$ rpki-client -vvf rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft File: xCIPUDVWR7fICyzovHEmqsLiLTc.mft (raw, json) Hash identifier: LceghM6KPta46pCbzsv5WtZv6YuPpYo41djJl9mH0qg= Subject key identifier: C0:F0:B9:C6:5A:2E:CB:54:82:61:97:03:14:DB:7C:D5:58:53:D9:9F Authority key identifier: C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 Certificate issuer: /CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Certificate serial: 33F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft Manifest number: 33E0 Signing time: Fri 31 May 2024 14:19:15 +0000 Manifest this update: Fri 31 May 2024 14:19:15 +0000 Manifest next update: Fri 07 Jun 2024 14:19:15 +0000 Files and hashes: 1: xCIPUDVWR7fICyzovHEmqsLiLTc.crl (hash: GMhh7v6afG+WlHXr9FxCAHovle2/LsCrXG2j/R3Slcc=) 2: 8C2774CA0F3511EF93020023C4F9AE02.roa (hash: Ve2H+p3YmRSExg1fnQMWU+9OXZhKqHmcgsuqGT2Dvjs=) 3: 214131EE0F3711EF9336A344C4F9AE02.roa (hash: tTdKf7etQ7UP4Ui0FkVcVFVPmHpflgtK1sqqXzvDSBU=) 4: D7ABA864DFE611ED8872DE0EC4F9AE02.roa (hash: 68aeJM73Q1+Qk6yC4MY1u6JTeDSn6lYO8leq25aLcDw=) 5: 24C4305A7CD911EEB0B4C962C4F9AE02.roa (hash: /oUDcHdpBE+Aq8dcQ+kbUSPUG0SMU2wiAnNLJYJ6KVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13296 (0x33f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Validity Not Before: May 31 14:19:15 2024 GMT Not After : Jun 7 14:19:15 2024 GMT Subject: CN=6659dc63-8928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:28:b3:54:87:04:7a:e8:f6:3e:8a:e2:2a:bc: 58:96:c7:2a:97:35:e1:af:ed:c6:7d:01:0c:07:3e: 3f:c4:ac:6f:d2:7e:2b:3f:9c:02:10:db:ac:44:13: 19:b8:aa:3e:20:cd:cf:36:28:d2:dd:b8:d8:e4:b1: 25:d8:e8:ab:e5:57:ca:2a:6e:7b:a8:c1:f3:65:56: 81:1d:0e:45:14:65:24:a2:37:6e:50:41:8d:53:4f: 48:80:54:3a:cd:7a:2d:9d:e6:06:2e:aa:e0:e3:43: 7c:05:44:b2:0d:d4:68:42:03:7b:62:93:3f:c1:52: d0:9f:1e:b5:8e:6a:92:fd:ba:55:90:d2:8c:e1:21: d3:b7:f9:86:8c:5f:6e:03:01:1d:5e:0f:79:07:13: 2e:ee:66:fc:d3:b6:cb:e5:6a:36:68:06:ef:f9:dc: 0b:9c:f7:0f:87:09:1b:a7:15:65:a4:bf:df:88:32: 7c:ab:99:62:39:2a:8a:72:a2:1f:1f:91:e8:37:1e: 15:5f:dd:0b:76:9e:72:73:2f:d1:d0:ce:fe:d2:e9: 53:d5:0d:35:ba:b4:89:f2:1e:b1:58:40:a0:8b:41: 0a:8b:2f:1d:97:80:2e:a9:dd:83:2d:e4:f8:e2:7f: 33:df:11:6f:1a:32:22:e4:43:9e:51:1f:9e:2c:93: 6f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F0:B9:C6:5A:2E:CB:54:82:61:97:03:14:DB:7C:D5:58:53:D9:9F X509v3 Authority Key Identifier: keyid:C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:06:88:26:a1:bf:c6:97:8b:c7:4a:20:13:79:e7:79:5a:ea: fe:19:b0:1f:bf:ed:d4:a5:a4:7d:ad:f6:9c:b1:ad:4a:2f:02: fb:95:bf:b2:07:92:23:54:79:36:b9:17:f4:99:20:d1:2d:82: 40:d7:e3:91:69:7c:0f:7c:46:cb:5d:73:8d:58:f8:3f:58:1d: 31:33:a6:bc:e6:74:da:79:14:94:4c:b1:90:b1:b9:34:07:11: d8:72:c5:f5:22:a1:25:e3:28:e8:ac:bf:16:99:28:e6:9b:92: f7:d7:f1:85:91:a8:b3:ac:6b:6a:51:82:0a:bb:a0:9f:23:c5: b6:ff:98:bc:1e:a9:86:e7:5b:1b:bb:bd:e7:cc:cc:fa:f8:2f: ea:fd:82:d5:fa:27:91:8d:1d:2a:f0:67:ba:a6:b1:f2:1e:aa: 8d:e3:d9:b7:75:2e:17:cd:ed:af:6f:15:0c:04:86:8a:45:c6: 6d:6f:a3:8f:92:4c:4c:15:2f:f2:5a:dc:9b:32:07:54:99:a6: b5:35:99:70:f2:e1:ee:eb:04:b4:7e:95:cb:18:6e:b7:eb:38: 4e:00:b1:09:75:c5:1e:fd:74:38:8e:5f:d5:43:07:68:b0:45: 03:b1:98:80:a5:ef:fe:46:e0:e2:ed:fa:84:65:b5:57:6e:c4: 8a:b7:7d:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2NEQxMTAvBgNVBAUTKEM0MjIwRjUwMzU1NjQ3QjdDODBCMkNFOEJDNzEyNkFB QzJFMjJEMzcwHhcNMjQwNTMxMTQxOTE1WhcNMjQwNjA3MTQxOTE1WjAYMRYwFAYD VQQDEw02NjU5ZGM2My04OTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqCizVIcEeuj2PoriKrxYlscqlzXhr+3GfQEMBz4/xKxv0n4rP5wCENusRBMZ uKo+IM3PNijS3bjY5LEl2Oir5VfKKm57qMHzZVaBHQ5FFGUkojduUEGNU09IgFQ6 zXotneYGLqrg40N8BUSyDdRoQgN7YpM/wVLQnx61jmqS/bpVkNKM4SHTt/mGjF9u AwEdXg95BxMu7mb807bL5Wo2aAbv+dwLnPcPhwkbpxVlpL/fiDJ8q5liOSqKcqIf H5HoNx4VX90Ldp5ycy/R0M7+0ulT1Q01urSJ8h6xWECgi0EKiy8dl4Auqd2DLeT4 4n8z3xFvGjIi5EOeUR+eLJNvjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDwucZa LstUgmGXAxTbfNVYU9mfMB8GA1UdIwQYMBaAFMQiD1A1Vke3yAss6LxxJqrC4i03 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY0RC9EOTMzM0ZFNDFE NkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3ZklDeXpvdkhFbXFzTGlM VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDSVBVRFZXUjdmSUN5em92SEVtcXNMaUxUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDY0RC9EOTMzM0ZFNDFENkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3 ZklDeXpvdkhFbXFzTGlMVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQBogmob/Gl4vHSiATeed5Wur+GbAfv+3UpaR9rfacsa1KLwL7lb+y B5IjVHk2uRf0mSDRLYJA1+ORaXwPfEbLXXONWPg/WB0xM6a85nTaeRSUTLGQsbk0 BxHYcsX1IqEl4yjorL8WmSjmm5L31/GFkaizrGtqUYIKu6CfI8W2/5i8HqmG51sb u73nzMz6+C/q/YLV+ieRjR0q8Ge6prHyHqqN49m3dS4Xze2vbxUMBIaKRcZtb6OP kkxMFS/yWtybMgdUmaa1NZlw8uHu6wS0fpXLGG636zhOALEJdcUe/XQ4jl/VQwdo sEUDsZiApe/+RuDi7fqEZbVXbsSKt32e -----END CERTIFICATE-----Generated at Fri May 31 15:08:32 2024 by rpki-client on console-fra.rpki-client.org