$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft File: xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft (raw, json) Hash identifier: 2KCip+RC+S5rPEcg/GtFaaKI1QFGeQtcLNfqmsQMg6M= Subject key identifier: 84:8B:E1:FF:1E:08:73:89:76:5D:49:E9:B9:87:59:C2:86:10:41:CF Authority key identifier: C4:11:C2:D7:24:01:F5:3E:CA:01:63:57:88:9D:7E:BA:3B:CC:FD:CD Certificate issuer: /CN=A91B6F60/serialNumber=C411C2D72401F53ECA016357889D7EBA3BCCFDCD Certificate serial: 0437 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft Manifest number: 0433 Signing time: Fri 31 May 2024 02:34:18 +0000 Manifest this update: Fri 31 May 2024 02:34:17 +0000 Manifest next update: Fri 07 Jun 2024 02:34:17 +0000 Files and hashes: 1: xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl (hash: NxPhqo8qGiItdJ3LN6vcTi4z3vfI6G6GnE0Erl2O4vM=) 2: 52A8AE84152E11EC94BCB264C4F9AE02.roa (hash: iVPRI1RAxMwyu/kNAl5u8N4m5Wu14vHIOH8yhzQ9tUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 02:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1079 (0x437) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6F60/serialNumber=C411C2D72401F53ECA016357889D7EBA3BCCFDCD Validity Not Before: May 31 02:34:17 2024 GMT Not After : Jun 7 02:34:17 2024 GMT Subject: CN=66593729-5c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:20:22:6f:ec:fa:2b:4c:40:87:7a:d6:0c:d6: 43:6a:aa:d7:6e:3f:7c:06:9a:29:27:a9:cb:46:bd: 21:99:dd:d9:f6:e3:9d:d0:af:f6:5b:a7:c6:3f:e4: 56:4e:b3:ca:f5:7d:0d:80:d8:98:9d:ef:0c:8b:48: d5:d0:31:ec:07:62:b1:8b:d8:e3:25:9c:7b:cf:9d: 38:4b:3c:72:aa:85:98:dc:05:6a:eb:1c:3e:46:10: 0a:f7:a0:ae:38:0a:c9:a3:3d:cf:3c:c4:f4:fb:69: 5c:c6:35:91:4a:76:fd:39:cc:56:ce:e7:75:6d:96: 9b:c8:fa:7a:13:9f:b2:c2:44:c6:ff:5c:b6:bb:da: e6:d1:ff:e4:6d:45:ce:f0:c7:74:f8:92:9d:ef:22: 7e:88:67:5b:78:2a:4d:67:f8:e5:92:83:6a:bc:f2: 81:f9:4e:6e:cb:69:07:f8:a5:b0:7d:fe:86:ec:32: 0f:e3:a6:c8:55:f0:a4:5c:80:24:2f:9e:3d:bb:dc: e9:fe:1b:9b:04:bd:33:4f:d7:c5:15:5a:90:54:65: d6:94:45:66:95:82:e9:a2:8f:db:d7:3f:e9:10:24: 84:34:4a:06:9a:b0:03:e3:04:d5:3c:52:57:cb:d3: b0:e3:1a:b4:30:eb:35:66:4a:68:cb:46:85:f5:ba: 3d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:8B:E1:FF:1E:08:73:89:76:5D:49:E9:B9:87:59:C2:86:10:41:CF X509v3 Authority Key Identifier: keyid:C4:11:C2:D7:24:01:F5:3E:CA:01:63:57:88:9D:7E:BA:3B:CC:FD:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:7f:9b:f3:fe:52:b2:27:9c:64:7a:78:a7:d4:4b:78:b8:00: 