$ rpki-client -vvf rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft File: _XxIEch8Vm71Xtqw50P_BmufqGY.mft (raw, json) Hash identifier: cElFfSCweLPCDk27PZyh96hmrblqI1qRtusLExgUORk= Subject key identifier: DC:38:A8:07:09:5B:AF:82:FD:41:E3:09:5A:BB:5F:79:C0:FF:9A:E7 Authority key identifier: FD:7C:48:11:C8:7C:56:6E:F5:5E:DA:B0:E7:43:FF:06:6B:9F:A8:66 Certificate issuer: /CN=A91935EA/serialNumber=FD7C4811C87C566EF55EDAB0E743FF066B9FA866 Certificate serial: 15DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft Manifest number: 15D1 Signing time: Fri 31 May 2024 17:26:33 +0000 Manifest this update: Fri 31 May 2024 17:26:33 +0000 Manifest next update: Fri 07 Jun 2024 17:26:33 +0000 Files and hashes: 1: _XxIEch8Vm71Xtqw50P_BmufqGY.crl (hash: +9NdCDmjAhMpi8cd8mkBI904HmzyD1rTIFNvATgD/mg=) 2: 01B2AC1E064111E8A62EF586C4F9AE02.roa (hash: jP6GIbinp3Nw7ptUURz/NryO9wh+K7IIfBQeKgw27k0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.crl rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 17:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5596 (0x15dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91935EA/serialNumber=FD7C4811C87C566EF55EDAB0E743FF066B9FA866 Validity Not Before: May 31 17:26:33 2024 GMT Not After : Jun 7 17:26:33 2024 GMT Subject: CN=665a0849-c6f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:13:3f:11:5e:89:03:91:5f:25:34:81:42:64: f6:e9:5e:f6:c4:1b:16:8a:60:da:ee:b6:fd:e6:7c: ea:90:c2:06:95:13:62:e5:9d:90:cb:2b:85:24:d1: 29:6e:01:83:00:45:37:4b:5f:a0:88:bd:1d:59:d9: 32:da:84:c4:35:2f:ff:b5:3c:cd:20:ec:6c:39:3f: d7:89:6d:45:dd:cb:65:93:fc:f8:0f:ef:3f:6e:2b: 6d:a5:84:b5:2b:a8:be:8d:8b:95:eb:0b:d9:69:89: cc:84:8c:12:bd:a0:37:bd:a7:5e:b0:da:bd:0b:b5: 84:52:b5:6a:be:ca:52:1c:77:11:a8:fc:1d:fe:67: 3f:d3:e9:6b:af:bb:40:d3:a6:0f:27:aa:39:79:a2: b5:b0:e1:e2:63:1d:46:7b:fa:03:2e:73:3a:b9:cd: 31:f7:73:8b:1a:26:e2:68:e5:15:07:f3:63:59:21: 02:55:a2:83:61:b2:11:47:1c:2c:4f:7e:9a:ec:27: 38:30:61:2d:93:ef:8f:ac:ca:1d:75:72:df:2f:06: 6e:d3:4b:6c:6d:3d:5e:a3:4f:b4:f7:78:70:88:8f: 0d:d1:b1:2d:6a:89:4f:07:f2:35:fc:0c:54:4c:7d: c3:68:25:3d:c9:38:12:5c:44:bf:a3:8b:47:6d:81: 5f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:38:A8:07:09:5B:AF:82:FD:41:E3:09:5A:BB:5F:79:C0:FF:9A:E7 X509v3 Authority Key Identifier: keyid:FD:7C:48:11:C8:7C:56:6E:F5:5E:DA:B0:E7:43:FF:06:6B:9F:A8:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:22:53:21:b3:0f:94:91:b5:3d:f2:82:03:07:ee:3c:97:fa: 