$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft File: xHWJli7Q04kmIr5be4vu_ozniKc.mft (raw, json) Hash identifier: at6RjYm0sSpTkxr8WRg/eTCOL1LLBFun4XvrgDJNxFk= Subject key identifier: 74:8B:B7:B6:C8:A2:52:67:84:D3:36:4E:29:26:50:7A:0D:C2:40:1C Authority key identifier: C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7 Certificate issuer: /CN=A91A13A6/serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft Manifest number: 3B Signing time: Sun 19 May 2024 08:16:35 +0000 Manifest this update: Sun 19 May 2024 08:16:35 +0000 Manifest next update: Sun 26 May 2024 08:16:35 +0000 Files and hashes: 1: xHWJli7Q04kmIr5be4vu_ozniKc.crl (hash: BO8VW52X/y1qL4cPYdhbwX8VF2y+3MZfRvJAZkrv5Qg=) 2: C2047FE0D5A911EEA02CBD78C4F9AE02.roa (hash: 9Fy8tdeN6XmAavmr/WztTsAPB/JbK20Hvg6gxTdE5F4=) 3: F1016E04DB6011EE998CC271C4F9AE02.roa (hash: hdokGdNIsfSbaIZVQozcv4c/BhgfSkw1N3ZYmOomWEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A13A6/serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7 Validity Not Before: May 19 08:16:35 2024 GMT Not After : May 26 08:16:35 2024 GMT Subject: CN=6649b563-2291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:10:65:b9:70:f4:31:fa:60:40:0a:cf:90:ed: 89:2b:67:01:4a:d2:3c:88:f8:c8:bb:f3:94:76:b3: 6a:be:b6:99:b8:0c:f2:00:b5:28:ca:ee:92:73:4b: 3b:e6:31:69:b9:ea:a7:cd:ea:49:2d:2c:16:94:93: 5b:1d:7e:cc:e8:b6:8d:dc:08:c5:04:da:69:2c:79: f6:d4:df:06:5d:d2:07:ef:5e:59:98:53:f1:1d:8e: cd:d1:0a:53:6b:14:a0:95:6e:c8:fc:91:94:df:40: 5f:b8:ef:00:c2:d3:c3:a2:37:f5:36:cb:d7:01:c9: f1:eb:db:6f:fe:00:23:26:7a:08:61:b1:e4:0d:84: 37:3a:85:12:ae:91:40:28:72:ee:f5:a3:b5:66:fa: d7:d7:64:c8:1b:fc:38:c9:0c:2b:5d:d9:75:10:b8: 37:3e:de:f6:90:1e:f6:3c:88:1c:f7:8c:80:e5:6a: 1c:22:7a:74:c4:de:1b:1e:2a:f7:2f:ac:b4:d0:da: bb:93:39:5c:d4:d4:78:6b:c3:e5:94:be:ef:c8:6c: 7d:a5:15:d7:13:91:67:75:1f:89:2c:c7:4d:fd:23: fd:01:83:92:d7:90:ff:63:9c:1b:54:cd:72:d9:16: 23:8c:f0:b3:da:59:8b:d0:18:0f:52:21:ac:07:43: b0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:8B:B7:B6:C8:A2:52:67:84:D3:36:4E:29:26:50:7A:0D:C2:40:1C X509v3 Authority Key Identifier: keyid:C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:35:cf:4e:0e:32:15:70:1f:3c:1d:ac:d9:9a:7f:67:33:1a: 1e:c5:c1:b1:66:a0:f4:af:2b:cc:a7:3f:fd:c0:0d:81:87:bb: