$ rpki-client -vvf rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft File: xNe5S537ZPXBiScjMNvcrSp9AW4.mft (raw, json) Hash identifier: L6JS1bN5bWYTMhdDOq8gT1bzGnk7AwybfYOmt/RSu80= Subject key identifier: 75:F3:3F:06:C5:FE:95:AE:6B:77:0C:90:07:89:24:39:62:9C:69:0B Authority key identifier: C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E Certificate issuer: /CN=A912E791/serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E Certificate serial: 03E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft Manifest number: 03DC Signing time: Tue 07 May 2024 02:21:25 +0000 Manifest this update: Tue 07 May 2024 02:21:25 +0000 Manifest next update: Tue 14 May 2024 02:21:25 +0000 Files and hashes: 1: xNe5S537ZPXBiScjMNvcrSp9AW4.crl (hash: YNkdEtXqs/sWKekZ7FSomNm86aXRPM4LvavnQJBrzeE=) 2: 8BF809E4892411EDBAF42C12C4F9AE02.roa (hash: mEjBzRrAL4pWgzh5wz35tUDDoe/ZvVINTfcTjEza+zc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:21:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 999 (0x3e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E791/serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E Validity Not Before: May 7 02:21:25 2024 GMT Not After : May 14 02:21:25 2024 GMT Subject: CN=66399025-5853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0f:33:30:08:ae:83:df:e5:87:3d:da:ea:f6: e5:ed:29:f1:5e:80:a3:80:6d:ab:03:c3:1f:ab:ba: 89:17:71:e2:e2:fb:38:7f:a0:69:72:2f:50:77:20: 68:41:13:9a:ea:70:10:43:1a:49:ea:18:48:72:f2: b5:38:41:41:2f:42:e5:ed:71:88:b7:7b:04:69:47: 16:7b:4a:b4:9c:4a:02:8c:89:21:7b:34:a9:7e:50: 57:76:67:97:2f:1d:ca:4d:65:7a:cf:4d:69:3f:0f: ae:cf:0d:1b:55:ac:95:80:98:ad:e6:5c:d1:4a:2c: 81:5d:30:7e:4c:b0:81:38:62:5e:01:59:37:78:07: 54:c8:fb:bd:66:f4:3d:bc:20:c4:99:9e:d3:62:80: 74:60:e6:d8:f9:26:ab:11:fb:1e:2a:51:a0:14:c6: 3b:ce:c0:bb:8c:d5:e0:41:47:2f:32:3a:1b:20:17: 4a:f5:f7:1d:a0:59:36:bf:a1:b8:3f:9a:c1:d5:d6: 26:3e:83:b4:55:41:98:be:3c:85:82:00:b1:01:6c: f1:90:1d:4b:1c:f8:1b:b4:7a:8c:16:c8:94:16:a1: de:0a:c5:39:7d:f6:39:90:7a:93:52:8e:de:6d:79: 22:d5:39:12:17:95:b4:48:1e:c9:1f:e1:13:0a:37: 94:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F3:3F:06:C5:FE:95:AE:6B:77:0C:90:07:89:24:39:62:9C:69:0B X509v3 Authority Key Identifier: keyid:C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:3e:d7:70:b4:01:5d:83:6d:77:f7:24:2e:6b:0b:76:e4:57: cf:a4:7e:1e:95:cb:aa:38:75:fb:b5:bc:b1:eb:ab:e5:8c:a2: cb:e9:b6:6c:07:0c:11:aa:32:bd:ab:cf:c2:e9:af:9e:31:63: 50:45:38:b7:04:4a:74:18:b7:aa:cc:ed:9d:c5:9d:5f:47:45: b2:23:95:24:39:26:3c:9b:c5:4d:3a:b1:1f:9f:bb:19:41:d6: cc:5d:5b:d8:16:20:95:1a:30:ee:a6:a3:1c:17:85:37:2b:22: db:78:09:52:72:bb:ed:a9:0f:cd:63:40:b3:d7:be:b4:a8:e0: ea:61:6b:4a:26:0a:ee:10:f6:3b:23:46:63:ba:a9:de:ae:f2: 7f:d3:66:6d:2b:9d:8a:69:36:3c:5d:56:16:1e:c9:17:32:e4: 1c:25:37:26:bb:5f:fd:d0:5c:9e:0d:ea:8c:d9:22:de:c3:f0: ff:38:83:01:c1:a5:eb:db:52:86:0c:c1:8e:bc:d7:a3:5e:5b: b0:df:34:e1:2d:e9:8d:b2:41:ce:7e:b5:5b:33:75:ec:a8:d6: 72:e6:d5:7c:cf:a6:8f:73:e3:76:d2:c0:89:61:99:53:c2:cc: e3:b7:4b:24:da:25:49:5f:05:55:2a:34:f9:88:4e:f8:31:e5: f3:3f:5d:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU3OTExMTAvBgNVBAUTKEM0RDdCOTRCOURGQjY0RjVDMTg5MjcyMzMwREJEQ0FE MkE3RDAxNkUwHhcNMjQwNTA3MDIyMTI1WhcNMjQwNTE0MDIyMTI1WjAYMRYwFAYD VQQDEw02NjM5OTAyNS01ODUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtg8zMAiug9/lhz3a6vbl7SnxXoCjgG2rA8Mfq7qJF3Hi4vs4f6Bpci9QdyBo QROa6nAQQxpJ6hhIcvK1OEFBL0Ll7XGIt3sEaUcWe0q0nEoCjIkhezSpflBXdmeX Lx3KTWV6z01pPw+uzw0bVayVgJit5lzRSiyBXTB+TLCBOGJeAVk3eAdUyPu9ZvQ9 vCDEmZ7TYoB0YObY+SarEfseKlGgFMY7zsC7jNXgQUcvMjobIBdK9fcdoFk2v6G4 P5rB1dYmPoO0VUGYvjyFggCxAWzxkB1LHPgbtHqMFsiUFqHeCsU5ffY5kHqTUo7e bXki1TkSF5W0SB7JH+ETCjeUAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHXzPwbF /pWua3cMkAeJJDlinGkLMB8GA1UdIwQYMBaAFMTXuUud+2T1wYknIzDb3K0qfQFu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTc5MS8xOUM2OEQwNjNB MDUxMUVDQTk0NDA1MUJDNEY5QUUwMi94TmU1UzUzN1pQWEJpU2NqTU52Y3JTcDlB VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOZTVTNTM3WlBYQmlTY2pNTnZjclNwOUFXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTc5MS8xOUM2OEQwNjNBMDUxMUVDQTk0NDA1MUJDNEY5QUUwMi94TmU1UzUzN1pQ WEJpU2NqTU52Y3JTcDlBVzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzPtdwtAFdg2139yQuawt25FfPpH4elcuqOHX7tbyx66vljKLL6bZs BwwRqjK9q8/C6a+eMWNQRTi3BEp0GLeqzO2dxZ1fR0WyI5UkOSY8m8VNOrEfn7sZ QdbMXVvYFiCVGjDupqMcF4U3KyLbeAlScrvtqQ/NY0Cz1760qODqYWtKJgruEPY7 I0ZjuqnervJ/02ZtK52KaTY8XVYWHskXMuQcJTcmu1/90FyeDeqM2SLew/D/OIMB waXr21KGDMGOvNejXluw3zThLemNskHOfrVbM3XsqNZy5tV8z6aPc+N20sCJYZlT wszjt0sk2iVJXwVVKjT5iE74MeXzP115 -----END CERTIFICATE-----Generated at Tue May 7 03:12:17 2024 by rpki-client on console-fra.rpki-client.org