$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft File: xzON8bdowFB0za7Q_bGkwUrfuLU.mft (raw, json) Hash identifier: HdCAukh9nWuC2s7pgjbVXlSwkVNAMuGP3/YxUu6C3FU= Subject key identifier: 49:CA:63:4E:7E:2A:82:A4:B3:2E:2B:01:2E:12:F6:DB:1D:EB:79:EC Authority key identifier: C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 Certificate issuer: /CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft Manifest number: 3D Signing time: Sun 19 May 2024 08:17:45 +0000 Manifest this update: Sun 19 May 2024 08:17:44 +0000 Manifest next update: Sun 26 May 2024 08:17:44 +0000 Files and hashes: 1: xzON8bdowFB0za7Q_bGkwUrfuLU.crl (hash: PaLCvk5PaUEbCMVHav9heQJDwoBiVp8RU22o6xWuRuI=) 2: F2E15D04EB2011EEA69D7D3CC4F9AE02.roa (hash: miXibqoerWuKGoPKLds6grN1XvfnTFLYmDiQektnfTI=) 3: ADA9E52EE45111EE8E1D470AC4F9AE02.roa (hash: YCCCz55y7bYNQkJC0blMFJgBVWAeh19j4f+SeSVfFPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Validity Not Before: May 19 08:17:44 2024 GMT Not After : May 26 08:17:44 2024 GMT Subject: CN=6649b5a8-e0c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:55:fa:15:6c:f4:8c:cb:c8:6c:a7:da:4c:d9: 86:51:b5:cb:8b:ee:41:13:ae:28:19:da:9d:38:3a: ea:43:71:51:19:2b:a8:39:50:07:5a:6c:ff:d7:02: 15:a3:4b:68:29:c9:a9:01:e2:f4:a5:e8:b8:29:4f: 1e:ed:85:09:6d:aa:e3:9a:e4:18:b3:82:23:1b:93: ee:41:c8:29:44:5e:1a:0b:fb:0c:75:26:98:3f:b8: dc:55:36:e0:50:91:95:e2:a8:99:1b:0e:b4:9d:d9: c9:c8:de:63:9a:53:22:73:66:07:cf:2f:2e:7e:08: 75:5d:ae:a8:3a:c3:0e:89:6f:67:45:10:21:26:a1: 18:c6:41:f0:e6:b7:83:c9:98:60:e7:b2:5d:58:17: 94:4b:4e:f7:48:89:8c:1b:e4:81:d5:60:02:d5:de: 3b:5f:c9:ec:f1:1b:fe:4b:9a:c6:a4:45:d9:92:d5: ac:b8:fb:22:b4:2b:88:37:23:10:db:d4:df:ea:a6: b8:df:a7:fc:2c:ea:f7:4e:02:aa:6e:08:3b:2d:b0: 45:5e:c9:f4:7b:42:b5:2b:27:56:2f:c5:eb:43:95: f5:43:20:a6:56:ed:9c:8f:8d:53:c4:7e:42:85:38: cb:db:23:43:a0:65:8d:87:ad:33:6b:8b:59:25:c9: 20:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:CA:63:4E:7E:2A:82:A4:B3:2E:2B:01:2E:12:F6:DB:1D:EB:79:EC X509v3 Authority Key Identifier: keyid:C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:a0:25:c6:80:70:65:a9:92:93:e3:f3:56:90:2d:b4:70:14: e8:99:44:df:96:2b:37:bc:06:32:9b:00:70:1c:4a:e4:34:99: 9e:b9:3d:26:ca:80:81:69:74:75:2d:5e:cd:94:16:89:a5:65: