$ rpki-client -vvf rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft File: bXwian3LhfL0kha367ANXwOmBcM.mft (raw, json) Hash identifier: V5Q+N+1PUyWq3KztM9braQkQ/gIF+2nmKesYdMZo6OA= Subject key identifier: 12:05:75:2A:9A:87:A4:4E:C2:19:CE:FF:BE:05:93:91:1F:5C:63:F0 Authority key identifier: 6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3 Certificate issuer: /CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3 Certificate serial: 1298 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft Manifest number: 1284 Signing time: Sat 18 May 2024 17:38:46 +0000 Manifest this update: Sat 18 May 2024 17:38:45 +0000 Manifest next update: Sat 25 May 2024 17:38:45 +0000 Files and hashes: 1: bXwian3LhfL0kha367ANXwOmBcM.crl (hash: VhGExEEQyussOmEU9dXv+eg5cq7zh3+FngpiuOL9mG0=) 2: 3DCB68C8699A11ED98B1CA19C4F9AE02.roa (hash: d0lPQuu8WiKmVqIHmsQhH+qKgsfP0HH5kvhf0yP/Uio=) 3: 3C9FF554699A11ED98B1CA19C4F9AE02.roa (hash: BAGpvHqv4mqk/4UMdWdyuzergLrde3LFf+uyo/FYd+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4760 (0x1298) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3 Validity Not Before: May 18 17:38:45 2024 GMT Not After : May 25 17:38:45 2024 GMT Subject: CN=6648e7a5-d29b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:40:47:b2:df:43:73:ae:1a:78:e0:8a:30:66: c0:1d:67:f1:ad:00:90:b1:5b:68:1f:45:b3:a7:a7: db:ae:5c:35:31:90:51:67:b5:ef:f6:6d:ec:72:9a: 66:67:31:fc:be:89:07:e0:67:12:3d:50:40:53:63: 74:55:27:e2:1f:e5:b1:6b:b2:1b:21:63:e4:ec:d7: bb:5e:dc:6b:b9:65:45:dc:ef:22:13:4f:96:f0:a6: 7b:e2:e1:72:01:fc:4a:ce:01:ff:79:eb:b2:f4:1a: a8:5c:df:2c:9b:96:78:ae:d8:3e:97:3e:44:14:b4: a4:ba:dd:85:61:e1:c1:5c:d0:02:ce:7a:15:68:01: 24:34:c8:c3:64:e4:9d:77:8e:da:f4:a1:a7:fe:80: 15:d0:2e:23:fc:00:81:f7:3d:6c:39:4e:0a:ec:d2: 5e:d0:62:0f:82:2e:f6:e9:54:70:30:73:16:92:21: 8b:e8:ce:09:7c:17:41:30:21:76:a8:ec:1a:8c:d5: c6:36:fd:fe:0a:c9:ef:e5:fa:64:00:c7:4b:8a:10: 6a:f1:3f:88:47:7a:5a:32:fc:d9:55:d7:79:68:14: 20:57:b1:af:a7:b8:d9:70:be:82:91:a9:fa:c1:9e: 70:9d:09:d6:95:54:99:5e:83:30:7d:5b:da:85:ff: 1a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:05:75:2A:9A:87:A4:4E:C2:19:CE:FF:BE:05:93:91:1F:5C:63:F0 X509v3 Authority Key Identifier: keyid:6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:e9:53:b6:4c:6e:99:98:2f:9d:80:9f:57:8b:77:8c:38:3b: 