$ rpki-client -vvf rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft File: XPuiiRbqwHsjWQlIVdieFqCBS6w.mft (raw, json) Hash identifier: br+fKwKZH/1lM5StDL8nA29ncMj2KMHBD6XkjYnS6cw= Subject key identifier: 24:7A:D1:4E:9A:B4:92:AB:3A:19:F1:F7:E2:53:25:17:10:E8:62:27 Authority key identifier: 5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC Certificate issuer: /CN=A918E843/serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC Certificate serial: 0A84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft Manifest number: 0A77 Signing time: Sat 18 May 2024 20:17:07 +0000 Manifest this update: Sat 18 May 2024 20:17:06 +0000 Manifest next update: Sat 25 May 2024 20:17:06 +0000 Files and hashes: 1: XPuiiRbqwHsjWQlIVdieFqCBS6w.crl (hash: KHQ38U7uOI0yB+U1slFjnRMgr6hnhUh2MMwM0LRKkfg=) 2: 3EA26CE6396011EABC88BD55C4F9AE02.roa (hash: jt3q3eu5PH5pGOuIsdjdUutobUCzp2vYtDeECsWMzEc=) 3: 01553E10396311EAB24C5A5FC4F9AE02.roa (hash: rs0VbwQOx7elbsUZDFIThAHCStbl8j3g8d0JAoWIucc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2692 (0xa84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E843/serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC Validity Not Before: May 18 20:17:06 2024 GMT Not After : May 25 20:17:06 2024 GMT Subject: CN=66490cc2-4e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6f:f4:35:3d:6b:59:d2:b8:95:67:8c:63:43: 75:58:9a:1f:46:e5:93:d1:e4:ea:d8:ee:41:f5:92: 4a:4e:ad:cd:c1:6b:02:83:25:45:41:2f:c0:2d:56: e8:66:14:fe:56:be:56:83:bf:2c:a9:a4:cf:4d:30: e6:ad:83:3e:43:a6:7c:b9:c0:6a:e3:10:65:e4:4f: 99:03:de:a7:ae:e6:4e:97:ae:cf:15:2d:7c:17:0a: ee:48:7b:07:83:67:29:f2:f5:80:55:42:41:60:a7: 5d:12:da:11:55:e7:ed:ab:79:ec:bc:40:4f:6a:d3: 38:46:96:59:e4:d4:a5:11:88:ac:9c:13:e1:95:6d: cc:6d:dc:ac:60:ab:ca:67:0f:60:b6:71:d7:f8:78: 8a:2e:8a:7b:db:96:8f:f9:cb:c4:a3:84:07:2f:a1: f6:f2:9b:76:36:fe:6d:d9:09:03:36:82:6d:0a:b2: 2b:92:cc:cf:0e:25:f4:fe:29:37:08:56:7b:99:5f: 38:40:dc:fe:ee:65:c6:9a:69:99:66:81:9a:7c:d8: ab:9d:0f:4a:58:4e:5d:18:13:ef:23:7f:8e:61:23: d0:34:9b:79:78:e1:bf:c3:89:96:73:a7:2f:92:f8: 40:f0:af:b4:cf:1f:1d:49:e6:53:f1:6e:ce:4d:26: 75:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:7A:D1:4E:9A:B4:92:AB:3A:19:F1:F7:E2:53:25:17:10:E8:62:27 X509v3 Authority Key Identifier: keyid:5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:a4:ee:7d:ea:ed:c7:71:db:24:13:71:c4:c0:a5:ca:e6:62: e4:3a:e8:77:f2:b3:90:98:ad:0b:33:87:8c:d6:2e:34:49:ea: 7d:56:b8:7e:db:cb:3b:cb:6a:09:2b:4f:ee:3d:4f:21:40:1c: a9:6a:7a:a2:d9:28:c2:15:10:d8:d5:f3:e7:99:45:85:bd:22: 55:4c:5f:95:bb:1b:80:84:08:45:f6:a6:dc:71:64:99:24:c6: 66:3e:96:c9:a4:1d:8a:b0:b9:27:18:33:6d:5a:12:df:9f:d9: 09:6c:09:8f:01:cf:13:a5:72:a8:93:ca:71:2b:56:be:cc:9c: 3e:a6:a8:6f:d6:91:05:97:7e:f9:61:7d:da:a3:a2:51:e3:b4: ba:4d:9e:7d:7e:d1:36:5a:4e:7d:53:00:91:f7:e2:a8:1e:12: a1:3e:53:75:eb:ce:46:78:73:bf:d9:86:20:68:ac:d7:3c:a3: 6a:73:95:22:a6:13:e5:ff:1d:84:f8:70:a9:ed:d3:f7:77:e4: 08:a2:01:8d:c3:79:52:84:7b:d1:f5:bc:f0:aa:5c:0f:62:ce: 6d:17:37:d1:b6:db:c8:8e:72:1b:86:98:dd:6c:cf:13:b4:91: 04:1c:da:de:3b:05:3a:b1:65:7c:8c:89:f7:31:0d:25:c3:8e: de:b5:ff:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4NDMxMTAvBgNVBAUTKDVDRkJBMjg5MTZFQUMwN0IyMzU5MDk0ODU1RDg5RTE2 QTA4MTRCQUMwHhcNMjQwNTE4MjAxNzA2WhcNMjQwNTI1MjAxNzA2WjAYMRYwFAYD VQQDEw02NjQ5MGNjMi00ZTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApm/0NT1rWdK4lWeMY0N1WJofRuWT0eTq2O5B9ZJKTq3NwWsCgyVFQS/ALVbo ZhT+Vr5Wg78sqaTPTTDmrYM+Q6Z8ucBq4xBl5E+ZA96nruZOl67PFS18FwruSHsH g2cp8vWAVUJBYKddEtoRVeftq3nsvEBPatM4RpZZ5NSlEYisnBPhlW3MbdysYKvK Zw9gtnHX+HiKLop725aP+cvEo4QHL6H28pt2Nv5t2QkDNoJtCrIrkszPDiX0/ik3 CFZ7mV84QNz+7mXGmmmZZoGafNirnQ9KWE5dGBPvI3+OYSPQNJt5eOG/w4mWc6cv kvhA8K+0zx8dSeZT8W7OTSZ17QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCR60U6a tJKrOhnx9+JTJRcQ6GInMB8GA1UdIwQYMBaAFFz7ookW6sB7I1kJSFXYnhaggUus MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTg0My85NTdCQ0I0NDM5 NUYxMUVBQkI4NTQ3NTVDNEY5QUUwMi9YUHVpaVJicXdIc2pXUWxJVmRpZUZxQ0JT NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hQdWlpUmJxd0hzaldRbElWZGllRnFDQlM2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTg0My85NTdCQ0I0NDM5NUYxMUVBQkI4NTQ3NTVDNEY5QUUwMi9YUHVpaVJicXdI c2pXUWxJVmRpZUZxQ0JTNncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXpO596u3HcdskE3HEwKXK5mLkOuh38rOQmK0LM4eM1i40Sep9Vrh+ 28s7y2oJK0/uPU8hQBypanqi2SjCFRDY1fPnmUWFvSJVTF+VuxuAhAhF9qbccWSZ JMZmPpbJpB2KsLknGDNtWhLfn9kJbAmPAc8TpXKok8pxK1a+zJw+pqhv1pEFl375 YX3ao6JR47S6TZ59ftE2Wk59UwCR9+KoHhKhPlN1685GeHO/2YYgaKzXPKNqc5Ui phPl/x2E+HCp7dP3d+QIogGNw3lShHvR9bzwqlwPYs5tFzfRttvIjnIbhpjdbM8T tJEEHNreOwU6sWV8jIn3MQ0lw47etf/e -----END CERTIFICATE-----Generated at Sat May 18 20:48:20 2024 by rpki-client on console-fra.rpki-client.org