$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft File: XOe82cbkE4HMCvkJkN2gNpOF5lU.mft (raw, json) Hash identifier: TzHHRVDkp23/Kw8g3mzrexftGoOoIdkrauv9mTJ1qEM= Subject key identifier: FA:40:22:42:ED:3A:76:52:19:FB:26:0F:E1:05:64:94:B2:66:78:F9 Authority key identifier: 5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55 Certificate issuer: /CN=A91EC3A8/serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655 Certificate serial: 03AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft Manifest number: 03A5 Signing time: Sun 19 May 2024 02:33:16 +0000 Manifest this update: Sun 19 May 2024 02:33:15 +0000 Manifest next update: Sun 26 May 2024 02:33:15 +0000 Files and hashes: 1: XOe82cbkE4HMCvkJkN2gNpOF5lU.crl (hash: wt83KPrE60EM85IRuajVVKj58GszNv1zpHBFswdQB5s=) 2: 11330A4663F611ECB344F979C4F9AE02.roa (hash: AbSm+eKKD+nWUo13PoLGOffT+JM02REQ/Vy0p4RDhUA=) 3: 10A8D0E263F611ECB344F979C4F9AE02.roa (hash: LNDhHPgZ8KmrkKSEFNRjipLAUn9FqfZhDfW5knC3Ulw=) 4: C71919900BEE11EDBB84E711C4F9AE02.roa (hash: OQAWFwksWbn3+eIKmfobJixh81PZ33QZHtETI0wZ7f4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 942 (0x3ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3A8/serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655 Validity Not Before: May 19 02:33:15 2024 GMT Not After : May 26 02:33:15 2024 GMT Subject: CN=664964ec-215c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5b:67:ba:81:16:27:45:ca:7c:d2:fe:0f:5e: e1:c5:58:11:7b:42:cc:05:2f:3b:ae:c8:cd:5d:54: fd:d9:e4:8b:87:f3:02:ea:94:b3:85:5d:00:8e:78: 18:a4:0e:45:19:84:6d:bd:fb:6a:b1:0c:0b:d2:42: e9:15:aa:12:cc:6a:ea:42:85:d1:1c:51:51:73:14: 0b:33:8d:37:f3:16:36:d7:d6:99:7d:27:b4:50:26: 5f:84:a5:1a:15:53:53:84:56:3b:96:e4:97:82:ef: b2:bf:f1:27:fa:14:a1:12:6d:c7:4a:f5:ac:5d:81: 04:de:d7:17:60:4f:59:24:8e:1a:fb:74:ff:90:91: 51:da:68:b2:45:dd:77:4d:f4:c8:a4:1b:7c:80:87: bc:9a:cd:34:18:1b:82:97:27:25:fa:b4:38:aa:8c: 60:12:a9:44:36:88:4f:d7:02:7e:9c:ff:b7:ef:79: 37:f5:92:34:ad:76:69:24:e7:d2:2c:ed:7d:12:65: 42:8b:8a:a2:5f:3c:e3:2d:a7:33:48:0d:04:50:9e: 25:34:bf:58:00:76:50:d6:03:4f:c2:6a:80:8d:b0: ff:7c:a1:f3:55:25:d7:94:63:40:e4:22:e9:a4:ab: 15:3a:b4:b6:9e:81:b8:86:ad:d8:da:20:20:26:c1: 7d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:40:22:42:ED:3A:76:52:19:FB:26:0F:E1:05:64:94:B2:66:78:F9 X509v3 Authority Key Identifier: keyid:5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:d9:c1:13:03:3d:2b:41:37:47:0f:74:ff:65:f6:d5:9a:5c: 70:2a:fe:65:48:53:3d:a1:ca:a6:f4:83:fd:01:6a:0a:0b:08: 8f:57:ea:db:44:52:0a:54:da:3c:b8:0d:bf:5d:12:90:90:e2: 06:ce:da:b7:83:bf:13:29:64:4e:c5:a1:bd:ce:ca:12:a9:04: d9:d9:0a:19:d3:b9:a5:c6:37:d5:d2:ef:4c:b3:be:4b:06:f2: 92:c1:b3:b5:c8:6b:b5:49:7e:a3:47:f0:ae:fc:f9:e5:71:d4: 5d:48:b2:04:97:c2:87:a1:6e:1b:ce:7a:dc:57:11:48:fa:93: 20:21:58:67:07:5a:06:7a:11:05:3a:76:62:6f:05:7e:dd:e8: 25:b6:3f:44:13:d9:8a:1a:0b:ae:d9:ca:b7:c1:85:b4:b2:6b: 05:6d:53:6d:a7:e1:74:51:e3:24:88:76:2a:7d:3e:b4:85:86: c8:a2:b4:e5:32:6f:79:4d:dc:f9:db:7d:21:05:56:1e:b8:c1: c6:ad:cd:95:eb:38:46:1b:dd:99:41:aa:a2:02:51:3c:89:de: 6c:cc:8c:86:65:1c:8e:2e:1a:8d:9b:5d:bd:45:f4:cf:06:77: e6:fa:97:88:51:ff:10:21:b8:42:82:96:bf:45:22:a7:24:e4: c0:a3:98:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzQTgxMTAvBgNVBAUTKDVDRTdCQ0Q5QzZFNDEzODFDQzBBRjkwOTkwRERBMDM2 OTM4NUU2NTUwHhcNMjQwNTE5MDIzMzE1WhcNMjQwNTI2MDIzMzE1WjAYMRYwFAYD VQQDEw02NjQ5NjRlYy0yMTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFtnuoEWJ0XKfNL+D17hxVgRe0LMBS87rsjNXVT92eSLh/MC6pSzhV0AjngY pA5FGYRtvftqsQwL0kLpFaoSzGrqQoXRHFFRcxQLM4038xY219aZfSe0UCZfhKUa FVNThFY7luSXgu+yv/En+hShEm3HSvWsXYEE3tcXYE9ZJI4a+3T/kJFR2miyRd13 TfTIpBt8gIe8ms00GBuClycl+rQ4qoxgEqlENohP1wJ+nP+373k39ZI0rXZpJOfS LO19EmVCi4qiXzzjLaczSA0EUJ4lNL9YAHZQ1gNPwmqAjbD/fKHzVSXXlGNA5CLp pKsVOrS2noG4hq3Y2iAgJsF9lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpAIkLt OnZSGfsmD+EFZJSyZnj5MB8GA1UdIwQYMBaAFFznvNnG5BOBzAr5CZDdoDaTheZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzNBOC8yMUZBMDI3MjRD NkMxMUVDQkJDRkFEMjZDNEY5QUUwMi9YT2U4MmNia0U0SE1DdmtKa04yZ05wT0Y1 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hPZTgyY2JrRTRITUN2a0prTjJnTnBPRjVsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzNBOC8yMUZBMDI3MjRDNkMxMUVDQkJDRkFEMjZDNEY5QUUwMi9YT2U4MmNia0U0 SE1DdmtKa04yZ05wT0Y1bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBY2cETAz0rQTdHD3T/ZfbVmlxwKv5lSFM9ocqm9IP9AWoKCwiPV+rb RFIKVNo8uA2/XRKQkOIGztq3g78TKWROxaG9zsoSqQTZ2QoZ07mlxjfV0u9Ms75L BvKSwbO1yGu1SX6jR/Cu/PnlcdRdSLIEl8KHoW4bznrcVxFI+pMgIVhnB1oGehEF OnZibwV+3egltj9EE9mKGguu2cq3wYW0smsFbVNtp+F0UeMkiHYqfT60hYbIorTl Mm95Tdz5230hBVYeuMHGrc2V6zhGG92ZQaqiAlE8id5szIyGZRyOLhqNm129RfTP Bnfm+peIUf8QIbhCgpa/RSKnJOTAo5jF -----END CERTIFICATE-----Generated at Sun May 19 03:38:16 2024 by rpki-client on console-ams.rpki-client.org