$ rpki-client -vvf rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft File: X8Poba5DUxWI6wFdUB4xcSBfCFE.mft (raw, json) Hash identifier: NUM3mzisHMQ9GtptrIcPraXwNGolZzjg7XqPwvcv64I= Subject key identifier: 0D:7B:1D:93:2B:F6:22:5F:03:6B:F4:47:1F:1F:A3:B5:66:24:7B:80 Authority key identifier: 5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51 Certificate issuer: /CN=A9190491/serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851 Certificate serial: 066B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft Manifest number: 0662 Signing time: Fri 24 May 2024 23:43:44 +0000 Manifest this update: Fri 24 May 2024 23:43:44 +0000 Manifest next update: Fri 31 May 2024 23:43:44 +0000 Files and hashes: 1: X8Poba5DUxWI6wFdUB4xcSBfCFE.crl (hash: 88Jb6bNM9JXx8dSUsJoTkpx0z+KjRXcnzmRKzx9XcUY=) 2: FA93793637C011EB97405947C4F9AE02.roa (hash: HPyw2CIiARENlWlLlzg2xoX1ggPmLsICAu3y1BVdcHc=) 3: 59C3EE36683611EBAF38B01FC4F9AE02.roa (hash: d6l3p7b5QLmH1bjngVG26hOf6Jj1bEFLyX+nZRQhlE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 23:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1643 (0x66b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190491/serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851 Validity Not Before: May 24 23:43:44 2024 GMT Not After : May 31 23:43:44 2024 GMT Subject: CN=66512630-1629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5f:f0:1d:f5:ec:c4:59:81:1b:85:7e:37:36: f5:6d:5a:39:26:ce:e3:e2:4d:8a:6d:cd:4f:79:68: f5:64:9b:ce:e6:a3:22:d8:b3:c3:a7:e8:d7:bf:28: ac:de:38:32:32:0b:be:96:52:73:a8:07:a8:6b:03: ba:af:4a:74:94:7f:26:69:93:38:86:74:3d:a9:da: 56:55:f1:76:1d:f9:25:c9:3c:e5:7b:fb:0a:10:79: 32:b1:97:e1:33:a6:8e:e6:34:29:38:92:a2:2e:99: 35:9b:ae:44:be:e5:f9:18:8d:9c:ad:a4:d1:22:1a: f8:4e:fe:69:e0:59:ab:e2:90:3d:d7:3b:48:dc:8c: 9b:70:9e:fc:06:c8:a6:7c:40:98:f7:1f:80:8a:a6: 27:d6:2f:4d:91:d2:48:27:7a:e2:35:80:4f:50:a3: 3f:81:d1:0c:bb:cf:52:59:13:77:c0:4c:70:ee:a4: f1:d0:24:84:2d:03:eb:e4:20:9f:25:38:ef:97:4d: 34:64:cf:c8:a5:7c:a2:13:61:4f:80:32:93:c1:81: cd:cc:17:cf:bf:32:18:13:14:e0:61:c4:8f:89:80: a3:7f:20:1e:f3:d0:98:36:84:5a:c1:2d:68:37:b1: 1d:66:28:51:ac:e8:eb:2f:a1:21:96:49:f5:ce:d7: 10:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:7B:1D:93:2B:F6:22:5F:03:6B:F4:47:1F:1F:A3:B5:66:24:7B:80 X509v3 Authority Key Identifier: keyid:5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:b2:6e:98:78:59:eb:f4:16:f8:88:23:ea:17:94:e9:35:49: 