$ rpki-client -vvf rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft File: X48BYbesuyVfE88IG2ZTYZtOLAI.mft (raw, json) Hash identifier: oD6ProRVVTmrY94+ZwpDCz4YIucr6mM9bt9TmSLGUMM= Subject key identifier: F8:70:9D:B8:58:EF:03:F0:A1:9C:88:BA:DA:11:91:18:55:1F:C9:71 Authority key identifier: 5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02 Certificate issuer: /CN=A9149A0D/serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02 Certificate serial: 06F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft Manifest number: 06F0 Signing time: Mon 06 May 2024 22:47:35 +0000 Manifest this update: Mon 06 May 2024 22:47:34 +0000 Manifest next update: Mon 13 May 2024 22:47:34 +0000 Files and hashes: 1: X48BYbesuyVfE88IG2ZTYZtOLAI.crl (hash: JeNDK1MU/+Lf6ZDcki+t5g+kdRs4qoUEarG+zHs8Dv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 22:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1776 (0x6f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149A0D/serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02 Validity Not Before: May 6 22:47:34 2024 GMT Not After : May 13 22:47:34 2024 GMT Subject: CN=66395e06-435a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a7:0d:5c:95:bc:42:58:97:20:0a:fe:e9:6f: 60:24:20:f2:b7:f0:97:ef:24:8d:ac:c4:4d:3f:18: 33:81:8f:4d:86:87:a6:44:6e:d7:d0:4d:c0:ed:12: f7:e7:e4:16:10:25:62:92:b2:5d:c8:8d:d7:3d:14: 55:24:24:5e:e4:41:fc:2b:72:b7:15:f4:94:32:e1: b0:9d:d7:d2:7f:47:22:5a:f6:4b:bf:7d:10:9d:34: 64:6c:c1:7d:06:09:2f:5d:37:55:4e:ca:74:28:45: 44:fb:2d:14:bb:c7:fb:27:9e:bc:34:f3:3d:1b:63: a4:7c:23:aa:42:92:a9:57:39:6f:c9:1f:2a:75:44: e6:74:72:e3:2d:98:e2:ed:a7:2c:ed:4e:98:83:55: 6b:37:6e:41:68:00:3a:92:33:73:14:c3:06:a8:f2: 0b:97:0a:f7:f1:1a:13:8f:ea:b1:42:91:11:2b:b7: a7:a1:16:3e:43:09:02:f9:51:f1:c6:65:d6:7f:f1: 5e:f5:ec:ce:a1:49:35:87:92:de:82:7c:56:46:c7: e1:b3:64:a3:59:76:0a:7d:6c:98:38:2c:50:7f:24: 13:bf:34:87:2d:b9:5d:c8:d5:cb:69:85:0d:2c:ff: 3d:77:cc:b8:6e:35:51:10:85:cd:90:45:f7:bd:56: dc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:70:9D:B8:58:EF:03:F0:A1:9C:88:BA:DA:11:91:18:55:1F:C9:71 X509v3 Authority Key Identifier: keyid:5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:c4:ab:eb:ca:b4:7d:83:94:c2:07:e4:d5:65:e9:de:9f:47: ac:ff:87:c6:78:a1:7a:86:0f:31:b3:f6:7a:53:b4:c7:c4:91: 28:dd:01:fe:c3:17:98:ad:57:af:9d:ab:f9:8d:c9:f9:ce:a9: ba:d4:7b:5a:8d:82:0f:65:ae:02:00:41:ed:67:0d:2e:8c:4d: 9e:dc:ae:f3:ce:ce:e0:ff:81:1b:d3:d3:bb:7a:2f:9e:1f:f7: d5:7e:18:3a:00:42:10:ce:ea:f7:df:81:ae:ca:da:d8:10:cd: e1:d5:7e:ba:66:d2:e8:59:db:e3:6e:be:00:31:62:09:9c:f2: b5:ff:49:ae:e7:a9:f4:0b:f8:d4:b3:e3:9d:c9:94:c9:de:68: fd:1a:22:19:70:5a:63:5a:93:c7:11:e1:f3:db:54:71:8d:9e: 5d:35:71:8d:5d:6d:cb:94:29:24:f1:f3:b1:cd:e4:4c:e5:8f: 3e:9b:bd:0f:dc:44:ef:75:f1:a8:16:03:12:8d:32:fc:ca:b1: b7:4a:5e:17:da:0a:df:dd:73:86:44:75:8c:6a:52:6e:45:29: 8a:19:92:83:7d:40:f2:26:05:ce:54:06:92:56:0f:a1:06:f6: a8:90:5b:8e:cc:01:7f:18:d1:d6:69:60:4d:fc:84:8b:20:f4: 28:cb:7d:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlBMEQxMTAvBgNVBAUTKDVGOEYwMTYxQjdBQ0JCMjU1RjEzQ0YwODFCNjY1MzYx OUI0RTJDMDIwHhcNMjQwNTA2MjI0NzM0WhcNMjQwNTEzMjI0NzM0WjAYMRYwFAYD VQQDEw02NjM5NWUwNi00MzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKcNXJW8QliXIAr+6W9gJCDyt/CX7ySNrMRNPxgzgY9NhoemRG7X0E3A7RL3 5+QWECVikrJdyI3XPRRVJCRe5EH8K3K3FfSUMuGwndfSf0ciWvZLv30QnTRkbMF9 BgkvXTdVTsp0KEVE+y0Uu8f7J568NPM9G2OkfCOqQpKpVzlvyR8qdUTmdHLjLZji 7acs7U6Yg1VrN25BaAA6kjNzFMMGqPILlwr38RoTj+qxQpERK7enoRY+QwkC+VHx xmXWf/Fe9ezOoUk1h5LegnxWRsfhs2SjWXYKfWyYOCxQfyQTvzSHLbldyNXLaYUN LP89d8y4bjVREIXNkEX3vVbcIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhwnbhY 7wPwoZyIutoRkRhVH8lxMB8GA1UdIwQYMBaAFF+PAWG3rLslXxPPCBtmU2GbTiwC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUEwRC8wRkI3OTE2NEZC MTUxMUVBQjAxMUVDNkVDNEY5QUUwMi9YNDhCWWJlc3V5VmZFODhJRzJaVFladE9M QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g0OEJZYmVzdXlWZkU4OElHMlpUWVp0T0xBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUEwRC8wRkI3OTE2NEZCMTUxMUVBQjAxMUVDNkVDNEY5QUUwMi9YNDhCWWJlc3V5 VmZFODhJRzJaVFladE9MQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWxKvryrR9g5TCB+TVZenen0es/4fGeKF6hg8xs/Z6U7THxJEo3QH+ wxeYrVevnav5jcn5zqm61HtajYIPZa4CAEHtZw0ujE2e3K7zzs7g/4Eb09O7ei+e H/fVfhg6AEIQzur334GuytrYEM3h1X66ZtLoWdvjbr4AMWIJnPK1/0mu56n0C/jU s+OdyZTJ3mj9GiIZcFpjWpPHEeHz21RxjZ5dNXGNXW3LlCkk8fOxzeRM5Y8+m70P 3ETvdfGoFgMSjTL8yrG3Sl4X2grf3XOGRHWMalJuRSmKGZKDfUDyJgXOVAaSVg+h BvaokFuOzAF/GNHWaWBN/ISLIPQoy30G -----END CERTIFICATE-----Generated at Tue May 7 00:53:16 2024 by rpki-client on console-ams.rpki-client.org