$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/xKVYu3wj5_co1s5omYU0FMh2f0c.mft File: xKVYu3wj5_co1s5omYU0FMh2f0c.mft (raw, json) Hash identifier: CUyyjBan1FkYMAq33P0SUmf+sQLRSYdEPWzpfcV4U7M= Subject key identifier: 5D:18:51:02:CE:5F:1D:CC:97:24:AF:51:8C:45:D7:42:9E:94:8D:01 Authority key identifier: C4:A5:58:BB:7C:23:E7:F7:28:D6:CE:68:99:85:34:14:C8:76:7F:47 Certificate issuer: /CN=A9171D3B/serialNumber=C4A558BB7C23E7F728D6CE6899853414C8767F47 Certificate serial: 039E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKVYu3wj5_co1s5omYU0FMh2f0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/xKVYu3wj5_co1s5omYU0FMh2f0c.mft Manifest number: 134E Signing time: Tue 14 May 2024 18:08:21 +0000 Manifest this update: Tue 14 May 2024 18:08:21 +0000 Manifest next update: Tue 21 May 2024 18:08:21 +0000 Files and hashes: 1: xKVYu3wj5_co1s5omYU0FMh2f0c.crl (hash: FRtZPmm89m3AbuWjssG/pXLLH2pscOKleOZ8+PP4YCc=) 2: 9929CD6EE93611EE984B9214C4F9AE02.roa (hash: 17rqRfbHAT+IisHkaExuhiubFZOiFgz977xkdXxPIzE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/xKVYu3wj5_co1s5omYU0FMh2f0c.crl rsync://rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/xKVYu3wj5_co1s5omYU0FMh2f0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKVYu3wj5_co1s5omYU0FMh2f0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 18:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 926 (0x39e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D3B/serialNumber=C4A558BB7C23E7F728D6CE6899853414C8767F47 Validity Not Before: May 14 18:08:21 2024 GMT Not After : May 21 18:08:21 2024 GMT Subject: CN=6643a895-96a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8a:55:d7:79:50:b0:25:f8:70:11:5e:af:d9: f4:e3:47:c2:82:f5:17:f1:6d:73:cb:ff:f9:4b:a5: f1:c0:ff:24:84:ca:78:50:19:12:e6:09:b9:12:9a: ab:c9:06:57:bc:a6:cb:2b:5f:30:c2:a5:3f:9a:16: 1a:69:e4:07:db:34:ee:35:b3:bb:0e:09:e9:cc:c6: e9:be:97:9f:c2:2a:2b:18:af:38:d9:58:e5:be:8d: d0:55:08:5c:99:7c:b1:13:30:ce:74:e0:f2:e7:71: 3d:4d:b4:ea:54:40:3a:4e:fa:76:5c:95:bb:dc:9b: a2:10:80:ae:49:39:f6:46:2b:8e:20:1d:b6:a3:b6: c0:b2:e3:ef:55:39:3e:fa:68:89:9a:c3:84:1f:a7: 88:b3:ac:89:a7:c1:7a:ec:e1:62:64:e9:8f:ee:9b: 48:7d:3d:c9:7e:bb:d5:51:ec:6b:e3:64:42:f9:3c: 0e:d5:9e:ce:90:ef:ee:00:98:ef:52:40:3d:56:da: f3:5c:bd:7d:d9:cb:44:d8:33:61:9b:59:03:b7:d5: 03:e5:a2:ab:e9:a2:8c:41:47:dc:5c:a2:21:00:b2: 0f:5f:00:71:ee:2c:49:96:1d:70:be:73:07:86:5a: 40:c6:14:95:12:cb:8c:d5:29:71:c8:fc:33:0a:a4: 64:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:18:51:02:CE:5F:1D:CC:97:24:AF:51:8C:45:D7:42:9E:94:8D:01 X509v3 Authority Key Identifier: keyid:C4:A5:58:BB:7C:23:E7:F7:28:D6:CE:68:99:85:34:14:C8:76:7F:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/xKVYu3wj5_co1s5omYU0FMh2f0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKVYu3wj5_co1s5omYU0FMh2f0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3B/B2499858313811E99DE3266FC4F9AE02/xKVYu3wj5_co1s5omYU0FMh2f0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:84:bd:8a:c5:2b:ce:20:c4:12:93:0f:b8:06:94:06:a0:05: 06:9a:58:c2:b2:95:1e:60:f4:91:18:9c:5c:8b:aa:ba:83:78: da:08:a7:bc:04:ed:5e:08:8a:c7:1a:c8:9b:cd:f7:f8:ae:38: 9f:a7:b0:5c:e6:55:70:e8:f7:3d:2b:41:82:c5:e8:95:16:96: 23:8d:07:04:7c:12:98:1e:eb:56:70:71:2c:19:52:72:84:93: 27:4d:ae:b0:41:5e:af:88:4a:14:27:0a:ff:1b:54:a0:39:52: 3f:1b:40:b1:aa:d1:20:63:3f:19:a8:d2:de:84:9e:c8:d6:04: be:c0:24:f2:17:33:62:fd:5c:e7:4d:3f:da:f3:4d:f7:85:40: 28:ee:ee:96:4a:9e:e2:ce:b5:b2:2f:77:80:f7:e1:94:9d:aa: b9:10:23:2c:20:e2:ba:23:2b:4a:08:9c:09:46:3d:aa:df:54: 29:05:47:89:18:9a:9d:6e:35:54:7a:f5:4f:23:2f:55:3d:60: 46:94:26:1f:ed:d0:16:84:83:b3:1f:31:7e:1f:91:52:c1:66: f1:6a:3c:01:62:4f:4a:3b:37:2c:0f:65:55:e4:38:80:ed:16: 1c:ca:cf:cc:b0:55:5b:34:a8:67:b2:11:6f:48:22:ae:78:02: aa:7b:e1:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEM0IxMTAvBgNVBAUTKEM0QTU1OEJCN0MyM0U3RjcyOEQ2Q0U2ODk5ODUzNDE0 Qzg3NjdGNDcwHhcNMjQwNTE0MTgwODIxWhcNMjQwNTIxMTgwODIxWjAYMRYwFAYD VQQDEw02NjQzYTg5NS05NmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YpV13lQsCX4cBFer9n040fCgvUX8W1zy//5S6XxwP8khMp4UBkS5gm5Epqr yQZXvKbLK18wwqU/mhYaaeQH2zTuNbO7DgnpzMbpvpefwiorGK842Vjlvo3QVQhc mXyxEzDOdODy53E9TbTqVEA6Tvp2XJW73JuiEICuSTn2RiuOIB22o7bAsuPvVTk+ +miJmsOEH6eIs6yJp8F67OFiZOmP7ptIfT3JfrvVUexr42RC+TwO1Z7OkO/uAJjv UkA9VtrzXL192ctE2DNhm1kDt9UD5aKr6aKMQUfcXKIhALIPXwBx7ixJlh1wvnMH hlpAxhSVEsuM1SlxyPwzCqRk2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF0YUQLO Xx3MlySvUYxF10KelI0BMB8GA1UdIwQYMBaAFMSlWLt8I+f3KNbOaJmFNBTIdn9H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzQi9CMjQ5OTg1ODMx MzgxMUU5OURFMzI2NkZDNEY5QUUwMi94S1ZZdTN3ajVfY28xczVvbVlVMEZNaDJm MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hLVll1M3dqNV9jbzFzNW9tWVUwRk1oMmYwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQzQi9CMjQ5OTg1ODMxMzgxMUU5OURFMzI2NkZDNEY5QUUwMi94S1ZZdTN3ajVf Y28xczVvbVlVMEZNaDJmMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAchL2KxSvOIMQSkw+4BpQGoAUGmljCspUeYPSRGJxci6q6g3jaCKe8 BO1eCIrHGsibzff4rjifp7Bc5lVw6Pc9K0GCxeiVFpYjjQcEfBKYHutWcHEsGVJy hJMnTa6wQV6viEoUJwr/G1SgOVI/G0CxqtEgYz8ZqNLehJ7I1gS+wCTyFzNi/Vzn TT/a8033hUAo7u6WSp7izrWyL3eA9+GUnaq5ECMsIOK6IytKCJwJRj2q31QpBUeJ GJqdbjVUevVPIy9VPWBGlCYf7dAWhIOzHzF+H5FSwWbxajwBYk9KOzcsD2VV5DiA 7RYcys/MsFVbNKhnshFvSCKueAKqe+GI -----END CERTIFICATE-----Generated at Tue May 14 19:10:18 2024 by rpki-client on console-ams.rpki-client.org