$ rpki-client -vvf rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft File: xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft (raw, json) Hash identifier: ydZn2+Wvsmv2S9P3840nXSdyk8xJA5j5JuKbnnAuQK4= Subject key identifier: 28:79:40:36:14:FA:1A:DA:9C:33:80:7C:06:E7:18:C9:B4:E3:C2:0E Authority key identifier: C6:54:FC:47:6C:DF:2E:30:6B:E2:77:0D:AE:91:04:23:61:1A:31:92 Certificate issuer: /CN=A918A750/serialNumber=C654FC476CDF2E306BE2770DAE910423611A3192 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft Manifest number: B1 Signing time: Sun 19 May 2024 06:32:47 +0000 Manifest this update: Sun 19 May 2024 06:32:47 +0000 Manifest next update: Sun 26 May 2024 06:32:47 +0000 Files and hashes: 1: xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl (hash: xpQ+DNy9jKjCEcHKs2KatrakD7DDSCz6It4FDIOtDN0=) 2: CD377A6C06B411EE841D6C4AC4F9AE02.roa (hash: sc1lFdY9ZsPCeoNnxixXzMYpZACOyGUF2UlQF+bH/7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A750/serialNumber=C654FC476CDF2E306BE2770DAE910423611A3192 Validity Not Before: May 19 06:32:47 2024 GMT Not After : May 26 06:32:47 2024 GMT Subject: CN=66499d0f-0dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b6:fe:fc:df:f0:42:bd:42:3f:43:47:31:44: e2:84:ec:66:68:7e:20:4c:40:fd:5f:a7:d7:32:29: 90:a2:e4:16:ba:8d:11:c6:3b:98:6f:10:7d:c1:9b: 16:07:af:77:6c:da:05:07:ce:45:30:59:59:ac:47: 76:af:00:ee:26:56:75:cf:b5:34:40:fd:ff:87:4d: 8c:a2:74:c4:e8:a8:be:b9:db:1e:53:25:96:d6:ef: 5d:f0:b5:9a:66:fd:8f:47:71:e4:25:6c:a8:0e:61: 71:fb:da:f1:c8:22:1f:07:cf:5a:7d:fc:c0:d5:4d: 15:c7:96:95:03:fa:6a:b4:18:bf:52:57:ba:f6:fd: ac:b1:f2:89:27:76:05:3f:d8:14:7a:a1:21:51:eb: fa:63:44:a8:e2:60:6e:0d:86:49:8e:ca:9e:27:d0: 94:8c:f7:52:cc:6f:24:cb:35:d3:bd:49:dd:5b:3c: 01:e1:4e:d4:d6:fa:9b:d4:9d:95:05:d7:57:43:4f: 65:04:d0:df:2b:a5:ae:8d:e2:91:4d:e1:df:62:ca: d0:f7:fc:aa:db:ae:30:45:0a:d3:9e:33:d8:b0:67: 14:5b:c7:ef:10:ff:e7:b0:fe:d5:07:88:b3:07:40: 80:c5:ff:3f:8d:3b:49:72:fb:92:bf:75:07:31:e7: 85:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:79:40:36:14:FA:1A:DA:9C:33:80:7C:06:E7:18:C9:B4:E3:C2:0E X509v3 Authority Key Identifier: keyid:C6:54:FC:47:6C:DF:2E:30:6B:E2:77:0D:AE:91:04:23:61:1A:31:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:96:92:5c:68:14:ba:cb:13:1f:6b:19:ff:62:66:10:56:08: cb:2d:ce:e3:df:5a:2d:4c:1c:e1:5d:08:6e:d2:2c:49:e6:a5: 11:4f:29:a2:98:40:ec:14:17:4a:59:31:5c:2e:a8:6b:f5:41: 7a:f1:e6:86:d0:d2:c7:0a:04:62:c7:36:27:22:b3:3d:69:0b: e1:2d:c3:1f:25:ab:ab:f1:a9:df:21:7f:95:26:6f:06:6e:36: ef:c6:9e:98:fa:8b:19:fa:3f:59:11:37:eb:ce:69:5f:bd:1d: 06:90:c8:82:b4:01:b4:78:58:54:ac:b9:37:cd:14:c6:26:f5: 54:cb:b5:f7:3a:79:b2:33:3d:ad:01:e0:20:ac:6a:71:5c:a3: db:29:cf:95:f5:31:3f:cf:ca:d0:c1:bd:15:6d:91:f4:18:9d: 3a:d5:a2:6f:72:8f:3a:a3:88:ea:5c:b8:41:31:35:76:cf:d4: 9e:74:a9:ae:91:a8:af:45:fd:15:40:b2:60:de:ca:77:23:79: d2:42:4a:dd:dc:58:c3:53:8f:29:af:ff:a0:8f:15:ca:08:0c: 6b:d0:29:db:fe:82:a5:76:4e:13:dd:d9:f1:ae:b9:37:d4:77: 03:03:62:53:67:7b:e2:1c:a5:7f:6f:1d:ff:66:35:9b:95:00: 5e:0a:40:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE3NTAxMTAvBgNVBAUTKEM2NTRGQzQ3NkNERjJFMzA2QkUyNzcwREFFOTEwNDIz NjExQTMxOTIwHhcNMjQwNTE5MDYzMjQ3WhcNMjQwNTI2MDYzMjQ3WjAYMRYwFAYD VQQDEw02NjQ5OWQwZi0wZGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrb+/N/wQr1CP0NHMUTihOxmaH4gTED9X6fXMimQouQWuo0RxjuYbxB9wZsW B693bNoFB85FMFlZrEd2rwDuJlZ1z7U0QP3/h02MonTE6Ki+udseUyWW1u9d8LWa Zv2PR3HkJWyoDmFx+9rxyCIfB89affzA1U0Vx5aVA/pqtBi/Ule69v2ssfKJJ3YF P9gUeqEhUev6Y0So4mBuDYZJjsqeJ9CUjPdSzG8kyzXTvUndWzwB4U7U1vqb1J2V BddXQ09lBNDfK6WujeKRTeHfYsrQ9/yq264wRQrTnjPYsGcUW8fvEP/nsP7VB4iz B0CAxf8/jTtJcvuSv3UHMeeFFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCh5QDYU +hranDOAfAbnGMm048IOMB8GA1UdIwQYMBaAFMZU/Eds3y4wa+J3Da6RBCNhGjGS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTc1MC80NTFENkE2QTA2 QUYxMUVFODc5QTcwNDVDNEY5QUUwMi94bFQ4UjJ6ZkxqQnI0bmNOcnBFRUkyRWFN WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsVDhSMnpmTGpCcjRuY05ycEVFSTJFYU1aSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTc1MC80NTFENkE2QTA2QUYxMUVFODc5QTcwNDVDNEY5QUUwMi94bFQ4UjJ6Zkxq QnI0bmNOcnBFRUkyRWFNWkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0lpJcaBS6yxMfaxn/YmYQVgjLLc7j31otTBzhXQhu0ixJ5qURTymi mEDsFBdKWTFcLqhr9UF68eaG0NLHCgRixzYnIrM9aQvhLcMfJaur8anfIX+VJm8G bjbvxp6Y+osZ+j9ZETfrzmlfvR0GkMiCtAG0eFhUrLk3zRTGJvVUy7X3OnmyMz2t AeAgrGpxXKPbKc+V9TE/z8rQwb0VbZH0GJ061aJvco86o4jqXLhBMTV2z9SedKmu kaivRf0VQLJg3sp3I3nSQkrd3FjDU48pr/+gjxXKCAxr0Cnb/oKldk4T3dnxrrk3 1HcDA2JTZ3viHKV/bx3/ZjWblQBeCkBG -----END CERTIFICATE-----Generated at Sun May 19 07:40:41 2024 by rpki-client on console-fra.rpki-client.org