$ rpki-client -vvf rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft File: XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft (raw, json) Hash identifier: Dj3Ji/EnGK8G4/rdLIl0EHGdPIcACmp3vQ6JbM99HKg= Subject key identifier: 64:AE:08:5A:E2:77:C0:2A:D2:3F:2C:08:FD:A5:94:B6:76:31:22:58 Authority key identifier: 5C:2C:58:27:C4:E8:99:BC:2A:50:34:06:C5:CB:09:B1:8E:13:3F:C6 Certificate issuer: /CN=A9153F9E/serialNumber=5C2C5827C4E899BC2A503406C5CB09B18E133FC6 Certificate serial: 060A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft Manifest number: 060A Signing time: Thu 02 May 2024 23:57:44 +0000 Manifest this update: Thu 02 May 2024 23:57:43 +0000 Manifest next update: Thu 09 May 2024 23:57:43 +0000 Files and hashes: 1: XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl (hash: wDqeBXnM7T9H+QrR+GkOWh+6W8sWeBnKvQtxUTFCci4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 23:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1546 (0x60a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153F9E/serialNumber=5C2C5827C4E899BC2A503406C5CB09B18E133FC6 Validity Not Before: May 2 23:57:43 2024 GMT Not After : May 9 23:57:43 2024 GMT Subject: CN=66342877-385f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c1:e3:ad:2d:06:f5:70:c9:b6:9b:3b:ae:1b: da:41:bf:2a:4e:b5:97:aa:62:07:5c:67:df:16:78: d1:31:26:a7:f2:86:1c:4c:69:ba:28:3b:a1:94:68: d4:f8:63:21:89:24:8d:61:01:c2:f9:91:b9:98:10: 8a:0c:ef:47:f9:1c:4d:8e:68:08:93:85:82:92:b4: b6:ce:c0:0d:73:c1:8d:94:48:b1:39:fa:d4:56:2f: 9b:93:37:c4:bd:04:8f:14:81:1c:a3:2a:c5:97:80: b0:5d:96:91:89:1f:8e:2d:1b:37:4f:6f:74:cd:4a: 54:ca:d2:08:c8:93:06:d8:27:ae:51:3f:5d:d4:55: 9d:fa:75:82:ae:0c:30:84:8d:27:c6:b2:aa:30:ef: d8:ee:25:98:a2:bc:e5:57:04:78:83:63:24:ae:3f: 5b:b6:6e:b7:ad:43:74:d2:7d:58:36:ad:c4:56:ee: d6:38:09:41:bf:15:c6:ee:8d:73:27:08:50:49:b0: 0d:ae:bd:2f:12:b4:11:1b:a7:b0:3e:13:57:cd:db: a7:74:9e:35:ea:f8:33:52:98:3c:f3:e9:f2:ec:93: f5:3d:ae:0a:c5:15:db:ff:76:c6:cc:dc:2f:55:78: 92:2a:63:3b:f3:9b:a6:1f:79:64:76:05:e9:ae:ab: c2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:AE:08:5A:E2:77:C0:2A:D2:3F:2C:08:FD:A5:94:B6:76:31:22:58 X509v3 Authority Key Identifier: keyid:5C:2C:58:27:C4:E8:99:BC:2A:50:34:06:C5:CB:09:B1:8E:13:3F:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:dd:31:6b:41:79:6c:9c:63:b6:b1:d7:57:e6:7d:fc:f4:91: 