$ rpki-client -vvf rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft File: XA0XaoArLkVX6IWmwOq10NBw16c.mft (raw, json) Hash identifier: jRNNTcrd1GUjtgztl5MY9i7x+iz92ZDKOM2eSqQPlF4= Subject key identifier: 6A:0D:B9:44:CD:D7:43:30:0E:DB:01:F6:EA:40:71:A6:DB:AD:AB:26 Authority key identifier: 5C:0D:17:6A:80:2B:2E:45:57:E8:85:A6:C0:EA:B5:D0:D0:70:D7:A7 Certificate issuer: /CN=A911959A/serialNumber=5C0D176A802B2E4557E885A6C0EAB5D0D070D7A7 Certificate serial: 04FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft Manifest number: 04FA Signing time: Fri 03 May 2024 01:20:13 +0000 Manifest this update: Fri 03 May 2024 01:20:13 +0000 Manifest next update: Fri 10 May 2024 01:20:13 +0000 Files and hashes: 1: XA0XaoArLkVX6IWmwOq10NBw16c.crl (hash: ftfrn9w+0DS6WO9vW6oDRiMeZJZGPpeSbns/pH7lvIQ=) 2: E390F83EC1CD11EB86A00568C4F9AE02.roa (hash: 8fmP3q/tRlUiuDRZxlZ0fXa+w3jsV7pt1fVklolWc1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.crl rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1278 (0x4fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911959A/serialNumber=5C0D176A802B2E4557E885A6C0EAB5D0D070D7A7 Validity Not Before: May 3 01:20:13 2024 GMT Not After : May 10 01:20:13 2024 GMT Subject: CN=66343bcd-dd2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:30:23:ae:4c:17:f1:2e:fc:26:8c:6c:eb:bd: 4b:b7:fe:d7:50:6d:ca:49:61:5b:ab:ac:dd:b3:37: cf:78:31:bb:a2:bc:d0:30:e0:05:4d:f7:e0:1d:43: 7a:42:12:b7:57:2c:4a:f0:54:fe:fb:f4:4e:1f:82: 78:b3:a0:85:29:d2:f0:af:01:a9:ed:50:b3:e1:91: ca:cb:06:40:22:c1:1e:16:5e:dc:0c:d0:d1:48:f6: 95:82:cc:7a:98:1f:d8:6a:db:c9:e9:96:f1:ba:6e: 9f:ce:9b:c1:ae:1c:51:dc:88:87:9b:ee:a3:83:0f: 5d:9e:fe:ad:03:d6:ee:1b:48:98:d8:95:21:b3:79: 14:91:cf:58:90:2b:65:18:12:79:04:60:05:e1:85: 65:39:4c:5b:e4:65:7f:0f:0c:74:1b:db:67:2f:10: 2c:f2:37:0b:a9:d0:60:f9:1a:4c:ad:70:49:ec:8b: 06:fb:96:d1:3b:73:0f:a0:de:b8:3e:1d:e5:3d:37: 3e:2a:8a:68:e8:43:88:c7:a6:23:6c:e4:c7:34:a8: cd:a5:80:ed:ce:2c:a5:b7:b6:db:42:01:53:86:6a: a3:b5:b8:3e:1d:4d:dd:3c:f5:d3:1c:23:d6:93:4a: a1:a3:6e:01:5c:65:b1:e4:28:76:24:1a:09:94:4d: 94:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:0D:B9:44:CD:D7:43:30:0E:DB:01:F6:EA:40:71:A6:DB:AD:AB:26 X509v3 Authority Key Identifier: keyid:5C:0D:17:6A:80:2B:2E:45:57:E8:85:A6:C0:EA:B5:D0:D0:70:D7:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:09:f9:63:05:5d:f1:bb:9a:48:95:26:f8:92:39:59:09:5a: