$ rpki-client -vvf rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft File: XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft (raw, json) Hash identifier: wkq1eZs6RB6pZWkzkB0g48p7wRN1ZXWfyQn6BVwG6BQ= Subject key identifier: 87:6D:0B:43:FD:D4:B5:97:9B:7E:CC:84:35:77:7D:02:A0:E2:A6:FB Authority key identifier: 5C:27:D5:3D:0F:23:81:3C:8E:A1:63:8A:F0:6C:8D:34:D8:F2:DF:F1 Certificate issuer: /CN=A9178ACB/serialNumber=5C27D53D0F23813C8EA1638AF06C8D34D8F2DFF1 Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft Manifest number: 01B5 Signing time: Fri 03 May 2024 04:36:28 +0000 Manifest this update: Fri 03 May 2024 04:36:28 +0000 Manifest next update: Fri 10 May 2024 04:36:28 +0000 Files and hashes: 1: XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl (hash: qrkhkTS050zioPyGg8RnWWHkK+NsAEA46qwxYLx2qwM=) 2: F82824B4163311EDA7687F1CC4F9AE02.roa (hash: w2B8Boc6iEHnD3aFyrPVmF48n5qpUbo65QSeGsyOFms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178ACB/serialNumber=5C27D53D0F23813C8EA1638AF06C8D34D8F2DFF1 Validity Not Before: May 3 04:36:28 2024 GMT Not After : May 10 04:36:28 2024 GMT Subject: CN=663469cc-f655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:38:46:e9:a3:cb:03:35:da:89:2e:a5:5e:7f: 8d:9b:1d:33:37:da:e7:0b:50:b0:b7:db:cf:bd:6b: d8:62:80:ee:50:8c:96:43:2d:30:4a:9b:1a:f5:fe: e3:f7:01:59:7f:18:1f:06:66:df:5b:5e:3a:9b:04: 1c:3e:0e:52:ef:04:a3:42:2d:47:f7:6a:20:80:f2: d4:11:7c:89:de:3c:fd:ee:c7:08:6c:5f:30:83:f9: e3:f3:34:96:46:06:fd:60:e7:88:13:e7:0a:a2:0d: 10:9a:57:8f:37:54:5f:f8:95:8a:d2:3b:2e:d7:8a: 2d:a8:8f:d0:07:cd:4a:48:1a:fe:d6:a0:04:43:0c: 5c:9d:f5:4f:af:c4:ad:ef:f0:c0:72:17:38:b8:ab: c7:7c:74:04:fd:94:78:ed:a0:ba:5c:37:72:64:11: c1:f4:16:78:ce:44:de:46:bf:d7:cb:70:5f:5e:b1: 1c:6f:37:43:8f:01:95:18:7a:e5:a3:cf:04:35:5e: e1:1f:1a:54:58:74:17:26:17:86:1f:3a:2b:78:bb: 7a:86:70:cf:5c:18:b6:8d:2d:18:05:96:b6:4d:9a: e1:19:93:84:62:71:a6:90:ab:05:b5:a3:87:72:56: 4e:29:24:a9:04:b0:6d:ef:c2:d9:1e:b4:52:97:2b: 4d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:6D:0B:43:FD:D4:B5:97:9B:7E:CC:84:35:77:7D:02:A0:E2:A6:FB X509v3 Authority Key Identifier: keyid:5C:27:D5:3D:0F:23:81:3C:8E:A1:63:8A:F0:6C:8D:34:D8:F2:DF:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:1a:db:e8:98:02:b7:5e:cf:d1:fd:90:c8:c3:87:f2:61:0e: 