$ rpki-client -vvf rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft File: Xtho2ocq-NaWpcGp-ngp9lJzynk.mft (raw, json) Hash identifier: tGV+nktb2fzm1hZHnLKtYBBi6TpOTrA6siiEqIc/2BM= Subject key identifier: 69:6D:BB:0E:5B:32:9D:B6:86:CF:55:0F:AE:3F:62:84:F7:74:5E:54 Authority key identifier: 5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79 Certificate issuer: /CN=A9119B43/serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79 Certificate serial: 03B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft Manifest number: 03B0 Signing time: Wed 29 May 2024 02:52:23 +0000 Manifest this update: Wed 29 May 2024 02:52:22 +0000 Manifest next update: Wed 05 Jun 2024 02:52:22 +0000 Files and hashes: 1: Xtho2ocq-NaWpcGp-ngp9lJzynk.crl (hash: 4zbkTzEFxC3120qCUJrxahYToOmhT4a5vH3Ilg7ayc4=) 2: 6C27C19E4BFA11ECA6797F6DC4F9AE02.roa (hash: SODAYGPYQawO4rdlay5Bj39kX/bHXB46bA4JgyNvlAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 951 (0x3b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119B43/serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79 Validity Not Before: May 29 02:52:22 2024 GMT Not After : Jun 5 02:52:22 2024 GMT Subject: CN=66569866-c734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:05:e4:fc:7c:25:c9:38:fd:23:6d:c4:af:70: 9a:98:b5:a6:98:e9:c1:8c:92:ac:da:24:e5:34:4c: 43:46:60:39:3f:f9:73:10:9b:5b:33:06:e2:53:ef: ae:c3:25:de:eb:79:c2:5c:e3:37:70:ae:9f:50:13: 14:cf:ce:e9:74:f0:a2:e4:69:b0:8f:59:89:ac:a9: d2:c7:e4:4e:cb:5b:6d:d2:f0:12:e3:41:6f:2b:40: 64:c5:65:98:59:c5:86:bf:44:b8:38:5c:07:6c:a1: f9:01:c1:04:25:47:e5:5c:d6:77:78:8a:59:d5:29: 1a:0b:24:c9:fe:49:6a:7e:18:66:19:27:e2:e7:33: 16:1e:d2:94:41:22:0f:78:95:51:f3:03:81:e2:e6: 4b:36:58:ac:c4:07:ed:13:0f:dc:a2:6e:93:78:8a: cb:18:53:5a:59:8e:f1:fb:22:40:4c:59:78:28:26: 0b:ee:83:26:b7:26:67:80:e3:9c:a5:b0:ea:c4:8d: d0:d3:0d:5d:b1:57:d2:ef:89:1b:6d:9b:6e:8b:88: 2c:be:78:ff:ef:2b:ac:21:cd:19:0a:26:b2:a8:5b: f9:23:70:df:38:ab:73:80:f9:c3:7b:47:d0:4f:88: 3b:2e:0a:35:ef:e4:76:59:17:6d:f0:1d:f2:9a:df: 59:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:6D:BB:0E:5B:32:9D:B6:86:CF:55:0F:AE:3F:62:84:F7:74:5E:54 X509v3 Authority Key Identifier: keyid:5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:a9:58:aa:42:77:52:b5:9f:82:e7:8b:7b:29:fb:43:0a:fa: