$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft File: xIqs603a7jxgQuZiFq15FQe0fGs.mft (raw, json) Hash identifier: BXtT4UtD/S6Lwy/p9WQUfdvdqJSoupYzlAkF0bKk+UM= Subject key identifier: 1F:5B:5A:4C:D3:7F:1D:1D:3C:E9:5A:0A:BA:30:D0:6D:7A:63:B3:71 Authority key identifier: C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B Certificate issuer: /CN=A918EF61/serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B Certificate serial: 183F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft Manifest number: 1836 Signing time: Sat 04 May 2024 17:00:48 +0000 Manifest this update: Sat 04 May 2024 17:00:47 +0000 Manifest next update: Sat 11 May 2024 17:00:47 +0000 Files and hashes: 1: xIqs603a7jxgQuZiFq15FQe0fGs.crl (hash: ZOYXGnC/i/SyfNxYi3ODlYCC3+fBseZ+O8chJ65th3g=) 2: C44B0ADA83DA11E7AD4F156CC4F9AE02.roa (hash: AnizUeFL15aVyGPVXYahIej4+dszsMs4Qefj7iCPVqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6207 (0x183f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF61/serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B Validity Not Before: May 4 17:00:47 2024 GMT Not After : May 11 17:00:47 2024 GMT Subject: CN=663669c0-09cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b9:90:8f:4a:0f:ae:fe:41:f9:f4:4c:18:e9: 5f:ef:35:8e:8a:ee:a6:44:4e:e3:ef:8d:00:75:92: f2:2d:f4:dd:85:c5:8d:81:b7:c2:77:b7:85:54:b9: 90:87:8d:54:a0:28:2b:4e:0f:3f:1e:5e:ac:9a:3e: e6:a1:34:8c:fb:b7:83:2a:77:86:b8:f2:df:07:43: 39:60:dc:0f:72:d3:9a:2c:1d:e7:91:8e:7c:93:c3: 14:fc:4f:60:f3:92:d1:a1:95:da:47:24:04:4d:3e: c5:5c:76:cb:f8:ad:1b:92:cc:64:7a:53:8c:de:2a: 6b:8d:93:28:0c:98:d6:e5:69:05:b0:99:b5:e2:48: 1d:54:18:ac:00:91:64:6a:00:b3:4b:43:25:11:4a: cb:0d:fd:c1:0e:d0:86:8f:33:8e:24:3f:27:56:f7: 91:b7:11:1b:86:19:26:8b:32:2e:d6:53:bb:85:5d: ad:f0:4d:a3:06:24:36:12:d5:bd:7e:6a:dd:07:34: dc:85:63:1b:03:cf:ed:6c:1e:e5:a8:a4:95:e9:b8: ef:2f:1a:7f:86:15:f0:11:ea:26:7a:56:5b:f6:70: 36:8d:4c:58:07:97:f3:bc:36:34:7b:1d:34:f1:2d: 88:91:04:fd:ef:4d:f6:60:cc:82:c4:8b:9d:42:0c: f0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:5B:5A:4C:D3:7F:1D:1D:3C:E9:5A:0A:BA:30:D0:6D:7A:63:B3:71 X509v3 Authority Key Identifier: keyid:C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:15:e1:71:2c:3f:00:5f:05:c4:f7:69:70:76:d6:ba:d1:20: 08:a1:17:35:b6:72:74:0b:34:0f:ec:45:8d:8e:4d:b9:03:c7: 37:f0:b9:e0:21:05:3d:a9:48:68:88:28:3e:6a:27:0e:bd:c4: 8f:09:73:e4:40:9a:64:62:cb:7f:01:b3:9a:7c:65:87:d8:5c: 9d:e8:2e:f8:6e:9d:45:d6:0b:80:7b:fa:6a:d0:ba:b2:7f:7d: c1:ca:61:49:da:e8:30:69:0e:97:52:31:27:ea:0d:a9:8f:69: 08:08:9b:10:ed:f1:3c:e7:8a:0c:b0:e4:70:42:a1:ee:9e:ca: 17:3b:27:45:63:30:d4:69:3c:e9:2d:76:2d:7a:54:a2:46:ef: 7c:b2:8a:09:a5:39:86:1b:1c:11:09:0b:0e:6c:c9:95:1c:a6: 9f:ed:06:60:10:1a:38:bf:4a:d6:d6:cb:9b:dd:ff:cc:8b:fe: 0c:3c:6e:4c:0b:03:0b:d4:ac:8b:d0:24:62:6b:29:67:e0:5d: 17:ae:dc:eb:05:d3:e8:02:37:bc:93:bc:72:49:45:73:b6:1f: 9a:68:7d:f9:f2:b4:63:cd:31:4f:92:db:0b:c8:23:b9:da:be: 5b:db:34:fd:b8:bc:56:58:be:5e:24:7b:bc:5a:af:cb:3d:cc: f8:91:3b:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGNjExMTAvBgNVBAUTKEM0OEFBQ0VCNEREQUVFM0M2MDQyRTY2MjE2QUQ3OTE1 MDdCNDdDNkIwHhcNMjQwNTA0MTcwMDQ3WhcNMjQwNTExMTcwMDQ3WjAYMRYwFAYD VQQDEw02NjM2NjljMC0wOWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrmQj0oPrv5B+fRMGOlf7zWOiu6mRE7j740AdZLyLfTdhcWNgbfCd7eFVLmQ h41UoCgrTg8/Hl6smj7moTSM+7eDKneGuPLfB0M5YNwPctOaLB3nkY58k8MU/E9g 85LRoZXaRyQETT7FXHbL+K0bksxkelOM3iprjZMoDJjW5WkFsJm14kgdVBisAJFk agCzS0MlEUrLDf3BDtCGjzOOJD8nVveRtxEbhhkmizIu1lO7hV2t8E2jBiQ2EtW9 fmrdBzTchWMbA8/tbB7lqKSV6bjvLxp/hhXwEeomelZb9nA2jUxYB5fzvDY0ex00 8S2IkQT97032YMyCxIudQgzwXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9bWkzT fx0dPOlaCrow0G16Y7NxMB8GA1UdIwQYMBaAFMSKrOtN2u48YELmYhateRUHtHxr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY2MS8xNkE2REM2MDgz REExMUU3QTAwMzczNkJDNEY5QUUwMi94SXFzNjAzYTdqeGdRdVppRnExNUZRZTBm R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJcXM2MDNhN2p4Z1F1WmlGcTE1RlFlMGZHcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY2MS8xNkE2REM2MDgzREExMUU3QTAwMzczNkJDNEY5QUUwMi94SXFzNjAzYTdq eGdRdVppRnExNUZRZTBmR3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+FeFxLD8AXwXE92lwdta60SAIoRc1tnJ0CzQP7EWNjk25A8c38Lng IQU9qUhoiCg+aicOvcSPCXPkQJpkYst/AbOafGWH2Fyd6C74bp1F1guAe/pq0Lqy f33BymFJ2ugwaQ6XUjEn6g2pj2kICJsQ7fE854oMsORwQqHunsoXOydFYzDUaTzp LXYtelSiRu98sooJpTmGGxwRCQsObMmVHKaf7QZgEBo4v0rW1sub3f/Mi/4MPG5M CwML1KyL0CRiayln4F0XrtzrBdPoAje8k7xySUVzth+aaH358rRjzTFPktsLyCO5 2r5b2zT9uLxWWL5eJHu8Wq/LPcz4kTu8 -----END CERTIFICATE-----Generated at Sat May 4 18:00:12 2024 by rpki-client on console-fra.rpki-client.org