$ rpki-client -vvf rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft File: XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft (raw, json) Hash identifier: o6glaYN6q8VmQGC8GaotBUo2oICAp6F5Dm71b2BI0qg= Subject key identifier: FC:A0:C8:AE:2D:91:F0:02:A8:7A:2E:9F:41:18:B3:17:D9:CD:4B:3D Authority key identifier: 5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97 Certificate issuer: /CN=A913B3F2/serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft Manifest number: 56 Signing time: Wed 15 May 2024 08:00:43 +0000 Manifest this update: Wed 15 May 2024 08:00:42 +0000 Manifest next update: Wed 22 May 2024 08:00:42 +0000 Files and hashes: 1: XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl (hash: YOx1mxVNVKXlWaRZUuU7a0VuvlS0NJoqB146aLGe4s4=) 2: 16083E10A95E11EEBC0A7E5BC4F9AE02.roa (hash: 4wQ5LjqSM96xFhHK6HeLt7NKLyEGVLbwI0jCZEvZFQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B3F2/serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97 Validity Not Before: May 15 08:00:42 2024 GMT Not After : May 22 08:00:42 2024 GMT Subject: CN=66446baa-59f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6e:41:63:c4:3b:06:bf:b7:1c:5e:29:3c:fd: 9a:8b:8f:8f:a7:9b:29:44:b2:8e:dd:e6:8d:19:d4: cb:a4:76:c3:d5:2c:8c:3b:4f:84:66:c6:3f:ab:ff: 8b:75:76:4a:dd:00:7c:2e:7e:f3:0a:2e:85:2a:e4: e2:6f:4a:80:45:34:21:d5:40:ed:3d:f2:9d:c3:52: 48:29:b2:ad:b0:0b:8f:87:bc:22:7e:3f:01:0d:e2: 50:f5:79:c6:ee:44:79:40:25:c6:00:27:c5:c1:12: 2d:72:b9:37:ec:de:88:8e:f1:23:7d:14:4e:0a:ae: 02:bc:ad:19:6c:92:35:08:62:be:14:09:ae:27:0f: 0e:f9:9f:87:91:41:3c:0b:18:d9:6c:99:9d:24:fb: fb:0a:9b:20:ad:11:4f:13:f1:7b:b8:9b:15:33:b6: 69:66:2c:a7:e3:41:71:f7:c2:11:fe:f1:c1:cb:b3: 16:1a:3c:17:90:52:98:a2:80:b7:ad:d7:a4:8d:80: 9f:7d:14:ad:cf:31:e8:bc:e0:7c:a8:a6:c1:18:b9: e0:2a:cd:4d:6d:6a:11:90:cd:f2:42:f3:b2:fd:10: 9c:1e:20:71:c2:87:11:0f:32:e4:6d:a4:20:42:a1: 89:7e:61:c2:eb:4f:41:0b:31:2b:06:56:e9:b6:20: 90:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A0:C8:AE:2D:91:F0:02:A8:7A:2E:9F:41:18:B3:17:D9:CD:4B:3D X509v3 Authority Key Identifier: keyid:5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:f0:91:d8:7b:bc:4a:37:d9:40:f6:2f:4f:94:ca:29:99:f8: ea:3f:f7:43:ae:6c:a1:d1:f3:3f:25:f2:59:59:02:7c:74:bc: 5d:99:73:e4:b2:27:18:eb:48:c1:ae:10:a8:f5:69:17:32:8b: 8d:93:d1:33:12:fa:93:36:7e:dd:26:b9:73:82:aa:ec:92:96: 37:6e:69:6a:f1:7f:52:e3:f6:f4:26:af:5a:cf:ec:8e:af:27: 2d:8e:75:8e:af:58:f4:59:56:17:58:fe:6c:00:1d:6e:d1:e1: 9f:d8:bf:92:ed:c5:90:85:ac:01:5a:61:a8:8c:01:ae:80:aa: 31:ff:94:88:f9:62:83:a3:cc:a1:5c:31:f6:64:aa:4a:03:61: 9a:41:54:45:58:28:d4:12:72:65:0a:3c:95:02:43:95:a8:de: ec:75:95:b2:b3:fd:7d:42:22:eb:7c:91:1f:3e:f2:75:74:2b: d2:4d:88:8d:21:80:a4:52:11:a8:88:ce:56:91:51:c2:c8:58: 17:64:d2:17:61:e7:82:d9:b6:26:21:55:bc:c6:38:a1:72:19: da:cf:40:de:69:9e:87:4d:b3:c9:33:78:b6:e5:09:65:10:8c: cc:2c:57:bc:41:ca:99:f2:c8:e9:3b:0e:8b:54:73:96:57:d9: 3a:61:8c:0d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjNGMjExMC8GA1UEBRMoNUNDOTFBRkQ1QjhCMzdFRDhDNTA5RjYxMTg5RjQ0OEU3 MzEyMUY5NzAeFw0yNDA1MTUwODAwNDJaFw0yNDA1MjIwODAwNDJaMBgxFjAUBgNV BAMTDTY2NDQ2YmFhLTU5ZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZbkFjxDsGv7ccXik8/ZqLj4+nmylEso7d5o0Z1MukdsPVLIw7T4Rmxj+r/4t1 dkrdAHwufvMKLoUq5OJvSoBFNCHVQO098p3DUkgpsq2wC4+HvCJ+PwEN4lD1ecbu RHlAJcYAJ8XBEi1yuTfs3oiO8SN9FE4KrgK8rRlskjUIYr4UCa4nDw75n4eRQTwL GNlsmZ0k+/sKmyCtEU8T8Xu4mxUztmlmLKfjQXH3whH+8cHLsxYaPBeQUpiigLet 16SNgJ99FK3PMei84HyopsEYueAqzU1tahGQzfJC87L9EJweIHHChxEPMuRtpCBC oYl+YcLrT0ELMSsGVum2IJDdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/KDIri2R 8AKoei6fQRizF9nNSz0wHwYDVR0jBBgwFoAUXMka/VuLN+2MUJ9hGJ9EjnMSH5cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCM0YyLzAwNTFEQkNDOTdF MjExRUU4OTgxM0QyM0M0RjlBRTAyL1hNa2FfVnVMTi0yTVVKOWhHSjlFam5NU0g1 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWE1rYV9WdUxOLTJNVUo5aEdKOUVqbk1TSDVjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC M0YyLzAwNTFEQkNDOTdFMjExRUU4OTgxM0QyM0M0RjlBRTAyL1hNa2FfVnVMTi0y TVVKOWhHSjlFam5NU0g1Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABPwkdh7vEo32UD2L0+UyimZ+Oo/90OubKHR8z8l8llZAnx0vF2Zc+Sy JxjrSMGuEKj1aRcyi42T0TMS+pM2ft0muXOCquySljduaWrxf1Lj9vQmr1rP7I6v Jy2OdY6vWPRZVhdY/mwAHW7R4Z/Yv5LtxZCFrAFaYaiMAa6AqjH/lIj5YoOjzKFc MfZkqkoDYZpBVEVYKNQScmUKPJUCQ5Wo3ux1lbKz/X1CIut8kR8+8nV0K9JNiI0h gKRSEaiIzlaRUcLIWBdk0hdh54LZtiYhVbzGOKFyGdrPQN5pnodNs8kzeLblCWUQ jMwsV7xBypnyyOk7DotUc5ZX2TphjA0= -----END CERTIFICATE-----Generated at Wed May 15 09:04:08 2024 by rpki-client on console-ams.rpki-client.org