$ rpki-client -vvf rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft File: xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft (raw, json) Hash identifier: YInMGnPxZiQ6m6KJ5eNPcOqLOt02uqr2bTKM8mjriTw= Subject key identifier: CD:4E:00:98:BA:C4:B9:36:3D:F6:69:4B:28:69:6A:7D:F7:59:F9:33 Authority key identifier: C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01 Certificate issuer: /CN=A918CA19/serialNumber=C4F9322EEE96709E4221C6DD3CECB840384F0201 Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft Manifest number: 0106 Signing time: Fri 31 May 2024 06:16:25 +0000 Manifest this update: Fri 31 May 2024 06:16:24 +0000 Manifest next update: Fri 07 Jun 2024 06:16:24 +0000 Files and hashes: 1: xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl (hash: BLT7Ka7zUEZMtuNuGsxWFgcMRH6l4sMSs9gpm8nXSqo=) 2: AE94F8108CDD11ED8F7B6515C4F9AE02.roa (hash: PCkpJGGyaL0qMyeq5nDVBcrPUQ3t5Mx881bY2sCX7Tk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 06:16:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CA19/serialNumber=C4F9322EEE96709E4221C6DD3CECB840384F0201 Validity Not Before: May 31 06:16:24 2024 GMT Not After : Jun 7 06:16:24 2024 GMT Subject: CN=66596b38-9ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1b:13:d1:97:33:b7:91:7d:49:39:a8:66:84: 1f:95:b9:83:25:26:fa:0d:97:a1:f7:5d:b3:17:d5: 81:7d:db:38:e0:0b:7e:69:90:29:d4:d1:a4:09:12: d2:ed:c5:4b:86:64:c4:94:d6:1d:90:cc:96:49:70: a1:f9:30:b6:67:1b:12:b2:14:36:78:fe:27:6a:aa: 10:dc:b5:35:12:56:d6:7d:26:16:a5:b6:40:22:17: f8:09:db:f0:58:c5:21:3b:07:7a:6a:8a:a8:0f:12: 48:6d:2a:8a:2c:1c:0c:fd:48:06:4d:46:3f:15:c8: 5b:65:c2:ed:f5:23:48:af:26:48:28:d0:4a:60:4b: f5:7c:95:8f:9f:6a:d5:2e:3d:b5:f4:97:82:d6:0a: fe:e9:f7:14:96:06:34:43:d2:77:ad:c9:e8:3e:73: c6:b3:c5:c5:81:4d:fd:aa:dd:52:37:66:99:1e:28: f0:a7:85:6c:56:83:29:e1:39:cf:3b:90:8a:8d:48: c2:2d:8f:a8:8b:2c:d0:92:a5:87:3c:07:ee:d3:06: 98:d1:4c:4e:a9:fa:6c:ba:f5:0f:5c:c2:bc:aa:23: e1:1d:7f:49:db:33:5d:e5:4a:95:a4:c4:ac:2f:a6: 28:88:7f:2b:42:62:eb:ba:22:c7:9c:51:cd:ed:a7: e1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:4E:00:98:BA:C4:B9:36:3D:F6:69:4B:28:69:6A:7D:F7:59:F9:33 X509v3 Authority Key Identifier: keyid:C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ab:e6:0f:18:15:18:f1:e2:32:e4:3b:06:40:22:a5:33:cf: 6f:4c:0f:8b:3e:4a:be:49:94:c6:5a:64:a6:38:ae:c4:75:61: 19:81:c1:24:c2:77:6c:d0:ce:1d:34:7c:8b:19:50:6f:67:46: 16:5d:f6:9c:88:50:ef:65:55:e9:7c:ed:b7:f1:42:25:b5:40: 0c:65:c2:11:62:e7:09:33:47:e1:4d:3c:01:f0:ae:b7:32:14: f0:9a:ef:de:09:5a:75:dd:e1:f1:8c:0f:3a:af:b5:45:8b:58: ab:e2:8c:3d:f9:14:5e:20:4d:22:25:a1:37:a1:4f:ab:63:ab: de:4e:72:95:a9:54:b4:5a:cf:9c:18:8f:90:1b:65:02:7d:5d: c4:33:ed:d6:88:81:1d:c5:74:c3:30:3a:9c:43:1e:27:24:65: dd:d6:44:65:db:71:0a:ae:80:4a:81:63:be:1a:35:49:bb:2d: 5e:c1:29:df:c4:13:95:f1:27:ce:66:fa:21:07:9b:ef:2e:0d: 4a:ad:06:ae:31:19:36:0b:8a:ac:98:db:63:6f:c3:03:be:4b: 49:0e:7c:49:d6:c7:54:80:ff:92:f9:ab:0a:32:6a:14:e0:6c: 25:40:ae:ac:b7:01:71:33:90:46:67:48:f7:bf:70:92:10:f4: 12:25:f9:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBMTkxMTAvBgNVBAUTKEM0RjkzMjJFRUU5NjcwOUU0MjIxQzZERDNDRUNCODQw Mzg0RjAyMDEwHhcNMjQwNTMxMDYxNjI0WhcNMjQwNjA3MDYxNjI0WjAYMRYwFAYD VQQDEw02NjU5NmIzOC05ZWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxsT0Zczt5F9STmoZoQflbmDJSb6DZeh912zF9WBfds44At+aZAp1NGkCRLS 7cVLhmTElNYdkMyWSXCh+TC2ZxsSshQ2eP4naqoQ3LU1ElbWfSYWpbZAIhf4Cdvw WMUhOwd6aoqoDxJIbSqKLBwM/UgGTUY/FchbZcLt9SNIryZIKNBKYEv1fJWPn2rV Lj219JeC1gr+6fcUlgY0Q9J3rcnoPnPGs8XFgU39qt1SN2aZHijwp4VsVoMp4TnP O5CKjUjCLY+oiyzQkqWHPAfu0waY0UxOqfpsuvUPXMK8qiPhHX9J2zNd5UqVpMSs L6YoiH8rQmLruiLHnFHN7afhawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1OAJi6 xLk2PfZpSyhpan33WfkzMB8GA1UdIwQYMBaAFMT5Mi7ulnCeQiHG3TzsuEA4TwIB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0ExOS9GODAyQTQyNDhD RDkxMUVEOTkwOTdEMEZDNEY5QUUwMi94UGt5THU2V2NKNUNJY2JkUE95NFFEaFBB Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQa3lMdTZXY0o1Q0ljYmRQT3k0UURoUEFnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0ExOS9GODAyQTQyNDhDRDkxMUVEOTkwOTdEMEZDNEY5QUUwMi94UGt5THU2V2NK NUNJY2JkUE95NFFEaFBBZ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNq+YPGBUY8eIy5DsGQCKlM89vTA+LPkq+SZTGWmSmOK7EdWEZgcEk wnds0M4dNHyLGVBvZ0YWXfaciFDvZVXpfO238UIltUAMZcIRYucJM0fhTTwB8K63 MhTwmu/eCVp13eHxjA86r7VFi1ir4ow9+RReIE0iJaE3oU+rY6veTnKVqVS0Ws+c GI+QG2UCfV3EM+3WiIEdxXTDMDqcQx4nJGXd1kRl23EKroBKgWO+GjVJuy1ewSnf xBOV8SfOZvohB5vvLg1KrQauMRk2C4qsmNtjb8MDvktJDnxJ1sdUgP+S+asKMmoU 4GwlQK6stwFxM5BGZ0j3v3CSEPQSJfl/ -----END CERTIFICATE-----Generated at Fri May 31 10:01:50 2024 by rpki-client on console-ams.rpki-client.org