$ rpki-client -vvf rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft File: XqEcijop4GlzwfEhYR1aXCobBp0.mft (raw, json) Hash identifier: 1kiQyXJEg+fllxvIkdndR4nzuF32MfDaMFX/5UYJKDM= Subject key identifier: 0B:E0:14:6F:60:E3:A2:8A:3C:3B:18:0F:71:9F:FF:48:57:84:ED:D0 Authority key identifier: 5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D Certificate issuer: /CN=A91A654C/serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D Certificate serial: 0665 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft Manifest number: 0650 Signing time: Sat 18 May 2024 23:40:41 +0000 Manifest this update: Sat 18 May 2024 23:40:41 +0000 Manifest next update: Sat 25 May 2024 23:40:41 +0000 Files and hashes: 1: XqEcijop4GlzwfEhYR1aXCobBp0.crl (hash: Y4Y2PcApSBSuOqO3NlP0P8daCPxRwOkypsuuuy9iWvc=) 2: 5A51D464F5FA11EC9B35372AC4F9AE02.roa (hash: fatJP74QmbLSpVnCNkaB1nDltmRMFfOpdry6Nc0rTFc=) 3: 0940732E0E6311EDB98DEA0DC4F9AE02.roa (hash: cnqEp1cVp+EDYuEpYVLYnMxBPESNI8OdRBHgH0PJrKA=) 4: 0A37FEFA0E6311EDB98DEA0DC4F9AE02.roa (hash: Y02OBeRBmrNddo1ieP/LeZf+fKUFaCYGzq9Zqc3nanE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1637 (0x665) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A654C/serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D Validity Not Before: May 18 23:40:41 2024 GMT Not After : May 25 23:40:41 2024 GMT Subject: CN=66493c79-4fe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:38:0c:b7:e7:e3:ff:e4:69:b4:10:e6:ff:bf: 28:63:df:2c:a5:72:84:99:1b:93:47:40:37:1c:53: ac:c3:03:3b:54:f1:9e:da:96:49:44:b7:1a:f0:33: ff:38:06:20:bd:6b:19:96:34:a0:b7:db:9c:ad:77: 55:2b:76:fc:0f:1b:13:f5:e9:ab:6c:76:6b:48:2b: 51:13:62:af:be:1d:f9:6a:0b:4f:16:9f:13:dc:72: c4:55:b0:3c:1f:7e:20:04:fa:7d:96:09:55:dc:00: a3:4b:74:99:41:ba:23:7e:77:94:47:07:39:c9:b0: 23:cd:14:28:af:b6:ee:99:cf:a9:ba:29:f8:d1:52: 36:06:bd:09:6e:e4:cb:cf:52:44:55:fc:ab:b8:40: 5f:b3:20:49:63:eb:94:fa:17:bd:57:c4:24:71:99: 89:32:5b:9a:98:0f:cb:f5:92:ad:46:b2:9c:52:4e: 2e:e0:93:2b:0e:5c:f3:48:f1:8e:15:44:5b:e9:0e: fa:2b:5b:40:0a:38:0e:8d:3b:5e:08:37:09:2f:c9: 07:73:60:a7:ba:8d:17:b6:e1:e6:2f:f2:89:4e:72: 8a:0a:55:54:5a:84:b1:9b:d0:d8:6b:81:e1:f8:a9: 79:1f:96:b6:2d:89:f5:e6:02:7f:e0:fe:dc:6b:9e: 8e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E0:14:6F:60:E3:A2:8A:3C:3B:18:0F:71:9F:FF:48:57:84:ED:D0 X509v3 Authority Key Identifier: keyid:5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:f8:de:81:38:0a:0c:d6:bc:b7:23:43:56:ec:56:54:42:f3: f1:a5:22:25:b7:6a:0b:65:d6:fa:5e:e8:c2:9a:0d:f6:e6:27: 9e:f4:73:fd:aa:39:d8:f7:d9:6b:bf:94:74:7f:b6:22:e4:d8: e7:b3:8a:0c:99:dc:84:3e:66:cb:9d:10:3b:ab:55:d7:c1:48: d0:1a:4c:d8:16:8c:2d:a6:5a:05:2d:94:b5:1b:c0:bf:9f:80: ab:e9:77:fa:f3:e5:4a:f2:8a:9f:39:61:9e:ab:d2:ec:b0:99: d6:68:f9:12:4e:62:a9:89:03:a0:81:09:09:1c:f4:58:2b:65: a3:72:c5:67:59:aa:b3:65:7e:e3:fd:1a:96:05:4f:fa:44:12: 62:fc:6f:e5:a7:ea:af:2f:aa:22:d4:5a:4b:72:9d:09:c8:81: 51:2f:dc:ad:22:ff:df:81:78:a3:81:07:de:4b:81:fc:40:69: 71:0f:b6:33:43:97:34:c5:6e:f7:a8:46:ef:75:e9:f9:9d:1a: fc:8e:80:59:4e:4b:5f:1d:45:05:8e:89:ab:83:c4:f4:96:91: fd:cc:05:9a:1c:27:a7:4c:ad:9d:1c:6a:7f:98:71:e3:5c:22: 51:83:92:0f:21:1c:81:24:c8:64:ae:eb:a2:55:99:e7:06:9b: b6:44:c9:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY1NEMxMTAvBgNVBAUTKDVFQTExQzhBM0EyOUUwNjk3M0MxRjEyMTYxMUQ1QTVD MkExQjA2OUQwHhcNMjQwNTE4MjM0MDQxWhcNMjQwNTI1MjM0MDQxWjAYMRYwFAYD VQQDEw02NjQ5M2M3OS00ZmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmTgMt+fj/+RptBDm/78oY98spXKEmRuTR0A3HFOswwM7VPGe2pZJRLca8DP/ OAYgvWsZljSgt9ucrXdVK3b8DxsT9emrbHZrSCtRE2Kvvh35agtPFp8T3HLEVbA8 H34gBPp9lglV3ACjS3SZQbojfneURwc5ybAjzRQor7bumc+puin40VI2Br0JbuTL z1JEVfyruEBfsyBJY+uU+he9V8QkcZmJMluamA/L9ZKtRrKcUk4u4JMrDlzzSPGO FURb6Q76K1tACjgOjTteCDcJL8kHc2Cnuo0XtuHmL/KJTnKKClVUWoSxm9DYa4Hh +Kl5H5a2LYn15gJ/4P7ca56ORwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvgFG9g 46KKPDsYD3Gf/0hXhO3QMB8GA1UdIwQYMBaAFF6hHIo6KeBpc8HxIWEdWlwqGwad MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjU0Qy81MUE5RUFDQzQx NjAxMUVCOTA4NzQ0NTBDNEY5QUUwMi9YcUVjaWpvcDRHbHp3ZkVoWVIxYVhDb2JC cDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hxRWNpam9wNEdsendmRWhZUjFhWENvYkJwMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjU0Qy81MUE5RUFDQzQxNjAxMUVCOTA4NzQ0NTBDNEY5QUUwMi9YcUVjaWpvcDRH bHp3ZkVoWVIxYVhDb2JCcDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh+N6BOAoM1ry3I0NW7FZUQvPxpSIlt2oLZdb6XujCmg325iee9HP9 qjnY99lrv5R0f7Yi5Njns4oMmdyEPmbLnRA7q1XXwUjQGkzYFowtploFLZS1G8C/ n4Cr6Xf68+VK8oqfOWGeq9LssJnWaPkSTmKpiQOggQkJHPRYK2WjcsVnWaqzZX7j /RqWBU/6RBJi/G/lp+qvL6oi1FpLcp0JyIFRL9ytIv/fgXijgQfeS4H8QGlxD7Yz Q5c0xW73qEbvden5nRr8joBZTktfHUUFjomrg8T0lpH9zAWaHCenTK2dHGp/mHHj XCJRg5IPIRyBJMhkruuiVZnnBpu2RMlN -----END CERTIFICATE-----Generated at Sun May 19 00:30:20 2024 by rpki-client on console-ams.rpki-client.org