a3:94:0f:de:48:95:b8:a6:64:75:67:45:64:3a:3a:79:af:7a: a2:2c:eb:ff:72:23:d0:28:d5:2c:77:05:07:fe:29:fb:a4:e6: 0e:c0:a4:67:0f:ca:8c:72:7b:4f:cd:ac:6e:02:1c:6b:bc:15: 04:d0:63:68:31:c3:70:f5:88:57:fb:6a:6b:10:35:c7:3e:05: 13:a0:25:3e:bb:dc:02:2b:02:22:8a:59:9d:84:40:86:96:4c: 12:9b:52:e3:ab:01:fd:70:09:ba:55:a2:4b:15:b0:33:b4:7d: 38:3b:23:0a:15:49:9f:61:49:be:1b:50:de:20:08:95:39:d6: 42:82:ff:c9:da:de:f1:0d:ad:eb:93:d3:c5:02:99:47:da:c8: be:f9:00:48:c7:cf:83:f4:38:09:f8:09:c7:c1:d0:2a:d8:54: 9e:bf:5d:bd:ea:ac:32:bb:cc:4c:7d:f5:e4:59:86:fc:74:43: 06:58:18:e8:c2:ed:86:d2:34:a8:4f:0e:c2:ee:14:b2:0c:27: 99:b3:e5:92:bb:b9:40:a5:7c:79:90:f2:7d:f0:29:24:75:49: 57:2d:ca:50 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MTNBNjExMC8GA1UEBRMoQzQ3NTg5OTYyRUQwRDM4OTI2MjJCRTVCN0I4QkVFRkU4 Q0U3ODhBNzAeFw0yNDA1MTkwODE2MzVaFw0yNDA1MjYwODE2MzVaMBgxFjAUBgNV BAMTDTY2NDliNTYzLTIyOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQEGW5cPQx+mBACs+Q7YkrZwFK0jyI+Mi785R2s2q+tpm4DPIAtSjK7pJzSzvm MWm56qfN6kktLBaUk1sdfszoto3cCMUE2mksefbU3wZd0gfvXlmYU/Edjs3RClNr FKCVbsj8kZTfQF+47wDC08OiN/U2y9cByfHr22/+ACMmeghhseQNhDc6hRKukUAo cu71o7Vm+tfXZMgb/DjJDCtd2XUQuDc+3vaQHvY8iBz3jIDlahwienTE3hseKvcv rLTQ2ruTOVzU1Hhrw+WUvu/IbH2lFdcTkWd1H4ksx039I/0Bg5LXkP9jnBtUzXLZ FiOM8LPaWYvQGA9SIawHQ7AFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdIu3tsii UmeE0zZOKSZQeg3CQBwwHwYDVR0jBBgwFoAUxHWJli7Q04kmIr5be4vu/ozniKcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExM0E2LzgwNzk0QzlBQzA4 QzExRUVCRDgwNUIyNEM0RjlBRTAyL3hIV0psaTdRMDRrbUlyNWJlNHZ1X296bmlL Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveEhXSmxpN1EwNGttSXI1YmU0dnVfb3puaUtjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEx M0E2LzgwNzk0QzlBQzA4QzExRUVCRDgwNUIyNEM0RjlBRTAyL3hIV0psaTdRMDRr bUlyNWJlNHZ1X296bmlLYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJQ1z04OMhVwHzwdrNmaf2czGh7FwbFmoPSvK8ynP/3ADYGHu6OUD95I lbimZHVnRWQ6OnmveqIs6/9yI9Ao1Sx3BQf+Kfuk5g7ApGcPyoxye0/NrG4CHGu8 FQTQY2gxw3D1iFf7amsQNcc+BROgJT673AIrAiKKWZ2EQIaWTBKbUuOrAf1wCbpV oksVsDO0fTg7IwoVSZ9hSb4bUN4gCJU51kKC/8na3vENreuT08UCmUfayL75AEjH z4P0OAn4CcfB0CrYVJ6/Xb3qrDK7zEx99eRZhvx0QwZYGOjC7YbSNKhPDsLuFLIM J5mz5ZK7uUClfHmQ8n3wKSR1SVctylA= -----END CERTIFICATE-----Generated at Sun May 19 09:32:17 2024 by rpki-client on console-ams.rpki-client.org