$ rpki-client -vvf rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft File: xQRWVXeumfYZHJeDPdvdYk7CTpI.mft (raw, json) Hash identifier: k2Nc3PUz3ZQzy32zBt+9kizi9Nv0gKCeVayRu5VvfHc= Subject key identifier: 10:56:31:0E:EB:64:AF:BC:82:A9:C5:F1:8D:62:D0:F8:AE:DB:1F:05 Authority key identifier: C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92 Certificate issuer: /CN=A916D128/serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92 Certificate serial: 066B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft Manifest number: 064C Signing time: Wed 24 Apr 2024 23:40:46 +0000 Manifest this update: Wed 24 Apr 2024 23:40:45 +0000 Manifest next update: Wed 01 May 2024 23:40:45 +0000 Files and hashes: 1: xQRWVXeumfYZHJeDPdvdYk7CTpI.crl (hash: DbE+vA2u5jwX/sQHQNbuZAmIoU4Qyq0ZoZXY8ftmRaQ=) 2: A2272F186E1D11EEB6A10A0CC4F9AE02.roa (hash: u20NuNFzDHapjyOj4X0XHCGLZUioMw89EmL8O4oRBbc=) 3: B38547D6EDB611EEB49CEE2CC4F9AE02.roa (hash: 2+Bizh2NNJp7F7/Vuvy8vKBy/G5KPNERN871DtsBlxY=) 4: 8342D87641AC11ECACD65E18C4F9AE02.roa (hash: +iFnTTDgyKN2dBbGGMYJxxuH3kAkl9MBH/8TEqqg3/U=) 5: 19D427BA6AFD11EEA4AF1A0FC4F9AE02.roa (hash: dNu1CwDmcjgy7/dtTe1Gre+JUZ3QpIiLnwFTWyTMue4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 21:46:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1643 (0x66b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D128/serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92 Validity Not Before: Apr 24 23:40:45 2024 GMT Not After : May 1 23:40:45 2024 GMT Subject: CN=6629987d-691b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8e:11:0b:64:d7:4a:54:b5:e4:f4:5b:fb:99: fe:06:69:a0:bf:b9:a3:6a:43:38:3d:a6:da:3d:c2: 9a:84:1d:b4:0e:a9:26:84:35:6e:e2:a0:77:69:84: 3b:db:19:0b:73:46:aa:bc:be:d7:b4:57:d3:3f:c2: a2:ef:d3:02:85:80:ab:52:98:93:5f:2c:ad:60:45: 91:36:c5:a0:e0:6c:a2:4e:90:a1:e2:43:61:0b:f6: 5a:14:4a:33:0a:4d:d9:e6:7d:5b:bd:f2:87:af:93: 7e:af:44:8d:9d:36:84:ac:99:d8:d1:d4:8f:1f:65: ef:ab:cd:d3:a6:86:47:7e:38:ee:52:a1:b5:d1:1d: 0a:31:ae:db:ae:4b:07:af:86:51:aa:e7:e1:46:b9: c5:10:f1:05:2a:f3:03:ec:ab:72:bd:47:5f:09:33: 0b:9c:69:82:90:dc:3d:b3:38:c5:79:8f:f2:48:95: ee:0b:d4:25:75:9c:c1:2d:de:6f:1d:42:16:29:02: 55:f8:2e:ae:30:7c:f3:e2:e8:79:7e:c1:d6:8d:d3: d6:ca:d2:f6:11:18:54:ba:b0:90:9c:d4:96:47:cc: 76:08:e6:7f:a1:10:30:62:07:32:ab:19:e0:0d:8d: 49:28:9a:93:1e:bf:0e:e4:f9:7c:b2:c8:94:4f:2d: 51:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:56:31:0E:EB:64:AF:BC:82:A9:C5:F1:8D:62:D0:F8:AE:DB:1F:05 