$ rpki-client -vvf rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft File: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft (raw, json) Hash identifier: YNoc4ig5Dk+tOn2EgoEcHNNqeVcoUPy14kqgsWxcOfI= Subject key identifier: 6D:09:F1:68:0F:AE:F8:84:EF:D9:0C:BA:2D:5C:DE:32:73:92:2E:8C Authority key identifier: C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84 Certificate issuer: /CN=A91308E4/serialNumber=C63892FDAD943F25FA396841BB773DA15F700684 Certificate serial: 05F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft Manifest number: 05EB Signing time: Fri 03 May 2024 00:09:54 +0000 Manifest this update: Fri 03 May 2024 00:09:54 +0000 Manifest next update: Fri 10 May 2024 00:09:54 +0000 Files and hashes: 1: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl (hash: FqQjynHiXHPhfT46fbJYAO1HzDMbHs+6pknyhnSF8Fo=) 2: 79520888650611EBA9BB2882C4F9AE02.roa (hash: exnouJCREO3c3zFuyJZ6zHueq+KiKjrdGtBLHCMqGi8=) 3: 801F61DCC1E111EBB27A0812C4F9AE02.roa (hash: qOu1SsdqxnSEtLbLa6C30u3ruMqxic76gb8BT2aG5qQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 23:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1528 (0x5f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91308E4/serialNumber=C63892FDAD943F25FA396841BB773DA15F700684 Validity Not Before: May 3 00:09:54 2024 GMT Not After : May 10 00:09:54 2024 GMT Subject: CN=66342b52-07d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ad:bc:fb:df:99:18:a1:cc:15:c8:9e:c2:fe: fb:50:86:4c:12:6b:17:eb:ae:d6:ac:d5:2a:ed:26: 71:ee:c4:37:c5:70:f6:81:b7:c3:28:d6:80:49:1c: 3b:43:ec:87:7b:1e:4a:67:5e:e1:cf:46:4e:2f:54: 57:be:d5:c6:82:53:8e:7a:d5:51:48:eb:d6:ac:07: ec:3b:eb:f2:54:b2:65:0b:c6:3b:46:c0:67:e8:2a: b4:9e:1d:7d:ab:22:1a:55:cc:49:3d:99:c2:fd:0a: 3e:fa:a7:99:a1:35:c2:14:32:09:4b:13:88:eb:c4: aa:20:a3:ae:85:0d:99:3e:93:a9:86:26:96:86:eb: 73:e6:57:97:99:57:dd:17:c7:82:e4:ce:0b:50:f7: 84:d6:cc:e5:19:42:ce:68:6a:c1:f5:dc:ca:c3:c8: eb:2f:17:b8:57:50:97:6c:54:72:57:f1:73:a6:18: 08:79:3f:fe:99:a8:cf:51:09:c3:44:60:58:35:ef: 56:bb:f0:ac:e1:0b:3e:86:48:86:f5:77:35:8d:ce: 47:7f:1a:c6:5e:12:6e:45:83:d5:77:ea:c0:aa:d0: c9:bd:5f:31:9c:52:c0:66:c8:ab:ed:64:4c:04:7b: 9e:02:e9:95:78:17:70:2c:d1:ae:91:cd:29:51:0b: 15:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:09:F1:68:0F:AE:F8:84:EF:D9:0C:BA:2D:5C:DE:32:73:92:2E:8C X509v3 Authority Key Identifier: