$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft File: XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft (raw, json) Hash identifier: Ycq4+LE0bvR9VtXb4NBxzZPKaSGwahNrWk1ucZyQfRc= Subject key identifier: 1B:FF:E4:07:FF:FF:CA:77:18:68:8F:98:C4:BF:14:4D:1F:1F:D9:0F Authority key identifier: 5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 Certificate issuer: /CN=A914CB9F/serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Certificate serial: 0B78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft Manifest number: 0B72 Signing time: Mon 06 May 2024 19:33:23 +0000 Manifest this update: Mon 06 May 2024 19:33:23 +0000 Manifest next update: Mon 13 May 2024 19:33:22 +0000 Files and hashes: 1: XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl (hash: LtL+zjmuQD6L4ZnOuAIazwRVBBkXRkkZApYHF7erFy4=) 2: 4EE9B36406C711EA84978821C4F9AE02.roa (hash: fao/hFsNql3tmc5i90I+VfUoLICi/LhhbgNAajPLVkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 18:53:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2936 (0xb78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CB9F/serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Validity Not Before: May 6 19:33:23 2024 GMT Not After : May 13 19:33:22 2024 GMT Subject: CN=66393083-a5f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e0:c2:8d:37:27:63:12:86:7c:88:87:42:e4: 54:29:e6:cc:8a:0e:e6:ef:ca:d0:3f:6d:1d:0e:a1: 93:d1:62:cf:d3:64:ba:11:09:ba:cc:63:f6:f8:c6: e6:9e:29:db:3c:5e:1c:b5:f7:97:1a:06:58:5d:5d: 56:dc:ee:32:fd:ba:b1:80:e9:5f:8b:c5:e0:40:c3: 4e:9f:15:61:be:87:91:84:37:01:4e:02:93:0b:99: 4f:69:52:92:f3:b8:c5:dc:c0:4e:9a:47:66:86:2e: 27:f8:db:8f:e9:fc:ee:f3:ce:06:6f:d4:e5:11:79: 04:4b:1b:4b:d8:76:ae:df:84:75:06:aa:51:98:eb: 5e:b0:54:af:ee:21:0b:af:bf:7e:c1:5d:d8:4f:92: 33:14:c1:59:ed:30:c1:aa:c9:3b:57:ac:c1:4d:ac: d7:5d:88:80:c9:5f:3f:3e:1f:86:54:37:4e:d7:e9: 60:54:09:bd:ad:12:50:84:08:1c:99:5d:0f:af:5c: 1b:91:6c:ae:f7:c2:6b:51:3f:25:d0:fd:9c:1b:04: 47:a1:56:02:37:ff:aa:25:60:12:72:ca:1a:3b:ae: 50:16:8d:7b:2f:c0:1b:36:42:1c:fd:cd:2b:38:1a: be:ed:8d:cc:a4:e8:61:06:5b:55:12:69:4e:f8:5a: a7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:FF:E4:07:FF:FF:CA:77:18:68:8F:98:C4:BF:14:4D:1F:1F:D9:0F X509v3 Authority Key Identifier: keyid:5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:bd:71:dc:a7:de:92:be:89:3b:5f:d4:aa:e3:e8:fa:e8:1c: 15:3b:09:ef:fb:2f:cc:93:5c:b4:f7:0e:92:55:8f:b9:eb:86: f3:3b:d0:2c:e9:d8:6e:78:1e:13:1a:ee:f1:37:d5:3d:d1:7a: 0e:bc:d4:71:09:d5:85:9c:d1:d3:25:0a:0c:14:7b:7c:71:1a: dd:c6:0e:5b:7f:48:bb:ea:c7:7d:4a:c8:90:95:50:c5:37:ce: fd:7f:f8:7b:38:00:89:54:f4:af:54:db:c6:22:de:b2:3e:7e: 5a:67:07:ec:70:5d:77:86:ce:08:28:6a:c6:d4:c4:72:09:87: ff:f9:1b:9c:8b:6f:28:00:36:bd:b7:2a:b5:08:04:7b:1e:30: df:03:b9:b3:02:7b:31:65:8c:94:5f:2f:85:d9:5b:84:d7:e1: be:5b:39:3d:3b:28:da:11:75:ed:02:26:ea:fc:c1:ba:57:4a: 96:4c:41:94:2d:f4:36:04:8e:c0:f9:6f:2b:39:e2:6c:b9:df: c0:74:90:b6:b8:d2:19:55:bf:16:cc:25:f8:d8:d0:c6:42:ae: 0c:c3:e6:ff:27:a9:40:50:af:17:2d:c2:21:e5:d2:78:67:07: 8a:ae:41:c6:6b:19:92:85:0d:eb:82:b4:b1:46:20:18:a6:0e: 2f:10:2e:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCOUYxMTAvBgNVBAUTKDVENjJERjE5MjFERTFCNTk4QkFGQjg1N0Q0OUQyMzZE MkUxNUYyQjYwHhcNMjQwNTA2MTkzMzIzWhcNMjQwNTEzMTkzMzIyWjAYMRYwFAYD VQQDEw02NjM5MzA4My1hNWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqODCjTcnYxKGfIiHQuRUKebMig7m78rQP20dDqGT0WLP02S6EQm6zGP2+Mbm ninbPF4ctfeXGgZYXV1W3O4y/bqxgOlfi8XgQMNOnxVhvoeRhDcBTgKTC5lPaVKS 87jF3MBOmkdmhi4n+NuP6fzu884Gb9TlEXkESxtL2Hau34R1BqpRmOtesFSv7iEL r79+wV3YT5IzFMFZ7TDBqsk7V6zBTazXXYiAyV8/Ph+GVDdO1+lgVAm9rRJQhAgc mV0Pr1wbkWyu98JrUT8l0P2cGwRHoVYCN/+qJWAScsoaO65QFo17L8AbNkIc/c0r OBq+7Y3MpOhhBltVEmlO+FqnBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBv/5Af/ /8p3GGiPmMS/FE0fH9kPMB8GA1UdIwQYMBaAFF1i3xkh3htZi6+4V9SdI20uFfK2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0I5Ri8xMTU3MzlGQTA2 QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcxbUxyN2hYMUowamJTNFY4 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hXTGZHU0hlRzFtTHI3aFgxSjBqYlM0VjhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0I5Ri8xMTU3MzlGQTA2QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcx bUxyN2hYMUowamJTNFY4clkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtvXHcp96Svok7X9Sq4+j66BwVOwnv+y/Mk1y09w6SVY+564bzO9As 6dhueB4TGu7xN9U90XoOvNRxCdWFnNHTJQoMFHt8cRrdxg5bf0i76sd9SsiQlVDF N879f/h7OACJVPSvVNvGIt6yPn5aZwfscF13hs4IKGrG1MRyCYf/+Ruci28oADa9 tyq1CAR7HjDfA7mzAnsxZYyUXy+F2VuE1+G+Wzk9OyjaEXXtAibq/MG6V0qWTEGU LfQ2BI7A+W8rOeJsud/AdJC2uNIZVb8WzCX42NDGQq4Mw+b/J6lAUK8XLcIh5dJ4 ZweKrkHGaxmShQ3rgrSxRiAYpg4vEC4j -----END CERTIFICATE-----Generated at Mon May 6 20:19:31 2024 by rpki-client on console-ams.rpki-client.org