03:5c:a3:11:77:a1:9f:82:ef:38:f4:4b:65:82:e6:a0:77:e0: 81:a8:34:31:94:dc:37:7f:20:dd:16:54:5e:06:b9:25:a3:cd: 23:cb:04:32:18:5e:f9:8e:0c:25:e9:d7:65:6c:c8:78:94:b4: 5a:e1:c0:9e:eb:3f:b5:70:a5:02:47:52:ef:ac:3d:c4:86:2b: 6e:3b:fe:f1:a9:b4:05:62:6d:30:14:e2:c3:42:74:be:14:ed: a7:58:69:32:bf:10:1b:b5:7f:62:d5:0c:0a:91:85:cd:85:58: 50:7f:f9:09:a3:54:29:09:63:be:e3:99:2c:4c:60:f8:e3:fe: a4:5c:49:44:50:83:25:89:3b:ab:56:4b:f3:0f:3a:38:46:84: 6d:cc:44:a0:df:b2:aa:84:6e:96:ed:84:35:1e:29:6b:a7:fa: c0:0e:5c:15:41:1c:7e:98:23:6a:b2:51:d4:88:a7:10:6c:53: ce:0d:b3:25:08:d4:b8:1b:3f:a8:71:96:23:2f:08:00:cb:da: 02:3b:1d:d2:74:5c:f5:b3:3b:48:18:8c:70:da:22:08:55:ee: b4:3c:a4:97:bb:de:af:5a:8d:b6:58:23:a3:c2:2c:4e:ec:f7: 56:98:31:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA0OTExMTAvBgNVBAUTKDVGQzNFODZEQUU0MzUzMTU4OEVCMDE1RDUwMUUzMTcx MjA1RjA4NTEwHhcNMjQwNTI0MjM0MzQ0WhcNMjQwNTMxMjM0MzQ0WjAYMRYwFAYD VQQDEw02NjUxMjYzMC0xNjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1/wHfXsxFmBG4V+Nzb1bVo5Js7j4k2Kbc1PeWj1ZJvO5qMi2LPDp+jXvyis 3jgyMgu+llJzqAeoawO6r0p0lH8maZM4hnQ9qdpWVfF2HfklyTzle/sKEHkysZfh M6aO5jQpOJKiLpk1m65EvuX5GI2craTRIhr4Tv5p4Fmr4pA91ztI3IybcJ78Bsim fECY9x+AiqYn1i9NkdJIJ3riNYBPUKM/gdEMu89SWRN3wExw7qTx0CSELQPr5CCf JTjvl000ZM/IpXyiE2FPgDKTwYHNzBfPvzIYExTgYcSPiYCjfyAe89CYNoRawS1o N7EdZihRrOjrL6Ehlkn1ztcQYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA17HZMr 9iJfA2v0Rx8fo7VmJHuAMB8GA1UdIwQYMBaAFF/D6G2uQ1MViOsBXVAeMXEgXwhR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDQ5MS85MjlCREJDMjM3 QkUxMUVCODNBRTE4NDRDNEY5QUUwMi9YOFBvYmE1RFV4V0k2d0ZkVUI0eGNTQmZD RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g4UG9iYTVEVXhXSTZ3RmRVQjR4Y1NCZkNGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDQ5MS85MjlCREJDMjM3QkUxMUVCODNBRTE4NDRDNEY5QUUwMi9YOFBvYmE1RFV4 V0k2d0ZkVUI0eGNTQmZDRkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5sm6YeFnr9Bb4iCPqF5TpNUkDXKMRd6Gfgu849Etlguagd+CBqDQx lNw3fyDdFlReBrklo80jywQyGF75jgwl6ddlbMh4lLRa4cCe6z+1cKUCR1LvrD3E hituO/7xqbQFYm0wFOLDQnS+FO2nWGkyvxAbtX9i1QwKkYXNhVhQf/kJo1QpCWO+ 45ksTGD44/6kXElEUIMliTurVkvzDzo4RoRtzESg37KqhG6W7YQ1Hilrp/rADlwV QRx+mCNqslHUiKcQbFPODbMlCNS4Gz+ocZYjLwgAy9oCOx3SdFz1sztIGIxw2iII Ve60PKSXu96vWo22WCOjwixO7PdWmDGi -----END CERTIFICATE-----Generated at Sat May 25 01:24:51 2024 by rpki-client on console-fra.rpki-client.org