$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft File: xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft (raw, json) Hash identifier: Q2mwfRHWpzBDVuTM12x1QGC72gbUgZZxFnfvMVou7uc= Subject key identifier: DB:16:14:6C:57:8E:90:ED:5E:1D:CF:78:E7:1C:BA:07:AB:87:FD:EA Authority key identifier: C6:41:89:F5:8C:F7:2C:1F:73:BE:B2:40:7A:52:27:B6:A2:CE:96:61 Certificate issuer: /CN=A91D7E61/serialNumber=C64189F58CF72C1F73BEB2407A5227B6A2CE9661 Certificate serial: 03CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft Manifest number: 03C7 Signing time: Fri 31 May 2024 02:59:58 +0000 Manifest this update: Fri 31 May 2024 02:59:57 +0000 Manifest next update: Fri 07 Jun 2024 02:59:57 +0000 Files and hashes: 1: xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl (hash: lVKqcZerv718aV2R8AhVbc19N4cJXcdBxmJ9D/HcSqc=) 2: 073DC606407F11EC87F77579C4F9AE02.roa (hash: UvINB57RMsd8vGsne4Sob4iLN+ncABMNhzmtPlY6+4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 02:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 970 (0x3ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7E61/serialNumber=C64189F58CF72C1F73BEB2407A5227B6A2CE9661 Validity Not Before: May 31 02:59:57 2024 GMT Not After : Jun 7 02:59:57 2024 GMT Subject: CN=66593d2e-a65e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9f:8f:5e:2d:a3:60:32:27:e5:63:a7:75:6d: f2:0f:ac:82:31:a1:88:b6:a4:e3:0b:dd:71:83:f6: b2:5b:d8:d0:5b:8d:d8:25:eb:ca:e4:de:c4:ad:ea: ad:c3:9b:ef:c1:7d:fe:45:64:4b:56:4d:70:07:46: 9e:ab:27:da:96:8d:14:83:26:2b:49:3c:f4:b6:03: c9:ec:e4:eb:8c:34:88:a4:53:19:c1:ac:ef:dc:96: eb:75:2f:75:2f:be:1f:68:7c:75:ce:2d:08:37:4e: c3:b3:b1:bb:2c:eb:b2:69:f9:5e:9d:52:a3:2f:aa: 22:51:bd:5a:f6:c0:46:e1:bc:23:50:8c:85:e8:01: ed:70:9e:9c:60:c5:04:e6:c6:75:47:e3:09:1a:61: cb:61:62:1b:47:19:89:9f:83:ec:b1:ff:2f:e5:56: 58:4f:12:f7:0b:14:38:cd:ee:a4:3f:99:0c:0c:23: 97:ae:17:b8:7b:1c:8a:7d:e6:0e:55:f2:df:04:68: 1c:4b:f3:aa:fe:25:ae:f1:2e:bd:0a:53:91:82:7d: a6:21:51:0c:47:13:0a:21:20:14:7d:29:32:9b:d2: 16:36:80:c7:06:ac:58:a4:9b:6a:15:40:bf:ba:4a: fc:64:e0:f6:8f:86:ba:69:54:96:56:27:d3:b2:ad: 63:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:16:14:6C:57:8E:90:ED:5E:1D:CF:78:E7:1C:BA:07:AB:87:FD:EA X509v3 Authority Key Identifier: keyid:C6:41:89:F5:8C:F7:2C:1F:73:BE:B2:40:7A:52:27:B6:A2:CE:96:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:d0:89:95:a0:c6:57:29:18:df:9f:b7:cf:59:25:f0:dc:4a: e0:19:89:fb:74:72:0f:64:16:a2:0f:d5:93:9b:10:6a:2a:ec: fb:04:35:b9:00:63:33:74:a8:ac:c2:07:39:93:0f:bb:e0:4b: fe:17:ce:05:ba:d7:e1:50:95:47:d2:11:ce:3d:17:46:15:fd: 44:ae:8b:57:e9:3e:45:47:95:fe:56:ae:40:2b:29:41:31:fd: af:87:f4:98:bf:5f:98:0d:8f:d2:e8:c1:17:b8:b7:05:fa:5d: 1f:74:04:38:32:f5:37:b9:cd:96:4b:6b:1b:eb:12:64:f7:14: 5d:76:a4:05:a9:60:f4:ce:dc:36:92:df:dd:42:01:22:96:12: b8:cc:1b:36:7b:1e:1a:e5:5d:cc:bd:33:31:f0:76:f0:ce:80: 89:05:b5:fb:cc:38:b7:eb:3b:96:72:b9:64:41:36:42:c6:44: 6d:25:45:8e:6b:a2:da:79:65:e3:27:7d:fc:54:33:70:80:35: 2b:0d:d7:40:dd:94:81:90:58:bc:30:5d:f6:b6:3b:c5:01:bc: f7:8c:df:fc:14:c9:83:a6:dd:50:04:8e:58:32:d1:74:e9:18: 3e:61:cd:41:f7:fc:51:11:b8:01:97:cc:5a:9c:13:cb:9d:c1: d0:12:61:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDdFNjExMTAvBgNVBAUTKEM2NDE4OUY1OENGNzJDMUY3M0JFQjI0MDdBNTIyN0I2 QTJDRTk2NjEwHhcNMjQwNTMxMDI1OTU3WhcNMjQwNjA3MDI1OTU3WjAYMRYwFAYD VQQDEw02NjU5M2QyZS1hNjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJ+PXi2jYDIn5WOndW3yD6yCMaGItqTjC91xg/ayW9jQW43YJevK5N7Ereqt w5vvwX3+RWRLVk1wB0aeqyfalo0UgyYrSTz0tgPJ7OTrjDSIpFMZwazv3JbrdS91 L74faHx1zi0IN07Ds7G7LOuyaflenVKjL6oiUb1a9sBG4bwjUIyF6AHtcJ6cYMUE 5sZ1R+MJGmHLYWIbRxmJn4Pssf8v5VZYTxL3CxQ4ze6kP5kMDCOXrhe4exyKfeYO VfLfBGgcS/Oq/iWu8S69ClORgn2mIVEMRxMKISAUfSkym9IWNoDHBqxYpJtqFUC/ ukr8ZOD2j4a6aVSWVifTsq1jTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsWFGxX jpDtXh3PeOccugerh/3qMB8GA1UdIwQYMBaAFMZBifWM9ywfc76yQHpSJ7aizpZh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEN0U2MS9GNTk0REM4MDQw N0IxMUVDQkYzOEI0NTJDNEY5QUUwMi94a0dKOVl6M0xCOXp2ckpBZWxJbnRxTE9s bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hrR0o5WXozTEI5enZySkFlbEludHFMT2xtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE N0U2MS9GNTk0REM4MDQwN0IxMUVDQkYzOEI0NTJDNEY5QUUwMi94a0dKOVl6M0xC OXp2ckpBZWxJbnRxTE9sbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB50ImVoMZXKRjfn7fPWSXw3ErgGYn7dHIPZBaiD9WTmxBqKuz7BDW5 AGMzdKiswgc5kw+74Ev+F84FutfhUJVH0hHOPRdGFf1ErotX6T5FR5X+Vq5AKylB Mf2vh/SYv1+YDY/S6MEXuLcF+l0fdAQ4MvU3uc2WS2sb6xJk9xRddqQFqWD0ztw2 kt/dQgEilhK4zBs2ex4a5V3MvTMx8HbwzoCJBbX7zDi36zuWcrlkQTZCxkRtJUWO a6LaeWXjJ338VDNwgDUrDddA3ZSBkFi8MF32tjvFAbz3jN/8FMmDpt1QBI5YMtF0 6Rg+Yc1B9/xREbgBl8xanBPLncHQEmFg -----END CERTIFICATE-----Generated at Fri May 31 04:54:03 2024 by rpki-client on console-fra.rpki-client.org