22:fa:1b:85:80:6b:aa:77:d7:1a:00:c6:f3:a7:75:c1:b7:1e: 9c:1d:7a:25:09:98:33:04:96:1c:f4:cf:3b:9a:b7:36:ac:37: 9e:d5:f3:d8:d3:e5:6e:f5:01:b1:a5:a6:3f:fe:dd:82:77:b4: ce:f9:76:bc:d8:09:2c:78:67:0a:23:e4:c5:68:71:22:0c:77: 42:56:24:25:06:89:63:38:6b:f3:e1:2c:28:84:dc:ca:0d:d2: de:ec:bd:87:50:48:78:2d:b6:9c:bc:20:99:c7:6b:b3:38:64: 1b:84:3c:91:d6:a6:30:f4:01:4b:df:d5:12:8d:6b:a8:72:59: ad:5c:9a:08:42:5d:c6:e5:f8:31:a1:a6:c2:de:9b:84:cc:e6: 15:32:cd:33:bc:a4:bf:56:9b:4d:0e:b8:d7:4c:c0:ed:d8:22: c8:cb:90:07:0f:63:e6:94:63:08:2c:95:39:08:26:f3:59:19: ea:ad:bc:f7:9f:e0:5b:44:63:97:2f:9d:c3:55:80:67:b0:68: db:52:fa:42:b8:61:50:a1:63:b1:eb:15:02:ae:c0:75:58:8a: 0e:e2:2a:63:b9:c3:d5:f1:48:09:c4:39:05:ed:4d:c7:2f:fe: e1:99:ac:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM1RUExMTAvBgNVBAUTKEZEN0M0ODExQzg3QzU2NkVGNTVFREFCMEU3NDNGRjA2 NkI5RkE4NjYwHhcNMjQwNTMxMTcyNjMzWhcNMjQwNjA3MTcyNjMzWjAYMRYwFAYD VQQDEw02NjVhMDg0OS1jNmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRM/EV6JA5FfJTSBQmT26V72xBsWimDa7rb95nzqkMIGlRNi5Z2QyyuFJNEp bgGDAEU3S1+giL0dWdky2oTENS//tTzNIOxsOT/XiW1F3ctlk/z4D+8/bittpYS1 K6i+jYuV6wvZaYnMhIwSvaA3vadesNq9C7WEUrVqvspSHHcRqPwd/mc/0+lrr7tA 06YPJ6o5eaK1sOHiYx1Ge/oDLnM6uc0x93OLGibiaOUVB/NjWSECVaKDYbIRRxws T36a7Cc4MGEtk++PrModdXLfLwZu00tsbT1eo0+093hwiI8N0bEtaolPB/I1/AxU TH3DaCU9yTgSXES/o4tHbYFfBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNw4qAcJ W6+C/UHjCVq7X3nA/5rnMB8GA1UdIwQYMBaAFP18SBHIfFZu9V7asOdD/wZrn6hm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzVFQS8xOURENDY3MDAw QUUxMUU4QkMzQTFGMkZDNEY5QUUwMi9fWHhJRWNoOFZtNzFYdHF3NTBQX0JtdWZx R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19YeElFY2g4Vm03MVh0cXc1MFBfQm11ZnFHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzVFQS8xOURENDY3MDAwQUUxMUU4QkMzQTFGMkZDNEY5QUUwMi9fWHhJRWNoOFZt NzFYdHF3NTBQX0JtdWZxR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGIlMhsw+UkbU98oIDB+48l/oi+huFgGuqd9caAMbzp3XBtx6cHXol CZgzBJYc9M87mrc2rDee1fPY0+Vu9QGxpaY//t2Cd7TO+Xa82AkseGcKI+TFaHEi DHdCViQlBoljOGvz4SwohNzKDdLe7L2HUEh4LbacvCCZx2uzOGQbhDyR1qYw9AFL 39USjWuoclmtXJoIQl3G5fgxoabC3puEzOYVMs0zvKS/VptNDrjXTMDt2CLIy5AH D2PmlGMILJU5CCbzWRnqrbz3n+BbRGOXL53DVYBnsGjbUvpCuGFQoWOx6xUCrsB1 WIoO4ipjucPV8UgJxDkF7U3HL/7hmaxH -----END CERTIFICATE-----Generated at Fri May 31 20:34:10 2024 by rpki-client on console-ams.rpki-client.org