$ rpki-client -vvf rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft File: XnPt2W_yeohfYTVup3sfVDXIT8w.mft (raw, json) Hash identifier: 585ymce0odlhVBeJXwyPca3GkLZMalQUsHaWO/b29Dk= Subject key identifier: 69:72:37:34:3D:95:8D:C3:17:75:03:BC:27:50:FC:11:B3:84:C3:19 Authority key identifier: 5E:73:ED:D9:6F:F2:7A:88:5F:61:35:6E:A7:7B:1F:54:35:C8:4F:CC Certificate issuer: /CN=A912759E/serialNumber=5E73EDD96FF27A885F61356EA77B1F5435C84FCC Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft Manifest number: 01B4 Signing time: Tue 07 May 2024 04:31:55 +0000 Manifest this update: Tue 07 May 2024 04:31:55 +0000 Manifest next update: Tue 14 May 2024 04:31:55 +0000 Files and hashes: 1: XnPt2W_yeohfYTVup3sfVDXIT8w.crl (hash: nd0TaNO4SqeIGkvBBhEt4HrGzhNTo8NditPWqQ6+mVg=) 2: 7F0509300CCE11ED97C94316C4F9AE02.roa (hash: bOpqKtoUUkZY1Vo/uDO1nFHnYqU89wbFOp8GDPcmuDA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.crl rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 04:31:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912759E/serialNumber=5E73EDD96FF27A885F61356EA77B1F5435C84FCC Validity Not Before: May 7 04:31:55 2024 GMT Not After : May 14 04:31:55 2024 GMT Subject: CN=6639aebb-f29b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bb:a4:0a:50:51:3b:6c:6e:b3:c6:22:38:f6: 20:2e:19:48:20:fe:93:f8:e7:9f:6a:35:d8:06:c6: d6:c9:f9:07:73:db:14:be:ac:b4:e9:0e:f9:c4:d5: c4:2d:4d:5c:68:f9:74:86:85:71:a8:7b:0a:32:60: b5:f7:26:5e:0a:f9:54:aa:39:66:b5:7f:3c:4b:2c: 4a:7b:b8:ad:49:38:69:cf:56:b5:c5:48:56:45:0d: 07:0e:95:6c:41:0a:fc:f9:38:2b:19:9c:62:bf:37: d3:e2:12:aa:75:71:58:4d:bf:c7:b6:a6:5e:9c:b6: 3d:37:ae:cb:03:8c:2f:95:ab:33:ed:a6:12:66:18: c2:78:48:3f:6a:33:75:ab:99:4c:18:64:20:b4:39: dd:2b:5a:cb:b5:76:40:6b:5a:8b:fd:50:60:25:d6: ec:48:c4:7b:7e:11:78:c6:d4:a4:db:14:96:cc:13: e6:01:8d:ee:ce:a7:a7:3e:f2:00:c9:ce:eb:49:fb: 20:df:0e:38:ec:0c:81:e0:9e:39:03:2d:8d:1f:61: 05:b0:51:6f:0f:d6:7e:2b:d0:1d:d0:7d:5c:25:37: 42:e4:2f:3b:c7:5f:51:87:ea:03:30:67:01:35:7d: f0:cc:e0:c4:58:ef:b4:59:2c:7a:2f:bd:bc:7c:c9: 3c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:72:37:34:3D:95:8D:C3:17:75:03:BC:27:50:FC:11:B3:84:C3:19 X509v3 Authority Key Identifier: keyid:5E:73:ED:D9:6F:F2:7A:88:5F:61:35:6E:A7:7B:1F:54:35:C8:4F:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:3f:51:53:30:9d:32:b2:9b:33:14:6a:43:31:cd:d3:45:69: 