$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft File: xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft (raw, json) Hash identifier: q/Iz0tmmDpN2VA/NCBP/X3IuokKqg4DpkgcNjNSM59Y= Subject key identifier: D8:C9:EA:84:26:0F:3B:88:54:32:F8:0F:AF:A9:9C:65:04:5F:6E:32 Authority key identifier: C4:A4:C3:54:35:8F:D4:82:3F:6E:C5:31:32:76:74:85:4C:86:C6:DF Certificate issuer: /CN=A918FD04/serialNumber=C4A4C354358FD4823F6EC531327674854C86C6DF Certificate serial: 07D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKTDVDWP1II_bsUxMnZ0hUyGxt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft Manifest number: 131D Signing time: Fri 31 May 2024 20:17:42 +0000 Manifest this update: Fri 31 May 2024 20:17:40 +0000 Manifest next update: Fri 07 Jun 2024 20:17:40 +0000 Files and hashes: 1: xKTDVDWP1II_bsUxMnZ0hUyGxt8.crl (hash: HJ4q26UwA9orf9prd/9rg1eHA9eD+PTPG4FL8WZ3Y5M=) 2: 7BBC1DD2040611EF909F6C3EC4F9AE02.roa (hash: d+L19gUHVaLQL/PMqiWFVUvVqO9gHwxatHS8mTM15PU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.crl rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKTDVDWP1II_bsUxMnZ0hUyGxt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 20:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2001 (0x7d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FD04/serialNumber=C4A4C354358FD4823F6EC531327674854C86C6DF Validity Not Before: May 31 20:17:40 2024 GMT Not After : Jun 7 20:17:40 2024 GMT Subject: CN=665a3065-401e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ac:e5:61:48:59:1c:db:f4:ea:57:19:fe:3c: 7c:3f:77:b5:19:5d:38:84:98:ba:10:db:7d:b6:7e: fd:e2:cb:df:f7:4f:f4:e8:0e:d2:f6:9c:58:9d:b3: a3:22:07:ed:93:c5:d9:d9:86:c5:3b:93:78:ec:bc: 7f:44:08:5e:14:a6:59:50:73:45:d9:eb:ce:28:2d: 87:fb:e3:18:7b:4d:0b:f5:a9:a1:1e:ac:6b:be:6e: 88:e2:bd:7f:d7:cd:5c:e0:26:e5:26:58:36:f2:5f: 5b:11:5e:20:cf:8c:f3:d9:f6:0b:81:99:5b:ec:de: 62:4e:38:fd:70:ee:b2:97:a6:3f:4a:46:e3:fa:fb: 33:74:f9:44:a0:bb:6d:73:07:4a:0f:de:e9:eb:ba: 4f:03:f3:fd:2b:c6:9d:ab:75:79:83:77:2b:8c:3f: 86:68:f1:b4:a1:45:ad:4b:f2:26:19:a5:4d:63:11: 79:f8:65:5a:00:7e:ef:f7:b8:f7:42:de:d4:4c:cb: bc:66:80:08:42:c9:07:61:48:24:4b:cb:54:63:02: 0a:49:31:49:c5:ed:06:65:a1:18:f1:07:86:18:59: 2c:67:80:77:45:30:f5:d1:59:d4:7a:7e:88:d7:46: ee:31:65:91:28:36:88:27:37:8b:45:30:39:e5:1c: eb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C9:EA:84:26:0F:3B:88:54:32:F8:0F:AF:A9:9C:65:04:5F:6E:32 X509v3 Authority Key Identifier: keyid:C4:A4:C3:54:35:8F:D4:82:3F:6E:C5:31:32:76:74:85:4C:86:C6:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKTDVDWP1II_bsUxMnZ0hUyGxt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:bb:6f:c1:fd:70:31:55:12:9a:c6:83:d4:96:e4:00:2a:28: 88:75:00:c5:4e:7f:55:1a:a3:a3:90:f2:cf:a3:a8:77:3e:45: d4:70:41:27:41:be:e9:e9:27:ec:0d:92:d1:43:c7:fe:c7:0c: 19:3f:d6:a2:84:1e:af:d0:5d:48:8d:bb:89:65:99:d3:73:6f: 3e:92:4e:34:0c:5c:84:dc:b6:eb:c6:19:a7:59:47:b3:5a:8a: cb:12:28:87:23:3e:80:d7:dc:32:8b:68:96:9a:74:0e:78:55: f4:e8:08:ca:e3:50:8d:46:60:ac:cd:5d:06:20:76:6c:6b:94: 8d:99:5e:d0:d0:0b:12:52:e4:c4:a4:7b:24:cd:b3:1b:29:b9: 68:09:6e:ac:03:3c:3d:50:e5:f5:a7:9c:15:03:a6:14:e5:ad: 2e:32:7c:ec:78:df:ad:e7:2b:68:8e:a3:b9:50:24:e8:5d:8b: 48:f9:9d:ef:2d:5e:47:34:b0:35:f1:7a:37:49:41:61:3f:90: 20:06:1a:c3:d7:e9:37:93:35:07:14:d9:cf:f5:37:dc:d6:2f: 42:c0:be:16:14:6b:0f:86:ef:a6:6f:9b:35:e4:d3:7b:9a:dd: 7d:7b:57:6c:41:2b:8a:00:23:2f:13:82:f7:27:51:a0:e9:8a: 39:f4:d1:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZEMDQxMTAvBgNVBAUTKEM0QTRDMzU0MzU4RkQ0ODIzRjZFQzUzMTMyNzY3NDg1 NEM4NkM2REYwHhcNMjQwNTMxMjAxNzQwWhcNMjQwNjA3MjAxNzQwWjAYMRYwFAYD VQQDEw02NjVhMzA2NS00MDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqzlYUhZHNv06lcZ/jx8P3e1GV04hJi6ENt9tn794svf90/06A7S9pxYnbOj Igftk8XZ2YbFO5N47Lx/RAheFKZZUHNF2evOKC2H++MYe00L9amhHqxrvm6I4r1/ 181c4CblJlg28l9bEV4gz4zz2fYLgZlb7N5iTjj9cO6yl6Y/Skbj+vszdPlEoLtt cwdKD97p67pPA/P9K8adq3V5g3crjD+GaPG0oUWtS/ImGaVNYxF5+GVaAH7v97j3 Qt7UTMu8ZoAIQskHYUgkS8tUYwIKSTFJxe0GZaEY8QeGGFksZ4B3RTD10VnUen6I 10buMWWRKDaIJzeLRTA55Rzr9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjJ6oQm DzuIVDL4D6+pnGUEX24yMB8GA1UdIwQYMBaAFMSkw1Q1j9SCP27FMTJ2dIVMhsbf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkQwNC8wQUJCRjQ3MjBE RjIxMUVBOEVFODkxM0JDNEY5QUUwMi94S1REVkRXUDFJSV9ic1V4TW5aMGhVeUd4 dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hLVERWRFdQMUlJX2JzVXhNblowaFV5R3h0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkQwNC8wQUJCRjQ3MjBERjIxMUVBOEVFODkxM0JDNEY5QUUwMi94S1REVkRXUDFJ SV9ic1V4TW5aMGhVeUd4dDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmu2/B/XAxVRKaxoPUluQAKiiIdQDFTn9VGqOjkPLPo6h3PkXUcEEn Qb7p6SfsDZLRQ8f+xwwZP9aihB6v0F1IjbuJZZnTc28+kk40DFyE3LbrxhmnWUez WorLEiiHIz6A19wyi2iWmnQOeFX06AjK41CNRmCszV0GIHZsa5SNmV7Q0AsSUuTE pHskzbMbKbloCW6sAzw9UOX1p5wVA6YU5a0uMnzseN+t5ytojqO5UCToXYtI+Z3v LV5HNLA18Xo3SUFhP5AgBhrD1+k3kzUHFNnP9Tfc1i9CwL4WFGsPhu+mb5s15NN7 mt19e1dsQSuKACMvE4L3J1Gg6Yo59NE4 -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:23 2024 by rpki-client on console-ams.rpki-client.org