$ rpki-client -vvf rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft File: -XxrnwabbALLPY6tWvc-UGwIyjg.mft (raw, json) Hash identifier: oKKn4cXbUnOCL+NVQwGYIC10I6KFEqzw4H36hthoRB8= Subject key identifier: CC:6D:9B:16:ED:75:66:49:C6:B8:7F:AB:DA:8D:8B:4D:AD:F8:D6:2D Authority key identifier: F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38 Certificate issuer: /CN=A914DB69/serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38 Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft Manifest number: 6F Signing time: Wed 15 May 2024 07:36:15 +0000 Manifest this update: Wed 15 May 2024 07:36:15 +0000 Manifest next update: Wed 22 May 2024 07:36:15 +0000 Files and hashes: 1: -XxrnwabbALLPY6tWvc-UGwIyjg.crl (hash: U4OcJbpObI9epKJWqJXpT6xDAT0dpORSQOLGEZN2T+I=) 2: C4AA7A3A6E5F11EE9F66E967C4F9AE02.roa (hash: wDBNzjkcu9/HIOj7kIuRbIYO4j1JlMBpLoGUy634Leo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DB69/serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38 Validity Not Before: May 15 07:36:15 2024 GMT Not After : May 22 07:36:15 2024 GMT Subject: CN=664465ef-6fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:dd:99:46:14:7e:1e:91:16:74:e2:58:97:36: 37:56:d6:5e:a7:a0:8c:89:2b:05:b6:62:5a:0b:4a: 3a:18:c3:ea:ab:84:f5:85:93:04:d0:12:57:05:09: 82:85:8d:e9:9a:8a:09:35:be:c5:b6:19:b3:6a:b5: 27:49:63:42:ff:59:e8:4c:1f:45:6d:fe:ed:a0:18: 67:a6:8a:46:d0:1f:80:a4:ef:a5:66:8a:d2:2d:e3: f9:12:a5:16:70:45:ab:68:26:b1:74:8f:e0:de:02: c7:bb:a3:1c:5b:4e:48:11:16:ce:08:ae:e1:90:67: b7:09:5a:a9:ca:9a:a7:6f:60:01:00:f1:81:7e:58: 66:92:e0:2a:68:62:22:3d:24:56:b8:2c:ec:26:6e: 75:f2:83:06:39:8e:0b:fd:a1:82:f5:ad:92:9d:97: a0:df:0b:d0:5d:02:80:1f:01:d1:09:b3:15:a1:22: c4:b9:7f:05:4a:9a:81:f7:df:01:4d:a9:fd:19:70: 95:ce:e6:a3:76:7d:20:d3:1d:54:77:e2:c7:ee:89: 56:32:0b:d7:15:0c:0c:f8:e0:d3:55:98:e5:61:7e: 0f:85:ea:d8:43:0f:35:06:2d:a3:98:d6:2e:80:2d: 97:f3:73:ec:f5:77:c4:ae:05:16:17:ec:8c:62:ff: 78:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6D:9B:16:ED:75:66:49:C6:B8:7F:AB:DA:8D:8B:4D:AD:F8:D6:2D X509v3 Authority Key Identifier: keyid:F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:2b:c4:21:0c:ff:d5:6e:93:96:ba:ae:97:8e:53:49:51:d3: 84:8d:21:67:ff:4a:ee:46:42:0f:4d:79:da:07:ff:f3:91:78: 62:a7:cc:ee:da:63:0a:f3:cf:fb:d2:07:18:2a:be:41:75:5e: df:6f:6e:3b:83:0d:4a:34:31:6b:5c:65:28:9b:fc:44:5c:e4: 5a:df:3d:18:f1:f0:7d:ed:fc:1e:6a:d9:f6:29:7a:44:c3:d1: 41:c1:e2:a8:32:74:19:56:fe:f2:eb:49:2a:25:6d:19:9b:7e: 23:f2:3f:29:66:d2:ed:4e:65:3c:b0:d8:51:20:e4:53:8a:d9: b3:32:38:06:c9:c1:d7:02:16:63:a7:f5:2f:97:60:8e:c4:ca: 5b:56:64:09:2d:70:3d:73:50:c6:de:42:27:f0:ae:4d:7f:fa: eb:2f:7f:5e:b6:0e:20:21:17:c5:76:dd:97:4e:6a:a1:96:64: cf:19:8a:e8:0a:11:0a:58:3a:44:db:6c:22:69:a3:4b:1f:eb: 8f:44:c0:9b:c0:82:e9:7d:66:89:5e:56:8b:25:ce:d7:b6:50: c6:48:98:44:03:1a:b2:42:57:62:ea:99:b5:02:3d:7f:89:0f: 1a:2c:89:cc:16:6a:fb:b3:29:2f:b8:54:19:07:c1:c6:9a:42: 43:dc:5c:74 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 REI2OTExMC8GA1UEBRMoRjk3QzZCOUYwNjlCNkMwMkNCM0Q4RUFENUFGNzNFNTA2 QzA4Q0EzODAeFw0yNDA1MTUwNzM2MTVaFw0yNDA1MjIwNzM2MTVaMBgxFjAUBgNV BAMTDTY2NDQ2NWVmLTZmZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDL3ZlGFH4ekRZ04liXNjdW1l6noIyJKwW2YloLSjoYw+qrhPWFkwTQElcFCYKF jemaigk1vsW2GbNqtSdJY0L/WehMH0Vt/u2gGGemikbQH4Ck76VmitIt4/kSpRZw RatoJrF0j+DeAse7oxxbTkgRFs4IruGQZ7cJWqnKmqdvYAEA8YF+WGaS4CpoYiI9 JFa4LOwmbnXygwY5jgv9oYL1rZKdl6DfC9BdAoAfAdEJsxWhIsS5fwVKmoH33wFN qf0ZcJXO5qN2fSDTHVR34sfuiVYyC9cVDAz44NNVmOVhfg+F6thDDzUGLaOY1i6A LZfzc+z1d8SuBRYX7Ixi/3gxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzG2bFu11 ZknGuH+r2o2LTa341i0wHwYDVR0jBBgwFoAU+XxrnwabbALLPY6tWvc+UGwIyjgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREQjY5L0RBODYwQ0M4NkU1 QzExRUU5QzAxMzM2MUM0RjlBRTAyLy1YeHJud2FiYkFMTFBZNnRXdmMtVUd3SXlq Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLVh4cm53YWJiQUxMUFk2dFd2Yy1VR3dJeWpnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE QjY5L0RBODYwQ0M4NkU1QzExRUU5QzAxMzM2MUM0RjlBRTAyLy1YeHJud2FiYkFM TFBZNnRXdmMtVUd3SXlqZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADwrxCEM/9Vuk5a6rpeOU0lR04SNIWf/Su5GQg9NedoH//OReGKnzO7a Ywrzz/vSBxgqvkF1Xt9vbjuDDUo0MWtcZSib/ERc5FrfPRjx8H3t/B5q2fYpekTD 0UHB4qgydBlW/vLrSSolbRmbfiPyPylm0u1OZTyw2FEg5FOK2bMyOAbJwdcCFmOn 9S+XYI7EyltWZAktcD1zUMbeQifwrk1/+usvf162DiAhF8V23ZdOaqGWZM8ZiugK EQpYOkTbbCJpo0sf649EwJvAgul9ZoleVoslzte2UMZImEQDGrJCV2LqmbUCPX+J DxosicwWavuzKS+4VBkHwcaaQkPcXHQ= -----END CERTIFICATE-----Generated at Wed May 15 09:04:09 2024 by rpki-client on console-ams.rpki-client.org