$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft File: XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft (raw, json) Hash identifier: yFLulrbpc0uFASK9Jn7rBkoQWvgBJALfFbSfpkpy5kI= Subject key identifier: 3F:3F:E6:07:10:35:73:D9:07:85:53:59:2F:20:D4:C3:20:08:91:33 Authority key identifier: 5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44 Certificate issuer: /CN=A9175F54/serialNumber=5DB57ED386039EA664D1EFF7570736D6F9F04C44 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft Manifest number: 4C Signing time: Wed 15 May 2024 08:04:13 +0000 Manifest this update: Wed 15 May 2024 08:04:13 +0000 Manifest next update: Wed 22 May 2024 08:04:13 +0000 Files and hashes: 1: XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl (hash: r9FmFRTgKXBlI1rexLGcONMUSfBsZfQa9Eew+zxWqHk=) 2: F6EB41429F2811EE91032D2AC4F9AE02.roa (hash: yxO8Q4SCvnLCFfrQRy7nPNmvXi4dwi3Ipp3jxwvR68c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:04:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F54/serialNumber=5DB57ED386039EA664D1EFF7570736D6F9F04C44 Validity Not Before: May 15 08:04:13 2024 GMT Not After : May 22 08:04:13 2024 GMT Subject: CN=66446c7d-46ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9f:37:15:0b:bd:ed:4a:85:33:97:f3:3f:d8: ef:c0:1a:69:ed:3d:77:0e:2b:8b:59:4e:91:14:ce: e1:75:db:8e:ae:50:91:36:14:b7:19:2d:61:12:98: bc:4a:a9:39:0c:86:aa:45:aa:83:b9:7f:b3:76:6d: 6e:9f:bf:9e:d5:fe:5d:8c:ef:23:c5:7c:e8:22:25: 4d:34:00:0a:06:84:6b:ee:63:ae:2c:26:67:b9:f7: 9e:91:ed:71:fd:22:ba:2e:0d:06:d3:10:e2:b3:01: bf:5d:a5:13:ec:68:eb:7b:aa:4e:4d:76:78:9b:82: 30:0f:f8:c6:9d:47:49:b8:48:a8:dc:f4:77:08:43: 74:da:0f:ff:5b:07:92:5b:3a:e1:a7:3d:06:ef:48: 54:c5:38:ad:ca:52:4c:85:2b:a2:ad:99:09:96:9c: e0:b6:d4:60:87:00:59:46:8d:64:4d:22:04:d5:6c: 35:78:ae:17:9e:24:29:e9:85:74:91:dc:4f:f1:a0: c7:42:e0:88:04:a0:41:d4:96:a2:fa:94:1b:c1:45: c0:33:d3:d1:11:ef:d9:ac:f8:2a:9d:85:8b:52:a6: ce:a8:59:72:90:48:38:d9:ae:bc:17:ac:b6:fd:99: 38:4c:17:89:cb:93:ec:5f:7f:ca:bd:5a:e0:67:bf: de:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:3F:E6:07:10:35:73:D9:07:85:53:59:2F:20:D4:C3:20:08:91:33 X509v3 Authority Key Identifier: keyid:5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:6b:f4:7e:0a:52:18:92:41:67:ca:05:5c:6b:37:fd:b6:0c: b0:71:59:18:f7:7a:82:72:d2:7f:d7:81:3e:41:74:97:46:f5: 50:9b:aa:6c:f7:a9:fd:ab:d6:d5:63:3e:6f:86:4a:d7:82:99: 32:81:af:3a:cf:88:ad:7b:97:c2:1c:a1:e5:c7:45:4f:5d:59: a3:54:76:f7:e7:02:25:c9:f6:6c:8e:0d:d1:41:42:70:59:02: c9:30:f2:c2:b1:57:ad:29:4b:2f:e8:6e:90:10:af:8e:d7:4f: 86:1f:71:67:38:84:eb:0f:3f:f5:b5:43:fb:53:85:60:e9:1e: 7b:4e:d8:ac:42:cb:e3:f6:de:a1:f4:d1:af:ec:f7:b1:06:f9: b6:5f:9f:92:c7:c2:94:cc:84:af:d8:8f:a6:9f:8c:aa:a7:7b: b3:42:2b:dc:f3:b9:91:33:5d:0d:9c:0d:51:6b:2a:9b:7f:a2: f2:82:bb:6f:3b:0b:33:37:15:24:5d:c7:86:9d:91:76:5c:54: df:d2:2f:06:89:3d:ab:9d:71:7e:ee:c2:a7:3e:90:39:63:67: 0e:36:4b:b7:4d:51:0b:70:c0:17:e0:65:ca:37:e7:c8:c2:1f: e2:72:26:3d:db:d5:1f:05:3b:c2:2f:ca:38:46:4e:bc:c6:10: 47:1d:a9:97 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NUY1NDExMC8GA1UEBRMoNURCNTdFRDM4NjAzOUVBNjY0RDFFRkY3NTcwNzM2RDZG OUYwNEM0NDAeFw0yNDA1MTUwODA0MTNaFw0yNDA1MjIwODA0MTNaMBgxFjAUBgNV BAMTDTY2NDQ2YzdkLTQ2YWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBnzcVC73tSoUzl/M/2O/AGmntPXcOK4tZTpEUzuF1246uUJE2FLcZLWESmLxK qTkMhqpFqoO5f7N2bW6fv57V/l2M7yPFfOgiJU00AAoGhGvuY64sJme5956R7XH9 IrouDQbTEOKzAb9dpRPsaOt7qk5NdnibgjAP+MadR0m4SKjc9HcIQ3TaD/9bB5Jb OuGnPQbvSFTFOK3KUkyFK6KtmQmWnOC21GCHAFlGjWRNIgTVbDV4rheeJCnphXSR 3E/xoMdC4IgEoEHUlqL6lBvBRcAz09ER79ms+CqdhYtSps6oWXKQSDjZrrwXrLb9 mThMF4nLk+xff8q9WuBnv953AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPz/mBxA1 c9kHhVNZLyDUwyAIkTMwHwYDVR0jBBgwFoAUXbV+04YDnqZk0e/3Vwc21vnwTEQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1RjU0LzUxQjZFQ0U0OUYy ODExRUVBOTk1RDMyOEM0RjlBRTAyL1hiVi0wNFlEbnFaazBlXzNWd2MyMXZud1RF US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWGJWLTA0WURucVprMGVfM1Z3YzIxdm53VEVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 RjU0LzUxQjZFQ0U0OUYyODExRUVBOTk1RDMyOEM0RjlBRTAyL1hiVi0wNFlEbnFa azBlXzNWd2MyMXZud1RFUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKxr9H4KUhiSQWfKBVxrN/22DLBxWRj3eoJy0n/XgT5BdJdG9VCbqmz3 qf2r1tVjPm+GSteCmTKBrzrPiK17l8IcoeXHRU9dWaNUdvfnAiXJ9myODdFBQnBZ Askw8sKxV60pSy/obpAQr47XT4YfcWc4hOsPP/W1Q/tThWDpHntO2KxCy+P23qH0 0a/s97EG+bZfn5LHwpTMhK/Yj6afjKqne7NCK9zzuZEzXQ2cDVFrKpt/ovKCu287 CzM3FSRdx4adkXZcVN/SLwaJPaudcX7uwqc+kDljZw42S7dNUQtwwBfgZco358jC H+JyJj3b1R8FO8IvyjhGTrzGEEcdqZc= -----END CERTIFICATE-----Generated at Wed May 15 09:04:13 2024 by rpki-client on console-ams.rpki-client.org