$ rpki-client -vvf rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft File: xVGHsAsaczdfhFaIX2oQfuHZNc8.mft (raw, json) Hash identifier: ZzfmzUSx4b8LlHSZ6kHy8Wmu7lxps0yX3XmjSNSgFJE= Subject key identifier: 87:28:3B:F6:E1:B4:ED:79:A6:9B:97:59:AC:59:62:85:E7:29:45:F9 Authority key identifier: C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF Certificate issuer: /CN=A9173B29/serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft Manifest number: 20 Signing time: Wed 15 May 2024 08:50:22 +0000 Manifest this update: Wed 15 May 2024 08:50:22 +0000 Manifest next update: Wed 22 May 2024 08:50:22 +0000 Files and hashes: 1: xVGHsAsaczdfhFaIX2oQfuHZNc8.crl (hash: K+mwIYSsRvjU/q5tNzxj58Vk7FJG+jpWy3ZNh7yj1pA=) 2: C9FDEC12E82411EE81065223C4F9AE02.roa (hash: 8qauXtkhLG8Vo6J3MvRu1qHOjW+uzy6oC9945yTOEbw=) 3: EF1E7F70E82411EE9005BA2DC4F9AE02.roa (hash: KVqkwqdGo/3PNFQ8iCFTLDUstBCh3y661cBvY2zZpr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173B29/serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF Validity Not Before: May 15 08:50:22 2024 GMT Not After : May 22 08:50:22 2024 GMT Subject: CN=6644774e-02f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:05:ed:f6:be:30:e6:fe:06:e0:ab:38:a5:8a: ff:ee:47:dd:75:44:e2:40:40:f0:aa:3c:09:87:28: 46:6a:5f:46:f5:c1:84:a4:4f:b2:57:2d:ea:25:0b: f9:61:11:5e:89:5d:b0:cf:5a:e5:9c:a0:68:f1:79: c3:f7:34:bc:bc:6e:3c:25:af:55:9a:d5:d8:9e:88: 3c:d2:1d:f6:7a:76:3e:54:8b:00:14:17:f6:7d:be: 50:08:0e:72:09:5f:a6:45:9b:ca:ad:08:e6:ee:42: e0:9b:b6:7a:6a:53:a9:77:a0:2d:3a:75:7a:87:d9: 97:bb:c5:33:f9:f2:b4:ed:b3:46:06:71:4f:fd:32: 34:34:3e:da:cf:56:40:b5:79:10:8f:d3:7b:0a:57: a7:13:30:ad:0d:93:b7:aa:b3:b9:a4:44:72:a0:b1: 28:26:a8:39:a0:34:c6:d6:fe:43:3a:6f:ab:d2:05: 36:5d:cf:c3:db:71:8e:0a:11:f7:14:37:63:09:ab: e4:73:87:6b:b7:e3:1a:09:23:1b:1c:48:b7:7a:83: 8a:9e:46:07:26:3d:4a:b3:84:e9:84:68:57:c8:8a: 77:69:03:97:8b:e3:f2:e5:5a:43:4b:0a:37:8f:6b: ae:c3:92:e6:dc:1d:ac:0b:b9:a0:6b:6a:b6:06:a9: 34:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:28:3B:F6:E1:B4:ED:79:A6:9B:97:59:AC:59:62:85:E7:29:45:F9 X509v3 Authority Key Identifier: keyid:C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:c3:21:0e:c4:14:45:a0:85:46:62:b6:4a:31:55:4e:57:57: 2b:5e:22:7f:0b:46:18:42:0c:19:ce:a0:b1:34:71:a4:14:1c: c8:0c:05:52:b8:e2:1d:48:d5:73:ce:4e:a3:c5:b2:ff:d4:d3: 34:6b:de:36:da:5c:24:3c:e9:81:4a:90:47:0b:20:05:51:43: 94:ff:41:34:96:46:58:a4:7f:3a:06:26:14:f3:28:02:7d:e0: a0:71:0d:f6:06:4b:21:59:ac:a0:e2:5d:7f:33:8f:97:68:b6: d5:87:30:12:c9:7a:37:56:32:06:55:71:f5:31:38:7a:43:15: fc:1f:98:39:6c:3a:85:cf:bb:3a:b6:6b:1c:7e:e2:e8:47:f1: 43:05:a6:35:b7:dc:33:38:a8:d3:53:98:71:d4:8d:bc:56:da: 93:eb:e6:d7:dd:e1:84:a4:08:a9:b5:a7:ce:07:e4:1e:e3:02: fb:a6:42:71:d0:73:ea:8e:ab:9b:41:a9:07:79:f5:8f:96:2b: e5:d5:fe:de:d2:e3:41:ab:83:18:ff:a1:9b:a5:df:bf:b9:fb: 48:5c:28:e0:61:1d:b1:ed:7d:cd:f2:60:8c:f0:1d:da:ab:2c: e8:a6:3f:f5:e7:c7:df:97:6b:96:42:17:1e:a8:4f:d0:68:59: f3:79:17:16 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 M0IyOTExMC8GA1UEBRMoQzU1MTg3QjAwQjFBNzMzNzVGODQ1Njg4NUY2QTEwN0VF MUQ5MzVDRjAeFw0yNDA1MTUwODUwMjJaFw0yNDA1MjIwODUwMjJaMBgxFjAUBgNV BAMTDTY2NDQ3NzRlLTAyZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD1Be32vjDm/gbgqziliv/uR911ROJAQPCqPAmHKEZqX0b1wYSkT7JXLeolC/lh EV6JXbDPWuWcoGjxecP3NLy8bjwlr1Wa1dieiDzSHfZ6dj5UiwAUF/Z9vlAIDnIJ X6ZFm8qtCObuQuCbtnpqU6l3oC06dXqH2Ze7xTP58rTts0YGcU/9MjQ0PtrPVkC1 eRCP03sKV6cTMK0Nk7eqs7mkRHKgsSgmqDmgNMbW/kM6b6vSBTZdz8PbcY4KEfcU N2MJq+Rzh2u34xoJIxscSLd6g4qeRgcmPUqzhOmEaFfIindpA5eL4/LlWkNLCjeP a67DkubcHawLuaBrarYGqTTXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhyg79uG0 7Xmmm5dZrFlihecpRfkwHwYDVR0jBBgwFoAUxVGHsAsaczdfhFaIX2oQfuHZNc8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczQjI5LzYxN0U5NDQ4RTgy NDExRUVBRkI3REE3REM0RjlBRTAyL3hWR0hzQXNhY3pkZmhGYUlYMm9RZnVIWk5j OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveFZHSHNBc2FjemRmaEZhSVgyb1FmdUhaTmM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz QjI5LzYxN0U5NDQ4RTgyNDExRUVBRkI3REE3REM0RjlBRTAyL3hWR0hzQXNhY3pk ZmhGYUlYMm9RZnVIWk5jOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACjDIQ7EFEWghUZitkoxVU5XVyteIn8LRhhCDBnOoLE0caQUHMgMBVK4 4h1I1XPOTqPFsv/U0zRr3jbaXCQ86YFKkEcLIAVRQ5T/QTSWRlikfzoGJhTzKAJ9 4KBxDfYGSyFZrKDiXX8zj5dottWHMBLJejdWMgZVcfUxOHpDFfwfmDlsOoXPuzq2 axx+4uhH8UMFpjW33DM4qNNTmHHUjbxW2pPr5tfd4YSkCKm1p84H5B7jAvumQnHQ c+qOq5tBqQd59Y+WK+XV/t7S40Grgxj/oZul37+5+0hcKOBhHbHtfc3yYIzwHdqr LOimP/Xnx9+Xa5ZCFx6oT9BoWfN5FxY= -----END CERTIFICATE-----Generated at Wed May 15 11:17:42 2024 by rpki-client on console-ams.rpki-client.org