27:e9:8d:1d:b8:ac:1e:7d:2c:7d:65:77:c2:c2:26:eb:c3:0a: 73:e5:22:9b:2c:80:4c:08:3e:e0:71:f8:2c:14:0f:7b:da:f5: 91:0b:51:7a:1d:8c:f2:26:a9:25:0e:44:01:a0:82:9f:c3:79: af:97:77:20:5d:0f:b8:35:40:0b:6c:20:d2:80:c0:61:04:84: 3c:62:65:ce:98:b5:55:c6:b4:c5:63:69:3b:c8:de:6d:a5:11: 21:78:ce:ae:c9:dc:9d:e4:ce:d4:96:d4:27:3a:c1:80:e3:d0: a4:ea:02:7a:c0:26:2a:ab:f6:a7:6e:ca:5d:48:0f:d8:e6:6f: d8:30:80:b8:88:c5:40:92:85:a8:98:2e:ef:f8:2e:a8:56:64: b9:18:31:b7:8c:6e:db:d2:28:97:98:ff:ed:9c:62:55:8b:a8: 31:ad:2e:55:48:4b:b3:d1:24:a3:95:51:ba:02:bf:4e:61:43: dc:e5:98:80:8d:50:cc:37:39:98:6a:c9:f5:8b:1d:b6:59:26: 7a:31:8f:d2:d8:47:53:47:f7:b3:18:1d:38:9e:4d:78:3b:25: 82:27:6f:b2:07:50:aa:24:0b:fb:26:a0:99:b4:cb:1a:d8:82: 14:b3:ec:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZGNjAxMTAvBgNVBAUTKEM0MTFDMkQ3MjQwMUY1M0VDQTAxNjM1Nzg4OUQ3RUJB M0JDQ0ZEQ0QwHhcNMjQwNTMxMDIzNDE3WhcNMjQwNjA3MDIzNDE3WjAYMRYwFAYD VQQDEw02NjU5MzcyOS01YzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCAib+z6K0xAh3rWDNZDaqrXbj98BpopJ6nLRr0hmd3Z9uOd0K/2W6fGP+RW TrPK9X0NgNiYne8Mi0jV0DHsB2Kxi9jjJZx7z504SzxyqoWY3AVq6xw+RhAK96Cu OArJoz3PPMT0+2lcxjWRSnb9OcxWzud1bZabyPp6E5+ywkTG/1y2u9rm0f/kbUXO 8Md0+JKd7yJ+iGdbeCpNZ/jlkoNqvPKB+U5uy2kH+KWwff6G7DIP46bIVfCkXIAk L549u9zp/hubBL0zT9fFFVqQVGXWlEVmlYLpoo/b1z/pECSENEoGmrAD4wTVPFJX y9Ow4xq0MOs1Zkpoy0aF9bo9sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISL4f8e CHOJdl1J6bmHWcKGEEHPMB8GA1UdIwQYMBaAFMQRwtckAfU+ygFjV4idfro7zP3N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY2MC85NDkzMkJFQzE1 MkIxMUVDQjMyMTE4NjNDNEY5QUUwMi94QkhDMXlRQjlUN0tBV05YaUoxLXVqdk1f YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hCSEMxeVFCOVQ3S0FXTlhpSjEtdWp2TV9jMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkY2MC85NDkzMkJFQzE1MkIxMUVDQjMyMTE4NjNDNEY5QUUwMi94QkhDMXlRQjlU N0tBV05YaUoxLXVqdk1fYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxf5vz/lKyJ5xkenin1Et4uAAn6Y0duKwefSx9ZXfCwibrwwpz5SKb LIBMCD7gcfgsFA972vWRC1F6HYzyJqklDkQBoIKfw3mvl3cgXQ+4NUALbCDSgMBh BIQ8YmXOmLVVxrTFY2k7yN5tpREheM6uydyd5M7UltQnOsGA49Ck6gJ6wCYqq/an bspdSA/Y5m/YMIC4iMVAkoWomC7v+C6oVmS5GDG3jG7b0iiXmP/tnGJVi6gxrS5V SEuz0SSjlVG6Ar9OYUPc5ZiAjVDMNzmYasn1ix22WSZ6MY/S2EdTR/ezGB04nk14 OyWCJ2+yB1CqJAv7JqCZtMsa2IIUs+wQ -----END CERTIFICATE-----Generated at Fri May 31 04:54:01 2024 by rpki-client on console-fra.rpki-client.org