$ rpki-client -vvf rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft File: xPbJMOCbga9ejADnmlhCqnJz0Q8.mft (raw, json) Hash identifier: 1jH6QjBadn1SpFgcyKn4Ig54ZHsWFdynwsQoaHUoTMo= Subject key identifier: 9E:23:EC:3E:BA:EC:8A:89:0D:5F:6C:81:A8:81:85:79:BA:BC:E4:0A Authority key identifier: C4:F6:C9:30:E0:9B:81:AF:5E:8C:00:E7:9A:58:42:AA:72:73:D1:0F Certificate issuer: /CN=A9180488/serialNumber=C4F6C930E09B81AF5E8C00E79A5842AA7273D10F Certificate serial: 0716 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft Manifest number: 070E Signing time: Sat 04 May 2024 22:46:37 +0000 Manifest this update: Sat 04 May 2024 22:46:37 +0000 Manifest next update: Sat 11 May 2024 22:46:37 +0000 Files and hashes: 1: xPbJMOCbga9ejADnmlhCqnJz0Q8.crl (hash: k9D15NKYRdP1c6SKc/aw/3NYvm0HGXfhL3qde1RJCVw=) 2: E2E11B669E5811EEAFEC8E0EC4F9AE02.roa (hash: brPu6LMewuIfxHrXmRE8x19Fml8l4eLFZ7G6TE2HhMQ=) 3: 0E8274C8F1D111EAB8680270C4F9AE02.roa (hash: QKQD1DnluPTlVGCPpmIHUQBiInmIdxjnp7xFvuRg7FU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.crl rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1814 (0x716) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180488/serialNumber=C4F6C930E09B81AF5E8C00E79A5842AA7273D10F Validity Not Before: May 4 22:46:37 2024 GMT Not After : May 11 22:46:37 2024 GMT Subject: CN=6636bacd-5617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9e:a9:5c:a8:c8:91:7b:95:e8:9f:ec:e0:49: 61:e9:11:83:25:2d:90:7f:e0:04:9b:70:45:c0:c4: f0:72:a0:a7:d7:1d:93:4b:f9:be:32:c6:5c:a7:2e: 5b:13:15:41:4f:0f:8f:ef:e5:f2:5b:a9:a4:c7:02: b0:dd:d4:7f:e0:2c:bf:b1:d8:cd:af:4e:61:70:a7: 54:d7:ee:17:ff:4d:f6:89:2b:fc:d9:ad:d7:e3:39: 1c:3e:5d:6e:97:26:87:5d:23:11:1f:17:86:98:98: 41:6c:d9:1e:e4:17:7d:58:db:73:a1:5d:0a:39:06: 89:96:36:6e:24:2f:44:f8:ff:a2:da:27:4b:f8:1e: c2:7d:82:11:97:8e:cb:16:a8:bc:80:23:98:8b:4a: a5:14:d6:61:d6:63:c6:2a:7e:3e:c8:1c:9d:ff:44: cf:99:dc:3d:47:76:c5:fc:60:2c:4a:4d:c2:79:ec: ee:8b:25:8a:9b:5e:e7:81:ec:5c:fd:18:bb:0c:1c: 5b:9d:40:36:54:72:4e:83:55:3c:eb:2b:c4:88:85: db:87:9a:c9:c9:ed:dc:5c:cd:08:58:15:3e:74:7c: a3:95:89:9d:08:b5:86:fd:8f:33:1e:9e:28:8d:b6: bd:db:6d:ee:b4:b5:ab:85:13:76:47:ea:4a:56:dd: 4e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:23:EC:3E:BA:EC:8A:89:0D:5F:6C:81:A8:81:85:79:BA:BC:E4:0A X509v3 Authority Key Identifier: keyid:C4:F6:C9:30:E0:9B:81:AF:5E:8C:00:E7:9A:58:42:AA:72:73:D1:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:de:e6:5a:59:03:9f:17:c7:07:11:07:5e:09:17:87:c0:93: