$ rpki-client -vvf rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft File: xC_x0v81KYG8X4IkDsk5TvqzEYY.mft (raw, json) Hash identifier: 5BOLT5Ft9ytUWNRTmpQILZbY7S4PKKI2ixwhElpfm70= Subject key identifier: D8:A2:8F:7C:84:98:A1:C9:4D:CA:FA:DA:59:3A:6C:FF:7D:42:C3:D1 Authority key identifier: C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86 Certificate issuer: /CN=A91814E9/serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186 Certificate serial: 06D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft Manifest number: 06CF Signing time: Fri 26 Apr 2024 22:55:40 +0000 Manifest this update: Fri 26 Apr 2024 22:55:39 +0000 Manifest next update: Fri 03 May 2024 22:55:39 +0000 Files and hashes: 1: xC_x0v81KYG8X4IkDsk5TvqzEYY.crl (hash: +dfZW2584rVVjT1ywkXyST73O0iXv2MFM3JoYhRyVes=) 2: 24D4F9F0E61B11EBBAE35771C4F9AE02.roa (hash: i0ClyumlijcNnpqIg/mFC8YJNC7o1oFh981yisGDHQk=) 3: 21EE9510083211EB81509633C4F9AE02.roa (hash: vg+Ii7oQc1BZ9R2S8fRN7vzSzbRm1aysnBDRd/3/X1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 22:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1752 (0x6d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91814E9/serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186 Validity Not Before: Apr 26 22:55:39 2024 GMT Not After : May 3 22:55:39 2024 GMT Subject: CN=662c30eb-5c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:25:27:b4:8f:64:90:16:e5:42:49:c5:c1:93: f0:14:3b:21:ec:8e:b9:b2:5d:33:dd:de:1b:b3:75: 56:78:29:f6:b6:7d:e5:eb:aa:a0:d8:96:56:65:d6: 9c:e6:a4:0c:00:fc:46:d3:f6:0d:52:cb:32:e8:dd: d8:b4:19:94:9c:b8:ba:65:1d:71:02:ee:94:16:86: 4e:8e:d6:c8:27:dd:97:c2:4f:46:2d:17:91:d1:13: 21:2f:0e:b1:d6:83:8e:78:35:e3:fe:f7:38:1b:0e: f1:cd:aa:4a:2e:da:a6:49:b6:49:43:48:0e:56:e3: d6:19:bb:40:de:e1:3f:c3:65:d9:e6:f7:0b:6c:93: c4:b6:7c:1e:ed:3d:8a:ca:81:4d:d2:99:f3:1d:db: d9:1b:a0:52:5e:93:26:f4:0c:ce:88:7d:41:68:bb: ba:31:88:15:28:3e:ad:07:dc:8f:0e:a1:d4:ab:1a: bc:dd:e9:97:8f:ec:0f:f9:45:68:03:13:94:00:9e: 19:c4:0c:de:61:ac:cc:8f:8a:71:38:9b:73:ea:0f: 8f:45:59:df:e1:81:59:4a:3b:d9:5d:51:4d:e5:89: fb:38:70:76:87:f9:b6:1b:82:ac:90:12:49:91:0f: de:78:20:9e:29:59:52:bf:29:c3:2f:0e:5b:25:77: 8a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A2:8F:7C:84:98:A1:C9:4D:CA:FA:DA:59:3A:6C:FF:7D:42:C3:D1 X509v3 Authority Key Identifier: keyid:C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:71:2b:62:bc:87:1a:d9:57:5d:a8:7a:86:e4:56:49:b5:da: 