$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft File: XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft (raw, json) Hash identifier: x3ASmljzi5O2R1QeUSm5WMP+tSLbzbwyd3D5UZPiNm0= Subject key identifier: 88:C8:59:1F:C3:B0:47:BA:DF:61:10:C0:1D:F7:C4:68:4E:7E:B2:1A Authority key identifier: 5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32 Certificate issuer: /CN=A91D83B3/serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32 Certificate serial: 08D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft Manifest number: 08CE Signing time: Mon 06 May 2024 21:30:23 +0000 Manifest this update: Mon 06 May 2024 21:30:22 +0000 Manifest next update: Mon 13 May 2024 21:30:22 +0000 Files and hashes: 1: XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl (hash: CA9YU8Z987Aj5DRq8hxQ/IIANYO1YdnwcbRTlA22BNs=) 2: B01A5D448A0E11EAA8C40916C4F9AE02.roa (hash: wep3EHpCma6Z95dtPMJHeRO9CQY07Hw/pOnNGpa1mGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2260 (0x8d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D83B3/serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32 Validity Not Before: May 6 21:30:22 2024 GMT Not After : May 13 21:30:22 2024 GMT Subject: CN=66394bef-0da5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e2:e9:87:c9:41:f3:0d:d9:32:e0:bb:89:47: 5c:f8:3e:05:be:19:8d:9f:c6:da:2a:ae:01:df:65: b7:3d:06:c6:c9:b1:85:7e:dd:c8:74:4d:95:e4:e7: d6:22:1b:ee:29:ce:f9:22:32:c3:0f:84:a3:9c:9d: 10:f3:74:4f:32:ad:e7:f5:85:a1:46:94:b9:53:61: 2f:ae:eb:7a:ac:01:cb:cd:85:42:99:56:ff:73:92: c1:c1:01:a9:59:7f:25:c2:9a:bd:11:f1:b4:4e:7b: c1:2d:8d:91:a3:c5:05:00:85:56:6e:dd:ca:f7:4e: 7a:8e:c2:c5:38:a6:a0:32:74:30:78:fa:8a:96:5b: 92:70:a0:39:15:42:50:14:6b:09:18:f3:14:03:0e: 77:2b:fe:90:77:9c:37:19:0f:47:49:eb:c8:da:e2: 84:83:13:6e:4c:90:a1:1b:88:29:9b:70:2f:2f:da: 07:63:10:ec:67:d9:88:5e:2d:8c:2a:6a:72:9d:e4: 21:6e:d8:4f:57:db:53:5c:d8:c8:97:00:74:bd:79: 95:bc:78:5c:7d:1a:dd:55:2c:56:f6:de:42:d8:85: d2:dc:c8:cb:ff:92:3c:00:80:66:96:b0:1d:c4:b4: 74:19:54:bc:6b:b1:a9:3b:b0:30:3d:ab:69:70:47: 7c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C8:59:1F:C3:B0:47:BA:DF:61:10:C0:1D:F7:C4:68:4E:7E:B2:1A X509v3 Authority Key Identifier: keyid:5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:51:fb:e2:9b:1b:b9:ae:29:74:04:67:7c:ef:68:6d:65:96: 8e:8a:0b:81:1f:46:9c:ca:2c:be:74:13:ea:e8:ca:bc:64:a0: 0d:ce:33:ec:06:57:9f:c7:5d:d2:8d:ca:bc:5f:ed:bb:c2:73: 0e:24:59:72:ec:37:3b:33:a8:96:71:59:e8:7b:b7:de:c8:e8: bf:22:4c:a5:ea:1e:a6:1e:e2:00:00:15:05:f4:8b:1a:dd:7e: 64:6a:fc:c0:92:f0:0f:03:fe:93:e3:da:cd:f0:c6:11:2d:3a: 08:46:39:04:99:b7:63:2c:84:e6:35:49:98:99:81:aa:99:27: e0:3c:fb:20:65:65:16:17:ee:31:db:50:89:99:54:5c:4f:bd: 9f:80:77:84:5b:02:5a:a7:51:c4:fd:58:7a:c7:c4:43:e3:66: 2d:bd:44:56:c2:3a:4e:dc:de:ee:bf:f8:d1:44:6c:3d:6b:95: 60:7c:98:c4:c7:28:9c:c0:9d:05:07:31:63:be:ce:fe:ef:67: 02:2c:5b:66:77:8b:74:da:83:92:43:1f:47:2b:47:44:c7:04: 34:80:ea:fb:22:cd:6d:84:02:ca:66:6a:38:6d:fe:64:47:24: b7:b8:57:ea:24:16:02:0d:e6:24:72:3f:a0:8d:22:1f:c5:36: 95:99:aa:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzQjMxMTAvBgNVBAUTKDVFMDU3NDQ2QzQ5NjFFNEQyNkMzN0ZGRUE4QUMzRjdB QUREODNCMzIwHhcNMjQwNTA2MjEzMDIyWhcNMjQwNTEzMjEzMDIyWjAYMRYwFAYD VQQDEw02NjM5NGJlZi0wZGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOLph8lB8w3ZMuC7iUdc+D4FvhmNn8baKq4B32W3PQbGybGFft3IdE2V5OfW IhvuKc75IjLDD4SjnJ0Q83RPMq3n9YWhRpS5U2Evrut6rAHLzYVCmVb/c5LBwQGp WX8lwpq9EfG0TnvBLY2Ro8UFAIVWbt3K9056jsLFOKagMnQwePqKlluScKA5FUJQ FGsJGPMUAw53K/6Qd5w3GQ9HSevI2uKEgxNuTJChG4gpm3AvL9oHYxDsZ9mIXi2M KmpyneQhbthPV9tTXNjIlwB0vXmVvHhcfRrdVSxW9t5C2IXS3MjL/5I8AIBmlrAd xLR0GVS8a7GpO7AwPatpcEd8CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjIWR/D sEe632EQwB33xGhOfrIaMB8GA1UdIwQYMBaAFF4FdEbElh5NJsN//qisP3qt2Dsy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODNCMy9BM0QzRDgyMjhB MEQxMUVBQTUwNTk3MTRDNEY5QUUwMi9YZ1YwUnNTV0hrMG13M18tcUt3X2VxM1lP ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hnVjBSc1NXSGswbXczXy1xS3dfZXEzWU96SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODNCMy9BM0QzRDgyMjhBMEQxMUVBQTUwNTk3MTRDNEY5QUUwMi9YZ1YwUnNTV0hr MG13M18tcUt3X2VxM1lPekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8Ufvimxu5ril0BGd872htZZaOiguBH0acyiy+dBPq6Mq8ZKANzjPs Blefx13Sjcq8X+27wnMOJFly7Dc7M6iWcVnoe7feyOi/Ikyl6h6mHuIAABUF9Isa 3X5kavzAkvAPA/6T49rN8MYRLToIRjkEmbdjLITmNUmYmYGqmSfgPPsgZWUWF+4x 21CJmVRcT72fgHeEWwJap1HE/Vh6x8RD42YtvURWwjpO3N7uv/jRRGw9a5VgfJjE xyicwJ0FBzFjvs7+72cCLFtmd4t02oOSQx9HK0dExwQ0gOr7Is1thALKZmo4bf5k RyS3uFfqJBYCDeYkcj+gjSIfxTaVmapU -----END CERTIFICATE-----Generated at Mon May 6 22:41:03 2024 by rpki-client on console-ams.rpki-client.org