18:1d:92:21:30:d0:46:03:3c:e3:0e:95:3a:e1:76:9e:2e:9c: 62:04:14:f8:c0:06:54:fb:d9:3a:09:69:6e:e1:f4:d8:35:a4: 0e:5e:3e:7c:26:c3:88:76:c9:af:aa:8b:bb:92:32:ed:e5:7b: 84:82:96:9c:f0:a2:d8:43:b4:1c:ff:c5:95:6d:3c:49:2c:20: 44:0f:0b:a6:47:c9:c1:b3:bb:9a:6f:4b:f6:68:91:66:8f:ea: f2:9b:d7:49:d3:e4:ad:d3:0c:c2:9e:ed:9a:42:9e:9c:fa:0b: f8:d8:02:0d:c2:7b:89:8c:52:b0:c3:05:8d:e7:31:53:d3:75: b8:34:08:ec:3b:9b:34:18:f4:61:bd:08:f4:42:4e:73:60:d5: 21:cc:a8:6c:92:ce:e3:12:d7:f9:cc:e1:e2:37:5e:48:25:61: 17:31:1f:ac:fd:28:0d:8a:a7:85:bd:d8:fa:d3:96:4c:d0:e3: b3:80:39:3a:53:34:31:dc:2e:7a:a4:ed:3c:c5:3e:6a:f5:e3: 5a:c2:b3:86:20:82:12:74:fd:0a:2c:c9:6b:90:63:99:22:dc: ec:a0:f2:47:74:24:87:59:5c:ab:06:9c:bd:00:2a:84:27:09: e8:74:ca:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1OUUxMTAvBgNVBAUTKDVFNzNFREQ5NkZGMjdBODg1RjYxMzU2RUE3N0IxRjU0 MzVDODRGQ0MwHhcNMjQwNTA3MDQzMTU1WhcNMjQwNTE0MDQzMTU1WjAYMRYwFAYD VQQDEw02NjM5YWViYi1mMjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2LukClBRO2xus8YiOPYgLhlIIP6T+OefajXYBsbWyfkHc9sUvqy06Q75xNXE LU1caPl0hoVxqHsKMmC19yZeCvlUqjlmtX88SyxKe7itSThpz1a1xUhWRQ0HDpVs QQr8+TgrGZxivzfT4hKqdXFYTb/HtqZenLY9N67LA4wvlasz7aYSZhjCeEg/ajN1 q5lMGGQgtDndK1rLtXZAa1qL/VBgJdbsSMR7fhF4xtSk2xSWzBPmAY3uzqenPvIA yc7rSfsg3w447AyB4J45Ay2NH2EFsFFvD9Z+K9Ad0H1cJTdC5C87x19Rh+oDMGcB NX3wzODEWO+0WSx6L728fMk88wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGlyNzQ9 lY3DF3UDvCdQ/BGzhMMZMB8GA1UdIwQYMBaAFF5z7dlv8nqIX2E1bqd7H1Q1yE/M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzU5RS9DQjBFQTc3NjBD Q0IxMUVEOUU3MjIzNjlDNEY5QUUwMi9YblB0MldfeWVvaGZZVFZ1cDNzZlZEWElU OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huUHQyV195ZW9oZllUVnVwM3NmVkRYSVQ4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzU5RS9DQjBFQTc3NjBDQ0IxMUVEOUU3MjIzNjlDNEY5QUUwMi9YblB0MldfeWVv aGZZVFZ1cDNzZlZEWElUOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsP1FTMJ0yspszFGpDMc3TRWkYHZIhMNBGAzzjDpU64XaeLpxiBBT4 wAZU+9k6CWlu4fTYNaQOXj58JsOIdsmvqou7kjLt5XuEgpac8KLYQ7Qc/8WVbTxJ LCBEDwumR8nBs7uab0v2aJFmj+rym9dJ0+St0wzCnu2aQp6c+gv42AINwnuJjFKw wwWN5zFT03W4NAjsO5s0GPRhvQj0Qk5zYNUhzKhsks7jEtf5zOHiN15IJWEXMR+s /SgNiqeFvdj605ZM0OOzgDk6UzQx3C56pO08xT5q9eNawrOGIIISdP0KLMlrkGOZ ItzsoPJHdCSHWVyrBpy9ACqEJwnodMrk -----END CERTIFICATE-----Generated at Tue May 7 05:39:51 2024 by rpki-client on console-fra.rpki-client.org