$ rpki-client -vvf rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft File: X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft (raw, json) Hash identifier: W1K5wIdprqQnrZmMA0gwg0HwiFh1+6zPkdCiNwoImKQ= Subject key identifier: 2A:8B:7B:C5:5A:BE:50:DB:F0:E4:82:D1:2A:65:08:9F:5C:3C:B5:17 Authority key identifier: 5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE Certificate issuer: /CN=A918A51B/serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft Manifest number: F4 Signing time: Sun 19 May 2024 05:45:01 +0000 Manifest this update: Sun 19 May 2024 05:45:01 +0000 Manifest next update: Sun 26 May 2024 05:45:01 +0000 Files and hashes: 1: X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl (hash: d9y1kgGXy+xBowycqDivO+KIAVylIZGRKi/teRFXLKg=) 2: 6B9615FCD6E311EE94842842C4F9AE02.roa (hash: /eoW8QKQOWUt9baYsgJXn/Eg+8n5SW4VvRwwx2fZyY0=) 3: 6A9D79ECD6E311EE94842842C4F9AE02.roa (hash: jN9QXGMMYv/Zcq29BNSVq+lenvl5pgWeupVmCs5KQSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A51B/serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE Validity Not Before: May 19 05:45:01 2024 GMT Not After : May 26 05:45:01 2024 GMT Subject: CN=664991dd-7833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fb:cd:fb:f2:da:34:58:94:bf:c6:47:0b:55: 76:57:f2:3f:f5:c0:3e:c0:ca:03:d9:33:0b:4d:e6: b1:5a:7f:83:57:48:ee:32:87:ab:9c:7d:7b:4c:ad: a4:b3:d9:c7:e3:13:1c:f0:1d:80:04:93:48:9d:f8: c0:36:5a:42:d7:32:00:75:4a:ca:29:f1:94:65:fa: 21:6c:8f:ed:50:ab:0e:58:a6:db:58:64:35:8f:6f: 7e:c7:b3:fd:bf:64:09:6a:cf:a4:5d:40:bc:5a:dd: dc:f8:c3:74:94:36:0a:7e:7e:e6:80:c4:49:17:d5: d3:8e:f9:b2:06:9e:6d:31:3d:be:48:71:c4:c9:df: b5:97:97:5e:fd:b6:4c:ab:5e:13:df:3e:49:3e:35: 6f:c0:d3:41:70:74:2c:e0:88:54:d3:e6:1b:81:b9: 25:92:94:d5:d0:a5:e3:ca:fa:58:93:5e:75:f5:88: 4b:74:78:54:c8:d5:9c:ba:98:5c:d6:6e:f1:64:bf: a6:4c:b6:87:23:59:db:72:05:94:96:45:0c:8f:cd: 23:c0:ac:33:ae:ad:54:16:51:3b:8b:af:9e:6e:1f: 45:6b:37:28:ea:8b:86:36:3f:2a:ce:b0:79:33:dc: 0b:cf:11:89:21:65:ba:85:74:ac:3a:8f:0f:f7:fe: 9a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8B:7B:C5:5A:BE:50:DB:F0:E4:82:D1:2A:65:08:9F:5C:3C:B5:17 X509v3 Authority Key Identifier: keyid:5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:66:99:d6:e8:84:a7:b4:46:fc:d3:b8:3d:10:c4:a9:01:64: ca:ae:c3:3d:54:57:3f:f4:54:00:3a:61:63:1e:a0:da:c3:54: 