65:8b:f8:34:f5:e3:bd:5b:bc:f4:b9:46:1c:f0:b1:2e:92:3c: be:87:40:8f:35:6e:83:e0:f3:6b:5d:6b:d8:a7:fb:cb:da:4d: 8a:32:37:7a:f7:7c:54:63:b5:38:5b:d5:07:45:b1:2b:20:3c: 58:ee:60:2d:b5:89:fb:0c:df:2a:f2:cc:ab:72:3e:df:bc:f0: a1:7b:49:55:83:68:4c:6c:96:82:74:0f:6c:bb:4c:c8:9a:89: 4c:f3:25:f5:8e:96:9d:57:f3:98:3f:d3:fa:b8:05:30:62:d4: 69:32:1c:a4:2c:41:83:ac:54:82:53:88:70:59:76:0e:3a:c9: 6f:0d:6b:1c:8a:8f:a2:ee:91:dc:8e:ed:81:38:9a:4f:51:d8: 94:68:7e:1a:9a:4c:ff:03:f6:ae:cf:d8:44:dd:fc:02:4d:c0: 18:15:7e:36:56:ab:cf:bd:0c:c7:11:85:34:21:ba:68:ad:fa: 0b:f2:0b:83:68:11:d8:91:74:c2:49:95:80:98:10:a2:5b:55: ce:ee:20:5a:2c:98:b2:85:9a:fa:13:a7:14:90:c8:5c:3c:66: bc:11:fa:0b:0d:0b:c2:11:01:df:2a:fc:28:c5:16:a1:d3:09: 4c:2b:57:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNGOUUxMTAvBgNVBAUTKDVDMkM1ODI3QzRFODk5QkMyQTUwMzQwNkM1Q0IwOUIx OEUxMzNGQzYwHhcNMjQwNTAyMjM1NzQzWhcNMjQwNTA5MjM1NzQzWjAYMRYwFAYD VQQDEw02NjM0Mjg3Ny0zODVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMHjrS0G9XDJtps7rhvaQb8qTrWXqmIHXGffFnjRMSan8oYcTGm6KDuhlGjU +GMhiSSNYQHC+ZG5mBCKDO9H+RxNjmgIk4WCkrS2zsANc8GNlEixOfrUVi+bkzfE vQSPFIEcoyrFl4CwXZaRiR+OLRs3T290zUpUytIIyJMG2CeuUT9d1FWd+nWCrgww hI0nxrKqMO/Y7iWYorzlVwR4g2Mkrj9btm63rUN00n1YNq3EVu7WOAlBvxXG7o1z JwhQSbANrr0vErQRG6ewPhNXzdundJ416vgzUpg88+ny7JP1Pa4KxRXb/3bGzNwv VXiSKmM785umH3lkdgXprqvC3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSuCFri d8Aq0j8sCP2llLZ2MSJYMB8GA1UdIwQYMBaAFFwsWCfE6Jm8KlA0BsXLCbGOEz/G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0Y5RS8wMEQ4Qzg4QzUz QUYxMUVCOTkzMDA5MTZDNEY5QUUwMi9YQ3hZSjhUb21id3FVRFFHeGNzSnNZNFRQ OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hDeFlKOFRvbWJ3cVVEUUd4Y3NKc1k0VFA4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0Y5RS8wMEQ4Qzg4QzUzQUYxMUVCOTkzMDA5MTZDNEY5QUUwMi9YQ3hZSjhUb21i d3FVRFFHeGNzSnNZNFRQOFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB93TFrQXlsnGO2sddX5n389JFli/g09eO9W7z0uUYc8LEukjy+h0CP NW6D4PNrXWvYp/vL2k2KMjd693xUY7U4W9UHRbErIDxY7mAttYn7DN8q8syrcj7f vPChe0lVg2hMbJaCdA9su0zImolM8yX1jpadV/OYP9P6uAUwYtRpMhykLEGDrFSC U4hwWXYOOslvDWscio+i7pHcju2BOJpPUdiUaH4amkz/A/auz9hE3fwCTcAYFX42 VqvPvQzHEYU0IbporfoL8guDaBHYkXTCSZWAmBCiW1XO7iBaLJiyhZr6E6cUkMhc PGa8EfoLDQvCEQHfKvwoxRah0wlMK1d3 -----END CERTIFICATE-----Generated at Fri May 3 00:28:37 2024 by rpki-client on console-fra.rpki-client.org