$ rpki-client -vvf rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft File: -XeXeNpwxYpaeWRd0olhEbpv68w.mft (raw, json) Hash identifier: VsJncRRKEotp55pIPPqWcgYleKABzq4xlSllB63JxSc= Subject key identifier: 49:00:52:12:05:99:E6:10:92:6C:D1:19:5C:95:B3:F6:DD:A0:28:D0 Authority key identifier: F9:77:97:78:DA:70:C5:8A:5A:79:64:5D:D2:89:61:11:BA:6F:EB:CC Certificate issuer: /CN=A9196629/serialNumber=F9779778DA70C58A5A79645DD2896111BA6FEBCC Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft Manifest number: 0111 Signing time: Sun 19 May 2024 05:27:16 +0000 Manifest this update: Sun 19 May 2024 05:27:16 +0000 Manifest next update: Sun 26 May 2024 05:27:16 +0000 Files and hashes: 1: -XeXeNpwxYpaeWRd0olhEbpv68w.crl (hash: sPZOkFwQ6ibhahjuAp2F3jmmRGls5t8ce5Xq+IbjtwE=) 2: BC5434647ABF11EDA9C3947EC4F9AE02.roa (hash: D+ZBoH/kxvwl0yhSEiA/JuHXr30WdbcxwTdZ2gIxI9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.crl rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196629/serialNumber=F9779778DA70C58A5A79645DD2896111BA6FEBCC Validity Not Before: May 19 05:27:16 2024 GMT Not After : May 26 05:27:16 2024 GMT Subject: CN=66498db4-42c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:14:b3:09:54:94:07:46:35:19:73:f5:c3:01: e4:67:a9:57:c7:c9:d6:82:18:6d:c6:be:ba:2c:3a: 95:05:98:d2:04:62:6d:61:83:1b:fc:43:15:47:0f: 7d:02:d6:be:04:26:de:c5:e6:2d:f1:fc:2f:91:9c: b5:f0:47:4d:6b:4f:d3:22:59:a6:e8:40:d8:c4:f2: cf:ed:78:37:ce:e1:92:79:6b:7d:f5:7c:f7:c5:02: 03:f8:2a:4c:8d:27:39:2d:7b:35:ec:e3:b8:25:5f: fd:6a:d9:c7:85:8f:9a:6d:9d:fc:c2:58:14:b1:2a: e5:6b:31:c6:17:c7:90:05:61:15:6c:52:7a:8e:78: 5c:68:fb:2d:e7:87:d4:dd:28:2e:19:25:f4:e6:97: 0e:b9:e5:5c:33:24:33:bb:7e:6e:d4:de:d5:de:3e: 72:ff:cd:69:ad:36:7f:ff:49:91:2d:c1:79:9b:90: b7:53:83:0f:49:58:e4:3f:ce:ce:87:0c:00:b5:09: c1:04:13:56:52:bd:12:b1:96:23:2d:79:b7:5d:13: 24:98:15:08:01:1c:f9:ef:db:0f:71:80:2b:a5:8e: 16:0b:09:d4:c0:f7:f7:61:7f:88:99:49:a7:fe:7f: 23:89:ea:dc:fa:a2:97:7a:fe:09:9a:e0:32:35:f3: 45:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:00:52:12:05:99:E6:10:92:6C:D1:19:5C:95:B3:F6:DD:A0:28:D0 X509v3 Authority Key Identifier: keyid:F9:77:97:78:DA:70:C5:8A:5A:79:64:5D:D2:89:61:11:BA:6F:EB:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:71:dc:b4:3c:53:98:11:87:35:25:34:b3:b1:d4:03:d2:9b: dc:ed:94:1c:72:ff:c0:68:01:ca:53:21:59:ed:0f:fe:a1:d9: 37:eb:a8:7b:2a:ae:55:29:2a:96:17:5b:c9:7f:76:d2:ec:d7: 2f:09:78:59:ba:e2:53:b5:22:8b:96:6a:c8:f9:42:31:cf:1a: 4f:3c:77:84:93:da:7b:a6:ef:69:d8:67:06:88:f7:ee:bd:23: 64:b3:8d:55:3b:ca:b7:c3:0c:71:a7:bb:76:ea:f6:4a:9a:13: 1d:da:ab:11:4f:e1:8b:36:29:45:72:b4:51:43:ce:d0:2e:5d: e5:22:3e:06:c5:de:1c:f3:eb:da:8d:46:9f:fb:cb:ec:11:ef: 02:d8:58:3a:26:5d:25:6f:39:b3:e2:ef:5c:fe:5e:a0:21:5f: 00:89:47:87:cb:3c:72:80:6b:08:5d:07:6b:d4:46:7c:ce:a8: 08:b9:ff:99:ac:8e:7a:6a:15:67:9e:ac:e3:13:99:06:53:09: 44:b5:34:55:b3:1b:e2:fc:ab:04:ff:7f:7d:60:63:7c:b6:7b: 2a:fc:53:10:b1:09:61:d7:d2:d9:04:0f:3c:68:25:42:41:9d: a0:a3:c7:83:ba:d7:a2:48:f8:c2:c6:0a:81:2c:5f:03:3f:23: ed:66:a8:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY2MjkxMTAvBgNVBAUTKEY5Nzc5Nzc4REE3MEM1OEE1QTc5NjQ1REQyODk2MTEx QkE2RkVCQ0MwHhcNMjQwNTE5MDUyNzE2WhcNMjQwNTI2MDUyNzE2WjAYMRYwFAYD VQQDEw02NjQ5OGRiNC00MmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhSzCVSUB0Y1GXP1wwHkZ6lXx8nWghhtxr66LDqVBZjSBGJtYYMb/EMVRw99 Ata+BCbexeYt8fwvkZy18EdNa0/TIlmm6EDYxPLP7Xg3zuGSeWt99Xz3xQID+CpM jSc5LXs17OO4JV/9atnHhY+abZ38wlgUsSrlazHGF8eQBWEVbFJ6jnhcaPst54fU 3SguGSX05pcOueVcMyQzu35u1N7V3j5y/81prTZ//0mRLcF5m5C3U4MPSVjkP87O hwwAtQnBBBNWUr0SsZYjLXm3XRMkmBUIARz579sPcYArpY4WCwnUwPf3YX+ImUmn /n8jierc+qKXev4JmuAyNfNF8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkAUhIF meYQkmzRGVyVs/bdoCjQMB8GA1UdIwQYMBaAFPl3l3jacMWKWnlkXdKJYRG6b+vM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjYyOS9FMDk4NDYzRTdB QkIxMUVEQTg5QzQ4MDlDNEY5QUUwMi8tWGVYZU5wd3hZcGFlV1JkMG9saEVicHY2 OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YZVhlTnB3eFlwYWVXUmQwb2xoRWJwdjY4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjYyOS9FMDk4NDYzRTdBQkIxMUVEQTg5QzQ4MDlDNEY5QUUwMi8tWGVYZU5wd3hZ cGFlV1JkMG9saEVicHY2OHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKcdy0PFOYEYc1JTSzsdQD0pvc7ZQccv/AaAHKUyFZ7Q/+odk366h7 Kq5VKSqWF1vJf3bS7NcvCXhZuuJTtSKLlmrI+UIxzxpPPHeEk9p7pu9p2GcGiPfu vSNks41VO8q3wwxxp7t26vZKmhMd2qsRT+GLNilFcrRRQ87QLl3lIj4Gxd4c8+va jUaf+8vsEe8C2Fg6Jl0lbzmz4u9c/l6gIV8AiUeHyzxygGsIXQdr1EZ8zqgIuf+Z rI56ahVnnqzjE5kGUwlEtTRVsxvi/KsE/399YGN8tnsq/FMQsQlh19LZBA88aCVC QZ2go8eDuteiSPjCxgqBLF8DPyPtZqiC -----END CERTIFICATE-----Generated at Sun May 19 07:40:42 2024 by rpki-client on console-fra.rpki-client.org