$ rpki-client -vvf rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft File: _XRQsRgVCpshTxoL7t8-Oyb-0Es.mft (raw, json) Hash identifier: uNP6yIxinRnhTztlY+o8vx2rxRFW4FK5pCrVJeLSCxo= Subject key identifier: 33:22:A8:49:61:F0:BB:61:DB:27:DA:97:E0:11:84:72:8A:23:46:F9 Authority key identifier: FD:74:50:B1:18:15:0A:9B:21:4F:1A:0B:EE:DF:3E:3B:26:FE:D0:4B Certificate issuer: /CN=A9144160/serialNumber=FD7450B118150A9B214F1A0BEEDF3E3B26FED04B Certificate serial: 0F1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XRQsRgVCpshTxoL7t8-Oyb-0Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft Manifest number: 0F18 Signing time: Wed 08 May 2024 18:17:39 +0000 Manifest this update: Wed 08 May 2024 18:17:39 +0000 Manifest next update: Wed 15 May 2024 18:17:39 +0000 Files and hashes: 1: _XRQsRgVCpshTxoL7t8-Oyb-0Es.crl (hash: lgUBJbxqoN5/zWwvMSOPSmlb60uay+7mXjEHf+O0DY0=) 2: 378459525C6511E989D03610C4F9AE02.roa (hash: SpnN7c6eHl0EYy2wtohXpO+pAN3jiA1sdoHCwMdNrVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.crl rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XRQsRgVCpshTxoL7t8-Oyb-0Es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3871 (0xf1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144160/serialNumber=FD7450B118150A9B214F1A0BEEDF3E3B26FED04B Validity Not Before: May 8 18:17:39 2024 GMT Not After : May 15 18:17:39 2024 GMT Subject: CN=663bc1c3-705c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c4:77:ee:f7:da:61:ea:c0:a2:d9:6b:9f:5e: f5:fd:9f:18:4c:63:db:30:52:22:63:63:0d:79:b7: 2c:a9:fd:e5:f8:87:37:4d:b5:c4:87:a0:b5:6b:15: 23:d4:5a:72:8f:b8:67:40:7f:26:6c:9e:9f:c1:79: 38:45:1f:82:c2:17:3e:6d:2c:0a:7a:5e:98:d9:a5: 83:e2:94:47:67:da:fd:d5:e9:08:62:d3:56:37:91: 30:9a:95:e5:eb:f3:10:8e:95:1f:d5:08:af:93:77: c8:f3:17:ea:b1:33:3a:92:dd:71:65:08:2b:17:bb: 50:0b:c0:0a:82:d8:6a:3c:47:7f:96:7f:6e:a0:07: 30:fa:d9:d2:cc:eb:8b:99:f7:45:6d:8d:41:6c:de: 1b:a3:5a:c7:b4:ee:12:57:7c:6e:51:22:ef:85:2d: 03:0b:65:72:6f:b3:a4:52:d4:79:bb:1f:d2:4c:ac: b9:3d:81:d8:a6:3e:50:2f:8a:3d:3b:57:b7:06:f3: b7:c1:ef:ca:37:53:d2:91:c5:e7:18:19:d4:00:1d: f4:9e:bc:a5:a6:a8:38:0b:1d:1c:d8:d5:13:74:c4: 4e:09:f1:a4:39:f9:bc:8f:12:24:10:35:cc:55:70: 2b:19:0a:c2:bb:f3:8d:08:7c:aa:8c:c2:00:8f:94: 88:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:22:A8:49:61:F0:BB:61:DB:27:DA:97:E0:11:84:72:8A:23:46:F9 X509v3 Authority Key Identifier: keyid:FD:74:50:B1:18:15:0A:9B:21:4F:1A:0B:EE:DF:3E:3B:26:FE:D0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XRQsRgVCpshTxoL7t8-Oyb-0Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:b4:bc:f6:fc:3f:0f:39:77:69:3f:80:01:49:d1:55:d7:a7: fe:36:1a:ad:e5:1e:74:81:33:f7:95:f8:75:e1:68:be:bb:16: dc:05:f0:32:35:81:a7:1e:59:d3:d8:de:f8:81:f5:29:a8:43: 1f:33:c9:77:da:b2:9f:0c:82:5e:59:a3:69:4a:a8:a6:3f:60: 2d:d1:22:c5:a6:51:30:5d:30:32:c4:61:3b:74:5a:da:c1:67: c2:50:9f:cd:6d:07:17:09:41:f6:63:3d:1c:6b:77:b4:84:7a: e1:c3:21:05:b5:4f:b3:4e:22:27:2f:c3:8c:7f:a9:c8:85:b4: 50:8d:3c:b9:18:46:e5:78:4a:61:b6:d5:ea:e4:4b:ae:3d:d2: 71:5b:9d:20:32:f9:97:71:3f:b4:62:03:f0:2e:6b:db:29:e7: ac:ec:d0:33:05:17:38:b2:67:57:cc:ee:1f:98:86:8d:a7:25: 31:6a:b2:ca:39:2a:1a:1a:91:92:74:2a:a3:2f:2e:c1:9a:a6: f7:0e:22:de:8e:f8:16:a1:8a:c6:8b:ba:e1:d9:99:59:2a:4a: 62:03:ef:f1:c2:7d:50:65:7c:cb:3f:0e:02:f1:6a:4e:36:56: 73:de:5b:c5:cf:ca:25:d8:71:74:2e:e2:1c:d1:2a:8d:2c:b2: da:a0:12:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQxNjAxMTAvBgNVBAUTKEZENzQ1MEIxMTgxNTBBOUIyMTRGMUEwQkVFREYzRTNC MjZGRUQwNEIwHhcNMjQwNTA4MTgxNzM5WhcNMjQwNTE1MTgxNzM5WjAYMRYwFAYD VQQDEw02NjNiYzFjMy03MDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcR37vfaYerAotlrn171/Z8YTGPbMFIiY2MNebcsqf3l+Ic3TbXEh6C1axUj 1Fpyj7hnQH8mbJ6fwXk4RR+Cwhc+bSwKel6Y2aWD4pRHZ9r91ekIYtNWN5EwmpXl 6/MQjpUf1Qivk3fI8xfqsTM6kt1xZQgrF7tQC8AKgthqPEd/ln9uoAcw+tnSzOuL mfdFbY1BbN4bo1rHtO4SV3xuUSLvhS0DC2Vyb7OkUtR5ux/STKy5PYHYpj5QL4o9 O1e3BvO3we/KN1PSkcXnGBnUAB30nrylpqg4Cx0c2NUTdMROCfGkOfm8jxIkEDXM VXArGQrCu/ONCHyqjMIAj5SIXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMiqElh 8Lth2yfal+ARhHKKI0b5MB8GA1UdIwQYMBaAFP10ULEYFQqbIU8aC+7fPjsm/tBL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDE2MC9ERDY1NzFBNjRG OTIxMUU5QUQxMEFBMTNDNEY5QUUwMi9fWFJRc1JnVkNwc2hUeG9MN3Q4LU95Yi0w RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19YUlFzUmdWQ3BzaFR4b0w3dDgtT3liLTBFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDE2MC9ERDY1NzFBNjRGOTIxMUU5QUQxMEFBMTNDNEY5QUUwMi9fWFJRc1JnVkNw c2hUeG9MN3Q4LU95Yi0wRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZtLz2/D8POXdpP4ABSdFV16f+Nhqt5R50gTP3lfh14Wi+uxbcBfAy NYGnHlnT2N74gfUpqEMfM8l32rKfDIJeWaNpSqimP2At0SLFplEwXTAyxGE7dFra wWfCUJ/NbQcXCUH2Yz0ca3e0hHrhwyEFtU+zTiInL8OMf6nIhbRQjTy5GEbleEph ttXq5EuuPdJxW50gMvmXcT+0YgPwLmvbKees7NAzBRc4smdXzO4fmIaNpyUxarLK OSoaGpGSdCqjLy7Bmqb3DiLejvgWoYrGi7rh2ZlZKkpiA+/xwn1QZXzLPw4C8WpO NlZz3lvFz8ol2HF0LuIc0SqNLLLaoBKa -----END CERTIFICATE-----Generated at Wed May 8 21:03:56 2024 by rpki-client on console-fra.rpki-client.org