f1:6e:e6:f0:1b:59:68:99:87:b1:9e:b0:f2:6a:29:7b:f8:b2: eb:10:99:56:11:d2:6c:b6:20:41:46:46:c2:56:e2:13:54:a3: 81:e1:02:dc:4d:cc:f3:ab:db:65:23:62:66:27:a4:f5:36:43: 05:c9:36:4a:82:d9:1b:5d:1a:ec:fe:75:ff:f8:1a:c2:32:5e: 28:cd:cd:6d:26:14:43:06:50:06:10:1a:f6:5b:2d:8b:c4:95: 0f:d9:e3:1d:aa:fc:66:58:b7:81:ab:ae:61:3a:03:c7:1e:2d: 22:4b:b6:66:2b:2e:04:c0:a2:2f:8d:ba:6c:24:c5:4f:09:73: 92:2b:ef:2e:f6:c8:7f:c8:01:29:a0:1b:72:e4:2c:40:a7:28: 6d:f5:92:5c:0a:00:9a:b4:67:41:a1:e1:7f:29:4d:86:bd:58: 98:e8:f0:00:07:9f:ad:13:f7:f8:c0:87:dc:f0:fd:27:6a:2f: 61:95:7a:d3:73:79:af:80:73:67:44:0d:e5:18:7d:94:fa:e5: 12:ab:3e:79 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MTY3RjExMC8GA1UEBRMoQzczMzhERjFCNzY4QzA1MDc0Q0RBRUQwRkRCMUE0QzE0 QURGQjhCNTAeFw0yNDA1MTkwODE3NDRaFw0yNDA1MjYwODE3NDRaMBgxFjAUBgNV BAMTDTY2NDliNWE4LWUwYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5VfoVbPSMy8hsp9pM2YZRtcuL7kETrigZ2p04OupDcVEZK6g5UAdabP/XAhWj S2gpyakB4vSl6LgpTx7thQltquOa5BizgiMbk+5ByClEXhoL+wx1Jpg/uNxVNuBQ kZXiqJkbDrSd2cnI3mOaUyJzZgfPLy5+CHVdrqg6ww6Jb2dFECEmoRjGQfDmt4PJ mGDnsl1YF5RLTvdIiYwb5IHVYALV3jtfyezxG/5LmsakRdmS1ay4+yK0K4g3IxDb 1N/qprjfp/ws6vdOAqpuCDstsEVeyfR7QrUrJ1YvxetDlfVDIKZW7ZyPjVPEfkKF OMvbI0OgZY2HrTNri1klySD9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUScpjTn4q gqSzLisBLhL22x3reewwHwYDVR0jBBgwFoAUxzON8bdowFB0za7Q/bGkwUrfuLUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMxNjdGLzRBQUI3QkNBQzQ3 RDExRUU5RkM3QzgwRkM0RjlBRTAyL3h6T044YmRvd0ZCMHphN1FfYkdrd1VyZnVM VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveHpPTjhiZG93RkIwemE3UV9iR2t3VXJmdUxVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMx NjdGLzRBQUI3QkNBQzQ3RDExRUU5RkM3QzgwRkM0RjlBRTAyL3h6T044YmRvd0ZC MHphN1FfYkdrd1VyZnVMVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANygJcaAcGWpkpPj81aQLbRwFOiZRN+WKze8BjKbAHAcSuQ0mZ65PSbK gIFpdHUtXs2UFomlZfFu5vAbWWiZh7GesPJqKXv4susQmVYR0my2IEFGRsJW4hNU o4HhAtxNzPOr22UjYmYnpPU2QwXJNkqC2RtdGuz+df/4GsIyXijNzW0mFEMGUAYQ GvZbLYvElQ/Z4x2q/GZYt4GrrmE6A8ceLSJLtmYrLgTAoi+NumwkxU8Jc5Ir7y72 yH/IASmgG3LkLECnKG31klwKAJq0Z0Gh4X8pTYa9WJjo8AAHn60T9/jAh9zw/Sdq L2GVetNzea+Ac2dEDeUYfZT65RKrPnk= -----END CERTIFICATE-----Generated at Sun May 19 09:32:18 2024 by rpki-client on console-ams.rpki-client.org