$ rpki-client -vvf rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft File: xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft (raw, json) Hash identifier: bSHz24oTn7Yy53qJvS6ZYh/mmtk3tnRat8O67zc8jD0= Subject key identifier: E0:FD:1E:E6:6F:88:49:FC:35:1F:2B:F7:22:08:22:0B:2D:87:C8:57 Authority key identifier: C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D Certificate issuer: /CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Certificate serial: 02C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft Manifest number: 02C1 Signing time: Sun 05 May 2024 03:38:22 +0000 Manifest this update: Sun 05 May 2024 03:38:22 +0000 Manifest next update: Sun 12 May 2024 03:38:21 +0000 Files and hashes: 1: xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl (hash: f/VpSWZiTBxrnomc6xI+LGXvH0qQOwpXUkkURHVyh9Q=) 2: 0484BF6EF76311EC93951455C4F9AE02.roa (hash: yfcp/+vcXd92Y/eY7SRY/CR1e0r/AdIrFespQFyYzR8=) 3: 3F7E8DCAA45C11EC845FEA36C4F9AE02.roa (hash: N4dFIKbp/UkPFYHASL0V+O/a94lreYQtC/E1dslsMzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 712 (0x2c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Validity Not Before: May 5 03:38:22 2024 GMT Not After : May 12 03:38:21 2024 GMT Subject: CN=6636ff2e-47eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9d:5e:d3:37:7a:d4:a8:b1:fb:53:b3:83:ac: af:a7:55:0f:7d:6b:99:50:e7:b4:19:23:e8:de:1b: 66:56:59:45:23:52:de:0d:97:7c:dd:07:4f:a9:99: 02:e0:0d:2b:0d:44:33:96:8c:8c:f3:4e:f3:9d:e2: 03:74:43:80:31:90:d9:90:2d:23:4d:61:64:d9:ce: c6:b9:99:98:c4:72:61:7b:5a:50:0c:89:4b:2b:70: 3e:aa:8f:7b:a5:8c:5e:08:0a:95:01:5f:15:ff:ef: d2:2c:fd:f5:5f:0a:7f:f9:4c:1d:6b:75:a2:6e:18: 07:b8:39:f9:a9:41:bd:2e:cf:7a:44:51:a6:5e:9c: 66:cd:28:2d:3b:4b:f0:55:81:1f:a8:63:68:22:73: fd:0b:87:8e:32:5f:fe:b8:67:0b:f7:59:a5:3f:12: 65:df:6a:df:85:d4:f5:29:f9:12:f9:64:9f:59:c3: 5a:df:6e:74:b0:af:c8:ce:9f:d9:25:53:9a:72:55: 4c:23:bb:ea:52:ab:4f:5f:6f:e4:dc:6c:38:9f:dc: 22:e4:fd:39:25:c7:fa:05:56:12:03:8d:2e:1a:af: 45:51:e0:de:1d:ab:e2:73:02:13:67:7f:b2:50:f1: d9:a7:50:6c:a2:6e:01:b8:5e:39:67:ab:b7:e0:bc: 2f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:FD:1E:E6:6F:88:49:FC:35:1F:2B:F7:22:08:22:0B:2D:87:C8:57 X509v3 Authority Key Identifier: keyid:C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:36:a7:14:76:e2:0d:46:dd:6f:e3:62:eb:02:bd:8a:0e:da: 14:56:e7:56:88:52:30:36:d3:5f:54:1d:51:a9:cd:44:ff:c6: ca:90:56:a3:09:66:95:18:80:42:8e:28:c8:92:18:ee:b7:79: 10:a4:0f:cc:11:9e:2e:f1:4c:d7:43:e8:eb:3e:a4:dd:c4:7f: a4:63:38:60:9b:34:19:3c:5b:33:a3:52:23:e0:08:bd:86:27: 24:9f:7e:0d:d8:4e:51:f9:f6:f8:bf:e9:28:c4:18:01:65:bb: 6d:85:23:7a:69:e0:70:a9:a8:ac:75:1b:64:86:57:16:5c:17: c4:0f:25:ab:4f:01:28:37:ac:a9:c6:63:d6:0b:c8:30:36:f7: 60:7e:bf:5f:1f:df:3c:63:1a:4d:3a:19:6e:bc:2e:0e:3c:38: 1b:d2:59:1a:f6:86:1e:1c:d0:b8:0e:4a:67:8c:28:20:d5:99: a8:be:58:ad:ba:fe:29:d5:06:9b:cf:68:39:30:87:4e:cf:27: 46:69:79:20:c5:94:b8:b7:2b:3c:c1:3c:bc:79:be:a6:aa:95: 9f:7b:43:67:74:86:03:27:84:81:85:58:75:d1:97:89:9e:ba: cd:38:b5:ae:cd:9b:ee:28:7b:d1:96:82:1d:f8:e4:9e:2b:7a: 46:9f:d5:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENBNUMxMTAvBgNVBAUTKEM0M0QxOUM2RDM5NzExMkEyQUZFRDQ2NjYxMjJGQzU3 NkI0Nzg4NkQwHhcNMjQwNTA1MDMzODIyWhcNMjQwNTEyMDMzODIxWjAYMRYwFAYD VQQDEw02NjM2ZmYyZS00N2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2p1e0zd61Kix+1Ozg6yvp1UPfWuZUOe0GSPo3htmVllFI1LeDZd83QdPqZkC 4A0rDUQzloyM807zneIDdEOAMZDZkC0jTWFk2c7GuZmYxHJhe1pQDIlLK3A+qo97 pYxeCAqVAV8V/+/SLP31Xwp/+Uwda3WibhgHuDn5qUG9Ls96RFGmXpxmzSgtO0vw VYEfqGNoInP9C4eOMl/+uGcL91mlPxJl32rfhdT1KfkS+WSfWcNa3250sK/Izp/Z JVOaclVMI7vqUqtPX2/k3Gw4n9wi5P05Jcf6BVYSA40uGq9FUeDeHavicwITZ3+y UPHZp1Bsom4BuF45Z6u34Lwv3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOD9HuZv iEn8NR8r9yIIIgsth8hXMB8GA1UdIwQYMBaAFMQ9GcbTlxEqKv7UZmEi/FdrR4ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0E1Qy82NTEwRTMxMEE0 NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVTb3FfdFJtWVNMOFYydEhp RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEMFp4dE9YRVNvcV90Um1ZU0w4VjJ0SGlHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0E1Qy82NTEwRTMxMEE0NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVT b3FfdFJtWVNMOFYydEhpRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCNqcUduINRt1v42LrAr2KDtoUVudWiFIwNtNfVB1Rqc1E/8bKkFaj CWaVGIBCjijIkhjut3kQpA/MEZ4u8UzXQ+jrPqTdxH+kYzhgmzQZPFszo1Ij4Ai9 hickn34N2E5R+fb4v+koxBgBZbtthSN6aeBwqaisdRtkhlcWXBfEDyWrTwEoN6yp xmPWC8gwNvdgfr9fH988YxpNOhluvC4OPDgb0lka9oYeHNC4DkpnjCgg1Zmovlit uv4p1Qabz2g5MIdOzydGaXkgxZS4tys8wTy8eb6mqpWfe0NndIYDJ4SBhVh10ZeJ nrrNOLWuzZvuKHvRloId+OSeK3pGn9XH -----END CERTIFICATE-----Generated at Sun May 5 04:39:58 2024 by rpki-client on console-ams.rpki-client.org