85:5a:8a:49:67:19:af:5b:70:b5:db:f3:64:9a:a8:83:d3:a3: fb:6e:b2:49:49:bb:82:45:d0:53:8c:ca:e2:af:36:19:f0:6c: 38:5b:80:79:5f:55:df:7b:d6:14:74:31:e8:25:90:b8:b2:83: 34:9e:42:45:8c:2f:32:3b:c5:fd:74:17:84:5e:5f:58:a5:fa: 72:21:6c:d0:16:c4:0e:25:d6:78:f4:22:f5:44:18:26:da:cf: 9e:10:f3:c1:14:60:69:11:bc:07:72:e6:ed:08:52:2e:0e:10: 4d:2b:40:7f:a3:f1:ef:92:64:30:ea:04:e2:bc:4f:6d:09:95: b2:4f:54:17:a1:53:76:c9:c3:f1:9f:99:4f:37:eb:c1:fe:c5: 1b:7a:b6:b3:d6:88:78:de:f9:2d:81:ab:2c:89:b4:3f:2f:70: a6:ea:e7:cd:ab:43:7b:0e:10:f3:ed:1b:5a:a8:c5:c9:1c:ab: 14:0a:04:7f:98:42:8d:84:73:3e:07:d0:7a:1f:b3:ec:8c:28: bc:bd:e0:99:ee:70:3f:01:f2:45:6a:e1:da:e0:d8:1c:49:0b: 8d:2a:29:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE1MUIxMTAvBgNVBAUTKDVGRTA0Qzk1N0E2Q0JDNTQwQTM0RjQ1M0QxM0UzRjgw NTBDOEY0RUUwHhcNMjQwNTE5MDU0NTAxWhcNMjQwNTI2MDU0NTAxWjAYMRYwFAYD VQQDEw02NjQ5OTFkZC03ODMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfvN+/LaNFiUv8ZHC1V2V/I/9cA+wMoD2TMLTeaxWn+DV0juMoernH17TK2k s9nH4xMc8B2ABJNInfjANlpC1zIAdUrKKfGUZfohbI/tUKsOWKbbWGQ1j29+x7P9 v2QJas+kXUC8Wt3c+MN0lDYKfn7mgMRJF9XTjvmyBp5tMT2+SHHEyd+1l5de/bZM q14T3z5JPjVvwNNBcHQs4IhU0+YbgbklkpTV0KXjyvpYk1519YhLdHhUyNWcuphc 1m7xZL+mTLaHI1nbcgWUlkUMj80jwKwzrq1UFlE7i6+ebh9Fazco6ouGNj8qzrB5 M9wLzxGJIWW6hXSsOo8P9/6aKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqLe8Va vlDb8OSC0SplCJ9cPLUXMB8GA1UdIwQYMBaAFF/gTJV6bLxUCjT0U9E+P4BQyPTu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTUxQi8wMENBOThGMkEx QTUxMUVEOTEyMzIyNTRDNEY5QUUwMi9YLUJNbFhwc3ZGUUtOUFJUMFQ0X2dGREk5 TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gtQk1sWHBzdkZRS05QUlQwVDRfZ0ZESTlPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTUxQi8wMENBOThGMkExQTUxMUVEOTEyMzIyNTRDNEY5QUUwMi9YLUJNbFhwc3ZG UUtOUFJUMFQ0X2dGREk5TzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFZpnW6ISntEb807g9EMSpAWTKrsM9VFc/9FQAOmFjHqDaw1SFWopJ ZxmvW3C12/NkmqiD06P7brJJSbuCRdBTjMrirzYZ8Gw4W4B5X1Xfe9YUdDHoJZC4 soM0nkJFjC8yO8X9dBeEXl9YpfpyIWzQFsQOJdZ49CL1RBgm2s+eEPPBFGBpEbwH cubtCFIuDhBNK0B/o/HvkmQw6gTivE9tCZWyT1QXoVN2ycPxn5lPN+vB/sUberaz 1oh43vktgassibQ/L3Cm6ufNq0N7DhDz7RtaqMXJHKsUCgR/mEKNhHM+B9B6H7Ps jCi8veCZ7nA/AfJFauHa4NgcSQuNKilF -----END CERTIFICATE-----Generated at Sun May 19 07:40:41 2024 by rpki-client on console-fra.rpki-client.org