X509v3 Authority Key Identifier: keyid:C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:84:04:83:7f:61:2d:00:27:10:ec:23:8f:67:3c:5f:21:37: 31:96:4c:5c:23:6b:41:2f:84:19:21:73:89:6f:dd:dd:88:9a: 8e:4c:c1:93:30:be:8a:db:2e:cf:4f:95:a2:a3:5f:82:16:8f: d8:f5:f6:04:ce:ce:5c:2e:e3:cf:17:4b:c0:54:90:cf:c8:73: d8:a7:69:92:79:4e:1c:fa:68:0a:01:ec:24:5c:4e:ac:c6:ac: 61:0f:2d:2e:a7:df:fc:ac:27:7b:44:c6:2f:08:8f:e7:91:dd: c7:87:7b:e6:09:3a:17:7e:30:71:72:f7:53:4c:91:3c:10:04: 10:80:92:53:76:ff:e4:06:d2:b4:b1:0a:1f:95:42:92:42:ea: cd:d0:c7:e7:cc:a6:a3:df:ee:b5:d5:73:5b:af:5b:c0:65:71: 84:de:2d:6a:f5:53:50:28:7f:f6:48:65:f4:71:16:cd:aa:a4: b1:43:53:19:c4:51:b5:aa:fa:b9:d3:d7:92:71:8e:e4:48:4b: e1:47:06:69:4f:96:31:be:58:c8:4e:51:72:1f:3f:d2:4a:5b: 50:57:a7:76:41:8d:21:62:18:f5:e3:c6:aa:65:2f:68:5e:8c: 0b:db:c7:00:1e:f1:93:6a:31:b8:82:0c:05:c5:84:95:12:8a: 64:23:f9:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQxMjgxMTAvBgNVBAUTKEM1MDQ1NjU1NzdBRTk5RjYxOTFDOTc4MzNEREJERDYy NEVDMjRFOTIwHhcNMjQwNDI0MjM0MDQ1WhcNMjQwNTAxMjM0MDQ1WjAYMRYwFAYD VQQDEw02NjI5OTg3ZC02OTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxY4RC2TXSlS15PRb+5n+Bmmgv7mjakM4PabaPcKahB20DqkmhDVu4qB3aYQ7 2xkLc0aqvL7XtFfTP8Ki79MChYCrUpiTXyytYEWRNsWg4GyiTpCh4kNhC/ZaFEoz Ck3Z5n1bvfKHr5N+r0SNnTaErJnY0dSPH2Xvq83TpoZHfjjuUqG10R0KMa7brksH r4ZRqufhRrnFEPEFKvMD7KtyvUdfCTMLnGmCkNw9szjFeY/ySJXuC9QldZzBLd5v HUIWKQJV+C6uMHzz4uh5fsHWjdPWytL2ERhUurCQnNSWR8x2COZ/oRAwYgcyqxng DY1JKJqTHr8O5Pl8ssiUTy1RtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBWMQ7r ZK+8gqnF8Y1i0Piu2x8FMB8GA1UdIwQYMBaAFMUEVlV3rpn2GRyXgz3b3WJOwk6S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDEyOC85MERFOUM2NjNF QTMxMUVCOEFDQjkwMTNDNEY5QUUwMi94UVJXVlhldW1mWVpISmVEUGR2ZFlrN0NU cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hRUldWWGV1bWZZWkhKZURQZHZkWWs3Q1RwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDEyOC85MERFOUM2NjNFQTMxMUVCOEFDQjkwMTNDNEY5QUUwMi94UVJXVlhldW1m WVpISmVEUGR2ZFlrN0NUcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuhASDf2EtACcQ7COPZzxfITcxlkxcI2tBL4QZIXOJb93diJqOTMGT ML6K2y7PT5Wio1+CFo/Y9fYEzs5cLuPPF0vAVJDPyHPYp2mSeU4c+mgKAewkXE6s xqxhDy0up9/8rCd7RMYvCI/nkd3Hh3vmCToXfjBxcvdTTJE8EAQQgJJTdv/kBtK0 sQoflUKSQurN0MfnzKaj3+611XNbr1vAZXGE3i1q9VNQKH/2SGX0cRbNqqSxQ1MZ xFG1qvq509eScY7kSEvhRwZpT5YxvljITlFyHz/SSltQV6d2QY0hYhj148aqZS9o XowL28cAHvGTajG4ggwFxYSVEopkI/mA -----END CERTIFICATE-----Generated at Thu Apr 25 00:31:17 2024 by rpki-client on console-fra.rpki-client.org