVBOTk1RDMyOEM0RjlBRTAyL1hiVi0wNFlEbnFaazBlXzNWd2MyMXZud1RF US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWGJWLTA0WURucVprMGVfM1Z3YzIxdm53VEVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 RjU0LzUxQjZFQ0U0OUYyODExRUVBOTk1RDMyOEM0RjlBRTAyL1hiVi0wNFlEbnFa azBlXzNWd2MyMXZud1RFUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEAlpRCdjK6wCA5iKxkuWlfd0qgRIFLmumfg6yc0ZBRLz4YnFoEjLb3F UnJe7cL5uNevV3zZXnoZJLZXrbaTXQ/B1M/N2NnGnzSwV0zPIxTr6MXQkufjjN7Y FdqjqM5rJfvSaKHV8jsq8sB/t4C5IOudPsbdMxUoO2TDZyKwP045NSHmiWfT0xxW ci/BsXdIefBw5Q87KiUwTs6Ot+wLLJ/qZpy8imDB6IIK/2tSFnu6sstZhlhfSas2 l54ru+MSX7lTCU0WPSfHBms+iaXqmfAPtE7pQfZ3Cn6DV34lMqB2i21Qxs1rPCuw ih1CEULdj0rbPudlcPSpkbq8MY/Hypg= -----END CERTIFICATE-----Generated at Fri May 31 10:42:22 2024 by rpki-client on console-fra.rpki-client.org