6d:84:4e:6c:7c:5e:02:51:1e:5b:ba:11:0b:be:c7:f4:a5:c1: c5:fc:56:d8:b6:0b:f8:87:5f:ec:c0:6b:b0:75:3d:e2:0c:45: 0e:19:bb:eb:1e:eb:19:8c:5c:ae:a1:da:d8:20:3b:49:5e:fe: 46:88:ad:af:b8:a8:14:35:a0:b0:0e:a9:a5:fa:66:62:2b:86: d9:ed:bb:93:ba:4a:f3:3f:91:a1:d8:4a:0f:dc:3d:ea:10:e5: 8a:f7:f8:7e:21:bf:57:de:84:b7:82:2c:e2:53:41:d4:5e:6b: c7:5b:8d:b9:e8:6e:0d:b8:51:80:58:bb:64:3d:ad:39:01:e4: de:19:93:f2:c1:ef:70:20:dd:d5:d3:dd:fe:73:06:f7:e9:71: 3f:b6:e5:12:67:38:bd:e9:63:0d:80:3f:ae:b5:ad:e9:90:67: c0:86:88:4b:81:57:cf:cd:83:b5:4f:35:74:6f:ce:bf:b6:b5: 12:09:b4:2d:8a:95:6e:82:e9:d9:fc:e5:dc:cd:2f:b6:b1:51: dd:df:65:75:cd:86:2b:45:7b:e2:ab:59:e6:b9:44:3f:7a:2d: 22:32:c7:31:68:cf:c7:12:2f:a2:67:ec:c9:91:e2:b9:b2:6e: 22:2e:45:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBQ0IxMTAvBgNVBAUTKDVDMjdENTNEMEYyMzgxM0M4RUExNjM4QUYwNkM4RDM0 RDhGMkRGRjEwHhcNMjQwNTAzMDQzNjI4WhcNMjQwNTEwMDQzNjI4WjAYMRYwFAYD VQQDEw02NjM0NjljYy1mNjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DhG6aPLAzXaiS6lXn+Nmx0zN9rnC1Cwt9vPvWvYYoDuUIyWQy0wSpsa9f7j 9wFZfxgfBmbfW146mwQcPg5S7wSjQi1H92oggPLUEXyJ3jz97scIbF8wg/nj8zSW Rgb9YOeIE+cKog0QmlePN1Rf+JWK0jsu14otqI/QB81KSBr+1qAEQwxcnfVPr8St 7/DAchc4uKvHfHQE/ZR47aC6XDdyZBHB9BZ4zkTeRr/Xy3BfXrEcbzdDjwGVGHrl o88ENV7hHxpUWHQXJheGHzoreLt6hnDPXBi2jS0YBZa2TZrhGZOEYnGmkKsFtaOH clZOKSSpBLBt78LZHrRSlytNkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdtC0P9 1LWXm37MhDV3fQKg4qb7MB8GA1UdIwQYMBaAFFwn1T0PI4E8jqFjivBsjTTY8t/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFDQi81MjNBOEY1NjBC QTcxMUVEOEIwRTRDNDNDNEY5QUUwMi9YQ2ZWUFE4amdUeU9vV09LOEd5Tk5Oankz X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hDZlZQUThqZ1R5T29XT0s4R3lOTk5qeTNfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEFDQi81MjNBOEY1NjBCQTcxMUVEOEIwRTRDNDNDNEY5QUUwMi9YQ2ZWUFE4amdU eU9vV09LOEd5Tk5OankzX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACGtvomAK3Xs/R/ZDIw4fyYQ5thE5sfF4CUR5buhELvsf0pcHF/FbY tgv4h1/swGuwdT3iDEUOGbvrHusZjFyuodrYIDtJXv5GiK2vuKgUNaCwDqml+mZi K4bZ7buTukrzP5Gh2EoP3D3qEOWK9/h+Ib9X3oS3giziU0HUXmvHW4256G4NuFGA WLtkPa05AeTeGZPywe9wIN3V093+cwb36XE/tuUSZzi96WMNgD+uta3pkGfAhohL gVfPzYO1TzV0b86/trUSCbQtipVugunZ/OXczS+2sVHd32V1zYYrRXviq1nmuUQ/ ei0iMscxaM/HEi+iZ+zJkeK5sm4iLkXS -----END CERTIFICATE-----Generated at Fri May 3 05:32:34 2024 by rpki-client on console-ams.rpki-client.org