$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft File: xG1ZE_bCUMau4vMnRTXOhmKVufo.mft (raw, json) Hash identifier: OBRj5yL6HdZOX6PaU1iilB1avGuk1lgrMNHh//kMg74= Subject key identifier: BE:FF:37:53:AB:0F:27:0E:12:D3:9A:E8:AB:91:A4:33:E4:43:D9:8A Authority key identifier: C4:6D:59:13:F6:C2:50:C6:AE:E2:F3:27:45:35:CE:86:62:95:B9:FA Certificate issuer: /CN=A9148B83/serialNumber=C46D5913F6C250C6AEE2F3274535CE866295B9FA Certificate serial: 059B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft Manifest number: 0592 Signing time: Sun 19 May 2024 00:28:25 +0000 Manifest this update: Sun 19 May 2024 00:28:25 +0000 Manifest next update: Sun 26 May 2024 00:28:25 +0000 Files and hashes: 1: xG1ZE_bCUMau4vMnRTXOhmKVufo.crl (hash: iAiE2sETXp57Ge7RpCt6zMPXRvqa/CfnAxAS8NuqgQo=) 2: 65FE79B8885D11EB81454E41C4F9AE02.roa (hash: yJcXIOHZrZvQNo0ukdJEKm6dbG3rbyIaGjIEhNXIugs=) 3: 009E969E885C11EB88A7723DC4F9AE02.roa (hash: BJnNWnj5bAaWTSHL28K9ADigo6P+b0SvAF+XSGEZo6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.crl rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1435 (0x59b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B83/serialNumber=C46D5913F6C250C6AEE2F3274535CE866295B9FA Validity Not Before: May 19 00:28:25 2024 GMT Not After : May 26 00:28:25 2024 GMT Subject: CN=664947a9-56b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:05:69:85:33:60:ff:7a:8f:5c:c8:22:45:7d: bd:cd:4f:88:94:da:78:ea:d7:cc:58:1d:d7:79:0a: 90:20:09:53:4f:b0:c6:d9:09:0e:02:2b:a4:8f:23: 54:f8:f1:e5:98:74:6a:6c:3b:b3:f2:fb:1e:a4:4c: 40:3a:f9:6f:6a:3b:1d:d1:81:ea:66:21:cc:04:00: cb:48:25:89:69:f5:50:69:f4:7f:13:e1:5c:e7:51: 16:03:f8:1c:68:5c:da:3f:72:f4:28:9e:26:89:2e: 4a:b7:37:92:79:15:ad:89:72:a1:d4:f7:18:29:c5: 64:0b:ba:d8:de:8c:76:04:a7:7c:cb:f7:23:2f:65: 22:7c:4a:48:dc:ac:e1:ad:84:39:f1:d0:89:a7:33: b0:e8:82:a6:be:af:02:d7:e1:0a:63:eb:91:73:74: c5:c4:9c:b5:7a:c9:e6:77:92:4e:20:76:58:dc:56: f6:94:ca:24:74:e9:e1:cc:de:10:84:d0:e6:61:3c: af:a5:76:b8:c8:e7:d1:05:68:ad:2d:92:11:1c:ac: c2:ef:2b:39:4c:3e:8e:35:4d:26:b0:bd:25:49:fa: 70:5e:e1:81:53:39:9a:ce:43:25:b8:91:8a:96:d7: 16:0a:28:8b:8c:27:de:8d:c8:f5:0a:87:5f:c5:6d: 60:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:FF:37:53:AB:0F:27:0E:12:D3:9A:E8:AB:91:A4:33:E4:43:D9:8A X509v3 Authority Key Identifier: keyid:C4:6D:59:13:F6:C2:50:C6:AE:E2:F3:27:45:35:CE:86:62:95:B9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b5:df:4b:87:bd:6c:0f:52:1f:ef:55:0b:12:05:98:f6:22: