$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft File: Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft (raw, json) Hash identifier: GlGky/zg6p9WiiFRJB0dhaGj/Ky+6BUyTeT2qoi/qxg= Subject key identifier: F1:28:EC:CA:1B:72:AD:BE:AB:8E:D2:42:4C:92:B1:9A:BC:42:52:D0 Authority key identifier: 5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED Certificate issuer: /CN=A91275FD/serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED Certificate serial: 23AF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft Manifest number: 23A3 Signing time: Wed 31 May 2023 16:18:58 +0000 Manifest this update: Wed 31 May 2023 16:18:58 +0000 Manifest next update: Wed 07 Jun 2023 16:18:58 +0000 Files and hashes: 1: Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl (hash: lCKNLnvLEojKvVRd9CtDo3Dkv2Z6WtumwhIllgTVwUA=) 2: C5218598F91711EDBB78FE3CC4F9AE02.roa (hash: mgSVJ9RhfUkXGtp5HvopMTmXD6ZFeFneAimUGvO26Pw=) 3: 9461B15C144611EBA5418244C4F9AE02.roa (hash: iG175TkA9SkQUz6M6vAKqQX6srvggz/70d9VSpafPvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Jun 2023 22:48:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9135 (0x23af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FD/serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED Validity Not Before: May 31 16:18:58 2023 GMT Not After : Jun 7 16:18:58 2023 GMT Subject: CN=64777372-ebdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fa:fe:9b:ea:12:de:f5:de:a7:f0:ce:5a:3b: 2a:4b:c5:6d:7d:6f:bc:94:fd:d2:1b:21:f7:d3:d6: 72:87:09:3f:97:7a:aa:b8:88:95:3f:d4:b7:d3:10: c0:13:19:f6:fe:8e:80:7c:6c:0e:70:e3:62:05:88: f1:6e:2c:45:89:d1:fa:30:67:03:ef:f4:0a:cc:2a: c2:00:eb:19:50:3c:bb:31:46:59:4d:a5:25:a1:55: 41:9e:9e:09:15:b4:c0:f2:a0:41:0d:81:4c:be:aa: a3:db:a3:a6:32:28:b9:bd:8f:7a:c0:32:8b:0d:44: 70:67:6c:59:87:31:ad:d2:3b:6e:8b:1e:f7:ac:b8: 80:11:a5:b2:af:d6:0c:03:bf:90:8c:1e:1f:40:a4: 36:88:4a:42:9a:81:09:98:eb:4c:43:e4:bb:60:be: 7c:0e:ab:6d:43:2d:bf:fa:92:af:74:9f:14:bc:0f: ed:6f:f7:94:f2:1e:44:5f:a1:92:6b:36:7c:88:ee: 32:1d:2b:98:45:ba:b0:81:e7:f4:f8:b1:58:f0:5d: 20:0e:aa:2b:fa:93:3f:6f:b6:c3:3b:9a:bc:2e:a2: 18:c5:c2:70:8e:7c:fe:d8:ba:22:da:10:d1:4c:0b: 3c:fc:dd:b8:28:5c:14:74:7d:71:a7:90:0a:1a:95: 12:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:28:EC:CA:1B:72:AD:BE:AB:8E:D2:42:4C:92:B1:9A:BC:42:52:D0 X509v3 Authority Key Identifier: