$ rpki-client -vvf rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/XUXapVj_ZfZmNblniAm4rPBAc9I.mft File: XUXapVj_ZfZmNblniAm4rPBAc9I.mft (raw, json) Hash identifier: Evx4nucRbeZch+ejBZnycZJvXUX8jXoGtik3D3c0BHQ= Subject key identifier: 3D:3B:7F:53:B2:68:F6:8E:99:50:88:6B:32:C3:3D:30:CD:BE:90:A1 Authority key identifier: 5D:45:DA:A5:58:FF:65:F6:66:35:B9:67:88:09:B8:AC:F0:40:73:D2 Certificate issuer: /CN=A91F52FD/serialNumber=5D45DAA558FF65F66635B9678809B8ACF04073D2 Certificate serial: 051D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUXapVj_ZfZmNblniAm4rPBAc9I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/XUXapVj_ZfZmNblniAm4rPBAc9I.mft Manifest number: 0516 Signing time: Sun 19 May 2024 01:06:08 +0000 Manifest this update: Sun 19 May 2024 01:06:08 +0000 Manifest next update: Sun 26 May 2024 01:06:08 +0000 Files and hashes: 1: XUXapVj_ZfZmNblniAm4rPBAc9I.crl (hash: 1xjpTMnVDV7+Mc9MT6CxIdiEqV/kFzaioevSaaKdc2E=) 2: 48459AB0BACF11EBAA321370C4F9AE02.roa (hash: x6jQohCoj+QUFQmVSGaEL1Y1YeIhw7aEECJy7REJd6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/XUXapVj_ZfZmNblniAm4rPBAc9I.crl rsync://rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/XUXapVj_ZfZmNblniAm4rPBAc9I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUXapVj_ZfZmNblniAm4rPBAc9I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1309 (0x51d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F52FD/serialNumber=5D45DAA558FF65F66635B9678809B8ACF04073D2 Validity Not Before: May 19 01:06:08 2024 GMT Not After : May 26 01:06:08 2024 GMT Subject: CN=66495080-6b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a9:23:01:8a:98:5f:42:c1:9a:89:f3:8b:b4: a8:f5:9d:c7:53:40:5c:9e:0e:ab:72:3b:b7:4c:fc: 12:f3:a1:0c:87:11:0a:b4:9e:55:47:cd:fa:dd:ff: 5d:30:8e:7f:db:2d:cc:26:98:34:b6:63:22:3e:a5: 8d:fd:c0:ff:3f:35:8d:35:6d:c3:58:fb:4b:ef:90: 57:0d:cb:7a:e4:9a:ca:b4:1d:b4:1a:53:45:4a:55: b7:90:94:5e:65:c5:c9:ac:de:9d:a5:14:6d:70:1a: 51:7f:30:7c:1c:36:5e:99:bb:8a:47:10:55:88:35: ff:6e:5d:cb:fb:89:1a:aa:f9:df:dc:05:38:14:0b: 37:08:35:ef:e3:de:74:3b:cd:5b:81:2b:ce:6a:08: ae:03:69:a9:60:5a:71:f2:20:8e:12:d2:16:eb:00: 74:9f:ea:e6:f9:30:32:f1:90:81:73:8a:35:89:57: 8f:94:03:cd:e8:35:d7:e9:c8:2e:be:08:ef:6e:40: 24:db:96:67:d6:5b:4d:d0:2d:e9:1f:d6:a2:17:7d: aa:ba:a8:40:45:9e:b0:a9:04:3e:99:d4:9b:fb:a5: 1d:34:f8:15:eb:d6:05:18:35:de:9d:ff:23:bf:1f: fe:60:5b:70:77:93:98:8a:3f:1e:49:f2:a2:0a:f2: 5a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3B:7F:53:B2:68:F6:8E:99:50:88:6B:32:C3:3D:30:CD:BE:90:A1 X509v3 Authority Key Identifier: keyid:5D:45:DA:A5:58:FF:65:F6:66:35:B9:67:88:09:B8:AC:F0:40:73:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/XUXapVj_ZfZmNblniAm4rPBAc9I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUXapVj_ZfZmNblniAm4rPBAc9I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F52FD/625F0F0ABACD11EBAA23976DC4F9AE02/XUXapVj_ZfZmNblniAm4rPBAc9I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:6e:26:f0:f7:c2:04:af:50:fa:7b:fb:47:09:99:10:1e:05: b1:49:1d:3f:94:1b:a5:c0:a2:fa:51:06:9a:4f:a6:22:3e:13: 3c:86:35:e6:87:e0:35:58:20:6e:f1:51:69:4c:10:cf:ca:c3: 2b:1f:30:f2:90:13:4b:2a:47:d2:90:36:56:7e:e7:4f:49:be: 3c:9c:7d:fe:01:3f:56:60:f3:58:04:6c:d9:36:eb:48:55:06: b3:dd:b2:23:53:7d:3b:93:45:03:9f:2a:14:51:7d:a7:e6:51: e3:14:28:63:d0:74:e3:f3:1a:05:7d:d8:59:3c:ff:90:22:63: 1d:0c:10:54:ec:11:0d:ee:79:eb:06:ad:d9:24:01:cd:5a:36: b2:3d:47:d2:e5:d7:b2:b3:3b:06:cc:c7:61:22:ad:9f:57:e3: 68:62:ba:d0:4f:a0:47:c7:7f:a0:c0:c1:dd:66:f7:89:a2:51: 88:05:33:06:66:6e:5b:98:ca:0e:d5:b3:23:11:ab:b4:b7:63: f0:10:cb:be:a7:5e:95:64:29:80:cf:9c:4f:8c:d6:3e:17:4b: 82:8d:69:60:a9:68:4a:cf:c0:5c:8e:0a:47:49:a4:56:65:1f: 44:cb:fd:e4:e8:73:20:ad:52:af:99:29:6b:73:5d:d2:67:7e: f9:a5:13:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyRkQxMTAvBgNVBAUTKDVENDVEQUE1NThGRjY1RjY2NjM1Qjk2Nzg4MDlCOEFD RjA0MDczRDIwHhcNMjQwNTE5MDEwNjA4WhcNMjQwNTI2MDEwNjA4WjAYMRYwFAYD VQQDEw02NjQ5NTA4MC02YjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6kjAYqYX0LBmonzi7So9Z3HU0Bcng6rcju3TPwS86EMhxEKtJ5VR8363f9d MI5/2y3MJpg0tmMiPqWN/cD/PzWNNW3DWPtL75BXDct65JrKtB20GlNFSlW3kJRe ZcXJrN6dpRRtcBpRfzB8HDZembuKRxBViDX/bl3L+4kaqvnf3AU4FAs3CDXv4950 O81bgSvOagiuA2mpYFpx8iCOEtIW6wB0n+rm+TAy8ZCBc4o1iVePlAPN6DXX6cgu vgjvbkAk25Zn1ltN0C3pH9aiF32quqhARZ6wqQQ+mdSb+6UdNPgV69YFGDXenf8j vx/+YFtwd5OYij8eSfKiCvJazwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD07f1Oy aPaOmVCIazLDPTDNvpChMB8GA1UdIwQYMBaAFF1F2qVY/2X2ZjW5Z4gJuKzwQHPS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTJGRC82MjVGMEYwQUJB Q0QxMUVCQUEyMzk3NkRDNEY5QUUwMi9YVVhhcFZqX1pmWm1OYmxuaUFtNHJQQkFj OUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hVWGFwVmpfWmZabU5ibG5pQW00clBCQWM5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTJGRC82MjVGMEYwQUJBQ0QxMUVCQUEyMzk3NkRDNEY5QUUwMi9YVVhhcFZqX1pm Wm1OYmxuaUFtNHJQQkFjOUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDbibw98IEr1D6e/tHCZkQHgWxSR0/lBulwKL6UQaaT6YiPhM8hjXm h+A1WCBu8VFpTBDPysMrHzDykBNLKkfSkDZWfudPSb48nH3+AT9WYPNYBGzZNutI VQaz3bIjU307k0UDnyoUUX2n5lHjFChj0HTj8xoFfdhZPP+QImMdDBBU7BEN7nnr Bq3ZJAHNWjayPUfS5deyszsGzMdhIq2fV+NoYrrQT6BHx3+gwMHdZveJolGIBTMG Zm5bmMoO1bMjEau0t2PwEMu+p16VZCmAz5xPjNY+F0uCjWlgqWhKz8BcjgpHSaRW ZR9Ey/3k6HMgrVKvmSlrc13SZ375pRO4 -----END CERTIFICATE-----Generated at Sun May 19 01:47:15 2024 by rpki-client on console-fra.rpki-client.org