$ rpki-client -vvf rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft File: XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft (raw, json) Hash identifier: GZqa6Da2kxbmUWj+JUtUZCW87F9hiJjtoTnLgXeNmfQ= Subject key identifier: F0:A5:5A:60:32:97:D5:8B:A0:E5:F4:08:20:07:07:21:AD:97:FB:EC Authority key identifier: 5C:17:AF:2E:0A:AF:49:0C:EA:A8:4E:2A:AA:71:48:3D:03:95:F1:E4 Certificate issuer: /CN=A91923A9/serialNumber=5C17AF2E0AAF490CEAA84E2AAA71483D0395F1E4 Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft Manifest number: B3 Signing time: Wed 01 May 2024 06:52:33 +0000 Manifest this update: Wed 01 May 2024 06:52:33 +0000 Manifest next update: Wed 08 May 2024 06:52:33 +0000 Files and hashes: 1: XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl (hash: 9JSuMd5H9IaS0DOxrnsOdXG9dpSyz9nc+7lbJXctu7Y=) 2: 80F75824FAAD11EDB0C98683C4F9AE02.roa (hash: Ir6jieXDo5WhcOUHhq3j9urxgu6n6xKvObh/fql9Ym0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 06:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91923A9/serialNumber=5C17AF2E0AAF490CEAA84E2AAA71483D0395F1E4 Validity Not Before: May 1 06:52:33 2024 GMT Not After : May 8 06:52:33 2024 GMT Subject: CN=6631e6b1-348b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ef:8d:f5:51:09:0f:c9:4e:bb:2c:61:9a:eb: 1f:cb:b4:99:a8:39:1e:f0:33:f1:6b:53:a8:b7:72: da:a7:7b:e3:17:0f:74:54:3a:ac:52:72:77:ad:77: 1d:99:34:eb:10:d4:39:2d:d9:d5:7e:65:67:f7:14: 88:82:fe:e8:e1:f7:28:bd:86:b4:c7:56:89:3d:5c: cd:1a:9c:f8:76:c9:93:56:c5:70:fe:81:ed:9a:c6: a3:c7:2f:b3:6e:16:0e:e7:36:72:d4:90:58:be:b8: cc:2f:21:c4:21:b5:9a:1b:65:d5:a7:1d:72:be:86: bb:ab:97:ba:27:55:30:5e:74:99:0d:d3:d5:15:13: e2:58:6b:ee:fa:89:2f:f3:2a:65:71:b3:36:9d:7e: 4d:95:97:e1:39:0d:1d:17:25:bb:98:cb:4e:50:a6: 06:87:cb:2e:49:75:bc:96:e5:94:0d:78:62:2c:ce: 82:cf:2f:85:0a:cb:df:f8:a0:bb:80:89:09:cf:9e: e2:88:7d:41:3c:ea:a9:58:22:e7:d0:fd:17:1b:eb: 91:7f:40:06:8c:48:f9:83:98:3d:a1:27:bb:22:05: 76:4a:8f:0f:89:f8:76:79:ec:7f:dd:c1:dd:e6:ca: a6:c8:a9:a0:7a:e6:7c:05:5f:67:98:50:83:c7:46: 4c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A5:5A:60:32:97:D5:8B:A0:E5:F4:08:20:07:07:21:AD:97:FB:EC X509v3 Authority Key Identifier: keyid:5C:17:AF:2E:0A:AF:49:0C:EA:A8:4E:2A:AA:71:48:3D:03:95:F1:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:f1:de:d6:8e:41:35:7c:78:15:d0:eb:05:bf:2b:08:42:81: 