$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.mft File: X45P1KbdY15DeC5aBVYiyrJlSjc.mft (raw, json) Hash identifier: YyaEgU9YtSNFIGEWXxHg77D5w3f9o+qBz+86v1fMPYs= Subject key identifier: B3:B8:12:78:8A:7B:64:3E:6D:49:8D:96:40:C2:45:CA:7C:85:59:50 Authority key identifier: 5F:8E:4F:D4:A6:DD:63:5E:43:78:2E:5A:05:56:22:CA:B2:65:4A:37 Certificate issuer: /CN=A91BCF31/serialNumber=5F8E4FD4A6DD635E43782E5A055622CAB2654A37 Certificate serial: 083B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X45P1KbdY15DeC5aBVYiyrJlSjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.mft Manifest number: 0835 Signing time: Sat 18 May 2024 21:45:07 +0000 Manifest this update: Sat 18 May 2024 21:45:06 +0000 Manifest next update: Sat 25 May 2024 21:45:06 +0000 Files and hashes: 1: X45P1KbdY15DeC5aBVYiyrJlSjc.crl (hash: 6wtJOAoZ+4i2ZCHNrc8IKtSH3rG/8oov8aIvxj2J9QI=) 2: B757FF4EAB8311EA9983D717C4F9AE02.roa (hash: DFYmotmgpsB5tTA/60Ic5g7wJNaP0r3jSSNRCaoltrE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.crl rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X45P1KbdY15DeC5aBVYiyrJlSjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2107 (0x83b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCF31/serialNumber=5F8E4FD4A6DD635E43782E5A055622CAB2654A37 Validity Not Before: May 18 21:45:06 2024 GMT Not After : May 25 21:45:06 2024 GMT Subject: CN=66492163-8330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0a:d9:9c:1b:d8:0e:ed:91:68:9c:9a:c0:fd: 1a:3c:f7:cd:ac:d3:a3:5e:34:17:28:07:c4:66:27: 0f:6e:cb:a9:d4:24:47:cb:6b:e1:c6:24:36:47:fb: 1a:35:48:1d:d4:c8:e3:d6:02:47:a2:d1:55:8c:b7: a6:be:9b:0c:b3:49:e3:82:f1:91:02:a2:b1:34:58: 09:64:cd:a9:41:00:2d:85:1b:59:64:ca:f4:e9:a1: 5b:cc:b4:57:50:10:f6:37:c8:1e:6d:4a:bb:67:13: 80:48:8f:a4:ad:fc:7d:20:eb:55:c2:3b:49:93:f8: 1f:b3:fd:83:a7:1c:11:ec:aa:33:dd:30:af:5a:aa: 77:5f:a7:8a:8d:df:08:f1:c4:ce:2c:fc:9d:a0:9c: f3:4a:24:81:73:59:83:0b:87:ba:b1:62:0f:6c:6a: 0f:61:3d:73:f6:8b:b6:ec:4f:17:e6:b4:af:38:db: 20:f7:a7:6d:a5:3c:86:d0:f8:b2:5b:3b:8e:20:b3: 1e:f9:60:fa:c9:39:59:6e:47:cc:a2:5a:62:0b:8d: 4e:78:1d:41:a9:77:71:48:85:9c:e9:cc:25:21:99: 91:0a:61:60:57:be:8a:3f:6a:6b:6a:c8:28:4c:14: be:9c:87:7b:bd:b8:9d:8b:f1:26:e5:4b:15:90:95: b2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B8:12:78:8A:7B:64:3E:6D:49:8D:96:40:C2:45:CA:7C:85:59:50 X509v3 Authority Key Identifier: keyid:5F:8E:4F:D4:A6:DD:63:5E:43:78:2E:5A:05:56:22:CA:B2:65:4A:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X45P1KbdY15DeC5aBVYiyrJlSjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:e7:eb:ba:f2:cb:9a:00:77:c6:fb:dc:60:cd:e0:13:b9:88: 88:68:60:b7:e3:bf:c6:b4:61:2e:40:08:07:b6:b0:72:9e:55: ce:d2:0f:9f:06:f0:22:87:59:fb:3b:6a:93:a9:d1:83:5e:84: 63:3f:33:5f:31:0f:a5:02:2d:83:7f:4f:44:fa:c6:90:e4:27: 1f:81:32:59:56:af:3e:93:3a:39:8c:51:21:07:f7:4e:84:fe: cb:e4:f1:ef:23:a6:31:cf:0f:b3:a3:cc:cb:2f:3e:ba:a6:61: 3f:b9:8a:11:8a:18:41:d5:02:17:3d:19:56:9c:cf:8c:22:3d: 1d:7a:3b:02:51:a9:65:a8:43:ed:d6:a6:19:bb:02:82:91:06: 22:0d:e9:ec:12:6b:b8:a9:29:dc:18:59:e4:28:16:3a:28:65: 87:fa:b8:92:63:aa:3f:8e:e4:ae:fe:65:93:e7:f8:ad:cb:72: 24:ec:00:e3:b3:7b:23:a0:91:2a:6c:5f:d0:7f:19:cb:a1:d2: 34:50:cd:e5:31:66:19:7a:e6:9d:1c:1e:10:70:85:ef:90:c3: f4:a5:31:32:7f:ba:53:d8:fb:29:e5:d7:7e:fd:88:ca:13:65: fa:00:fe:cc:79:2d:9a:7d:a7:5b:f3:4d:ac:bd:e7:d3:15:97: f2:49:5a:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNGMzExMTAvBgNVBAUTKDVGOEU0RkQ0QTZERDYzNUU0Mzc4MkU1QTA1NTYyMkNB QjI2NTRBMzcwHhcNMjQwNTE4MjE0NTA2WhcNMjQwNTI1MjE0NTA2WjAYMRYwFAYD VQQDEw02NjQ5MjE2My04MzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQrZnBvYDu2RaJyawP0aPPfNrNOjXjQXKAfEZicPbsup1CRHy2vhxiQ2R/sa NUgd1Mjj1gJHotFVjLemvpsMs0njgvGRAqKxNFgJZM2pQQAthRtZZMr06aFbzLRX UBD2N8gebUq7ZxOASI+krfx9IOtVwjtJk/gfs/2DpxwR7Koz3TCvWqp3X6eKjd8I 8cTOLPydoJzzSiSBc1mDC4e6sWIPbGoPYT1z9ou27E8X5rSvONsg96dtpTyG0Piy WzuOILMe+WD6yTlZbkfMolpiC41OeB1BqXdxSIWc6cwlIZmRCmFgV76KP2prasgo TBS+nId7vbidi/Em5UsVkJWyMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLO4EniK e2Q+bUmNlkDCRcp8hVlQMB8GA1UdIwQYMBaAFF+OT9Sm3WNeQ3guWgVWIsqyZUo3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0YzMS9BRjdGRUQ2MkFB NEUxMUVBOUQ4RUM3ODJDNEY5QUUwMi9YNDVQMUtiZFkxNURlQzVhQlZZaXlySmxT amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g0NVAxS2JkWTE1RGVDNWFCVllpeXJKbFNqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0YzMS9BRjdGRUQ2MkFBNEUxMUVBOUQ4RUM3ODJDNEY5QUUwMi9YNDVQMUtiZFkx NURlQzVhQlZZaXlySmxTamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDO5+u68suaAHfG+9xgzeATuYiIaGC347/GtGEuQAgHtrBynlXO0g+f BvAih1n7O2qTqdGDXoRjPzNfMQ+lAi2Df09E+saQ5CcfgTJZVq8+kzo5jFEhB/dO hP7L5PHvI6Yxzw+zo8zLLz66pmE/uYoRihhB1QIXPRlWnM+MIj0dejsCUallqEPt 1qYZuwKCkQYiDensEmu4qSncGFnkKBY6KGWH+riSY6o/juSu/mWT5/ity3Ik7ADj s3sjoJEqbF/QfxnLodI0UM3lMWYZeuadHB4QcIXvkMP0pTEyf7pT2Psp5dd+/YjK E2X6AP7MeS2afadb802svefTFZfySVqs -----END CERTIFICATE-----Generated at Sun May 19 00:16:18 2024 by rpki-client on console-fra.rpki-client.org