62:a5:90:b3:12:dc:96:50:c8:b5:a5:39:79:32:de:77:2e:ee: 86:2c:82:91:b2:19:f9:47:bf:b9:e6:2b:83:15:2b:86:5d:32: 2a:f1:ec:1d:59:89:f8:d4:23:e8:c2:2a:29:98:3b:b1:38:fd: f4:af:b7:5b:5b:ef:83:1a:ae:ff:c5:b7:7b:ac:a1:56:18:0f: 90:39:e6:73:de:07:bb:9f:12:81:57:bc:4b:cd:2c:52:47:d4: f8:f2:6a:81:21:bf:10:68:34:94:f9:52:07:75:56:18:3a:09: 34:4d:95:66:88:6d:b4:5f:07:a0:85:f2:be:b4:75:35:4e:38: 60:59:f4:e0:c0:06:02:6f:b5:6c:26:6c:74:03:c0:a8:68:f4: 4f:59:dd:8c:1e:04:e3:d4:63:fe:c3:6e:13:48:b4:89:b3:87: c0:fe:ad:17:cb:12:71:8c:5c:6d:f6:f1:46:08:3b:9e:c1:07: 43:38:6e:db:65:86:12:30:81:40:d3:5c:0d:f4:37:ff:e0:02: cc:0b:a2:7a:36:64:57:74:a5:97:17:e7:23:79:d3:63:3a:f2: 04:23:ca:29:30:44:71:bf:b1:c4:2d:2d:3d:e2:1e:4a:ca:49: b9:d2:b8:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA5QUQxMTAvBgNVBAUTKDZEN0MyMjZBN0RDQjg1RjJGNDkyMTZCN0VCQjAwRDVG MDNBNjA1QzMwHhcNMjQwNTE4MTczODQ1WhcNMjQwNTI1MTczODQ1WjAYMRYwFAYD VQQDEw02NjQ4ZTdhNS1kMjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEBHst9Dc64aeOCKMGbAHWfxrQCQsVtoH0Wzp6fbrlw1MZBRZ7Xv9m3scppm ZzH8vokH4GcSPVBAU2N0VSfiH+Wxa7IbIWPk7Ne7XtxruWVF3O8iE0+W8KZ74uFy AfxKzgH/eeuy9BqoXN8sm5Z4rtg+lz5EFLSkut2FYeHBXNACznoVaAEkNMjDZOSd d47a9KGn/oAV0C4j/ACB9z1sOU4K7NJe0GIPgi726VRwMHMWkiGL6M4JfBdBMCF2 qOwajNXGNv3+Csnv5fpkAMdLihBq8T+IR3paMvzZVdd5aBQgV7Gvp7jZcL6Ckan6 wZ5wnQnWlVSZXoMwfVvahf8acQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIFdSqa h6ROwhnO/74Fk5EfXGPwMB8GA1UdIwQYMBaAFG18Imp9y4Xy9JIWt+uwDV8DpgXD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDlBRC82NTZERDI2QUE3 NjgxMUU4OTMzM0M3MjVDNEY5QUUwMi9iWHdpYW4zTGhmTDBraGEzNjdBTlh3T21C Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JYd2lhbjNMaGZMMGtoYTM2N0FOWHdPbUJjTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDlBRC82NTZERDI2QUE3NjgxMUU4OTMzM0M3MjVDNEY5QUUwMi9iWHdpYW4zTGhm TDBraGEzNjdBTlh3T21CY00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW6VO2TG6ZmC+dgJ9Xi3eMODtipZCzEtyWUMi1pTl5Mt53Lu6GLIKR shn5R7+55iuDFSuGXTIq8ewdWYn41CPowiopmDuxOP30r7dbW++DGq7/xbd7rKFW GA+QOeZz3ge7nxKBV7xLzSxSR9T48mqBIb8QaDSU+VIHdVYYOgk0TZVmiG20Xweg hfK+tHU1TjhgWfTgwAYCb7VsJmx0A8CoaPRPWd2MHgTj1GP+w24TSLSJs4fA/q0X yxJxjFxt9vFGCDuewQdDOG7bZYYSMIFA01wN9Df/4ALMC6J6NmRXdKWXF+cjedNj OvIEI8opMERxv7HELS094h5Kykm50rie -----END CERTIFICATE-----Generated at Sat May 18 18:12:32 2024 by rpki-client on console-fra.rpki-client.org