cc:95:6b:57:df:1e:92:f2:74:5d:b4:28:59:b5:d0:93:fe:c1: b2:8d:e2:f5:8d:4d:9b:3d:a8:c2:58:7c:5d:8c:74:78:fd:80: 31:aa:04:f3:04:4b:ad:25:ee:fc:e7:23:ac:a4:8d:f9:8c:d5: d7:8c:c8:49:43:b2:30:8f:b8:95:38:4f:46:6f:48:9a:d3:62: d2:86:b4:a6:b8:09:ba:61:9f:91:ca:2d:90:98:86:82:4c:b2: ce:53:37:59:3f:de:16:6e:4b:25:72:ad:b9:4c:25:7c:ad:a5: 9d:94:43:da:8f:4a:a6:29:3d:e7:ba:cb:9d:30:05:2c:2e:7e: 00:92:78:e0:e0:24:7d:1d:65:45:f5:f0:89:05:d8:39:11:ee: ef:c1:83:19:81:a0:b2:50:68:6c:2e:f2:3f:24:ba:2c:79:03: 95:7e:1c:a7:9d:7b:49:b9:30:1e:13:8c:95:93:8e:e1:88:0a: c4:26:1b:01:76:06:2f:c6:06:0a:c4:5b:62:f2:a7:4c:58:a0: 9d:a8:ad:89:7d:e3:44:13:d6:23:a8:32:76:76:7f:66:81:65: 6f:6a:3e:51:67:87:23:c4:02:17:36:39:a7:eb:6c:ff:cb:db: 20:38:61:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1OUExMTAvBgNVBAUTKDVDMEQxNzZBODAyQjJFNDU1N0U4ODVBNkMwRUFCNUQw RDA3MEQ3QTcwHhcNMjQwNTAzMDEyMDEzWhcNMjQwNTEwMDEyMDEzWjAYMRYwFAYD VQQDEw02NjM0M2JjZC1kZDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jAjrkwX8S78Joxs671Lt/7XUG3KSWFbq6zdszfPeDG7orzQMOAFTffgHUN6 QhK3VyxK8FT++/ROH4J4s6CFKdLwrwGp7VCz4ZHKywZAIsEeFl7cDNDRSPaVgsx6 mB/YatvJ6Zbxum6fzpvBrhxR3IiHm+6jgw9dnv6tA9buG0iY2JUhs3kUkc9YkCtl GBJ5BGAF4YVlOUxb5GV/Dwx0G9tnLxAs8jcLqdBg+RpMrXBJ7IsG+5bRO3MPoN64 Ph3lPTc+Kopo6EOIx6YjbOTHNKjNpYDtziylt7bbQgFThmqjtbg+HU3dPPXTHCPW k0qho24BXGWx5Ch2JBoJlE2UvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGoNuUTN 10MwDtsB9upAcabbrasmMB8GA1UdIwQYMBaAFFwNF2qAKy5FV+iFpsDqtdDQcNen MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTU5QS8yRjhEQ0IwMkMx Q0IxMUVCOTE3NUNFNjZDNEY5QUUwMi9YQTBYYW9BckxrVlg2SVdtd09xMTBOQncx NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBMFhhb0FyTGtWWDZJV213T3ExME5CdzE2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTU5QS8yRjhEQ0IwMkMxQ0IxMUVCOTE3NUNFNjZDNEY5QUUwMi9YQTBYYW9Bckxr Vlg2SVdtd09xMTBOQncxNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOCfljBV3xu5pIlSb4kjlZCVrMlWtX3x6S8nRdtChZtdCT/sGyjeL1 jU2bPajCWHxdjHR4/YAxqgTzBEutJe785yOspI35jNXXjMhJQ7Iwj7iVOE9Gb0ia 02LShrSmuAm6YZ+Ryi2QmIaCTLLOUzdZP94Wbkslcq25TCV8raWdlEPaj0qmKT3n usudMAUsLn4Aknjg4CR9HWVF9fCJBdg5Ee7vwYMZgaCyUGhsLvI/JLoseQOVfhyn nXtJuTAeE4yVk47hiArEJhsBdgYvxgYKxFti8qdMWKCdqK2JfeNEE9YjqDJ2dn9m gWVvaj5RZ4cjxAIXNjmn62z/y9sgOGHq -----END CERTIFICATE-----Generated at Fri May 3 03:10:45 2024 by rpki-client on console-ams.rpki-client.org