62:2c:ae:f0:7f:55:af:7a:63:b7:96:64:70:86:92:68:39:7a: 1b:88:26:7b:3d:db:46:de:0f:46:c7:4b:2e:93:a6:71:4e:50: 1a:56:7c:04:6d:69:ab:a1:f1:6d:e9:1f:61:aa:65:4a:45:3c: 49:ff:2d:1b:19:20:2b:12:7e:0f:44:e0:0b:94:a5:cf:16:4b: ac:2f:83:af:90:60:76:e0:fa:46:2d:99:9f:62:0d:9e:c4:d2: a2:ea:6c:aa:ae:41:7d:9c:fa:97:2c:53:2b:13:17:bb:d9:83: dc:0c:bc:73:f0:58:1c:df:e8:0c:01:6d:1b:54:bf:1c:95:3a: db:60:b5:c9:46:33:e2:c4:88:3a:89:3a:e5:1a:93:fe:9b:b8: 21:24:34:3f:c8:70:97:8f:c0:1d:6d:78:6d:79:a9:28:f0:e2: 41:cb:dc:61:fb:c9:6a:67:cd:a2:b5:ad:81:3a:5e:68:fa:a5: a1:de:d5:40:35:1a:0a:7a:2f:60:55:17:47:2a:6a:90:10:46: af:4f:b3:a3:92:70:38:aa:4e:ea:8b:a1:32:35:90:79:63:8a: 80:51:d7:87:d6:df:33:27:97:dc:41:37:06:8a:0b:cb:cd:9b: 33:c7:8d:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIzQTkxMTAvBgNVBAUTKDVDMTdBRjJFMEFBRjQ5MENFQUE4NEUyQUFBNzE0ODNE MDM5NUYxRTQwHhcNMjQwNTAxMDY1MjMzWhcNMjQwNTA4MDY1MjMzWjAYMRYwFAYD VQQDEw02NjMxZTZiMS0zNDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr++N9VEJD8lOuyxhmusfy7SZqDke8DPxa1Oot3Lap3vjFw90VDqsUnJ3rXcd mTTrENQ5LdnVfmVn9xSIgv7o4fcovYa0x1aJPVzNGpz4dsmTVsVw/oHtmsajxy+z bhYO5zZy1JBYvrjMLyHEIbWaG2XVpx1yvoa7q5e6J1UwXnSZDdPVFRPiWGvu+okv 8yplcbM2nX5NlZfhOQ0dFyW7mMtOUKYGh8suSXW8luWUDXhiLM6Czy+FCsvf+KC7 gIkJz57iiH1BPOqpWCLn0P0XG+uRf0AGjEj5g5g9oSe7IgV2So8Pifh2eex/3cHd 5sqmyKmgeuZ8BV9nmFCDx0ZM/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPClWmAy l9WLoOX0CCAHByGtl/vsMB8GA1UdIwQYMBaAFFwXry4Kr0kM6qhOKqpxSD0DlfHk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjNBOS9BNjM4NzY4NEZB QTUxMUVEQjJCMjk1N0ZDNEY5QUUwMi9YQmV2TGdxdlNRenFxRTRxcW5GSVBRT1Y4 ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hCZXZMZ3F2U1F6cXFFNHFxbkZJUFFPVjhlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjNBOS9BNjM4NzY4NEZBQTUxMUVEQjJCMjk1N0ZDNEY5QUUwMi9YQmV2TGdxdlNR enFxRTRxcW5GSVBRT1Y4ZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN8d7WjkE1fHgV0OsFvysIQoFiLK7wf1WvemO3lmRwhpJoOXobiCZ7 PdtG3g9Gx0suk6ZxTlAaVnwEbWmrofFt6R9hqmVKRTxJ/y0bGSArEn4PROALlKXP FkusL4OvkGB24PpGLZmfYg2exNKi6myqrkF9nPqXLFMrExe72YPcDLxz8Fgc3+gM AW0bVL8clTrbYLXJRjPixIg6iTrlGpP+m7ghJDQ/yHCXj8AdbXhteako8OJBy9xh +8lqZ82ita2BOl5o+qWh3tVANRoKei9gVRdHKmqQEEavT7OjknA4qk7qi6EyNZB5 Y4qAUdeH1t8zJ5fcQTcGigvLzZszx43z -----END CERTIFICATE-----Generated at Wed May 1 07:55:39 2024 by rpki-client on console-fra.rpki-client.org