$ rpki-client -vvf rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft File: xH0VZB2jsUx05cspvMBIgSMK0U4.mft (raw, json) Hash identifier: XX7/exIYGgKeH3z+JFqNv51oRBJrw01nDvvDge75BEg= Subject key identifier: 01:EE:DE:C4:CB:52:7D:99:C2:A3:7B:E8:B8:19:4F:C2:1E:BF:C1:50 Authority key identifier: C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E Certificate issuer: /CN=A9187364/serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft Manifest number: 01AF Signing time: Tue 07 May 2024 04:34:44 +0000 Manifest this update: Tue 07 May 2024 04:34:43 +0000 Manifest next update: Tue 14 May 2024 04:34:43 +0000 Files and hashes: 1: xH0VZB2jsUx05cspvMBIgSMK0U4.crl (hash: +NqdR4bcHn5DZIje40rhZT5VbyFgPHJeebP5stRvAp8=) 2: 62B575B8104C11ED8CE56267C4F9AE02.roa (hash: p81JenP4sHk9EaqfiI10bPWD5d74Vcxx+XAxOXmCvG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 04:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187364/serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E Validity Not Before: May 7 04:34:43 2024 GMT Not After : May 14 04:34:43 2024 GMT Subject: CN=6639af64-eecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:81:77:51:36:6a:70:75:8b:9e:e8:bb:49:7d: 15:66:53:84:d3:cf:f9:71:8c:40:2b:e6:57:00:35: ce:34:ec:e1:47:82:11:71:46:88:ab:66:25:ff:fe: df:22:0b:9a:a0:26:ea:44:7d:51:68:42:41:42:d6: 96:2d:5b:29:56:8b:87:07:5f:d1:45:19:8a:c4:d8: 07:a5:4e:b7:82:78:51:fe:9c:06:aa:3c:05:05:c2: 62:10:d8:d0:c4:c5:d7:21:e4:0c:2a:1d:13:90:bf: cf:33:df:9a:c6:72:52:d3:7d:c5:dd:55:64:dc:f8: 66:fb:57:92:75:24:4a:d0:28:80:2a:26:cb:b4:cf: 21:c3:0e:2a:e8:da:85:d6:34:58:4b:08:9f:13:e3: 0a:01:05:9b:96:54:71:9d:64:1a:82:35:63:17:e2: a0:f5:33:b8:28:02:d4:93:b6:a6:67:fc:d7:26:91: b4:6f:e3:da:81:7e:8f:84:03:06:ff:3d:77:11:1a: bb:c0:eb:38:d9:2b:c2:85:7c:e7:07:94:d8:6a:6d: fd:90:47:1c:27:56:9d:d0:9b:89:72:45:2b:01:1e: 86:68:14:04:ff:93:25:a3:52:38:cb:4a:16:68:4a: 1b:13:b0:1b:5f:a8:96:cc:a4:3a:62:38:0e:44:3c: 2e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:EE:DE:C4:CB:52:7D:99:C2:A3:7B:E8:B8:19:4F:C2:1E:BF:C1:50 X509v3 Authority Key Identifier: keyid:C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:65:06:ee:96:d5:93:59:52:6d:dc:57:0e:a4:5c:f4:f5:31: 4a:02:06:cb:cd:a2:c7:4e:f7:ef:a4:91:ee:9d:1b:77:b1:e2: 38:08:6c:b5:60:39:8c:39:1a:36:77:45:3b:b0:2c:65:92:e1: 29:15:ca:84:bc:f5:6e:31:55:f6:40:75:f9:15:ff:a7:4a:41: 20:af:e1:b5:e1:dc:5e:ec:e0:35:28:64:27:60:b2:e0:be:b3: 91:74:1c:d8:3e:ed:43:7f:a2:6f:6e:61:e4:7a:94:55:5b:0b: 07:0c:87:73:e8:59:82:e3:16:5d:29:d2:59:f7:d2:54:e2:a7: af:e2:d8:f7:35:56:b1:99:bb:af:bf:c8:ce:e9:df:34:9b:c5: 5e:88:e0:ac:0e:d8:72:e6:33:71:04:76:90:fa:34:11:7a:ab: 24:18:16:57:8d:44:d9:42:98:2c:79:b3:65:c3:53:f5:3f:63: 52:28:02:6e:c6:1c:6e:15:fd:81:03:0d:f7:91:b1:0e:6e:06: 8c:83:e2:e8:b9:76:c8:0d:01:31:8c:b6:42:b3:0c:9d:ff:68: e6:53:5d:4a:44:3e:48:3c:ce:a3:f9:43:1b:ed:6c:d0:4c:30: 4b:15:71:1c:e0:9c:25:97:d5:d4:7d:2e:08:16:9c:89:e1:37: f4:4a:b5:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczNjQxMTAvBgNVBAUTKEM0N0QxNTY0MURBM0IxNEM3NEU1Q0IyOUJDQzA0ODgx MjMwQUQxNEUwHhcNMjQwNTA3MDQzNDQzWhcNMjQwNTE0MDQzNDQzWjAYMRYwFAYD VQQDEw02NjM5YWY2NC1lZWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4F3UTZqcHWLnui7SX0VZlOE08/5cYxAK+ZXADXONOzhR4IRcUaIq2Yl//7f IguaoCbqRH1RaEJBQtaWLVspVouHB1/RRRmKxNgHpU63gnhR/pwGqjwFBcJiENjQ xMXXIeQMKh0TkL/PM9+axnJS033F3VVk3Phm+1eSdSRK0CiAKibLtM8hww4q6NqF 1jRYSwifE+MKAQWbllRxnWQagjVjF+Kg9TO4KALUk7amZ/zXJpG0b+PagX6PhAMG /z13ERq7wOs42SvChXznB5TYam39kEccJ1ad0JuJckUrAR6GaBQE/5Mlo1I4y0oW aEobE7AbX6iWzKQ6YjgORDwuowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHu3sTL Un2ZwqN76LgZT8Iev8FQMB8GA1UdIwQYMBaAFMR9FWQdo7FMdOXLKbzASIEjCtFO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzM2NC9FOUE0RUE3MDEw NDkxMUVEOEVGMEY3NjJDNEY5QUUwMi94SDBWWkIyanNVeDA1Y3Nwdk1CSWdTTUsw VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hIMFZaQjJqc1V4MDVjc3B2TUJJZ1NNSzBVNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzM2NC9FOUE0RUE3MDEwNDkxMUVEOEVGMEY3NjJDNEY5QUUwMi94SDBWWkIyanNV eDA1Y3Nwdk1CSWdTTUswVTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsZQbultWTWVJt3FcOpFz09TFKAgbLzaLHTvfvpJHunRt3seI4CGy1 YDmMORo2d0U7sCxlkuEpFcqEvPVuMVX2QHX5Ff+nSkEgr+G14dxe7OA1KGQnYLLg vrORdBzYPu1Df6JvbmHkepRVWwsHDIdz6FmC4xZdKdJZ99JU4qev4tj3NVaxmbuv v8jO6d80m8VeiOCsDthy5jNxBHaQ+jQReqskGBZXjUTZQpgsebNlw1P1P2NSKAJu xhxuFf2BAw33kbEObgaMg+LouXbIDQExjLZCswyd/2jmU11KRD5IPM6j+UMb7WzQ TDBLFXEc4Jwll9XUfS4IFpyJ4Tf0SrWy -----END CERTIFICATE-----Generated at Tue May 7 05:34:26 2024 by rpki-client on console-ams.rpki-client.org