9a:0b:ad:d3:21:13:99:f2:70:df:48:89:a0:49:5b:32:c1:c6: 58:48:67:c1:da:48:d3:c2:88:22:1f:86:60:50:65:1c:20:c2: 7c:12:14:f2:45:e8:ee:f0:4d:50:22:2f:b7:70:61:62:4e:ba: f4:01:5c:47:da:7a:1d:02:60:14:a9:9f:63:f9:73:23:c2:a2: b3:2f:9b:91:3e:1d:01:2f:48:a1:85:70:92:b5:3b:9f:1b:4d: 3f:9b:c5:9c:73:9e:23:92:f1:0f:81:34:ec:a3:b1:93:c9:8a: b1:5e:76:ef:18:91:12:b2:65:8b:2e:37:25:76:84:f8:72:fa: 94:9a:58:ea:19:e9:2f:14:f8:3f:3b:89:e8:94:5e:2c:39:a3: d0:8b:0c:3e:31:98:7f:c9:40:c6:b8:05:eb:0e:56:8f:8a:38: 60:76:17:40:ba:ad:fc:1f:c7:af:ee:82:42:7d:6f:7b:9e:10: 21:3a:92:03:22:f9:37:23:37:c9:6e:10:42:e3:05:a6:4e:9e: b1:23:1f:06:4b:23:7a:f9:cf:25:21:be:d6:71:41:70:ac:37: 98:42:1a:d9:80:44:4b:2b:2f:39:40:c9:92:a9:ec:65:30:df: 54:67:59:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE0RTkxMTAvBgNVBAUTKEM0MkZGMUQyRkYzNTI5ODFCQzVGODIyNDBFQzkzOTRF RkFCMzExODYwHhcNMjQwNDI2MjI1NTM5WhcNMjQwNTAzMjI1NTM5WjAYMRYwFAYD VQQDEw02NjJjMzBlYi01YzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9SUntI9kkBblQknFwZPwFDsh7I65sl0z3d4bs3VWeCn2tn3l66qg2JZWZdac 5qQMAPxG0/YNUssy6N3YtBmUnLi6ZR1xAu6UFoZOjtbIJ92Xwk9GLReR0RMhLw6x 1oOOeDXj/vc4Gw7xzapKLtqmSbZJQ0gOVuPWGbtA3uE/w2XZ5vcLbJPEtnwe7T2K yoFN0pnzHdvZG6BSXpMm9AzOiH1BaLu6MYgVKD6tB9yPDqHUqxq83emXj+wP+UVo AxOUAJ4ZxAzeYazMj4pxOJtz6g+PRVnf4YFZSjvZXVFN5Yn7OHB2h/m2G4KskBJJ kQ/eeCCeKVlSvynDLw5bJXeKowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNiij3yE mKHJTcr62lk6bP99QsPRMB8GA1UdIwQYMBaAFMQv8dL/NSmBvF+CJA7JOU76sxGG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTRFOS9GRTU3QzJCQzA4 MzAxMUVCQkZFNEM3MzJDNEY5QUUwMi94Q194MHY4MUtZRzhYNElrRHNrNVR2cXpF WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDX3gwdjgxS1lHOFg0SWtEc2s1VHZxekVZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTRFOS9GRTU3QzJCQzA4MzAxMUVCQkZFNEM3MzJDNEY5QUUwMi94Q194MHY4MUtZ RzhYNElrRHNrNVR2cXpFWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAncStivIca2VddqHqG5FZJtdqaC63TIROZ8nDfSImgSVsywcZYSGfB 2kjTwogiH4ZgUGUcIMJ8EhTyReju8E1QIi+3cGFiTrr0AVxH2nodAmAUqZ9j+XMj wqKzL5uRPh0BL0ihhXCStTufG00/m8Wcc54jkvEPgTTso7GTyYqxXnbvGJESsmWL LjcldoT4cvqUmljqGekvFPg/O4nolF4sOaPQiww+MZh/yUDGuAXrDlaPijhgdhdA uq38H8ev7oJCfW97nhAhOpIDIvk3IzfJbhBC4wWmTp6xIx8GSyN6+c8lIb7WcUFw rDeYQhrZgERLKy85QMmSqexlMN9UZ1nP -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:17 2024 by rpki-client on console-ams.rpki-client.org