$ rpki-client -vvf rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft File: xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft (raw, json) Hash identifier: aYN0K8dQT+bbVhFrQYjzUh9uDI5j+uPPrlDMBd9Y0wg= Subject key identifier: 1D:66:F8:F9:F4:67:1A:59:F8:FC:D9:0B:1A:E8:61:B5:BB:57:FA:74 Authority key identifier: C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C Certificate issuer: /CN=A9127342/serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C Certificate serial: 224E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft Manifest number: 2237 Signing time: Sat 18 May 2024 16:11:31 +0000 Manifest this update: Sat 18 May 2024 16:11:30 +0000 Manifest next update: Sat 25 May 2024 16:11:30 +0000 Files and hashes: 1: xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl (hash: M34V7ONEm/ld72Y/ZAusXdnTL55v710H6mSW7RTfFTE=) 2: DA37C95AB14511E5B83D2120C4F9AE02.roa (hash: cZn5O6pwF59j4Vw66uQCp/27di7yfzcFOwcEYvP1wx8=) 3: CBF9AD5449E811E6BAF4525DC4F9AE02.roa (hash: f4EKOmeKepAiODou+eN9xy2W8k6h11p1CV/RVot3uC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8782 (0x224e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127342/serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C Validity Not Before: May 18 16:11:30 2024 GMT Not After : May 25 16:11:30 2024 GMT Subject: CN=6648d333-b717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:78:3a:c1:8e:57:08:9d:b3:bf:42:4a:ec:2b: 74:98:b7:76:ba:0a:95:94:dc:c2:6f:0a:a6:63:05: bc:16:f4:ae:ae:ef:44:d5:e7:81:c5:9c:57:e5:90: f8:1a:4e:dc:b2:bb:c4:5b:2f:22:4b:89:20:b0:b1: 74:b9:74:44:6c:5d:ac:8c:da:18:a8:c3:49:75:9a: 17:55:a0:1f:5e:6e:ab:51:f1:df:f3:88:19:5c:09: 99:39:8a:fa:2b:61:96:78:bb:98:f8:c8:16:92:e3: 78:53:f3:fb:15:f2:59:9c:33:2b:63:a7:55:99:e5: 86:b1:97:1d:c2:26:90:64:de:95:6f:58:84:c5:57: 69:d0:ae:fb:fd:2d:a9:8f:f8:bf:f6:15:5c:b9:3f: e6:9d:6b:59:6d:0c:88:25:1b:34:e3:60:dd:3d:26: 91:7e:f8:6e:0f:ae:82:7b:57:ba:86:cb:94:e0:ed: fc:09:fb:be:d9:ab:ba:39:bd:84:19:52:0e:36:04: 48:b1:76:e1:42:3b:2f:64:e1:e6:ef:f7:a4:58:9b: e8:93:07:dd:28:e5:94:22:d8:6d:9c:33:56:ca:5a: 6f:bc:2a:f7:10:73:4f:9a:c3:e0:04:a5:69:9b:04: 7c:30:a6:15:86:69:a3:19:b4:f8:c7:f6:73:5d:0d: 54:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:66:F8:F9:F4:67:1A:59:F8:FC:D9:0B:1A:E8:61:B5:BB:57:FA:74 X509v3 Authority Key Identifier: keyid:C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:76:b6:df:d2:28:12:80:44:45:1c:9d:9f:c1:f5:9c:31:ef: