$ rpki-client -vvf rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft File: x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft (raw, json) Hash identifier: I6hApce9XpWpJZRohVjEVVOkFAxdoo86GSkYV2nsdA8= Subject key identifier: D5:0B:81:9C:ED:13:BF:5B:8F:CB:6B:28:AA:2B:6E:CD:A6:A1:B5:33 Authority key identifier: C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26 Certificate issuer: /CN=A9158131/serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026 Certificate serial: 0A2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft Manifest number: 0A25 Signing time: Thu 02 May 2024 20:41:35 +0000 Manifest this update: Thu 02 May 2024 20:41:34 +0000 Manifest next update: Thu 09 May 2024 20:41:34 +0000 Files and hashes: 1: x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl (hash: m98Zq893E+5oxeVwA+Hz0hp5xpPn0CjQEhJfqTwbnXU=) 2: E2CAB200747311EDABDC9A09C4F9AE02.roa (hash: tczMpXzuNlKMPuNz1GdcamFa9b/9AeLt6mRuOdxR4aA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:41:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2605 (0xa2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158131/serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026 Validity Not Before: May 2 20:41:34 2024 GMT Not After : May 9 20:41:34 2024 GMT Subject: CN=6633fa7f-54ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ab:9a:cd:29:6a:2c:2a:e2:de:e0:ec:40:b7: 03:3a:ab:fd:ee:7f:86:6c:53:7d:25:4c:0d:f1:4d: 90:48:b9:d1:9a:51:0f:a9:c1:6f:1e:d0:8c:a7:2e: 4e:b1:ec:ab:6c:5e:23:d5:17:9d:e7:ef:cf:32:c9: 2a:de:8d:23:f4:36:b3:33:41:96:22:3e:70:c3:89: 03:77:16:65:61:44:f3:03:03:c6:54:d1:7d:5b:bd: 21:06:72:f5:77:8b:79:99:40:25:38:d3:9f:e2:34: 7d:b9:f3:9a:ae:46:c2:93:bb:8e:f4:c3:a9:9a:1b: 32:b3:68:c0:4d:88:2f:6c:a5:04:53:b1:13:6a:ca: 97:64:0d:68:05:b3:9f:3f:96:a0:76:db:7d:82:f2: c7:2a:80:45:5c:2c:e9:7e:37:64:14:8e:59:30:01: 43:57:d7:d9:33:6e:f6:05:61:5f:e5:34:78:bf:73: 6a:6c:ee:b8:15:73:a3:55:32:43:3f:9b:dd:84:30: 09:73:6c:a6:87:07:f1:c2:53:f1:2a:f1:36:7e:e7: 2b:3f:4e:28:2a:95:8e:50:f2:3d:02:19:6d:3b:0a: 35:2c:26:1a:fe:03:ed:94:d7:81:b2:f1:ed:ca:3f: b0:cd:0b:6c:47:02:23:66:f5:3f:0f:c5:dd:22:c6: 5a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:0B:81:9C:ED:13:BF:5B:8F:CB:6B:28:AA:2B:6E:CD:A6:A1:B5:33 X509v3 Authority Key Identifier: keyid:C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:08:15:e9:32:87:6a:71:90:66:4c:71:62:4f:36:be:81:a9: f7:ef:6b:b1:6e:d2:e4:d0:b4:ae:47:42:ad:b7:83:df:bb:62: 82:81:5d:b7:33:25:66:52:6b:9d:78:4e:8b:32:8f:4f:46:af: 25:91:b9:fa:7b:ff:7f:ee:27:14:6d:17:fb:2c:b2:ec:81:ad: 83:49:08:ad:d4:fc:f2:33:0b:92:7d:ab:b0:4e:9f:a4:ac:c1: 19:98:39:c3:42:bf:74:79:0f:ea:4e:aa:10:4c:bd:5e:c0:3a: 83:9f:08:df:d1:0a:73:9c:8c:17:51:8b:09:97:ee:10:2e:21: f9:ba:76:4e:ae:be:68:bb:cd:ef:ef:56:9a:ed:df:c1:ec:bf: 21:10:5d:5b:83:5e:15:62:98:2f:0f:e9:4f:4a:1d:29:83:9a: 0a:58:e3:a3:42:ba:3f:da:89:a4:45:fa:3d:49:94:72:d8:29: 90:42:f3:e8:27:40:63:26:cf:4e:50:22:51:15:6f:a1:25:af: bd:cd:fc:ef:ca:eb:64:a8:b8:b8:b5:a0:c8:30:25:a1:d6:11: 83:61:c8:a6:47:15:41:8c:24:ec:5f:3c:c0:b6:9d:16:bf:67: db:40:99:6c:b1:72:fc:e9:dd:de:4d:e2:5a:58:7b:ed:a4:34: 05:d1:fa:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgxMzExMTAvBgNVBAUTKEM3OUJCRUFBNjYyNDFFRUNGMDFDMzAzMzVEQjE4RUYy QjNGNTYwMjYwHhcNMjQwNTAyMjA0MTM0WhcNMjQwNTA5MjA0MTM0WjAYMRYwFAYD VQQDEw02NjMzZmE3Zi01NGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1auazSlqLCri3uDsQLcDOqv97n+GbFN9JUwN8U2QSLnRmlEPqcFvHtCMpy5O seyrbF4j1Red5+/PMskq3o0j9DazM0GWIj5ww4kDdxZlYUTzAwPGVNF9W70hBnL1 d4t5mUAlONOf4jR9ufOarkbCk7uO9MOpmhsys2jATYgvbKUEU7ETasqXZA1oBbOf P5agdtt9gvLHKoBFXCzpfjdkFI5ZMAFDV9fZM272BWFf5TR4v3NqbO64FXOjVTJD P5vdhDAJc2ymhwfxwlPxKvE2fucrP04oKpWOUPI9AhltOwo1LCYa/gPtlNeBsvHt yj+wzQtsRwIjZvU/D8XdIsZawQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNULgZzt E79bj8trKKorbs2mobUzMB8GA1UdIwQYMBaAFMebvqpmJB7s8BwwM12xjvKz9WAm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODEzMS85ODJBQjZFNjQ4 QjExMUVBOTZBMDZDN0VDNEY5QUUwMi94NXUtcW1Za0h1endIREF6WGJHTzhyUDFZ Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g1dS1xbVlrSHV6d0hEQXpYYkdPOHJQMVlDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODEzMS85ODJBQjZFNjQ4QjExMUVBOTZBMDZDN0VDNEY5QUUwMi94NXUtcW1Za0h1 endIREF6WGJHTzhyUDFZQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUCBXpModqcZBmTHFiTza+gan372uxbtLk0LSuR0Ktt4Pfu2KCgV23 MyVmUmudeE6LMo9PRq8lkbn6e/9/7icUbRf7LLLsga2DSQit1PzyMwuSfauwTp+k rMEZmDnDQr90eQ/qTqoQTL1ewDqDnwjf0QpznIwXUYsJl+4QLiH5unZOrr5ou83v 71aa7d/B7L8hEF1bg14VYpgvD+lPSh0pg5oKWOOjQro/2omkRfo9SZRy2CmQQvPo J0BjJs9OUCJRFW+hJa+9zfzvyutkqLi4taDIMCWh1hGDYcimRxVBjCTsXzzAtp0W v2fbQJlssXL86d3eTeJaWHvtpDQF0fpE -----END CERTIFICATE-----Generated at Thu May 2 22:28:50 2024 by rpki-client on console-ams.rpki-client.org