a9:96:16:27:c7:66:fe:95:33:29:4a:8a:68:2b:2f:3a:a6:1e: 0f:2f:0b:ec:c2:b4:2e:4d:dc:da:2b:e3:14:37:e5:00:e3:a6: 0b:12:bb:ca:b7:16:7c:5d:f1:b9:be:b1:df:e7:76:55:46:ce: ae:ce:b3:f2:51:1a:8e:53:d2:36:60:d5:69:37:46:f3:73:95: fe:8d:13:be:2b:d9:90:6f:44:5a:d6:d1:16:42:c2:ab:6e:f9: 38:21:54:31:36:dd:f5:52:89:34:f7:2c:03:06:1d:28:2f:f2: 6f:8b:72:49:0b:41:29:81:80:38:bf:41:82:19:59:63:73:34: 78:c2:d0:c0:d3:25:fe:cf:e2:83:bf:c5:54:79:31:da:60:fc: a7:c0:a3:b1:4e:a5:0f:1e:d0:db:2a:c4:91:52:00:02:19:98: f2:e3:7a:1f:77:7b:28:d0:69:5f:38:db:f8:69:1f:61:d5:06: 98:0c:6b:98:a7:b1:84:fd:b6:2c:fa:9c:63:83:6a:58:d3:e0: 40:b3:0b:78:9b:4b:36:fe:c1:58:a8:78:eb:8b:17:6b:3e:9a: 2e:70:4b:0f:36:89:dc:bc:a8:44:88:4c:7f:40:28:ea:e1:73: 1e:05:37:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA0ODgxMTAvBgNVBAUTKEM0RjZDOTMwRTA5QjgxQUY1RThDMDBFNzlBNTg0MkFB NzI3M0QxMEYwHhcNMjQwNTA0MjI0NjM3WhcNMjQwNTExMjI0NjM3WjAYMRYwFAYD VQQDEw02NjM2YmFjZC01NjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw56pXKjIkXuV6J/s4Elh6RGDJS2Qf+AEm3BFwMTwcqCn1x2TS/m+MsZcpy5b ExVBTw+P7+XyW6mkxwKw3dR/4Cy/sdjNr05hcKdU1+4X/032iSv82a3X4zkcPl1u lyaHXSMRHxeGmJhBbNke5Bd9WNtzoV0KOQaJljZuJC9E+P+i2idL+B7CfYIRl47L Fqi8gCOYi0qlFNZh1mPGKn4+yByd/0TPmdw9R3bF/GAsSk3CeezuiyWKm17ngexc /Ri7DBxbnUA2VHJOg1U86yvEiIXbh5rJye3cXM0IWBU+dHyjlYmdCLWG/Y8zHp4o jba9223utLWrhRN2R+pKVt1O2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4j7D66 7IqJDV9sgaiBhXm6vOQKMB8GA1UdIwQYMBaAFMT2yTDgm4GvXowA55pYQqpyc9EP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDQ4OC82NTIwRkYwOEYx RDAxMUVBQTQ4Q0VFNkZDNEY5QUUwMi94UGJKTU9DYmdhOWVqQURubWxoQ3FuSnow UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQYkpNT0NiZ2E5ZWpBRG5tbGhDcW5KejBROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDQ4OC82NTIwRkYwOEYxRDAxMUVBQTQ4Q0VFNkZDNEY5QUUwMi94UGJKTU9DYmdh OWVqQURubWxoQ3FuSnowUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBY3uZaWQOfF8cHEQdeCReHwJOplhYnx2b+lTMpSopoKy86ph4PLwvs wrQuTdzaK+MUN+UA46YLErvKtxZ8XfG5vrHf53ZVRs6uzrPyURqOU9I2YNVpN0bz c5X+jRO+K9mQb0Ra1tEWQsKrbvk4IVQxNt31Uok09ywDBh0oL/Jvi3JJC0EpgYA4 v0GCGVljczR4wtDA0yX+z+KDv8VUeTHaYPynwKOxTqUPHtDbKsSRUgACGZjy43of d3so0GlfONv4aR9h1QaYDGuYp7GE/bYs+pxjg2pY0+BAswt4m0s2/sFYqHjrixdr PpoucEsPNoncvKhEiEx/QCjq4XMeBTeA -----END CERTIFICATE-----Generated at Sun May 5 00:14:43 2024 by rpki-client on console-ams.rpki-client.org