$ rpki-client -vvf rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft File: xDm8101kBSuyA1McRgSa1ANYj8c.mft (raw, json) Hash identifier: V5BnrzpvZrwe5qYE7zICyPK2vWIrlYcK3aVVVC3iSlw= Subject key identifier: 4E:CD:CD:CA:2F:90:24:4F:36:84:AE:11:C7:33:CE:A7:EE:6D:E6:C4 Authority key identifier: C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7 Certificate issuer: /CN=A91775D8/serialNumber=C439BCD74D64052BB203531C46049AD403588FC7 Certificate serial: 05D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft Manifest number: 05D1 Signing time: Sun 19 May 2024 00:06:02 +0000 Manifest this update: Sun 19 May 2024 00:06:02 +0000 Manifest next update: Sun 26 May 2024 00:06:02 +0000 Files and hashes: 1: xDm8101kBSuyA1McRgSa1ANYj8c.crl (hash: QR+gbWzVboRJixhZRTqyEfBTCduRspYkim687Ra8UOg=) 2: 18D9E13C5CE611EC80EC7E76C4F9AE02.roa (hash: yItSFfthrvs4+kvxPXhcObukSW7A2Gjgx6MxObPc6GM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1495 (0x5d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91775D8/serialNumber=C439BCD74D64052BB203531C46049AD403588FC7 Validity Not Before: May 19 00:06:02 2024 GMT Not After : May 26 00:06:02 2024 GMT Subject: CN=6649426a-2e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:00:d3:52:62:e5:01:c9:84:d0:86:9e:8c:9c: d0:5e:89:9c:06:ce:1d:08:2e:df:86:3d:5d:82:aa: 10:bb:79:fc:ac:d3:46:a4:62:3b:4a:6a:5e:2e:92: e3:a9:24:03:77:c3:eb:64:2f:fa:73:f5:d6:ea:b1: 5f:00:a3:c6:27:82:04:34:98:ae:8b:8c:8f:56:de: ad:db:66:dd:d9:19:7c:30:1e:e5:25:55:53:9e:97: 17:c8:3d:83:8e:22:2b:09:4a:18:e2:2e:2d:3f:85: 29:e8:fe:98:fc:32:38:54:14:42:76:41:a5:64:5b: 10:23:0a:9a:d9:a3:df:11:e8:09:a8:00:43:e4:03: d6:0c:3b:04:69:e0:99:4d:7a:3a:8c:fa:17:70:e6: 70:4d:65:96:c1:3e:86:36:ad:e7:2e:7c:3b:c9:7b: 7f:f7:2c:30:c3:93:00:a5:92:9d:4e:05:1d:03:25: 8a:34:3d:17:81:fd:89:f7:8a:77:59:4f:bf:ae:9b: 80:b7:5e:e3:80:25:b8:f1:e4:ed:14:9a:7d:6b:af: 79:f1:fc:cb:5a:72:65:07:9d:81:3d:d9:74:a8:8b: 36:3f:ad:e3:2b:73:59:04:3e:75:28:42:b8:c0:33: ee:d8:75:98:ab:78:52:78:12:91:1f:5f:51:98:f6: 97:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CD:CD:CA:2F:90:24:4F:36:84:AE:11:C7:33:CE:A7:EE:6D:E6:C4 X509v3 Authority Key Identifier: keyid:C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:47:ff:e7:72:b9:b5:85:a4:3d:62:6a:64:1a:31:40:5b:28: 9b:28:68:95:16:58:e2:93:2b:f5:91:72:91:20:65:2c:23:0b: da:2d:ee:c1:9c:54:4f:4c:24:7f:b6:94:ea:45:c0:47:b7:c5: 33:74:c6:20:22:33:15:02:95:a3:ee:a7:02:54:f2:df:27:62: fd:bc:2d:67:c2:83:07:ce:ef:d4:50:e7:05:88:f6:fb:07:ea: 25:23:d8:57:77:72:98:3b:9c:88:06:ba:61:3c:c4:c4:7e:03: 75:30:25:64:8c:0f:93:84:f3:0c:d7:b8:93:e3:a7:be:cc:9c: 29:57:83:a3:95:51:a9:85:b0:0a:c9:3c:20:0b:0e:c0:0b:4c: 4b:02:ad:bb:34:6d:26:67:e5:d7:ce:99:2b:21:2d:d8:3a:e5: af:f8:44:73:b3:29:b1:bb:4d:e8:e8:1a:b3:40:b2:d9:64:d8: a8:29:de:72:39:64:23:92:ff:06:4b:c1:2c:0e:bc:2b:c1:0c: 36:3b:cc:fb:b2:2f:98:83:bf:7b:83:68:e0:6c:69:98:21:ee: 2d:21:39:94:d3:f4:f7:68:4d:41:48:ac:cc:af:e2:33:3d:b4: 7b:2a:39:ea:3e:9a:b5:46:e3:18:28:4c:bf:b8:4d:13:2f:fd: e5:03:e5:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc1RDgxMTAvBgNVBAUTKEM0MzlCQ0Q3NEQ2NDA1MkJCMjAzNTMxQzQ2MDQ5QUQ0 MDM1ODhGQzcwHhcNMjQwNTE5MDAwNjAyWhcNMjQwNTI2MDAwNjAyWjAYMRYwFAYD VQQDEw02NjQ5NDI2YS0yZTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ADTUmLlAcmE0IaejJzQXomcBs4dCC7fhj1dgqoQu3n8rNNGpGI7SmpeLpLj qSQDd8PrZC/6c/XW6rFfAKPGJ4IENJiui4yPVt6t22bd2Rl8MB7lJVVTnpcXyD2D jiIrCUoY4i4tP4Up6P6Y/DI4VBRCdkGlZFsQIwqa2aPfEegJqABD5APWDDsEaeCZ TXo6jPoXcOZwTWWWwT6GNq3nLnw7yXt/9ywww5MApZKdTgUdAyWKND0Xgf2J94p3 WU+/rpuAt17jgCW48eTtFJp9a6958fzLWnJlB52BPdl0qIs2P63jK3NZBD51KEK4 wDPu2HWYq3hSeBKRH19RmPaXDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7Nzcov kCRPNoSuEcczzqfubebEMB8GA1UdIwQYMBaAFMQ5vNdNZAUrsgNTHEYEmtQDWI/H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzVEOC81MUM5RjZBRTcw NUYxMUVCOTk3QkJCMTZDNEY5QUUwMi94RG04MTAxa0JTdXlBMU1jUmdTYTFBTllq OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEbTgxMDFrQlN1eUExTWNSZ1NhMUFOWWo4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzVEOC81MUM5RjZBRTcwNUYxMUVCOTk3QkJCMTZDNEY5QUUwMi94RG04MTAxa0JT dXlBMU1jUmdTYTFBTllqOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhR//ncrm1haQ9YmpkGjFAWyibKGiVFljikyv1kXKRIGUsIwvaLe7B nFRPTCR/tpTqRcBHt8UzdMYgIjMVApWj7qcCVPLfJ2L9vC1nwoMHzu/UUOcFiPb7 B+olI9hXd3KYO5yIBrphPMTEfgN1MCVkjA+ThPMM17iT46e+zJwpV4OjlVGphbAK yTwgCw7AC0xLAq27NG0mZ+XXzpkrIS3YOuWv+ERzsymxu03o6BqzQLLZZNioKd5y OWQjkv8GS8EsDrwrwQw2O8z7si+Yg797g2jgbGmYIe4tITmU0/T3aE1BSKzMr+Iz PbR7KjnqPpq1RuMYKEy/uE0TL/3lA+WC -----END CERTIFICATE-----Generated at Sun May 19 00:59:41 2024 by rpki-client on console-fra.rpki-client.org