$ rpki-client -vvf rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft File: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft (raw, json) Hash identifier: yApS+abCwTycJcbBJ9PEWwbBzpYXtBXjHtjJyNYv3iw= Subject key identifier: FC:7D:8D:E5:D1:BB:1A:06:2A:A0:28:A9:20:A0:8E:78:0F:EA:54:DC Authority key identifier: 5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D Certificate issuer: /CN=A918C538/serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft Manifest number: 012A Signing time: Sun 19 May 2024 05:07:13 +0000 Manifest this update: Sun 19 May 2024 05:07:12 +0000 Manifest next update: Sun 26 May 2024 05:07:12 +0000 Files and hashes: 1: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl (hash: ud5BA7BVRkmTWNFpUER+CbmuEiiyQQcC82YAeBPPrjE=) 2: 11DDFF8E54DF11EDB7409267C4F9AE02.roa (hash: 41cGdysFB7ELok3zBoJln9hijehCtCniAdRLT6XAhVQ=) 3: 114E5E6A54DF11EDB7409267C4F9AE02.roa (hash: 9MrQo9vUmAekuiwNJY8bO0MSIs29CkXwLMPEFiKNA44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C538/serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Validity Not Before: May 19 05:07:12 2024 GMT Not After : May 26 05:07:12 2024 GMT Subject: CN=66498901-a09e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6e:52:33:a6:ec:c2:ac:d0:8b:f4:be:99:f3: 4d:ad:ba:c8:62:97:ca:e2:0c:7a:97:00:07:09:b1: 8b:b3:28:61:f1:f9:a0:23:99:c5:4c:96:35:04:2b: ac:f5:f1:3f:a7:84:a3:6f:48:b0:ae:bf:42:8e:2a: 84:61:48:74:60:06:21:19:6f:d6:e0:93:56:9a:e1: 61:9b:0f:eb:18:25:a3:fb:7b:b6:17:af:4b:2e:e2: b4:e0:77:7c:e1:2f:f8:fa:23:0f:a8:41:91:41:b4: 28:3c:44:81:ac:72:2e:00:4e:64:f6:f3:34:a5:97: 00:37:b6:81:f2:6c:ae:77:49:ae:24:50:68:00:64: 42:6c:1d:86:2b:36:a2:21:f8:03:f3:70:d4:5e:0f: 31:3c:ce:8a:ab:b0:02:38:e8:70:c8:ee:02:3c:de: 07:ac:b4:f7:7c:fe:83:32:d8:a7:cb:8a:70:cd:c3: 71:25:0c:c3:6b:0c:5a:04:0e:10:41:b7:ff:d7:59: e2:f3:f1:d4:7a:3c:e6:76:21:75:f3:e8:03:a4:3d: 31:47:9a:ff:21:7a:db:b8:0f:2a:77:4e:f6:13:4e: 6b:e0:30:5c:a2:8a:08:52:71:0a:84:07:82:bc:73: 60:78:21:fd:0d:06:47:28:94:77:28:c9:b9:72:58: 9f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:7D:8D:E5:D1:BB:1A:06:2A:A0:28:A9:20:A0:8E:78:0F:EA:54:DC X509v3 Authority Key Identifier: keyid:5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:aa:f9:7b:81:32:44:e0:4b:de:66:0e:ee:a8:06:37:26:2b: b0:69:07:ef:7b:26:5d:20:6c:94:ef:80:fd:3e:52:f9:8c:09: d9:22:7b:2e:30:e8:83:98:15:c8:af:2b:ab:64:63:e9:19:00: b6:17:db:10:27:51:88:53:d7:d9:f0:5b:c7:fd:5a:71:49:d6: 4f:b0:1f:ff:cd:cd:62:55:43:a1:22:3d:5b:f5:10:c4:34:db: 7a:7c:05:d9:dd:11:45:13:73:a5:97:7e:d1:2a:de:0a:a5:f4: b6:fd:ef:7a:ff:cf:c9:bc:d5:0e:ed:06:ed:8f:7f:29:21:e6: 20:3a:c7:5d:6d:3c:74:9c:e0:2e:a9:ec:f5:18:4f:9a:31:af: e3:f3:9e:a2:79:6d:af:9e:57:ac:38:cd:9f:83:e6:e6:b4:0f: 92:fc:38:14:9b:c3:4d:cd:4e:45:a3:ba:a6:e1:36:7a:de:0e: 3e:9b:5d:e4:1f:22:c2:29:2c:ed:5a:dd:b6:68:06:b5:d7:52: 9d:ff:11:df:bc:7f:62:8a:b6:1e:68:d1:5d:3c:42:24:d4:e4: f7:57:b3:9d:c8:5c:ea:8f:f4:47:5c:5c:f2:37:ed:9f:92:f2: ec:1a:ad:f5:aa:4e:b1:90:40:f4:d6:49:79:33:71:d9:1c:a7: ce:89:71:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM1MzgxMTAvBgNVBAUTKDVGMjZGOUM1RDgzQzJENTI0RjVBMzFENDcwMkVGMjE0 MDMzQjM1MkQwHhcNMjQwNTE5MDUwNzEyWhcNMjQwNTI2MDUwNzEyWjAYMRYwFAYD VQQDEw02NjQ5ODkwMS1hMDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA025SM6bswqzQi/S+mfNNrbrIYpfK4gx6lwAHCbGLsyhh8fmgI5nFTJY1BCus 9fE/p4Sjb0iwrr9CjiqEYUh0YAYhGW/W4JNWmuFhmw/rGCWj+3u2F69LLuK04Hd8 4S/4+iMPqEGRQbQoPESBrHIuAE5k9vM0pZcAN7aB8myud0muJFBoAGRCbB2GKzai IfgD83DUXg8xPM6Kq7ACOOhwyO4CPN4HrLT3fP6DMtiny4pwzcNxJQzDawxaBA4Q Qbf/11ni8/HUejzmdiF18+gDpD0xR5r/IXrbuA8qd072E05r4DBcoooIUnEKhAeC vHNgeCH9DQZHKJR3KMm5clif0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPx9jeXR uxoGKqAoqSCgjngP6lTcMB8GA1UdIwQYMBaAFF8m+cXYPC1ST1ox1HAu8hQDOzUt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzUzOC9EQ0E5NTM2NjU0 REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExWSlBXakhVY0M3eUZBTTdO UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5YjV4ZGc4TFZKUFdqSFVjQzd5RkFNN05TMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzUzOC9EQ0E5NTM2NjU0REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExW SlBXakhVY0M3eUZBTTdOUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBqvl7gTJE4EveZg7uqAY3JiuwaQfveyZdIGyU74D9PlL5jAnZInsu MOiDmBXIryurZGPpGQC2F9sQJ1GIU9fZ8FvH/VpxSdZPsB//zc1iVUOhIj1b9RDE NNt6fAXZ3RFFE3Oll37RKt4KpfS2/e96/8/JvNUO7Qbtj38pIeYgOsddbTx0nOAu qez1GE+aMa/j856ieW2vnlesOM2fg+bmtA+S/DgUm8NNzU5Fo7qm4TZ63g4+m13k HyLCKSztWt22aAa111Kd/xHfvH9iirYeaNFdPEIk1OT3V7OdyFzqj/RHXFzyN+2f kvLsGq31qk6xkED01kl5M3HZHKfOiXGq -----END CERTIFICATE-----Generated at Sun May 19 05:48:51 2024 by rpki-client on console-fra.rpki-client.org