$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft File: XOWb6kBJP8xXRnFpIvGYjZYpH74.mft (raw, json) Hash identifier: 4+K/0GxPAFjU/IK0ZC42EIBCPUYrRyVAMrL5TliD1eQ= Subject key identifier: 12:9C:C0:67:77:78:E5:A4:05:37:7F:DB:54:1F:2B:6C:96:A4:87:79 Authority key identifier: 5C:E5:9B:EA:40:49:3F:CC:57:46:71:69:22:F1:98:8D:96:29:1F:BE Certificate issuer: /CN=A9116D68/serialNumber=5CE59BEA40493FCC5746716922F1988D96291FBE Certificate serial: 0794 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft Manifest number: 15CC Signing time: Tue 14 May 2024 18:29:50 +0000 Manifest this update: Tue 14 May 2024 18:29:49 +0000 Manifest next update: Tue 21 May 2024 18:29:49 +0000 Files and hashes: 1: XOWb6kBJP8xXRnFpIvGYjZYpH74.crl (hash: xmvatgGsyqlrQ7XXoc2XMzeVl1uYZ5FuS7T/xBu9oFA=) 2: 98A1BAB6E9B611EE89994B66C4F9AE02.roa (hash: 99tgCzZcpk1YNtJq0XHRIi0ezbPe+DsOzhK0e5bhV2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.crl rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 18:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1940 (0x794) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116D68/serialNumber=5CE59BEA40493FCC5746716922F1988D96291FBE Validity Not Before: May 14 18:29:49 2024 GMT Not After : May 21 18:29:49 2024 GMT Subject: CN=6643ad9e-b345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e8:c7:59:17:c6:95:c3:ca:59:31:f6:86:57: 6f:a9:ff:8b:35:48:17:7d:ef:93:cb:24:0f:7e:ca: 13:a1:58:cd:c9:84:7b:b9:2d:3f:11:0d:3c:ab:f9: 2f:8f:72:48:01:e7:7b:cc:cf:b0:5a:22:e7:c2:a3: c9:d5:06:c7:9e:8c:dd:36:57:e1:57:14:dd:3f:04: b6:2e:9d:1f:32:31:53:f5:2a:e7:6f:e3:50:c5:bb: 1c:29:bd:28:68:34:66:97:88:be:40:68:8f:1a:c9: a3:93:4b:cc:e6:5a:e2:de:cc:da:dd:c8:17:a0:c7: d7:2a:92:ae:1c:76:fd:4b:98:75:6b:29:dc:e1:43: f8:e0:be:0e:c2:dd:8a:4f:c6:a0:94:1b:da:89:0d: ed:fd:0e:c1:21:1c:23:b4:7f:ab:ac:a1:96:af:d3: 22:06:6f:65:3f:26:85:8e:69:39:90:fd:e0:b7:0f: 08:24:71:01:ea:c7:85:97:35:b0:33:e7:ac:5b:bf: 12:92:19:01:06:bd:e7:9c:26:4a:04:60:d5:d3:30: e4:33:79:27:cd:d0:8c:c9:77:64:91:1f:20:63:31: d0:b6:a9:55:1d:b6:93:ac:bd:84:b9:51:b3:13:c8: 05:57:f1:09:8a:97:80:bf:f0:7a:71:39:75:74:45: dc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9C:C0:67:77:78:E5:A4:05:37:7F:DB:54:1F:2B:6C:96:A4:87:79 X509v3 Authority Key Identifier: keyid:5C:E5:9B:EA:40:49:3F:CC:57:46:71:69:22:F1:98:8D:96:29:1F:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:eb:23:17:ed:15:55:a9:7f:16:bd:91:9d:da:d9:88:42:32: 