$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft File: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft (raw, json) Hash identifier: z6fI2kPbWN6c4bli8YccqVC/Ctw/pd0MeXmVarDb2Xw= Subject key identifier: 89:F4:46:84:0F:46:A8:C2:95:DC:2B:2A:0B:93:EE:27:C3:93:C0:85 Authority key identifier: 5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A Certificate issuer: /CN=A91DB63B/serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Certificate serial: 0874 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft Manifest number: 0870 Signing time: Fri 31 May 2024 22:23:26 +0000 Manifest this update: Fri 31 May 2024 22:23:25 +0000 Manifest next update: Fri 07 Jun 2024 22:23:25 +0000 Files and hashes: 1: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl (hash: sRgouw6KGz3fC3GKWVACvmVeX7rgF5TNfFze+7r+cvU=) 2: 34492B669EC111EE9FA71E2BC4F9AE02.roa (hash: QYoz5H7QEMgBSR68+H46p2ByiEbCwOxDng7qLrV8CXM=) 3: B20CAEB4012511EDBB5C141DC4F9AE02.roa (hash: cuOqxBsuCJ+odz8Cr7DRwP5HxHPgD/rbEN+ufKPJ6IE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 22:23:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2164 (0x874) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB63B/serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Validity Not Before: May 31 22:23:25 2024 GMT Not After : Jun 7 22:23:25 2024 GMT Subject: CN=665a4ddd-eebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8b:bb:bb:88:ef:39:8a:e3:11:d5:de:16:ef: b2:fa:a2:36:23:2d:9e:77:c6:dc:4d:f6:b6:72:79: 74:2f:aa:fa:02:e3:61:41:9c:77:47:a2:92:c1:f6: 1d:2d:bc:68:d6:f5:70:94:97:ee:c6:bb:4e:30:00: d5:ac:67:70:b0:23:24:8f:16:30:b5:b9:c2:06:b2: 41:4c:dc:c9:a3:19:93:93:09:42:5e:ca:96:c7:4d: b9:37:bd:64:16:c8:b1:25:c3:94:49:73:87:3e:e2: 42:4d:89:2b:29:71:61:cc:98:5d:a1:9f:be:9e:24: 0b:83:39:84:c8:be:ed:ae:2d:cb:a9:d2:81:84:02: 0d:ed:0e:a0:4c:bc:3e:d8:2d:b4:b4:a0:8a:21:e7: 81:86:c5:c9:96:25:1f:cb:83:0f:7b:dc:38:8b:08: 04:b6:55:a6:c0:d3:c7:83:ea:d0:ef:dd:f0:15:77: 54:ce:db:ff:e5:38:7a:d3:f8:fb:14:b3:d3:93:c7: 73:ff:9a:52:45:59:1d:c9:d2:fd:1f:af:0f:9f:85: 24:0c:c1:3a:64:eb:d3:58:09:2b:3f:28:c8:08:8d: 8b:c8:ed:16:12:c2:2f:fc:e3:c3:06:10:d1:a7:f9: 4f:0d:ba:31:06:d6:63:09:c2:4a:7e:04:d8:2f:75: e3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F4:46:84:0F:46:A8:C2:95:DC:2B:2A:0B:93:EE:27:C3:93:C0:85 X509v3 Authority Key Identifier: keyid:5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:25:88:7a:a5:24:5c:c1:79:1f:fc:1c:26:1b:51:bd:69:65: 1a:33:fd:13:b6:47:68:d5:63:7d:3c:15:00:ca:03:cf:83:ba: 7a:65:25:41:e7:9e:8e:53:2d:4e:35:0e:f8:bc:10:b7:82:96: b6:82:09:7c:3c:60:1d:f7:f5:db:af:e8:f9:26:29:e9:f9:3e: 79:db:b4:03:4b:95:c7:d7:9f:b0:c3:56:c2:13:d6:cb:88:57: b1:31:6d:11:a1:57:32:e3:5e:bd:58:1b:7f:90:25:0f:01:7d: c9:39:43:65:2c:80:a0:8f:d9:58:e7:9b:07:48:c5:01:13:62: ab:b0:8b:b5:34:0a:e3:77:56:0f:6e:44:08:d3:a6:d9:e2:3f: 5b:aa:27:e5:59:91:35:e6:e5:f2:76:29:06:8c:10:93:20:15: fa:ea:9b:1a:cb:19:22:18:7c:06:fa:bc:3c:24:66:30:d5:02: 70:05:ac:36:56:b3:fb:99:e2:97:4a:2a:91:44:99:fb:b3:74: e0:4a:1d:aa:aa:fc:fb:4d:41:bf:6d:4e:f7:e8:11:8e:a7:30: cb:33:f8:1e:ea:4a:9b:b1:ed:f3:8a:80:34:9f:65:b7:b8:bc: d5:fc:be:60:83:f4:99:fa:cd:3d:e4:96:88:7a:8e:99:f3:4c: 26:67:08:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2M0IxMTAvBgNVBAUTKDVFRjcyRjlCRTRFM0EyOERFMzU2OUU3NkRFMkQyMjI1 REJGM0ZEOEEwHhcNMjQwNTMxMjIyMzI1WhcNMjQwNjA3MjIyMzI1WjAYMRYwFAYD VQQDEw02NjVhNGRkZC1lZWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoIu7u4jvOYrjEdXeFu+y+qI2Iy2ed8bcTfa2cnl0L6r6AuNhQZx3R6KSwfYd Lbxo1vVwlJfuxrtOMADVrGdwsCMkjxYwtbnCBrJBTNzJoxmTkwlCXsqWx025N71k FsixJcOUSXOHPuJCTYkrKXFhzJhdoZ++niQLgzmEyL7tri3LqdKBhAIN7Q6gTLw+ 2C20tKCKIeeBhsXJliUfy4MPe9w4iwgEtlWmwNPHg+rQ793wFXdUztv/5Th60/j7 FLPTk8dz/5pSRVkdydL9H68Pn4UkDME6ZOvTWAkrPyjICI2LyO0WEsIv/OPDBhDR p/lPDboxBtZjCcJKfgTYL3XjJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIn0RoQP RqjCldwrKguT7ifDk8CFMB8GA1UdIwQYMBaAFF73L5vk46KN41aedt4tIiXb8/2K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjYzQi8yRTJDRUExNjlG NDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9vM2pWcDUyM2kwaUpkdnpf WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h2Y3ZtLVRqb28zalZwNTIzaTBpSmR2el9Zby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjYzQi8yRTJDRUExNjlGNDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9v M2pWcDUyM2kwaUpkdnpfWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7JYh6pSRcwXkf/BwmG1G9aWUaM/0Ttkdo1WN9PBUAygPPg7p6ZSVB 556OUy1ONQ74vBC3gpa2ggl8PGAd9/Xbr+j5Jinp+T5527QDS5XH15+ww1bCE9bL iFexMW0RoVcy4169WBt/kCUPAX3JOUNlLICgj9lY55sHSMUBE2KrsIu1NArjd1YP bkQI06bZ4j9bqiflWZE15uXydikGjBCTIBX66psayxkiGHwG+rw8JGYw1QJwBaw2 VrP7meKXSiqRRJn7s3TgSh2qqvz7TUG/bU736BGOpzDLM/ge6kqbse3zioA0n2W3 uLzV/L5gg/SZ+s095JaIeo6Z80wmZwge -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:30 2024 by rpki-client on console-ams.rpki-client.org