$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft File: X5Yo0rAcllh6gccdLsi0HnJdDXM.mft (raw, json) Hash identifier: Fu+7rT88yXwqp89AUJ5qcAwqKCaNXOQMDOeXPbB14tA= Subject key identifier: EE:6F:BC:7B:49:D4:C3:E6:EE:95:D7:EC:58:72:06:03:E6:C5:6D:A1 Authority key identifier: 5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73 Certificate issuer: /CN=A91EEA4D/serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73 Certificate serial: 0A33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft Manifest number: 1188 Signing time: Sat 18 May 2024 20:32:40 +0000 Manifest this update: Sat 18 May 2024 20:32:40 +0000 Manifest next update: Sat 25 May 2024 20:32:40 +0000 Files and hashes: 1: X5Yo0rAcllh6gccdLsi0HnJdDXM.crl (hash: KSBdPq6fs1u8d1sfJaG+RYFN51p4S12gjx9fBXW8NLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2611 (0xa33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D/serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73 Validity Not Before: May 18 20:32:40 2024 GMT Not After : May 25 20:32:40 2024 GMT Subject: CN=66491068-054c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:36:06:7a:0c:d8:29:ef:27:57:b1:0a:73:90: 9d:c8:fa:ea:01:22:50:be:8f:b0:db:39:95:ee:6a: 7b:e8:0a:97:52:b5:48:23:dc:c8:c3:1c:06:76:68: ef:ee:92:1a:63:c0:51:1b:5b:e3:2c:b8:fa:ab:98: 78:b6:ae:7c:ac:d4:81:ff:6d:fe:72:48:80:2b:63: 3c:2c:eb:07:2d:d9:33:d9:e2:d7:22:1f:0f:77:b6: 29:bf:0a:32:94:b0:ca:46:d4:32:64:8c:88:6b:e5: f8:69:4b:61:2c:ef:91:60:83:45:3a:83:98:2c:88: af:4a:2e:27:8f:80:41:26:56:4d:d8:42:54:22:b4: c0:1a:cc:dd:09:9d:25:ca:b3:ff:f3:77:b3:9c:a2: 4e:f4:07:25:27:df:8e:f9:1c:86:ff:53:e3:08:c7: fc:a9:ad:4a:84:ad:a1:db:ad:77:d5:45:83:58:69: ba:30:00:eb:c3:86:99:28:db:cd:d1:fb:2d:8c:09: e1:03:9c:ba:e6:f0:7e:6c:1d:df:fd:b8:3c:c3:0f: 1f:20:0e:ad:5b:cf:82:23:aa:df:01:7c:89:51:9b: fa:95:20:1f:c3:72:04:64:ea:ba:3f:12:f6:aa:7f: bc:25:7b:11:24:d2:3f:0e:44:e8:88:52:bd:b0:46: 17:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:6F:BC:7B:49:D4:C3:E6:EE:95:D7:EC:58:72:06:03:E6:C5:6D:A1 X509v3 Authority Key Identifier: keyid:5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:69:38:6a:49:f2:93:c6:2f:fa:0b:42:4a:8c:4e:61:e5:84: 7d:e2:6d:1c:1e:83:2f:7d:2e:7d:3e:57:27:2a:72:9a:25:da: ee:90:5b:9a:3d:66:fe:71:0e:76:64:3b:5a:65:9c:c3:74:88: 04:72:20:78:a7:78:70:90:27:ca:19:49:df:7d:be:df:cd:ee: 20:09:09:1a:6d:6b:7b:7b:69:e0:bb:9b:7f:42:27:ac:1e:53: f1:06:ab:8f:e9:7b:4b:92:28:34:4b:44:c0:23:12:12:d5:15: b1:ce:01:15:ee:6e:12:c4:40:0d:46:6e:15:02:85:b8:d2:de: 90:26:cf:13:65:7f:48:46:12:cf:1b:c3:b6:19:00:17:fc:58: 22:aa:55:03:ed:30:d3:35:6a:7a:35:87:e8:30:b9:b7:40:33: 3a:29:ba:e6:92:82:d3:86:bd:08:b6:16:b6:65:89:0d:10:bb: 82:61:9a:bc:03:ad:7d:e4:7d:a8:c8:fa:f2:57:42:d7:7a:67: 9f:7c:60:66:ec:de:af:06:1c:4e:c9:85:47:54:45:21:a9:f3: b8:c9:2e:97:34:74:7c:ca:04:62:7a:87:65:2e:e1:24:c9:6c: 2d:8b:4c:db:d8:21:2c:1f:60:17:1c:b8:11:6c:f1:0f:85:dc: b1:98:02:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNEQxMTAvBgNVBAUTKDVGOTYyOEQyQjAxQzk2NTg3QTgxQzcxRDJFQzhCNDFF NzI1RDBENzMwHhcNMjQwNTE4MjAzMjQwWhcNMjQwNTI1MjAzMjQwWjAYMRYwFAYD VQQDEw02NjQ5MTA2OC0wNTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4DYGegzYKe8nV7EKc5CdyPrqASJQvo+w2zmV7mp76AqXUrVII9zIwxwGdmjv 7pIaY8BRG1vjLLj6q5h4tq58rNSB/23+ckiAK2M8LOsHLdkz2eLXIh8Pd7Ypvwoy lLDKRtQyZIyIa+X4aUthLO+RYINFOoOYLIivSi4nj4BBJlZN2EJUIrTAGszdCZ0l yrP/83eznKJO9AclJ9+O+RyG/1PjCMf8qa1KhK2h26131UWDWGm6MADrw4aZKNvN 0fstjAnhA5y65vB+bB3f/bg8ww8fIA6tW8+CI6rfAXyJUZv6lSAfw3IEZOq6PxL2 qn+8JXsRJNI/DkToiFK9sEYXVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO5vvHtJ 1MPm7pXX7FhyBgPmxW2hMB8GA1UdIwQYMBaAFF+WKNKwHJZYeoHHHS7ItB5yXQ1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE0RC82NjFGNzNFQzQ3 MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9YNVlvMHJBY2xsaDZnY2NkTHNpMEhuSmRE WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g1WW8wckFjbGxoNmdjY2RMc2kwSG5KZERYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE0RC82NjFGNzNFQzQ3MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9YNVlvMHJBY2xs aDZnY2NkTHNpMEhuSmREWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcaThqSfKTxi/6C0JKjE5h5YR94m0cHoMvfS59PlcnKnKaJdrukFua PWb+cQ52ZDtaZZzDdIgEciB4p3hwkCfKGUnffb7fze4gCQkabWt7e2ngu5t/Qies HlPxBquP6XtLkig0S0TAIxIS1RWxzgEV7m4SxEANRm4VAoW40t6QJs8TZX9IRhLP G8O2GQAX/FgiqlUD7TDTNWp6NYfoMLm3QDM6KbrmkoLThr0Itha2ZYkNELuCYZq8 A6195H2oyPryV0LXemeffGBm7N6vBhxOyYVHVEUhqfO4yS6XNHR8ygRieodlLuEk yWwti0zb2CEsH2AXHLgRbPEPhdyxmAIL -----END CERTIFICATE-----Generated at Sat May 18 21:24:23 2024 by rpki-client on console-fra.rpki-client.org