a3:d0:72:32:c1:26:64:fa:9a:8c:35:61:5c:0f:a3:4d:15:49: 68:17:30:e9:28:3f:73:bd:e8:bc:a7:ca:c6:50:18:ba:f7:02: fc:6a:1e:5c:77:1b:c9:91:70:5c:c4:bb:2b:94:fa:03:55:ca: 44:23:f3:ca:d1:cd:e1:97:6e:5c:21:99:5a:26:5d:8d:dd:e2: 9b:77:f0:77:6b:e8:7c:a5:07:0b:b5:e1:65:e0:34:ae:e2:91: d0:09:20:86:05:01:cb:7f:09:6c:d3:45:47:0a:bd:01:09:ae: a5:f3:90:79:b9:d4:0f:de:dd:94:bc:a3:11:24:7e:b4:82:aa: 5c:2a:d7:3e:b6:f9:12:ed:8b:34:48:90:b0:9a:92:39:b3:45: 8d:bf:b0:32:54:2a:2f:61:b7:25:33:03:5b:d2:db:2f:cb:2d: a9:25:b5:4a:e9:00:3d:3e:11:3c:ac:19:bd:72:e8:3e:6b:70: 2d:3c:88:9f:8d:0e:ca:7b:1d:80:af:5c:2a:1f:38:9e:57:de: b5:c6:ec:1b:a7:21:56:cd:42:42:cb:35:1e:e4:9d:3c:92:d2: 24:9b:03:5a:aa:0a:96:cd:39:4c:00:f0:50:57:84:05:8d:85: 54:d0:dc:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczNDIxMTAvBgNVBAUTKEM0OTY2M0Q5NkJDOTMyRDc0Mzg0MEJDNjdGRDg3QkY4 RTAxNTQ2N0MwHhcNMjQwNTE4MTYxMTMwWhcNMjQwNTI1MTYxMTMwWjAYMRYwFAYD VQQDEw02NjQ4ZDMzMy1iNzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnXg6wY5XCJ2zv0JK7Ct0mLd2ugqVlNzCbwqmYwW8FvSuru9E1eeBxZxX5ZD4 Gk7csrvEWy8iS4kgsLF0uXREbF2sjNoYqMNJdZoXVaAfXm6rUfHf84gZXAmZOYr6 K2GWeLuY+MgWkuN4U/P7FfJZnDMrY6dVmeWGsZcdwiaQZN6Vb1iExVdp0K77/S2p j/i/9hVcuT/mnWtZbQyIJRs042DdPSaRfvhuD66Ce1e6hsuU4O38Cfu+2au6Ob2E GVIONgRIsXbhQjsvZOHm7/ekWJvokwfdKOWUIthtnDNWylpvvCr3EHNPmsPgBKVp mwR8MKYVhmmjGbT4x/ZzXQ1UEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1m+Pn0 ZxpZ+PzZCxroYbW7V/p0MB8GA1UdIwQYMBaAFMSWY9lryTLXQ4QLxn/Ye/jgFUZ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzM0Mi82RERCQzdGQzkz MjcxMUU1QTgxRjMwM0VDNEY5QUUwMi94SlpqMld2Sk10ZERoQXZHZjloNy1PQVZS bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hKWmoyV3ZKTXRkRGhBdkdmOWg3LU9BVlJudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzM0Mi82RERCQzdGQzkzMjcxMUU1QTgxRjMwM0VDNEY5QUUwMi94SlpqMld2Sk10 ZERoQXZHZjloNy1PQVZSbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGdrbf0igSgERFHJ2fwfWcMe+j0HIywSZk+pqMNWFcD6NNFUloFzDp KD9zvei8p8rGUBi69wL8ah5cdxvJkXBcxLsrlPoDVcpEI/PK0c3hl25cIZlaJl2N 3eKbd/B3a+h8pQcLteFl4DSu4pHQCSCGBQHLfwls00VHCr0BCa6l85B5udQP3t2U vKMRJH60gqpcKtc+tvkS7Ys0SJCwmpI5s0WNv7AyVCovYbclMwNb0tsvyy2pJbVK 6QA9PhE8rBm9cug+a3AtPIifjQ7Kex2Ar1wqHzieV961xuwbpyFWzUJCyzUe5J08 ktIkmwNaqgqWzTlMAPBQV4QFjYVU0Nxf -----END CERTIFICATE-----Generated at Sat May 18 16:57:53 2024 by rpki-client on console-fra.rpki-client.org