22:ee:7e:4f:db:35:f6:86:0a:72:2f:01:75:89:0c:54:3e:a0: 72:ad:bc:5a:f0:fa:73:a5:b2:54:53:4a:a1:41:a8:df:34:92: fb:9f:04:55:13:f1:06:6d:5d:35:ce:78:3c:2c:a3:fa:22:30: 1b:32:df:96:f0:36:05:e0:e3:34:4c:44:1f:a9:53:7a:f0:ce: db:43:0c:c1:53:3e:fa:61:87:11:00:79:b4:32:0f:46:9c:55: b1:69:cc:dd:11:1b:8c:07:10:ff:27:ed:81:0e:31:1c:4b:02: b9:e0:a9:3f:0f:26:e4:6b:20:8f:e9:b4:d0:8b:a9:c3:e1:44: 20:e5:d5:bf:de:de:d4:f3:ad:3f:b0:0e:cc:8c:d9:2b:2b:65: 5c:2b:17:ea:ee:c8:de:4e:1a:84:6a:af:36:fa:a1:58:c2:83: fc:fd:ec:07:d6:70:f4:89:52:dc:8d:b5:c2:ed:58:bb:7d:62: fe:aa:35:23:0a:d5:04:4f:01:16:1c:93:dd:bf:ce:a7:94:6e: c6:88:18:6e:07:00:96:79:aa:97:58:2d:94:52:4f:7a:7c:55: 62:2a:a4:2a:ce:2c:7e:55:8b:f3:86:b7:b1:a6:da:42:e7:6c: ca:c2:2e:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZENjgxMTAvBgNVBAUTKDVDRTU5QkVBNDA0OTNGQ0M1NzQ2NzE2OTIyRjE5ODhE OTYyOTFGQkUwHhcNMjQwNTE0MTgyOTQ5WhcNMjQwNTIxMTgyOTQ5WjAYMRYwFAYD VQQDEw02NjQzYWQ5ZS1iMzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1OjHWRfGlcPKWTH2hldvqf+LNUgXfe+TyyQPfsoToVjNyYR7uS0/EQ08q/kv j3JIAed7zM+wWiLnwqPJ1QbHnozdNlfhVxTdPwS2Lp0fMjFT9Srnb+NQxbscKb0o aDRml4i+QGiPGsmjk0vM5lri3sza3cgXoMfXKpKuHHb9S5h1aync4UP44L4Owt2K T8aglBvaiQ3t/Q7BIRwjtH+rrKGWr9MiBm9lPyaFjmk5kP3gtw8IJHEB6seFlzWw M+esW78SkhkBBr3nnCZKBGDV0zDkM3knzdCMyXdkkR8gYzHQtqlVHbaTrL2EuVGz E8gFV/EJipeAv/B6cTl1dEXcYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKcwGd3 eOWkBTd/21QfK2yWpId5MB8GA1UdIwQYMBaAFFzlm+pAST/MV0ZxaSLxmI2WKR++ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2OC83MjRDQzg0Qzc4 ODcxMUU5QTA4QUVDNjBDNEY5QUUwMi9YT1diNmtCSlA4eFhSbkZwSXZHWWpaWXBI NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hPV2I2a0JKUDh4WFJuRnBJdkdZalpZcEg3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkQ2OC83MjRDQzg0Qzc4ODcxMUU5QTA4QUVDNjBDNEY5QUUwMi9YT1diNmtCSlA4 eFhSbkZwSXZHWWpaWXBINzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs6yMX7RVVqX8WvZGd2tmIQjIi7n5P2zX2hgpyLwF1iQxUPqByrbxa 8PpzpbJUU0qhQajfNJL7nwRVE/EGbV01zng8LKP6IjAbMt+W8DYF4OM0TEQfqVN6 8M7bQwzBUz76YYcRAHm0Mg9GnFWxaczdERuMBxD/J+2BDjEcSwK54Kk/DybkayCP 6bTQi6nD4UQg5dW/3t7U860/sA7MjNkrK2VcKxfq7sjeThqEaq82+qFYwoP8/ewH 1nD0iVLcjbXC7Vi7fWL+qjUjCtUETwEWHJPdv86nlG7GiBhuBwCWeaqXWC2UUk96 fFViKqQqzix+VYvzhrexptpC52zKwi4d -----END CERTIFICATE-----Generated at Tue May 14 21:48:27 2024 by rpki-client on console-ams.rpki-client.org