$ rpki-client -vvf rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft File: xH0VZB2jsUx05cspvMBIgSMK0U4.mft (raw, json) Hash identifier: 8P7gmp4h7fuA9V6ZjS4Z2NMjy/eZQwvFw8YWmydg9lA= Subject key identifier: 0C:F1:69:A0:B8:BA:9C:35:12:64:72:6B:69:56:B4:8A:E7:40:4E:60 Authority key identifier: C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E Certificate issuer: /CN=A9187364/serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E Certificate serial: 01B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft Manifest number: 01B4 Signing time: Sun 19 May 2024 04:33:35 +0000 Manifest this update: Sun 19 May 2024 04:33:34 +0000 Manifest next update: Sun 26 May 2024 04:33:34 +0000 Files and hashes: 1: xH0VZB2jsUx05cspvMBIgSMK0U4.crl (hash: MVgYagldIpAWiK91DCyP7rkQigIQTBc0MQ5C80qdn+0=) 2: 62B575B8104C11ED8CE56267C4F9AE02.roa (hash: p81JenP4sHk9EaqfiI10bPWD5d74Vcxx+XAxOXmCvG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 441 (0x1b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187364/serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E Validity Not Before: May 19 04:33:34 2024 GMT Not After : May 26 04:33:34 2024 GMT Subject: CN=6649811e-00ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ae:74:fa:3b:eb:41:4f:65:78:92:26:ff:b6: 7e:84:58:a5:de:f4:40:7c:7f:da:96:94:5f:73:79: fc:3b:86:d4:6d:bc:f3:67:11:d9:4f:0f:4c:b6:e8: d5:aa:26:93:76:bf:48:4b:77:ef:00:c8:cf:12:b6: 00:fc:e1:4c:23:c6:fc:b5:91:c1:f9:90:fc:28:95: 26:27:09:58:f5:a4:31:43:51:61:a2:50:fb:a6:18: 64:8a:07:c9:2d:2a:33:11:39:78:95:a5:f5:ba:72: fa:69:5e:e8:80:58:ab:58:06:7c:d7:dd:fd:d7:2c: a2:07:b7:18:76:68:ad:8e:22:ff:94:ca:b6:62:7d: 2c:92:8b:ec:92:b6:c1:91:86:54:b3:11:77:8a:a7: e7:57:72:66:b5:0a:77:6b:85:98:02:e2:9f:58:ff: 7d:8e:a2:f6:82:c0:e3:42:ec:51:82:1f:79:b6:81: 9d:b6:bb:64:e3:33:26:7b:4e:22:47:c7:9d:43:ed: ee:ab:49:44:a6:44:8f:14:28:aa:19:52:b0:23:5a: 25:25:9f:5c:81:ee:93:63:f5:31:d7:66:2c:06:d5: 82:7f:f1:19:4e:0d:b8:9f:c9:bd:c2:d2:2d:7a:c8: 64:aa:07:d0:be:44:aa:26:9f:71:8f:24:05:96:e2: ba:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F1:69:A0:B8:BA:9C:35:12:64:72:6B:69:56:B4:8A:E7:40:4E:60 X509v3 Authority Key Identifier: keyid:C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:c4:51:f2:a2:15:60:bc:4b:35:ba:d8:88:44:12:78:e6:30: 35:5d:2b:9f:10:22:4b:1d:8c:91:07:65:d4:fd:9a:06:9c:7d: 8f:b3:fc:42:4b:40:a8:09:96:de:25:e6:cf:a8:a9:4f:12:22: ac:d7:fd:dd:c2:53:ba:8f:21:1a:7c:6b:2a:18:c4:f8:d0:18: 59:1d:42:b3:6a:06:a1:e5:65:8d:96:ab:9c:bd:80:15:e2:5e: b7:ab:90:ef:8c:22:50:6a:d7:8d:78:e2:e8:0a:be:78:2e:c5: a5:7c:7d:ec:2c:d3:d6:79:da:f4:aa:43:f5:28:f3:38:bc:db: 58:62:a5:f9:0b:84:83:1b:7e:08:17:36:c8:91:f3:5c:06:60: 6a:08:90:7e:73:84:5c:7a:01:a7:e4:5c:24:47:34:1b:6a:ab: 0a:74:9f:a1:48:a7:ab:2c:c6:b6:d5:b6:8f:16:64:d8:29:11: 01:76:bc:a9:a4:b3:3f:ef:51:fe:73:5c:90:8a:59:08:20:94: 6e:52:14:5c:cf:cc:d7:75:97:62:6f:46:30:0b:be:a0:6c:9f: d0:4c:17:20:74:41:a5:ae:4f:f6:eb:c5:e9:88:46:fc:c0:48: 5e:12:ef:c3:d1:55:77:77:44:b6:a2:b9:18:0c:e7:0a:77:87: af:cf:c0:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczNjQxMTAvBgNVBAUTKEM0N0QxNTY0MURBM0IxNEM3NEU1Q0IyOUJDQzA0ODgx MjMwQUQxNEUwHhcNMjQwNTE5MDQzMzM0WhcNMjQwNTI2MDQzMzM0WjAYMRYwFAYD VQQDEw02NjQ5ODExZS0wMGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt650+jvrQU9leJIm/7Z+hFil3vRAfH/alpRfc3n8O4bUbbzzZxHZTw9MtujV qiaTdr9IS3fvAMjPErYA/OFMI8b8tZHB+ZD8KJUmJwlY9aQxQ1FholD7phhkigfJ LSozETl4laX1unL6aV7ogFirWAZ819391yyiB7cYdmitjiL/lMq2Yn0skovskrbB kYZUsxF3iqfnV3JmtQp3a4WYAuKfWP99jqL2gsDjQuxRgh95toGdtrtk4zMme04i R8edQ+3uq0lEpkSPFCiqGVKwI1olJZ9cge6TY/Ux12YsBtWCf/EZTg24n8m9wtIt eshkqgfQvkSqJp9xjyQFluK6iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzxaaC4 upw1EmRya2lWtIrnQE5gMB8GA1UdIwQYMBaAFMR9FWQdo7FMdOXLKbzASIEjCtFO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzM2NC9FOUE0RUE3MDEw NDkxMUVEOEVGMEY3NjJDNEY5QUUwMi94SDBWWkIyanNVeDA1Y3Nwdk1CSWdTTUsw VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hIMFZaQjJqc1V4MDVjc3B2TUJJZ1NNSzBVNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzM2NC9FOUE0RUE3MDEwNDkxMUVEOEVGMEY3NjJDNEY5QUUwMi94SDBWWkIyanNV eDA1Y3Nwdk1CSWdTTUswVTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2xFHyohVgvEs1utiIRBJ45jA1XSufECJLHYyRB2XU/ZoGnH2Ps/xC S0CoCZbeJebPqKlPEiKs1/3dwlO6jyEafGsqGMT40BhZHUKzagah5WWNlqucvYAV 4l63q5DvjCJQateNeOLoCr54LsWlfH3sLNPWedr0qkP1KPM4vNtYYqX5C4SDG34I FzbIkfNcBmBqCJB+c4RcegGn5FwkRzQbaqsKdJ+hSKerLMa21baPFmTYKREBdryp pLM/71H+c1yQilkIIJRuUhRcz8zXdZdib0YwC76gbJ/QTBcgdEGlrk/268XpiEb8 wEheEu/D0VV3d0S2orkYDOcKd4evz8DL -----END CERTIFICATE-----Generated at Sun May 19 05:48:51 2024 by rpki-client on console-fra.rpki-client.org