$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft File: XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft (raw, json) Hash identifier: 1Ln9rLmKUHoL0alqZWMYl2cDkIyFacLeO33R8Zl433s= Subject key identifier: DD:44:84:1B:0C:7F:37:AD:F7:EE:67:E1:88:B1:3B:DD:2D:6F:2D:75 Authority key identifier: 5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00 Certificate issuer: /CN=A91D28E1/serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft Manifest number: 53 Signing time: Sun 19 May 2024 07:55:48 +0000 Manifest this update: Sun 19 May 2024 07:55:47 +0000 Manifest next update: Sun 26 May 2024 07:55:47 +0000 Files and hashes: 1: XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl (hash: QYOm0PeGDVFwEglIxpSDk2Wt0TfviNNtwRgiM7s62CE=) 2: 0A576F089A4C11EEBD557E12C4F9AE02.roa (hash: t+gLjWKuMmtai3i+isqz9fnXY+98bRxTkq694uOYDEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28E1/serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700 Validity Not Before: May 19 07:55:47 2024 GMT Not After : May 26 07:55:47 2024 GMT Subject: CN=6649b083-ad1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f4:13:c4:d2:ad:96:99:20:2d:82:ab:09:28: 10:5d:f9:ea:09:60:66:c6:31:96:37:aa:5d:e1:66: a7:c4:65:b1:eb:6e:b8:ab:53:12:c8:30:03:b1:03: d9:09:be:18:eb:9a:8e:18:3b:76:4d:fb:30:82:e0: 2a:5b:96:d9:7e:ad:8b:7b:d1:9d:7f:0b:c1:0f:2f: 90:ed:06:25:eb:3c:c1:47:ff:34:9f:e7:fb:4e:dd: 76:7b:8c:b3:3e:c1:5e:42:4d:10:41:9f:7e:cb:0e: 66:09:94:81:2b:61:86:54:8f:36:cb:be:3e:51:cb: 94:e4:d8:f3:76:4d:09:58:ff:82:ec:a0:38:91:3a: ed:40:0c:e1:bb:f3:17:c1:f1:44:77:0d:2f:a6:b2: 8c:c9:ef:f4:c7:d4:76:ef:69:ae:72:25:4c:fd:11: d2:99:94:0e:22:4a:ba:79:91:56:3b:b7:90:66:b5: 72:fc:fc:74:ef:e0:a3:f7:07:ce:a9:f6:46:33:b9: 8f:40:46:7a:42:25:63:b7:9a:5c:2a:ef:1b:16:28: a6:08:76:d0:61:b1:58:9a:c3:0d:ad:d6:b3:b0:98: da:2c:1a:b4:23:64:44:c6:29:05:8c:81:10:5c:48: 9e:b9:f2:09:fa:10:b2:4d:ec:81:84:7f:58:31:8c: 01:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:44:84:1B:0C:7F:37:AD:F7:EE:67:E1:88:B1:3B:DD:2D:6F:2D:75 X509v3 Authority Key Identifier: keyid:5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:4d:92:13:20:63:73:8c:a9:76:c1:2a:b0:2d:b4:f3:e8:5d: 0c:90:74:22:8f:a4:ea:1b:90:28:28:4e:5d:aa:9e:4e:86:c1: c8:fd:04:4f:a1:ce:59:1c:61:c4:76:60:4a:8b:0e:30:a8:d3: f9:02:55:42:75:b2:32:03:f8:a1:d5:dd:e0:f5:41:4d:c4:ce: 77:e9:a9:e8:b0:41:ae:9f:a9:c8:e3:3c:1a:60:e7:12:eb:5b: a1:04:d9:fa:4d:64:37:af:6d:b3:f5:e6:3d:72:5c:71:90:93: ec:7e:04:37:10:cd:92:e1:1c:05:5b:6f:04:9d:f6:8a:ba:05: 61:b3:6a:aa:87:b1:96:b5:9a:78:77:62:cd:a5:2f:95:c2:4c: 12:ab:5b:83:cd:36:1f:6b:28:72:a4:b5:9f:f1:64:e3:fd:8b: 81:4b:98:8c:c9:10:10:60:93:2e:bd:4a:b9:45:69:d2:9e:45: 47:01:ca:d7:fe:02:15:c0:06:99:c9:76:22:a7:ed:fd:ce:ec: 28:47:62:85:78:64:f8:d9:2d:3c:8a:f9:95:37:33:3b:2e:33: 88:1b:32:8b:e4:35:22:05:79:32:f6:15:91:17:fc:83:28:77: 3b:c6:36:a7:9c:da:6b:a6:3b:4a:7a:37:0d:98:6d:36:15:50: 19:2c:55:e9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MjhFMTExMC8GA1UEBRMoNUQ1RjYxOTAyMTVERkYwQUMzNTQzMkJDM0E1MkEwOEJE MzQxQjcwMDAeFw0yNDA1MTkwNzU1NDdaFw0yNDA1MjYwNzU1NDdaMBgxFjAUBgNV BAMTDTY2NDliMDgzLWFkMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC29BPE0q2WmSAtgqsJKBBd+eoJYGbGMZY3ql3hZqfEZbHrbrirUxLIMAOxA9kJ vhjrmo4YO3ZN+zCC4Cpbltl+rYt70Z1/C8EPL5DtBiXrPMFH/zSf5/tO3XZ7jLM+ wV5CTRBBn37LDmYJlIErYYZUjzbLvj5Ry5Tk2PN2TQlY/4LsoDiROu1ADOG78xfB 8UR3DS+msozJ7/TH1Hbvaa5yJUz9EdKZlA4iSrp5kVY7t5BmtXL8/HTv4KP3B86p 9kYzuY9ARnpCJWO3mlwq7xsWKKYIdtBhsViaww2t1rOwmNosGrQjZETGKQWMgRBc SJ658gn6ELJN7IGEf1gxjAHxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3USEGwx/ N6337mfhiLE73S1vLXUwHwYDVR0jBBgwFoAUXV9hkCFd/wrDVDK8OlKgi9NBtwAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyOEUxL0JCRTNENDNBOUE0 OTExRUU5MDkyRTA3MEM0RjlBRTAyL1hWOWhrQ0ZkX3dyRFZESzhPbEtnaTlOQnR3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWFY5aGtDRmRfd3JEVkRLOE9sS2dpOU5CdHdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy OEUxL0JCRTNENDNBOUE0OTExRUU5MDkyRTA3MEM0RjlBRTAyL1hWOWhrQ0ZkX3dy RFZESzhPbEtnaTlOQnR3QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFFNkhMgY3OMqXbBKrAttPPoXQyQdCKPpOobkCgoTl2qnk6Gwcj9BE+h zlkcYcR2YEqLDjCo0/kCVUJ1sjID+KHV3eD1QU3EznfpqeiwQa6fqcjjPBpg5xLr W6EE2fpNZDevbbP15j1yXHGQk+x+BDcQzZLhHAVbbwSd9oq6BWGzaqqHsZa1mnh3 Ys2lL5XCTBKrW4PNNh9rKHKktZ/xZOP9i4FLmIzJEBBgky69SrlFadKeRUcBytf+ AhXABpnJdiKn7f3O7ChHYoV4ZPjZLTyK+ZU3MzsuM4gbMovkNSIFeTL2FZEX/IMo dzvGNqec2mumO0p6Nw2YbTYVUBksVek= -----END CERTIFICATE-----Generated at Sun May 19 08:26:45 2024 by rpki-client on console-fra.rpki-client.org