$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2456/458009AC2CBF11EC91C4E016C4F9AE02/XZJXbUXSfz0VU1SZ1AzJfkKTqWg.mft File: XZJXbUXSfz0VU1SZ1AzJfkKTqWg.mft (raw, json) Hash identifier: rkfcabdWD/IvtOkD34+vbaiDriITFuEqk/Zxw1xySww= Subject key identifier: 5A:A9:3F:DB:3D:4F:84:08:D2:7C:A5:5F:4B:8C:0E:F9:39:60:54:68 Authority key identifier: 5D:92:57:6D:45:D2:7F:3D:15:53:54:99:D4:0C:C9:7E:42:93:A9:68 Certificate issuer: /CN=A91B2456/serialNumber=5D92576D45D27F3D15535499D40CC97E4293A968 Certificate serial: 03F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XZJXbUXSfz0VU1SZ1AzJfkKTqWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2456/458009AC2CBF11EC91C4E016C4F9AE02/XZJXbUXSfz0VU1SZ1AzJfkKTqWg.mft Manifest number: 03F2 Signing time: Mon 29 Apr 2024 02:10:59 +0000 Manifest this update: Mon 29 Apr 2024 02:10:58 +0000 Manifest next update: Mon 06 May 2024 02:10:58 +0000 Files and hashes: 1: XZJXbUXSfz0VU1SZ1AzJfkKTqWg.crl (hash: 9evFpTEMeIqiKT0oKJsvHTr+V/qQ4cZu3ccV3n88UJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2456/458009AC2CBF11EC91C4E016C4F9AE02/XZJXbUXSfz0VU1SZ1AzJfkKTqWg.crl rsync://rpki.apnic.net/member_repository/A91B2456/458009AC2CBF11EC91C4E016C4F9AE02/XZJXbUXSfz0VU1SZ1AzJfkKTqWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XZJXbUXSfz0VU1SZ1AzJfkKTqWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 02:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1015 (0x3f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2456/serialNumber=5D92576D45D27F3D15535499D40CC97E4293A968 Validity Not Before: Apr 29 02:10:58 2024 GMT Not After : May 6 02:10:58 2024 GMT Subject: CN=662f01b3-1321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:45:1f:43:5c:07:1d:04:b6:68:05:cb:a2:46: 00:2f:71:d7:3d:f0:85:8a:b3:73:bf:80:5f:f9:0d: e0:45:0e:81:4c:70:35:fe:e2:d5:a5:fd:85:58:b1: 86:2d:d9:d8:f1:2a:08:1b:d2:da:ae:a9:fc:fd:ec: 61:df:fb:ff:c3:73:93:fa:83:13:2e:32:65:ba:8c: fe:ba:84:86:e2:63:6c:8d:09:3a:09:86:4b:66:27: bf:bf:67:5d:2d:d9:df:bc:fe:88:60:56:a2:57:9d: 25:9d:6e:ad:e8:5c:cd:36:65:e8:35:e5:03:72:55: 8a:ee:30:ea:13:f8:bc:ef:e0:f0:68:18:48:d3:f9: 38:02:f7:49:f9:22:fe:d2:6a:22:d3:f1:b1:3f:cb: 08:16:c0:9b:a6:4a:39:94:ca:84:b5:b7:7d:53:fc: 9f:34:e4:be:4f:f9:86:59:82:e9:dd:f2:6e:06:40: cc:bf:fe:cf:ed:e8:82:f1:19:56:30:24:e3:cb:f7: 9a:c7:2b:0f:54:70:00:0e:25:da:50:90:8a:07:94: c7:15:8c:54:a8:e2:9e:89:09:3e:c4:a6:35:ac:cb: 2a:67:a9:c4:b1:bd:aa:a2:5f:27:ec:a4:eb:c9:f3: f7:40:0b:29:f8:49:0e:65:f8:1a:1c:a2:9a:b2:56: e7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A9:3F:DB:3D:4F:84:08:D2:7C:A5:5F:4B:8C:0E:F9:39:60:54:68 X509v3 Authority Key Identifier: