$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft File: XBJjPm2nhhExvM_qH3t6vTUdIy8.mft (raw, json) Hash identifier: jTaLXbvyV3W75QJ0GqksrBmr/yxXmHzvm37NXra2sKM= Subject key identifier: DA:77:E6:60:B0:74:9C:93:CA:BE:B9:E9:A0:77:59:88:C4:06:79:64 Authority key identifier: 5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F Certificate issuer: /CN=A91A5577/serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft Manifest number: 01D7 Signing time: Sun 19 May 2024 04:22:12 +0000 Manifest this update: Sun 19 May 2024 04:22:12 +0000 Manifest next update: Sun 26 May 2024 04:22:12 +0000 Files and hashes: 1: XBJjPm2nhhExvM_qH3t6vTUdIy8.crl (hash: vGlUmY2TJtpg2acU7n823S7ISSpkH3Kw9073QX2MjoM=) 2: 92F62AF0032811ED8DFE1842C4F9AE02.roa (hash: dkz+gF26Xc/+XSfz37sjrLbIjn5mCtOakqy6C1/N76s=) 3: 6B10211E032B11ED8B3C5B4EC4F9AE02.roa (hash: GP8Rd5sLIMj2hhm+cySJQkfOGdakl1Y56iIlQMs7Li8=) 4: 418966DA032011ED84D6CA1EC4F9AE02.roa (hash: 1sAVZxZLRigkgsZXyp5pu4RHA9hASSeOHSEnVJg/XEI=) 5: 94584738031A11ED934E3D58C4F9AE02.roa (hash: XEcInF/4DluT/tcvLCcSWynq7+tP3kZx9jXwQt73Rj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5577/serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F Validity Not Before: May 19 04:22:12 2024 GMT Not After : May 26 04:22:12 2024 GMT Subject: CN=66497e74-ea1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:ac:92:9a:fa:da:a8:78:65:aa:26:a2:3b:e4: 75:e7:28:cb:80:19:ba:e3:c3:94:52:b3:d3:9d:d4: 4e:ea:5d:fc:8f:3c:0f:c0:c0:82:09:01:b3:91:32: e2:cc:9f:57:89:e3:c3:a5:c0:c9:97:e4:48:19:a1: ad:12:4b:71:17:87:f2:40:88:88:cc:25:a8:ca:0f: e5:c0:96:52:46:54:7d:c6:45:23:d4:48:9a:d7:f4: 54:ab:cb:3d:0b:ba:2f:c7:42:4e:d9:21:67:45:13: a4:a6:64:05:d6:94:c6:04:47:39:d4:0c:c5:ff:86: 36:de:2d:c1:ab:ad:fe:e8:1b:92:15:46:4c:d3:59: 7b:33:13:bc:ec:37:17:ec:03:cd:76:eb:cb:1c:77: 81:d5:bc:62:51:e5:47:1c:41:eb:7f:86:0d:d7:dc: 9a:3f:4a:7d:c4:07:c3:88:66:c5:bf:61:18:67:b3: fb:30:da:6d:1e:8c:b4:0c:5c:24:b4:88:db:7c:6c: 72:08:e2:93:7d:81:c4:de:19:d1:6d:55:6c:29:61: 86:96:6b:04:54:06:94:0a:ed:a1:cb:bf:ab:bd:b8: 9b:2c:9e:90:bb:b9:25:a5:97:5b:9e:13:85:ac:bf: 6a:71:7b:04:48:37:6d:29:f4:d0:74:6a:77:10:26: b3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:77:E6:60:B0:74:9C:93:CA:BE:B9:E9:A0:77:59:88:C4:06:79:64 X509v3 Authority Key Identifier: keyid:5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:b0:08:6a:6e:c1:6b:f0:ef:7e:1d:62:1b:82:0b:3c:33:d6: 