$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft File: xMZ-u2st3Gkku7llXn4PghhTDGU.mft (raw, json) Hash identifier: cjUmW5hyyqIodkDVd5cidIbqSRpEMZVW0LIWAxPs3DQ= Subject key identifier: A2:AE:51:A9:1D:19:15:78:B2:4A:22:EA:52:EB:21:C9:7F:A0:B2:9D Authority key identifier: C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65 Certificate issuer: /CN=A9122D51/serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft Manifest number: 15 Signing time: Wed 15 May 2024 08:55:05 +0000 Manifest this update: Wed 15 May 2024 08:55:04 +0000 Manifest next update: Wed 22 May 2024 08:55:04 +0000 Files and hashes: 1: xMZ-u2st3Gkku7llXn4PghhTDGU.crl (hash: gb1ZVe3z8C9N9KDsLFQwaXluQCHz3VQqYNkOD8r+uKs=) 2: 6D610A58F23711EEA11AA759C4F9AE02.roa (hash: SDToLq2T7z90cfNjaTZT3zSAgkRp8bhjTtdT/TF1af0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122D51/serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65 Validity Not Before: May 15 08:55:04 2024 GMT Not After : May 22 08:55:04 2024 GMT Subject: CN=66447869-9ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:96:86:ec:9a:b9:93:d2:06:d4:1c:c6:d5:10: 7e:ed:65:a8:8f:20:fe:1b:2a:e0:9b:cb:3a:bd:36: dd:27:80:f6:52:9e:bb:f0:66:e9:49:d5:9b:97:75: cb:48:77:1e:80:b7:e3:10:8c:2d:69:0a:08:2d:24: ea:c3:b5:ce:ea:3e:2e:51:5c:29:f7:b6:39:09:ea: bd:60:29:56:b6:4f:16:47:f6:27:04:79:1e:1d:5c: 5b:4e:2c:c2:a0:00:13:9d:b6:27:20:6e:bc:eb:3e: f0:13:70:3c:c9:64:ac:e0:7b:65:fa:19:17:f3:97: f0:b7:66:7f:2d:49:63:67:ff:95:53:de:c9:2a:22: 37:65:e6:22:4b:f1:5b:ec:a8:a0:7f:4f:2c:ea:84: fb:54:3e:54:cd:13:5b:df:4a:67:cd:31:7d:51:da: 22:d0:5b:29:f7:86:68:e2:ba:d9:68:71:bc:52:32: ff:37:45:bf:3c:95:2e:80:10:4a:d8:11:89:6e:97: a8:0d:b5:13:b1:4b:0b:f2:d6:9d:ea:ac:cc:d3:32: e0:16:7f:cf:df:73:b2:78:73:a0:ba:08:8b:be:69: e1:b4:c1:34:bf:4f:96:68:57:7e:2e:e9:6e:8e:92: 52:cd:12:76:e1:f3:7c:5b:03:57:d5:4b:e3:b4:f9: 18:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AE:51:A9:1D:19:15:78:B2:4A:22:EA:52:EB:21:C9:7F:A0:B2:9D X509v3 Authority Key Identifier: keyid:C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:c2:83:90:d5:df:53:84:48:af:21:b4:a7:43:e6:52:0b:25: 2d:bf:e9:c7:86:5d:ff:db:03:09:10:1c:8a:d1:d9:52:ae:31: b1:21:7e:3d:f2:a6:b4:0a:1e:1b:b5:6d:0f:69:19:0b:1b:6a: 2d:b0:28:41:f7:f0:dc:07:4b:03:95:c1:51:f6:3e:77:d2:d6: ee:a9:a5:00:9c:b8:e8:dc:cd:a5:43:79:d5:e5:ed:6d:8f:0a: 2b:0c:28:52:7f:7b:3a:81:16:50:04:4a:60:c9:14:d2:74:1d: cd:90:cc:da:0e:97:cc:1e:57:7d:54:4a:7a:b3:22:3f:a1:57: d7:cd:e1:33:58:d3:05:c8:fd:87:5a:28:0a:41:95:0e:f5:e1: 96:cc:c6:1f:4b:2c:0b:29:ae:c4:3b:67:e7:e4:a7:7c:9d:c8: 4c:67:93:12:51:fc:52:3a:53:8c:3f:43:3b:72:8f:35:ed:34: aa:0a:12:34:9a:69:43:3d:53:b3:87:bd:5f:8c:4d:b2:33:e6: 6b:5d:3e:7d:b0:d3:ac:e2:48:02:6b:61:09:2b:8f:5f:2c:1c: 26:53:dd:75:3f:20:f3:ef:46:71:a9:00:c7:30:26:e3:30:ae: 5b:38:76:ef:f1:8c:3e:6e:7c:85:97:98:a5:6c:84:da:18:16: 62:e6:44:9d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MkQ1MTExMC8GA1UEBRMoQzRDNjdFQkI2QjJEREM2OTI0QkJCOTY1NUU3RTBGODIx ODUzMEM2NTAeFw0yNDA1MTUwODU1MDRaFw0yNDA1MjIwODU1MDRaMBgxFjAUBgNV BAMTDTY2NDQ3ODY5LTlhYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDClobsmrmT0gbUHMbVEH7tZaiPIP4bKuCbyzq9Nt0ngPZSnrvwZulJ1ZuXdctI dx6At+MQjC1pCggtJOrDtc7qPi5RXCn3tjkJ6r1gKVa2TxZH9icEeR4dXFtOLMKg ABOdticgbrzrPvATcDzJZKzge2X6GRfzl/C3Zn8tSWNn/5VT3skqIjdl5iJL8Vvs qKB/TyzqhPtUPlTNE1vfSmfNMX1R2iLQWyn3hmjiutlocbxSMv83Rb88lS6AEErY EYlul6gNtROxSwvy1p3qrMzTMuAWf8/fc7J4c6C6CIu+aeG0wTS/T5ZoV34u6W6O klLNEnbh83xbA1fVS+O0+Rj/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoq5RqR0Z FXiySiLqUushyX+gsp0wHwYDVR0jBBgwFoAUxMZ+u2st3Gkku7llXn4PghhTDGUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyRDUxL0VBRTVGQ0FBRjIz NjExRUU4QzhCOTc1OEM0RjlBRTAyL3hNWi11MnN0M0dra3U3bGxYbjRQZ2hoVERH VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveE1aLXUyc3QzR2trdTdsbFhuNFBnaGhUREdVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIy RDUxL0VBRTVGQ0FBRjIzNjExRUU4QzhCOTc1OEM0RjlBRTAyL3hNWi11MnN0M0dr a3U3bGxYbjRQZ2hoVERHVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJbCg5DV31OESK8htKdD5lILJS2/6ceGXf/bAwkQHIrR2VKuMbEhfj3y prQKHhu1bQ9pGQsbai2wKEH38NwHSwOVwVH2PnfS1u6ppQCcuOjczaVDedXl7W2P CisMKFJ/ezqBFlAESmDJFNJ0Hc2QzNoOl8weV31USnqzIj+hV9fN4TNY0wXI/Yda KApBlQ714ZbMxh9LLAsprsQ7Z+fkp3ydyExnkxJR/FI6U4w/QztyjzXtNKoKEjSa aUM9U7OHvV+MTbIz5mtdPn2w06ziSAJrYQkrj18sHCZT3XU/IPPvRnGpAMcwJuMw rls4du/xjD5ufIWXmKVshNoYFmLmRJ0= -----END CERTIFICATE-----Generated at Wed May 15 09:27:28 2024 by rpki-client on console-fra.rpki-client.org