$ rpki-client -vvf rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft File: xK1kn8XyMwadUdhtVa3KzxQtYVc.mft (raw, json) Hash identifier: pKxuBX7QPysLTH4Y1+IAvGSTypFeI085kIsnA/WtR2Y= Subject key identifier: 4E:F7:28:B9:FF:C4:5F:24:93:0E:B9:05:8A:EB:F0:99:45:4F:D7:72 Authority key identifier: C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 Certificate issuer: /CN=A918BDEB/serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Certificate serial: 094F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft Manifest number: 0947 Signing time: Fri 31 May 2024 21:46:49 +0000 Manifest this update: Fri 31 May 2024 21:46:49 +0000 Manifest next update: Fri 07 Jun 2024 21:46:49 +0000 Files and hashes: 1: xK1kn8XyMwadUdhtVa3KzxQtYVc.crl (hash: Y3S8cDep1V/FBh1HOWKZ/kYNiTESMRGIpVVCtz9ZfS0=) 2: CA67185A02E511EF8ED1355CC4F9AE02.roa (hash: wHhpRiqBr3hK50V+Phj70tryQ0HqBEHePg9PAHRjbTI=) 3: C98E616802E511EF8ED1355CC4F9AE02.roa (hash: g/vYt2sJquMykKKd8bZeSSOgmSqzVFIJK4b4vgQp8Zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 21:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2383 (0x94f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BDEB/serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Validity Not Before: May 31 21:46:49 2024 GMT Not After : Jun 7 21:46:49 2024 GMT Subject: CN=665a4549-d312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e5:24:e3:ab:b8:cf:e1:b3:71:b2:2b:a6:70: 9a:6e:68:9b:a9:a5:4e:ea:15:c0:44:fd:52:c2:d7: e6:63:78:77:69:b5:5c:ed:42:b7:38:5e:68:13:1c: 6e:73:fb:16:9d:60:f8:a5:fb:c8:4e:2c:f9:ee:55: 52:9f:37:f9:9e:90:58:e2:44:da:6f:16:5a:44:19: 15:8d:c9:7f:31:f3:83:ca:6f:92:49:9d:c7:1e:0e: 97:7d:7b:6a:64:3d:55:d0:66:f4:01:45:91:02:0b: be:92:8e:73:cf:c5:85:20:fe:90:45:b3:0e:c3:5c: 7f:a9:27:fc:c4:2d:69:6e:d6:9c:2a:62:60:7d:7b: 3d:d8:3f:01:55:dc:60:3d:8e:2a:65:2e:a3:7a:b9: 02:c2:a6:8a:1a:77:52:65:1d:90:30:95:d4:a8:b8: 55:7b:5f:88:54:b1:49:85:12:98:51:b8:b1:48:07: e8:b3:1b:84:4b:20:dc:a3:d4:bb:11:2e:b1:38:dc: 34:25:aa:fa:05:20:3b:27:db:d2:76:f9:f8:ef:7b: f6:7a:3e:b1:b0:76:ef:3a:fd:86:33:7d:37:be:91: 5c:40:7d:17:9c:f0:ca:06:47:66:bd:e5:f7:12:04: 5b:42:0e:87:20:d6:59:74:b5:a2:59:80:34:d6:8c: cf:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F7:28:B9:FF:C4:5F:24:93:0E:B9:05:8A:EB:F0:99:45:4F:D7:72 X509v3 Authority Key Identifier: keyid:C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:3a:1d:20:1d:ea:45:6f:33:6f:4d:bc:71:98:1c:ff:de:30: 53:f8:7b:e9:57:e6:06:ff:4b:82:c1:95:1b:3a:d5:23:9a:27: 82:cc:cc:41:2c:aa:70:62:90:66:77:8d:08:20:69:54:a4:a5: 22:5b:68:a1:41:fa:3f:0b:05:41:7a:58:ca:6f:95:b1:87:e9: bf:f2:10:36:e5:96:68:30:01:ee:69:5f:e6:5a:06:a0:ba:43: 7b:86:e5:0d:7b:08:26:a7:87:e7:58:df:a8:08:01:c5:8c:0f: ce:04:10:a0:e1:9a:3d:90:0d:61:8f:8e:7f:43:71:78:ca:b4: 65:d1:64:76:55:85:9d:d0:a2:8f:c3:80:63:95:2f:6e:0f:e8: a2:21:fb:b9:df:5e:03:7a:01:30:e9:57:43:e2:55:9d:de:bb: e5:b9:3a:8b:58:07:fd:fc:7a:38:79:d0:06:85:ab:bf:01:be: fb:f9:91:57:43:19:d8:71:ac:17:45:d2:de:56:d1:cc:50:9f: 2f:3f:1b:99:7a:3b:71:4d:6b:f9:43:09:4d:d7:78:4c:41:44: 9c:36:90:71:e3:0a:d3:4e:53:11:ac:ef:fb:f2:bd:dc:17:fd: 65:4d:29:4f:31:9a:5d:28:16:ea:9c:2d:fb:d8:e2:b1:a9:eb: 57:72:08:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJERUIxMTAvBgNVBAUTKEM0QUQ2NDlGQzVGMjMzMDY5RDUxRDg2RDU1QURDQUNG MTQyRDYxNTcwHhcNMjQwNTMxMjE0NjQ5WhcNMjQwNjA3MjE0NjQ5WjAYMRYwFAYD VQQDEw02NjVhNDU0OS1kMzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4eUk46u4z+GzcbIrpnCabmibqaVO6hXARP1SwtfmY3h3abVc7UK3OF5oExxu c/sWnWD4pfvITiz57lVSnzf5npBY4kTabxZaRBkVjcl/MfODym+SSZ3HHg6XfXtq ZD1V0Gb0AUWRAgu+ko5zz8WFIP6QRbMOw1x/qSf8xC1pbtacKmJgfXs92D8BVdxg PY4qZS6jerkCwqaKGndSZR2QMJXUqLhVe1+IVLFJhRKYUbixSAfosxuESyDco9S7 ES6xONw0Jar6BSA7J9vSdvn473v2ej6xsHbvOv2GM303vpFcQH0XnPDKBkdmveX3 EgRbQg6HINZZdLWiWYA01ozP+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE73KLn/ xF8kkw65BYrr8JlFT9dyMB8GA1UdIwQYMBaAFMStZJ/F8jMGnVHYbVWtys8ULWFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkRFQi9GQTVDRjQyQzc1 QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13YWRVZGh0VmEzS3p4UXRZ VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hLMWtuOFh5TXdhZFVkaHRWYTNLenhRdFlWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkRFQi9GQTVDRjQyQzc1QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13 YWRVZGh0VmEzS3p4UXRZVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUOh0gHepFbzNvTbxxmBz/3jBT+HvpV+YG/0uCwZUbOtUjmieCzMxB LKpwYpBmd40IIGlUpKUiW2ihQfo/CwVBeljKb5Wxh+m/8hA25ZZoMAHuaV/mWgag ukN7huUNewgmp4fnWN+oCAHFjA/OBBCg4Zo9kA1hj45/Q3F4yrRl0WR2VYWd0KKP w4BjlS9uD+iiIfu5314DegEw6VdD4lWd3rvluTqLWAf9/Ho4edAGhau/Ab77+ZFX QxnYcawXRdLeVtHMUJ8vPxuZejtxTWv5QwlN13hMQUScNpBx4wrTTlMRrO/78r3c F/1lTSlPMZpdKBbqnC372OKxqetXcghC -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:21 2024 by rpki-client on console-ams.rpki-client.org