keyid:5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:0d:13:f4:05:44:c7:59:6d:65:11:68:68:8e:32:a7:32:6b: 28:c9:ec:ac:43:3e:4f:10:8e:4e:d7:8a:97:4d:c8:20:4b:bf: f6:b2:1b:1a:b3:56:8c:1e:97:0b:be:84:f7:7f:65:f8:62:56: c9:56:ed:c1:e3:fc:dc:48:57:72:92:0b:5c:2d:ff:61:ae:c8: 90:20:c5:a4:35:e9:fa:61:c1:31:de:b0:ae:76:4e:b9:77:7f: c8:e9:ee:3e:18:87:60:53:09:4d:ae:45:80:b5:b4:b4:15:39: 18:6d:77:64:b5:75:2f:cc:15:45:87:2c:63:a0:8f:e1:8e:a2: 3a:24:4d:0e:23:f3:a0:1f:20:13:77:f6:e8:03:33:15:08:84: d3:31:d6:14:ae:4d:c0:5f:08:c1:7b:b3:54:86:0c:98:87:54: 84:25:0d:05:88:73:30:9a:85:6e:85:49:b4:a2:a4:86:9c:c3: ed:cd:6c:28:b8:fb:80:c4:2b:fd:72:13:1a:82:bb:ee:15:fa: d9:4d:71:06:00:31:8b:08:8b:e7:bf:7e:d0:d2:14:c5:c8:8c: 39:e9:bd:28:ef:5c:82:26:50:c4:a6:c3:b4:6f:4c:54:4d:88: e1:a6:10:d6:fa:18:1a:ee:ea:26:cb:e1:95:68:59:70:4f:c8: e3:26:5b:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkQxMTAvBgNVBAUTKDVFQkRENEQ1RjM2QzZBQTU5QjAxMkM5RTg5OUFBRDND MjdFQUQ4RUQwHhcNMjMwNTMxMTYxODU4WhcNMjMwNjA3MTYxODU4WjAYMRYwFAYD VQQDEw02NDc3NzM3Mi1lYmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/r+m+oS3vXep/DOWjsqS8VtfW+8lP3SGyH309Zyhwk/l3qquIiVP9S30xDA Exn2/o6AfGwOcONiBYjxbixFidH6MGcD7/QKzCrCAOsZUDy7MUZZTaUloVVBnp4J FbTA8qBBDYFMvqqj26OmMii5vY96wDKLDURwZ2xZhzGt0jtuix73rLiAEaWyr9YM A7+QjB4fQKQ2iEpCmoEJmOtMQ+S7YL58DqttQy2/+pKvdJ8UvA/tb/eU8h5EX6GS azZ8iO4yHSuYRbqwgef0+LFY8F0gDqor+pM/b7bDO5q8LqIYxcJwjnz+2Loi2hDR TAs8/N24KFwUdH1xp5AKGpUSYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPEo7Mob cq2+q47SQkySsZq8QlLQMB8GA1UdIwQYMBaAFF691NXzbGqlmwEsnomarTwn6tjt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9GNDhBRDEyMjI2 RDkxMUU1QjI0REE2MzNDNEY5QUUwMi9YcjNVMWZOc2FxV2JBU3llaVpxdFBDZnEy TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hyM1UxZk5zYXFXYkFTeWVpWnF0UENmcTJPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGRC9GNDhBRDEyMjI2RDkxMUU1QjI0REE2MzNDNEY5QUUwMi9YcjNVMWZOc2Fx V2JBU3llaVpxdFBDZnEyTzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7DRP0BUTHWW1lEWhojjKnMmsoyeysQz5PEI5O14qXTcggS7/2shsa s1aMHpcLvoT3f2X4YlbJVu3B4/zcSFdykgtcLf9hrsiQIMWkNen6YcEx3rCudk65 d3/I6e4+GIdgUwlNrkWAtbS0FTkYbXdktXUvzBVFhyxjoI/hjqI6JE0OI/OgHyAT d/boAzMVCITTMdYUrk3AXwjBe7NUhgyYh1SEJQ0FiHMwmoVuhUm0oqSGnMPtzWwo uPuAxCv9chMagrvuFfrZTXEGADGLCIvnv37Q0hTFyIw56b0o71yCJlDEpsO0b0xU TYjhphDW+hga7uomy+GVaFlwT8jjJlsi -----END CERTIFICATE-----Generated at Wed May 31 16:58:06 2023 by rpki-client on console-ams.rpki-client.org