keyid:5D:92:57:6D:45:D2:7F:3D:15:53:54:99:D4:0C:C9:7E:42:93:A9:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2456/458009AC2CBF11EC91C4E016C4F9AE02/XZJXbUXSfz0VU1SZ1AzJfkKTqWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XZJXbUXSfz0VU1SZ1AzJfkKTqWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2456/458009AC2CBF11EC91C4E016C4F9AE02/XZJXbUXSfz0VU1SZ1AzJfkKTqWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:7d:ce:94:23:da:22:a3:90:9b:39:ad:5e:2b:26:f7:b6:d8: a9:ab:ad:b0:39:c4:10:a4:a6:b0:0c:2a:6e:a9:cf:f4:1b:11: 85:3a:e4:89:dc:1c:73:b4:07:68:41:de:32:65:1e:3f:cf:e9: 38:d8:0a:89:b2:2e:10:0e:23:ca:4e:86:97:43:94:95:3e:45: 28:96:f3:62:ec:9b:a5:08:68:89:99:08:e1:01:68:f1:b7:37: 35:31:b5:1c:d9:95:0a:e4:2b:15:53:35:e0:a3:8d:8c:41:af: 3e:3f:1f:42:75:32:cf:87:52:e2:a2:b8:04:fd:b7:60:a4:2b: d4:f5:cc:1d:7d:53:0c:65:00:e2:60:0d:64:ee:fb:e1:c3:25: cd:f0:b2:0a:71:6b:e2:8f:81:a2:c4:f1:f3:37:6b:30:38:cd: 60:90:89:66:ac:14:29:ef:a1:f9:64:c8:d1:cb:49:08:f7:6b: e8:8a:7e:c2:82:aa:d6:a8:8c:d8:95:2e:d4:cb:d7:08:4e:82: 6d:c4:bb:00:fc:87:37:40:0a:dd:b8:6f:17:7b:81:c9:4a:77: 89:79:7b:4e:67:55:f9:fa:8f:0b:36:c8:f8:d3:fb:4c:dd:8e: 3a:7a:00:45:b8:58:4b:76:91:45:ee:1f:72:1e:59:af:b1:8b: 80:08:d9:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI0NTYxMTAvBgNVBAUTKDVEOTI1NzZENDVEMjdGM0QxNTUzNTQ5OUQ0MENDOTdF NDI5M0E5NjgwHhcNMjQwNDI5MDIxMDU4WhcNMjQwNTA2MDIxMDU4WjAYMRYwFAYD VQQDEw02NjJmMDFiMy0xMzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4EUfQ1wHHQS2aAXLokYAL3HXPfCFirNzv4Bf+Q3gRQ6BTHA1/uLVpf2FWLGG LdnY8SoIG9Larqn8/exh3/v/w3OT+oMTLjJluoz+uoSG4mNsjQk6CYZLZie/v2dd LdnfvP6IYFaiV50lnW6t6FzNNmXoNeUDclWK7jDqE/i87+DwaBhI0/k4AvdJ+SL+ 0moi0/GxP8sIFsCbpko5lMqEtbd9U/yfNOS+T/mGWYLp3fJuBkDMv/7P7eiC8RlW MCTjy/eaxysPVHAADiXaUJCKB5THFYxUqOKeiQk+xKY1rMsqZ6nEsb2qol8n7KTr yfP3QAsp+EkOZfgaHKKaslbntQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqpP9s9 T4QI0nylX0uMDvk5YFRoMB8GA1UdIwQYMBaAFF2SV21F0n89FVNUmdQMyX5Ck6lo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjQ1Ni80NTgwMDlBQzJD QkYxMUVDOTFDNEUwMTZDNEY5QUUwMi9YWkpYYlVYU2Z6MFZVMVNaMUF6SmZrS1Rx V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1haSlhiVVhTZnowVlUxU1oxQXpKZmtLVHFXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjQ1Ni80NTgwMDlBQzJDQkYxMUVDOTFDNEUwMTZDNEY5QUUwMi9YWkpYYlVYU2Z6 MFZVMVNaMUF6SmZrS1RxV2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOfc6UI9oio5CbOa1eKyb3ttipq62wOcQQpKawDCpuqc/0GxGFOuSJ 3BxztAdoQd4yZR4/z+k42AqJsi4QDiPKToaXQ5SVPkUolvNi7JulCGiJmQjhAWjx tzc1MbUc2ZUK5CsVUzXgo42MQa8+Px9CdTLPh1LiorgE/bdgpCvU9cwdfVMMZQDi YA1k7vvhwyXN8LIKcWvij4GixPHzN2swOM1gkIlmrBQp76H5ZMjRy0kI92voin7C gqrWqIzYlS7Uy9cIToJtxLsA/Ic3QArduG8Xe4HJSneJeXtOZ1X5+o8LNsj40/tM 3Y46egBFuFhLdpFF7h9yHlmvsYuACNnK -----END CERTIFICATE-----Generated at Mon Apr 29 12:51:35 2024 by rpki-client on console-ams.rpki-client.org