$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft File: xIqs603a7jxgQuZiFq15FQe0fGs.mft (raw, json) Hash identifier: SGcXlKQUSf+ZwELctWGxXhT0gcsZPsNBrb1l4GBbIB8= Subject key identifier: AB:A5:F9:88:3E:3E:B9:BA:3E:E8:7A:F2:1E:35:00:42:92:72:87:0F Authority key identifier: C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B Certificate issuer: /CN=A918EF61/serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B Certificate serial: 1846 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft Manifest number: 183D Signing time: Sat 18 May 2024 16:55:55 +0000 Manifest this update: Sat 18 May 2024 16:55:55 +0000 Manifest next update: Sat 25 May 2024 16:55:55 +0000 Files and hashes: 1: xIqs603a7jxgQuZiFq15FQe0fGs.crl (hash: hWRnHQtsCMmWaj3QaSqcY2wsf5PH74mgDTvTOPkFJHs=) 2: C44B0ADA83DA11E7AD4F156CC4F9AE02.roa (hash: AnizUeFL15aVyGPVXYahIej4+dszsMs4Qefj7iCPVqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6214 (0x1846) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF61/serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B Validity Not Before: May 18 16:55:55 2024 GMT Not After : May 25 16:55:55 2024 GMT Subject: CN=6648dd9b-67dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4c:6b:8e:78:45:30:ac:38:38:47:8c:ff:4b: 0d:78:e5:29:2a:36:18:bc:16:ce:c4:a5:11:be:87: 6b:59:c5:a0:b6:11:3c:e4:80:20:9a:0c:0b:b1:a3: 66:15:85:c6:02:79:9a:ed:30:c6:c9:72:f1:73:9f: e8:be:af:ab:08:29:20:e9:52:de:95:81:34:6d:0c: 40:94:f9:b4:e2:e2:ea:8b:0b:86:82:d9:22:35:cd: b4:8f:cd:db:a7:ec:e2:e3:85:16:2f:49:93:f8:1a: d6:fd:c0:be:b3:8b:54:9d:7c:6e:d7:e1:ca:e7:47: 4a:1b:88:8e:4e:f8:1d:31:0f:8c:11:42:c6:d7:10: 7b:12:ce:56:7a:ce:bd:fe:ab:86:ac:e9:03:8e:be: 37:0c:56:9c:e8:c0:b0:0e:1e:f1:a5:f9:1c:83:69: 5f:c5:2d:3a:42:8d:da:46:3c:59:85:46:fc:cd:65: 5d:aa:8f:6c:65:9d:28:b3:04:e8:49:21:6d:78:d2: f4:e7:33:91:3c:60:1b:61:2b:9e:bc:bc:00:d0:e2: 8f:42:98:92:9d:96:ad:a0:4a:4a:8e:92:4b:48:0b: 89:18:a4:63:65:4d:55:85:bc:e9:61:9e:7e:2f:43: 25:48:ac:91:37:42:a0:fe:2b:d4:7a:c5:2c:d0:67: 63:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A5:F9:88:3E:3E:B9:BA:3E:E8:7A:F2:1E:35:00:42:92:72:87:0F X509v3 Authority Key Identifier: keyid:C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:50:3e:40:34:aa:f7:c7:ae:31:c4:3f:87:18:7c:98:fd:b6: 22:87:32:56:41:4b:29:21:77:7f:81:54:b5:23:ba:37:fb:c4: 31:99:b9:79:5c:08:da:6b:22:64:84:6f:97:c9:18:fb:c2:84: db:f3:e7:dc:c3:4a:f1:3d:35:be:43:f2:da:1f:32:d5:73:5f: 2b:51:f0:03:9e:38:10:82:b4:e0:f1:50:8d:dc:9f:29:94:b3: 8c:56:35:8b:86:98:55:b9:60:39:8a:b9:93:5d:97:03:d1:50: 53:bc:81:be:fe:f5:90:8c:b2:70:bc:4e:ea:fd:1b:09:26:a2: 8d:8a:a8:d5:3b:df:e1:66:6c:80:00:b6:de:56:2c:a9:6d:f9: 68:5e:27:25:93:25:b4:36:b0:1f:cf:69:10:d2:90:aa:ff:d9: bc:b6:7f:41:ca:c1:09:68:2d:59:47:d0:ce:33:cb:27:5e:1e: 3f:ca:03:68:9d:61:23:61:ed:d7:2d:b9:b7:df:5c:8d:1e:f0: da:0f:b2:7f:5a:98:33:97:57:e6:1f:29:0b:e3:29:36:5d:4b: a9:18:6c:df:fa:f9:ac:2e:f3:87:e9:15:ea:a1:58:53:a6:f0: 04:b0:56:e7:e3:d3:b1:ec:5d:4a:ec:6f:ad:ab:bc:16:ca:67: 92:8e:b0:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGNjExMTAvBgNVBAUTKEM0OEFBQ0VCNEREQUVFM0M2MDQyRTY2MjE2QUQ3OTE1 MDdCNDdDNkIwHhcNMjQwNTE4MTY1NTU1WhcNMjQwNTI1MTY1NTU1WjAYMRYwFAYD VQQDEw02NjQ4ZGQ5Yi02N2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ExrjnhFMKw4OEeM/0sNeOUpKjYYvBbOxKURvodrWcWgthE85IAgmgwLsaNm FYXGAnma7TDGyXLxc5/ovq+rCCkg6VLelYE0bQxAlPm04uLqiwuGgtkiNc20j83b p+zi44UWL0mT+BrW/cC+s4tUnXxu1+HK50dKG4iOTvgdMQ+MEULG1xB7Es5Wes69 /quGrOkDjr43DFac6MCwDh7xpfkcg2lfxS06Qo3aRjxZhUb8zWVdqo9sZZ0oswTo SSFteNL05zORPGAbYSuevLwA0OKPQpiSnZatoEpKjpJLSAuJGKRjZU1VhbzpYZ5+ L0MlSKyRN0Kg/ivUesUs0GdjtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKul+Yg+ Prm6Puh68h41AEKScocPMB8GA1UdIwQYMBaAFMSKrOtN2u48YELmYhateRUHtHxr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY2MS8xNkE2REM2MDgz REExMUU3QTAwMzczNkJDNEY5QUUwMi94SXFzNjAzYTdqeGdRdVppRnExNUZRZTBm R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJcXM2MDNhN2p4Z1F1WmlGcTE1RlFlMGZHcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY2MS8xNkE2REM2MDgzREExMUU3QTAwMzczNkJDNEY5QUUwMi94SXFzNjAzYTdq eGdRdVppRnExNUZRZTBmR3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQUD5ANKr3x64xxD+HGHyY/bYihzJWQUspIXd/gVS1I7o3+8Qxmbl5 XAjaayJkhG+XyRj7woTb8+fcw0rxPTW+Q/LaHzLVc18rUfADnjgQgrTg8VCN3J8p lLOMVjWLhphVuWA5irmTXZcD0VBTvIG+/vWQjLJwvE7q/RsJJqKNiqjVO9/hZmyA ALbeViypbfloXiclkyW0NrAfz2kQ0pCq/9m8tn9BysEJaC1ZR9DOM8snXh4/ygNo nWEjYe3XLbm331yNHvDaD7J/Wpgzl1fmHykL4yk2XUupGGzf+vmsLvOH6RXqoVhT pvAEsFbn49Ox7F1K7G+tq7wWymeSjrDI -----END CERTIFICATE-----Generated at Sat May 18 17:37:33 2024 by rpki-client on console-fra.rpki-client.org