52:ab:73:cf:f9:cd:7b:b2:9f:67:51:f1:0a:da:26:a9:2b:f6: de:46:0e:ef:0d:5e:cc:7c:64:14:d0:52:00:05:3f:32:03:01: a7:11:af:f9:4e:01:4b:dd:7e:5b:af:50:a0:07:b6:58:10:1f: 69:6b:f5:87:9c:7d:32:ff:43:f4:5d:4f:74:1e:21:f2:d5:7e: 41:6a:89:0c:53:f9:ac:f6:ed:61:96:25:89:e7:6a:31:84:d9: 51:5b:c7:72:41:5f:2f:61:f7:9b:2c:a9:73:97:8c:21:6d:e6: 73:16:b2:58:58:d1:38:de:d0:ea:9d:94:43:bf:63:79:68:99: be:24:ac:31:12:f1:0d:c7:6e:79:96:81:10:52:ef:2d:09:60: bb:8d:1b:6a:04:4d:7f:ba:20:4e:cf:88:a4:a9:6b:5f:f8:36: 7d:b9:e3:5b:16:a5:6e:c2:c9:59:bb:d7:0c:7a:3b:3d:18:57: bc:98:2a:e7:7c:3b:49:41:62:57:10:77:6e:6b:cf:88:79:11: e3:42:12:88:b7:aa:0c:a8:e8:f5:fe:d6:8b:0d:ae:6a:b6:a1: e5:a8:ed:9f:4d:64:6a:94:ca:c0:40:4d:79:12:81:ad:53:6e: 50:2e:bc:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1NzcxMTAvBgNVBAUTKDVDMTI2MzNFNkRBNzg2MTEzMUJDQ0ZFQTFGN0I3QUJE MzUxRDIzMkYwHhcNMjQwNTE5MDQyMjEyWhcNMjQwNTI2MDQyMjEyWjAYMRYwFAYD VQQDEw02NjQ5N2U3NC1lYTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+KySmvraqHhlqiaiO+R15yjLgBm648OUUrPTndRO6l38jzwPwMCCCQGzkTLi zJ9XiePDpcDJl+RIGaGtEktxF4fyQIiIzCWoyg/lwJZSRlR9xkUj1Eia1/RUq8s9 C7ovx0JO2SFnRROkpmQF1pTGBEc51AzF/4Y23i3Bq63+6BuSFUZM01l7MxO87DcX 7APNduvLHHeB1bxiUeVHHEHrf4YN19yaP0p9xAfDiGbFv2EYZ7P7MNptHoy0DFwk tIjbfGxyCOKTfYHE3hnRbVVsKWGGlmsEVAaUCu2hy7+rvbibLJ6Qu7klpZdbnhOF rL9qcXsESDdtKfTQdGp3ECazcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNp35mCw dJyTyr656aB3WYjEBnlkMB8GA1UdIwQYMBaAFFwSYz5tp4YRMbzP6h97er01HSMv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTU3Ny85MDNFNEM3ODAz MTYxMUVEOTBGODg0NEZDNEY5QUUwMi9YQkpqUG0ybmhoRXh2TV9xSDN0NnZUVWRJ eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hCSmpQbTJuaGhFeHZNX3FIM3Q2dlRVZEl5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTU3Ny85MDNFNEM3ODAzMTYxMUVEOTBGODg0NEZDNEY5QUUwMi9YQkpqUG0ybmho RXh2TV9xSDN0NnZUVWRJeTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSsAhqbsFr8O9+HWIbggs8M9ZSq3PP+c17sp9nUfEK2iapK/beRg7v DV7MfGQU0FIABT8yAwGnEa/5TgFL3X5br1CgB7ZYEB9pa/WHnH0y/0P0XU90HiHy 1X5BaokMU/ms9u1hliWJ52oxhNlRW8dyQV8vYfebLKlzl4whbeZzFrJYWNE43tDq nZRDv2N5aJm+JKwxEvENx255loEQUu8tCWC7jRtqBE1/uiBOz4ikqWtf+DZ9ueNb FqVuwslZu9cMejs9GFe8mCrnfDtJQWJXEHdua8+IeRHjQhKIt6oMqOj1/taLDa5q tqHlqO2fTWRqlMrAQE15EoGtU25QLrzw -----END CERTIFICATE-----Generated at Sun May 19 05:08:05 2024 by rpki-client on console-ams.rpki-client.org