$ rpki-client -vvf rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft File: xkM8SeY82SA1swfo95Y3YI_q2_U.mft (raw, json) Hash identifier: Ht9Au0IPJUKlvPhurhTugR5zkQcEdtjY4K7WipsMgWU= Subject key identifier: 91:75:AA:4F:D3:69:9C:06:0A:5B:DC:7B:BD:91:5A:6C:10:1B:6C:67 Authority key identifier: C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5 Certificate issuer: /CN=A9164390/serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5 Certificate serial: 1BEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft Manifest number: 1BB6 Signing time: Tue 30 Apr 2024 16:42:25 +0000 Manifest this update: Tue 30 Apr 2024 16:42:25 +0000 Manifest next update: Tue 07 May 2024 16:42:25 +0000 Files and hashes: 1: xkM8SeY82SA1swfo95Y3YI_q2_U.crl (hash: HX0/g1XoQdsntyFkJrmwZ15P7tcAiv/rLqjpGsWwzZY=) 2: 846D5AAA9F8A11ECB8E03812C4F9AE02.roa (hash: 7PdKUXE5Xitd5DLRaHPfMoA74Y6LX1GUgGaOxCGqnLQ=) 3: 35D40EDE9F8511ECBE806D30C4F9AE02.roa (hash: Qf6Id46hBN+W7rLVaZL9Bo0piMWZE9hsYSpHsWs83lo=) 4: D1A2301C98DD11EAB0763B4BC4F9AE02.roa (hash: 1CXisgn5G4IACvJcG9Sr+WfoN241nnt4sfV7d3DxyjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 16:42:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7147 (0x1beb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164390/serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5 Validity Not Before: Apr 30 16:42:25 2024 GMT Not After : May 7 16:42:25 2024 GMT Subject: CN=66311f71-0d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7c:6c:f3:de:8e:f0:a7:bf:4b:23:f1:9c:60: 18:4b:0d:8b:9c:45:82:2f:d1:4d:4d:ac:bc:53:e1: d6:7b:34:ec:5c:16:73:39:9b:c9:44:eb:f7:c9:48: 76:eb:47:72:cd:08:2e:8a:a8:86:c3:ee:98:66:21: d4:ac:b3:34:2f:08:a9:25:2c:88:c8:92:4e:c0:f9: b1:e0:b3:ef:cf:4b:b4:d6:79:f6:e6:af:36:94:a8: e8:a2:9b:6c:f4:01:11:48:f8:f2:a1:b5:e0:0a:3a: e5:f7:df:e4:e9:85:42:5d:72:24:54:24:86:4d:e2: 3e:af:85:db:36:8a:bc:d0:9b:fc:d7:20:f7:0c:a3: 0c:79:56:58:0e:7a:c7:49:ef:bd:98:82:02:1c:9d: d5:d6:b6:1e:d3:bc:c8:3b:3e:d2:52:3e:1b:5c:bb: 82:c4:56:c9:35:dd:30:53:1a:7e:2a:49:ed:72:53: 0d:8d:5f:ac:53:55:99:73:df:16:2c:f7:f5:7d:a7: e6:e3:aa:f6:6a:f5:cc:d7:c3:32:82:49:47:c6:fd: e2:a1:69:30:16:be:16:95:3b:35:3d:87:89:42:fd: e1:41:fc:6b:f0:39:82:e2:61:4f:eb:39:26:3a:b5: f8:dc:2f:a8:f4:22:d7:09:7f:40:96:1f:9c:ba:ba: 14:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:75:AA:4F:D3:69:9C:06:0A:5B:DC:7B:BD:91:5A:6C:10:1B:6C:67 X509v3 Authority Key Identifier: keyid:C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:d4:f8:88:71:21:2e:6d:2b:ef:3a:18:91:07:6c:1d:9e:4a: e1:ef:61:cc:51:64:dc:d8:c9:cd:6c:cf:df:78:dd:b7:d0:ca: 98:b7:cb:19:9d:96:ed:7c:1e:96:23:0a:64:3a:61:78:63:20: b1:61:77:87:64:72:2c:fe:6f:4f:fd:92:79:19:ed:fd:4b:d4: e1:f7:38:39:12:f0:a8:73:ac:62:a5:fb:53:37:39:c7:9f:33: 14:bf:f4:ab:ea:4c:f4:37:df:5f:81:54:49:48:3a:2f:8f:dc: 4d:b9:c6:0d:70:6e:f2:5a:ec:6f:99:d3:27:0d:ad:7e:21:0d: 78:81:f1:85:1f:da:9d:88:c7:47:6c:ee:11:47:51:2b:f6:4b: 47:16:bc:c4:91:b5:c8:3b:82:d1:01:cf:86:88:40:2c:c0:ab: 0b:40:03:ec:cf:70:1d:22:80:dd:a6:a0:24:e9:5b:cd:21:70: 1c:8b:a0:e3:00:ef:7a:46:45:ed:96:f3:18:57:fb:d6:9e:e9: d9:7d:8f:c1:63:39:4f:99:55:01:b1:05:6e:e5:7a:4d:d4:eb: 3b:15:d4:42:c5:06:d5:1c:37:bf:58:95:af:47:6b:bc:cb:83: f3:73:a9:29:de:2f:93:69:8c:b6:87:cb:27:a4:dd:91:31:9c: 04:d5:8d:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQzOTAxMTAvBgNVBAUTKEM2NDMzQzQ5RTYzQ0Q5MjAzNUIzMDdFOEY3OTYzNzYw OEZFQURCRjUwHhcNMjQwNDMwMTY0MjI1WhcNMjQwNTA3MTY0MjI1WjAYMRYwFAYD VQQDEw02NjMxMWY3MS0wZDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnxs896O8Ke/SyPxnGAYSw2LnEWCL9FNTay8U+HWezTsXBZzOZvJROv3yUh2 60dyzQguiqiGw+6YZiHUrLM0LwipJSyIyJJOwPmx4LPvz0u01nn25q82lKjoopts 9AERSPjyobXgCjrl99/k6YVCXXIkVCSGTeI+r4XbNoq80Jv81yD3DKMMeVZYDnrH Se+9mIICHJ3V1rYe07zIOz7SUj4bXLuCxFbJNd0wUxp+KkntclMNjV+sU1WZc98W LPf1fafm46r2avXM18MygklHxv3ioWkwFr4WlTs1PYeJQv3hQfxr8DmC4mFP6zkm OrX43C+o9CLXCX9Alh+curoUjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJF1qk/T aZwGClvce72RWmwQG2xnMB8GA1UdIwQYMBaAFMZDPEnmPNkgNbMH6PeWN2CP6tv1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDM5MC8wRTkzNTRGQ0RD NUMxMUU2OEU5MTVFMzJDNEY5QUUwMi94a004U2VZODJTQTFzd2ZvOTVZM1lJX3Ey X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hrTThTZVk4MlNBMXN3Zm85NVkzWUlfcTJfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDM5MC8wRTkzNTRGQ0RDNUMxMUU2OEU5MTVFMzJDNEY5QUUwMi94a004U2VZODJT QTFzd2ZvOTVZM1lJX3EyX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv1PiIcSEubSvvOhiRB2wdnkrh72HMUWTc2MnNbM/feN230MqYt8sZ nZbtfB6WIwpkOmF4YyCxYXeHZHIs/m9P/ZJ5Ge39S9Th9zg5EvCoc6xipftTNznH nzMUv/Sr6kz0N99fgVRJSDovj9xNucYNcG7yWuxvmdMnDa1+IQ14gfGFH9qdiMdH bO4RR1Er9ktHFrzEkbXIO4LRAc+GiEAswKsLQAPsz3AdIoDdpqAk6VvNIXAci6Dj AO96RkXtlvMYV/vWnunZfY/BYzlPmVUBsQVu5XpN1Os7FdRCxQbVHDe/WJWvR2u8 y4Pzc6kp3i+TaYy2h8snpN2RMZwE1Y15 -----END CERTIFICATE-----Generated at Tue Apr 30 19:21:23 2024 by rpki-client on console-ams.rpki-client.org