keyid:C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d5:8b:fb:ee:7b:12:06:13:b7:74:14:27:ae:0b:3c:57:e3: 19:93:8e:b7:82:2e:e0:32:86:fc:62:d9:95:06:31:e7:69:69: da:cf:1f:9f:42:f3:49:16:26:95:06:2d:20:4e:3e:bc:ae:a9: af:1f:f4:0d:6c:b4:68:9d:a7:d9:eb:ce:6b:18:d4:17:5f:ac: b2:df:27:a3:13:49:5e:92:ad:b8:63:97:f9:1b:ca:33:94:95: 35:52:84:1b:37:a6:a3:30:17:5d:fb:12:d9:9c:35:22:84:75: c6:a6:2e:d4:ef:f6:bb:5a:6b:5b:8f:7e:f9:ea:5f:73:9c:6f: 1e:65:70:66:e3:33:76:8e:77:ba:79:a3:1a:7b:2c:0d:84:d8: d4:ea:a9:33:ee:cd:d0:b1:e1:57:d0:c7:a5:3b:c8:a0:47:aa: fa:cb:32:92:74:b0:84:74:7e:58:07:02:32:b7:46:ff:d4:a1: 0d:ce:8b:75:96:17:b1:ac:a4:3e:8d:9b:bc:6a:9d:d1:7f:1a: cc:aa:21:d8:b2:6c:7b:ac:98:10:a7:db:59:9c:f0:16:f9:10: 49:2e:c0:e3:04:36:f6:7c:45:75:89:bb:65:1d:3f:07:7f:47: d3:19:33:30:36:ca:bc:19:8b:fb:10:31:55:dd:5d:c5:bf:fc: 62:32:7e:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4RTQxMTAvBgNVBAUTKEM2Mzg5MkZEQUQ5NDNGMjVGQTM5Njg0MUJCNzczREEx NUY3MDA2ODQwHhcNMjQwNTAzMDAwOTU0WhcNMjQwNTEwMDAwOTU0WjAYMRYwFAYD VQQDEw02NjM0MmI1Mi0wN2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuq28+9+ZGKHMFciewv77UIZMEmsX667WrNUq7SZx7sQ3xXD2gbfDKNaASRw7 Q+yHex5KZ17hz0ZOL1RXvtXGglOOetVRSOvWrAfsO+vyVLJlC8Y7RsBn6Cq0nh19 qyIaVcxJPZnC/Qo++qeZoTXCFDIJSxOI68SqIKOuhQ2ZPpOphiaWhutz5leXmVfd F8eC5M4LUPeE1szlGULOaGrB9dzKw8jrLxe4V1CXbFRyV/FzphgIeT/+majPUQnD RGBYNe9Wu/Cs4Qs+hkiG9Xc1jc5HfxrGXhJuRYPVd+rAqtDJvV8xnFLAZsir7WRM BHueAumVeBdwLNGukc0pUQsVXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0J8WgP rviE79kMui1c3jJzki6MMB8GA1UdIwQYMBaAFMY4kv2tlD8l+jloQbt3PaFfcAaE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDhFNC8xMzBBMUNCMDY1 MDUxMUVCOTA4OUYxODBDNEY5QUUwMi94amlTX2EyVVB5WDZPV2hCdTNjOW9WOXdC b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqaVNfYTJVUHlYNk9XaEJ1M2M5b1Y5d0JvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDhFNC8xMzBBMUNCMDY1MDUxMUVCOTA4OUYxODBDNEY5QUUwMi94amlTX2EyVVB5 WDZPV2hCdTNjOW9WOXdCb1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB61Yv77nsSBhO3dBQnrgs8V+MZk463gi7gMob8YtmVBjHnaWnazx+f QvNJFiaVBi0gTj68rqmvH/QNbLRonafZ685rGNQXX6yy3yejE0lekq24Y5f5G8oz lJU1UoQbN6ajMBdd+xLZnDUihHXGpi7U7/a7Wmtbj3756l9znG8eZXBm4zN2jne6 eaMaeywNhNjU6qkz7s3QseFX0MelO8igR6r6yzKSdLCEdH5YBwIyt0b/1KENzot1 lhexrKQ+jZu8ap3RfxrMqiHYsmx7rJgQp9tZnPAW+RBJLsDjBDb2fEV1ibtlHT8H f0fTGTMwNsq8GYv7EDFV3V3Fv/xiMn71 -----END CERTIFICATE-----Generated at Fri May 3 00:48:28 2024 by rpki-client on console-ams.rpki-client.org