$ rpki-client -vvf rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft File: XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft (raw, json) Hash identifier: tMFWkfhWZPQ6pv/6KW9uNKH4MorQMLGcIutmZwxq87U= Subject key identifier: FB:44:06:F9:5F:25:6F:C8:A4:42:A6:60:EB:77:CF:DB:8F:60:A5:0A Authority key identifier: 5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 Certificate issuer: /CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Certificate serial: 0C1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft Manifest number: 0C02 Signing time: Sat 18 May 2024 19:03:12 +0000 Manifest this update: Sat 18 May 2024 19:03:11 +0000 Manifest next update: Sat 25 May 2024 19:03:11 +0000 Files and hashes: 1: XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl (hash: PiCbDiyNWdyPM+LQSAqh/nJDgm1/tMyAcpRGC059T9w=) 2: 65DCB430F25A11E9937D9D73C4F9AE02.roa (hash: g8AtMP8I6yqyvKB1e5W7725XdH9whZm2gw04J8HNztg=) 3: 653CF2F6F25A11E9937D9D73C4F9AE02.roa (hash: hHf2SbMW3u32L4IvHDMk8yx84zsf4PVX3irK53Ib1xc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3098 (0xc1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Validity Not Before: May 18 19:03:11 2024 GMT Not After : May 25 19:03:11 2024 GMT Subject: CN=6648fb70-d150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:59:2c:bd:84:35:6c:55:7a:05:21:d5:7a:f8: 2d:1b:cc:d0:39:21:23:5b:b9:76:b7:3f:39:cd:85: 39:67:e8:69:45:44:40:05:93:5a:e9:17:73:90:bd: 9a:fd:24:ba:8d:a2:3a:2b:cb:64:e1:66:ae:0c:6f: a9:b9:85:eb:2f:e8:19:8e:bc:e8:e4:b7:c7:9d:28: 0a:a0:f2:40:74:b6:8c:88:f7:30:a0:1c:1d:67:f2: 1a:ab:e4:8a:37:9e:11:50:7f:90:2f:4b:58:09:4d: 26:74:70:57:0b:88:98:d7:18:1d:97:4d:6c:61:50: 38:6e:30:9e:6e:8d:40:74:09:42:3d:b1:77:7c:2e: ad:7f:fe:94:1f:26:33:6e:59:aa:65:c0:2f:2f:be: 34:51:54:27:bd:4b:84:b4:cf:66:a4:6a:d8:ce:25: d7:6e:38:f0:c9:c0:df:6c:f6:d4:4e:22:7d:14:39: c0:ea:7c:ae:58:81:15:37:47:be:f4:8d:6f:c1:1e: 53:75:9b:21:32:eb:12:89:52:4d:d3:62:26:0e:41: 95:aa:f0:24:81:48:f0:7a:b0:12:0a:5c:8f:82:18: 58:6e:9d:56:bc:c7:d0:df:e4:01:48:da:7c:a0:82: dd:b4:2a:93:2c:92:57:24:03:18:2c:37:1c:31:f4: a9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:44:06:F9:5F:25:6F:C8:A4:42:A6:60:EB:77:CF:DB:8F:60:A5:0A X509v3 Authority Key Identifier: keyid:5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:df:d6:87:1d:29:6b:91:b1:6e:41:87:cb:d8:0b:4b:f8:0c: 2e:ac:c0:6c:b7:e6:da:60:41:8c:b7:52:f8:8a:5d:b5:54:68: 4e:1f:a9:72:df:3a:43:c2:c3:ee:cc:5e:e7:70:a9:46:67:34: 45:5e:08:0d:47:c9:86:3f:f3:6e:99:02:fc:fd:29:c1:d5:f5: 62:56:a4:40:c1:2a:d3:92:ce:bc:5a:11:62:94:0f:a2:0a:b2: 92:59:b9:3b:ac:db:12:eb:62:67:18:dc:e7:e6:fe:b0:f0:c7: 24:df:b3:9b:b1:e2:09:fe:52:b4:3c:37:37:54:8f:97:16:a9: 51:39:13:db:59:a9:1e:50:3e:35:7d:f2:93:a8:25:fe:46:d8: b8:7a:af:86:3d:e0:43:29:ed:87:44:e6:11:fd:27:44:0e:b5: eb:21:96:d5:a7:70:2f:c0:c7:c5:b1:bc:4f:7e:9d:4d:b8:14: 8a:8a:7d:9e:17:a6:8f:bf:c1:cd:3b:cf:67:44:7b:52:26:e9: 47:84:ee:fe:89:39:52:eb:05:05:09:f1:d7:e3:be:78:f2:13: f5:9c:fa:39:c9:c2:7e:78:63:02:c6:6d:6a:dd:63:eb:d7:72: 73:f9:e7:3f:68:71:ba:43:ff:af:48:bd:c8:25:70:57:a2:f8: ca:16:fd:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5OTgxMTAvBgNVBAUTKDVFQTFBN0I4MDJFN0U3RUZDNzdDQTFBMzhFNTJGNzJB Q0Q0NjM5MzAwHhcNMjQwNTE4MTkwMzExWhcNMjQwNTI1MTkwMzExWjAYMRYwFAYD VQQDEw02NjQ4ZmI3MC1kMTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFksvYQ1bFV6BSHVevgtG8zQOSEjW7l2tz85zYU5Z+hpRURABZNa6RdzkL2a /SS6jaI6K8tk4WauDG+puYXrL+gZjrzo5LfHnSgKoPJAdLaMiPcwoBwdZ/Iaq+SK N54RUH+QL0tYCU0mdHBXC4iY1xgdl01sYVA4bjCebo1AdAlCPbF3fC6tf/6UHyYz blmqZcAvL740UVQnvUuEtM9mpGrYziXXbjjwycDfbPbUTiJ9FDnA6nyuWIEVN0e+ 9I1vwR5TdZshMusSiVJN02ImDkGVqvAkgUjwerASClyPghhYbp1WvMfQ3+QBSNp8 oILdtCqTLJJXJAMYLDccMfSpvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtEBvlf JW/IpEKmYOt3z9uPYKUKMB8GA1UdIwQYMBaAFF6hp7gC5+fvx3yho45S9yrNRjkw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTk5OC9BQjM0RkJENEYy NTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUtX0hmS0dqamxMM0tzMUdP VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hxR251QUxuNS1fSGZLR2pqbEwzS3MxR09UQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTk5OC9BQjM0RkJENEYyNTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUt X0hmS0dqamxMM0tzMUdPVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj39aHHSlrkbFuQYfL2AtL+AwurMBst+baYEGMt1L4il21VGhOH6ly 3zpDwsPuzF7ncKlGZzRFXggNR8mGP/NumQL8/SnB1fViVqRAwSrTks68WhFilA+i CrKSWbk7rNsS62JnGNzn5v6w8Mck37ObseIJ/lK0PDc3VI+XFqlRORPbWakeUD41 ffKTqCX+Rti4eq+GPeBDKe2HROYR/SdEDrXrIZbVp3AvwMfFsbxPfp1NuBSKin2e F6aPv8HNO89nRHtSJulHhO7+iTlS6wUFCfHX47548hP1nPo5ycJ+eGMCxm1q3WPr 13Jz+ec/aHG6Q/+vSL3IJXBXovjKFv2F -----END CERTIFICATE-----Generated at Sat May 18 20:16:01 2024 by rpki-client on console-ams.rpki-client.org