$ rpki-client -vvf rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft File: xjugMQfBPRiceeDnSox7hHpcdHE.mft (raw, json) Hash identifier: zWj0Jrw8r/ST4t/JsC0IeEk68sEBTUwfi5l1/LRq3ak= Subject key identifier: 64:A3:23:C4:33:9A:F4:FE:66:79:19:1F:49:71:5A:7A:69:7E:47:B2 Authority key identifier: C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71 Certificate issuer: /CN=A9154EC0/serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471 Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft Manifest number: 0109 Signing time: Thu 25 Apr 2024 05:27:39 +0000 Manifest this update: Thu 25 Apr 2024 05:27:39 +0000 Manifest next update: Thu 02 May 2024 05:27:39 +0000 Files and hashes: 1: xjugMQfBPRiceeDnSox7hHpcdHE.crl (hash: sTYWkJntM+6yfTOf7joFLkqUl3A22u3wvNH0WsRfnJs=) 2: 16DFC2548D6C11EDBB1B1C4FC4F9AE02.roa (hash: 70V2cII6ULY6BBWf+9zyNcfzJhH0MCllEioHlbtCrmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 05:27:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154EC0/serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471 Validity Not Before: Apr 25 05:27:39 2024 GMT Not After : May 2 05:27:39 2024 GMT Subject: CN=6629e9cb-fe34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:15:36:b6:ed:e3:5a:db:ac:2b:74:63:41:e0: dd:97:0a:17:67:9d:8a:53:24:df:43:a3:ed:79:9d: 7d:8c:98:58:b4:d2:9a:8b:49:d0:30:5b:d1:91:62: 05:97:01:cc:49:5a:07:b6:e6:19:14:41:57:bf:d7: 65:c2:3c:e0:cf:96:ab:04:83:d9:76:02:6b:6f:1f: 06:38:28:33:de:c6:95:a1:79:de:bf:55:13:7f:22: fa:97:9e:ee:e4:59:52:b1:55:c6:ec:4b:fe:ce:4d: 70:b3:2a:ad:f4:2a:c6:1d:1f:90:96:91:88:66:3c: 36:df:4e:40:02:44:b1:10:ed:4a:79:52:69:41:a8: 3d:3e:c5:f4:ad:0e:48:ef:b1:86:e5:5e:70:2c:84: be:36:a6:58:77:5a:b6:e7:27:13:70:b7:54:18:dd: ed:76:ed:29:97:70:5d:8d:ec:ee:c0:78:91:aa:41: 3c:b9:aa:c6:04:54:69:9c:9d:a3:a5:99:8d:60:79: 5b:9c:d2:31:ab:45:0f:ab:62:74:48:d6:2d:86:c0: d1:08:98:0b:5b:42:36:ed:00:aa:94:03:a8:12:cb: 75:70:56:5b:e7:bc:14:8b:a3:a7:6e:8a:13:0d:c0: 39:fa:2d:1b:e5:06:c1:7b:ae:13:c0:af:a8:ce:cf: 83:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A3:23:C4:33:9A:F4:FE:66:79:19:1F:49:71:5A:7A:69:7E:47:B2 X509v3 Authority Key Identifier: keyid:C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:32:2e:8b:e5:40:68:e0:26:38:2d:be:38:19:6b:ed:1f:ec: ac:9c:9e:11:f8:4a:7c:bd:09:f1:e0:5d:a0:9c:91:9e:7a:cb: e9:14:63:cd:69:8d:04:b5:54:64:f2:a9:e8:79:e2:e1:c9:d8: ba:88:c6:c8:2e:b9:d4:55:2d:57:40:46:0f:43:59:70:74:41: c9:38:2e:d8:6d:d1:d5:d0:9f:a1:79:c1:e2:69:e2:4f:f0:b6: 16:92:55:00:67:5b:25:9a:26:db:97:73:9e:f8:00:70:e4:64: 1d:22:b9:1b:42:19:33:cc:24:90:06:cb:e8:ae:72:55:81:c0: 62:d9:73:d8:f5:47:3f:4a:b7:06:25:24:ae:cc:30:ce:2b:53: 9e:37:de:24:4b:95:a9:56:7a:97:d0:60:54:a8:03:47:16:d6: 93:3c:16:31:27:d9:e9:80:e8:df:d7:22:5d:70:f8:28:48:3c: 37:38:eb:bf:68:d8:8b:64:9a:9b:1b:56:45:c6:c3:3f:b1:e3: a4:31:9d:a4:66:5a:8e:34:fa:cb:20:23:88:d7:6b:8f:1f:a4: c5:51:40:0d:39:ab:e9:b2:82:27:d6:6f:3a:c4:19:fa:ae:29: 20:d1:33:fd:24:d8:54:d5:cf:b2:d7:7b:90:82:58:80:59:b0: f8:4e:01:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRFQzAxMTAvBgNVBAUTKEM2M0JBMDMxMDdDMTNEMTg5Qzc5RTBFNzRBOEM3Qjg0 N0E1Qzc0NzEwHhcNMjQwNDI1MDUyNzM5WhcNMjQwNTAyMDUyNzM5WjAYMRYwFAYD VQQDEw02NjI5ZTljYi1mZTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoRU2tu3jWtusK3RjQeDdlwoXZ52KUyTfQ6PteZ19jJhYtNKai0nQMFvRkWIF lwHMSVoHtuYZFEFXv9dlwjzgz5arBIPZdgJrbx8GOCgz3saVoXnev1UTfyL6l57u 5FlSsVXG7Ev+zk1wsyqt9CrGHR+QlpGIZjw2305AAkSxEO1KeVJpQag9PsX0rQ5I 77GG5V5wLIS+NqZYd1q25ycTcLdUGN3tdu0pl3BdjezuwHiRqkE8uarGBFRpnJ2j pZmNYHlbnNIxq0UPq2J0SNYthsDRCJgLW0I27QCqlAOoEst1cFZb57wUi6OnbooT DcA5+i0b5QbBe64TwK+ozs+D2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSjI8Qz mvT+ZnkZH0lxWnppfkeyMB8GA1UdIwQYMBaAFMY7oDEHwT0YnHng50qMe4R6XHRx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEVDMC9EQUU2NzQwQzdG M0IxMUVEQTdBM0VDNjhDNEY5QUUwMi94anVnTVFmQlBSaWNlZURuU294N2hIcGNk SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqdWdNUWZCUFJpY2VlRG5Tb3g3aEhwY2RIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEVDMC9EQUU2NzQwQzdGM0IxMUVEQTdBM0VDNjhDNEY5QUUwMi94anVnTVFmQlBS aWNlZURuU294N2hIcGNkSEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtMi6L5UBo4CY4Lb44GWvtH+ysnJ4R+Ep8vQnx4F2gnJGeesvpFGPN aY0EtVRk8qnoeeLhydi6iMbILrnUVS1XQEYPQ1lwdEHJOC7YbdHV0J+hecHiaeJP 8LYWklUAZ1slmibbl3Oe+ABw5GQdIrkbQhkzzCSQBsvornJVgcBi2XPY9Uc/SrcG JSSuzDDOK1OeN94kS5WpVnqX0GBUqANHFtaTPBYxJ9npgOjf1yJdcPgoSDw3OOu/ aNiLZJqbG1ZFxsM/seOkMZ2kZlqONPrLICOI12uPH6TFUUANOavpsoIn1m86xBn6 rikg0TP9JNhU1c+y13uQgliAWbD4TgEe -----END CERTIFICATE-----Generated at Thu Apr 25 06:38:24 2024 by rpki-client on console-fra.rpki-client.org