ed:4a:69:7b:f6:bb:66:7c:91:15:78:08:93:3a:4a:69:2d:6f: 77:11:ca:ef:d2:eb:d7:98:1f:ef:de:be:11:c7:e4:42:a5:00: 83:9f:04:e5:9d:01:33:64:62:3e:98:86:f5:27:33:41:c3:6b: 27:a5:56:f3:68:94:fc:a0:d3:62:8d:3d:4c:70:97:af:67:ab: e2:59:62:bb:9c:3a:5d:d1:c2:4a:31:54:f2:6a:b1:8d:dd:38: 44:a9:94:5b:05:38:c8:56:f9:6a:c7:02:2f:34:1a:82:21:1a: b4:6c:b8:76:7c:ca:10:e8:9b:a8:6f:5b:2a:ae:b1:09:2c:e1: 04:c8:ed:04:1c:72:cf:9d:94:70:4a:71:29:e3:86:87:a3:5d: 49:56:6b:03:37:1a:22:fb:5b:d8:ef:68:3f:0a:1c:c1:67:7d: f0:b7:85:53:fb:6a:0c:42:9d:b9:a1:e2:22:15:2c:3f:d2:5f: bc:77:57:12:42:bb:d5:8c:9e:a5:6c:a7:a3:ad:8b:bd:b1:33: e6:6a:a1:7d:b2:59:2e:a9:b9:d7:75:a9:de:f3:f0:d4:2f:07: ca:bf:22:f6:9f:d5:42:73:1e:2d:f6:b1:3d:eb:d6:9e:a2:f0: cb:bf:26:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCODMxMTAvBgNVBAUTKEM0NkQ1OTEzRjZDMjUwQzZBRUUyRjMyNzQ1MzVDRTg2 NjI5NUI5RkEwHhcNMjQwNTE5MDAyODI1WhcNMjQwNTI2MDAyODI1WjAYMRYwFAYD VQQDEw02NjQ5NDdhOS01NmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQVphTNg/3qPXMgiRX29zU+IlNp46tfMWB3XeQqQIAlTT7DG2QkOAiukjyNU +PHlmHRqbDuz8vsepExAOvlvajsd0YHqZiHMBADLSCWJafVQafR/E+Fc51EWA/gc aFzaP3L0KJ4miS5KtzeSeRWtiXKh1PcYKcVkC7rY3ox2BKd8y/cjL2UifEpI3Kzh rYQ58dCJpzOw6IKmvq8C1+EKY+uRc3TFxJy1esnmd5JOIHZY3Fb2lMokdOnhzN4Q hNDmYTyvpXa4yOfRBWitLZIRHKzC7ys5TD6ONU0msL0lSfpwXuGBUzmazkMluJGK ltcWCiiLjCfejcj1CodfxW1g8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL7/N1Or DycOEtOa6KuRpDPkQ9mKMB8GA1UdIwQYMBaAFMRtWRP2wlDGruLzJ0U1zoZilbn6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEI4My83N0FBNDE0Njg3 RTExMUVCQjUwMUNCMjVDNEY5QUUwMi94RzFaRV9iQ1VNYXU0dk1uUlRYT2htS1Z1 Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHMVpFX2JDVU1hdTR2TW5SVFhPaG1LVnVmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEI4My83N0FBNDE0Njg3RTExMUVCQjUwMUNCMjVDNEY5QUUwMi94RzFaRV9iQ1VN YXU0dk1uUlRYT2htS1Z1Zm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAetd9Lh71sD1If71ULEgWY9iLtSml79rtmfJEVeAiTOkppLW93Ecrv 0uvXmB/v3r4Rx+RCpQCDnwTlnQEzZGI+mIb1JzNBw2snpVbzaJT8oNNijT1McJev Z6viWWK7nDpd0cJKMVTyarGN3ThEqZRbBTjIVvlqxwIvNBqCIRq0bLh2fMoQ6Juo b1sqrrEJLOEEyO0EHHLPnZRwSnEp44aHo11JVmsDNxoi+1vY72g/ChzBZ33wt4VT +2oMQp25oeIiFSw/0l+8d1cSQrvVjJ6lbKejrYu9sTPmaqF9slkuqbnXdane8/DU LwfKvyL2n9VCcx4t9rE969aeovDLvyYE -----END CERTIFICATE-----Generated at Sun May 19 00:59:41 2024 by rpki-client on console-fra.rpki-client.org