b8:2c:5c:cc:ea:ef:f6:a6:39:aa:90:05:28:76:24:9b:73:41: c5:a6:b7:65:d5:bf:0b:82:95:99:1d:15:5e:e5:3f:d8:8e:9d: 3f:b1:a0:06:82:0c:8d:45:30:c2:12:82:0f:e7:6e:b6:56:1b: 55:d1:b4:9f:0a:7a:f3:12:c5:2e:79:df:a1:c3:8b:3e:f5:68: c3:38:7f:39:56:6b:fb:c5:68:b0:cf:4c:d4:2c:a7:1c:58:64: aa:cd:3a:d9:a7:ca:08:07:4a:53:29:49:d9:91:c1:18:11:e2: 20:d6:f1:e5:37:0e:70:10:dc:e1:75:96:e4:ad:9b:0c:bd:74: ed:f8:d0:44:b3:27:63:92:9a:bc:d7:de:88:c3:d4:5c:e6:ca: fd:25:9d:6f:c8:f8:e1:db:cb:a7:59:39:b5:45:85:f0:cf:13: 4b:c1:d2:c2:de:21:00:7d:77:97:c0:65:0c:47:0a:a0:dc:e5: b9:5a:2d:a1:55:62:31:3a:4d:c8:08:19:7d:85:50:d1:a2:90: a9:2e:69:0c:cc:1b:6e:b3:aa:a0:50:49:f1:4e:95:99:b3:38: fd:cd:9a:8b:4c:d0:d5:4f:d9:f7:e2:d3:48:aa:46:a0:b1:aa: 04:66:08:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlCNDMxMTAvBgNVBAUTKDVFRDg2OERBODcyQUY4RDY5NkE1QzFBOUZBNzgyOUY2 NTI3M0NBNzkwHhcNMjQwNTI5MDI1MjIyWhcNMjQwNjA1MDI1MjIyWjAYMRYwFAYD VQQDEw02NjU2OTg2Ni1jNzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygXk/HwlyTj9I23Er3CamLWmmOnBjJKs2iTlNExDRmA5P/lzEJtbMwbiU++u wyXe63nCXOM3cK6fUBMUz87pdPCi5Gmwj1mJrKnSx+ROy1tt0vAS40FvK0BkxWWY WcWGv0S4OFwHbKH5AcEEJUflXNZ3eIpZ1SkaCyTJ/klqfhhmGSfi5zMWHtKUQSIP eJVR8wOB4uZLNlisxAftEw/com6TeIrLGFNaWY7x+yJATFl4KCYL7oMmtyZngOOc pbDqxI3Q0w1dsVfS74kbbZtui4gsvnj/7yusIc0ZCiayqFv5I3DfOKtzgPnDe0fQ T4g7Lgo17+R2WRdt8B3ymt9ZswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGltuw5b Mp22hs9VD64/YoT3dF5UMB8GA1UdIwQYMBaAFF7YaNqHKvjWlqXBqfp4KfZSc8p5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUI0My9FNUI4Mzk4MjRC M0ExMUVDOTkyRTgxNTBDNEY5QUUwMi9YdGhvMm9jcS1OYVdwY0dwLW5ncDlsSnp5 bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h0aG8yb2NxLU5hV3BjR3AtbmdwOWxKenluay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUI0My9FNUI4Mzk4MjRCM0ExMUVDOTkyRTgxNTBDNEY5QUUwMi9YdGhvMm9jcS1O YVdwY0dwLW5ncDlsSnp5bmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIqViqQndStZ+C54t7KftDCvq4LFzM6u/2pjmqkAUodiSbc0HFprdl 1b8LgpWZHRVe5T/Yjp0/saAGggyNRTDCEoIP5262VhtV0bSfCnrzEsUued+hw4s+ 9WjDOH85Vmv7xWiwz0zULKccWGSqzTrZp8oIB0pTKUnZkcEYEeIg1vHlNw5wENzh dZbkrZsMvXTt+NBEsydjkpq8196Iw9Rc5sr9JZ1vyPjh28unWTm1RYXwzxNLwdLC 3iEAfXeXwGUMRwqg3OW5Wi2hVWIxOk3ICBl9hVDRopCpLmkMzBtus6qgUEnxTpWZ szj9zZqLTNDVT9n34tNIqkagsaoEZggt -----END CERTIFICATE-----Generated at Wed May 29 04:02:04 2024 by rpki-client on console-fra.rpki-client.org