$ rpki-client -vvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft File: xlk2W58uMddajSCpuY4VOklvRJk.mft (raw, json) Hash identifier: 07e0shl+ReBZaUi6FPF86/+hVSti1aZF6L5/NGPP09g= Subject key identifier: C7:A0:68:50:8B:D3:55:E5:56:44:87:23:02:F0:B1:43:DE:98:62:A7 Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 Certificate issuer: /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft Manifest number: A0 Signing time: Fri 17 May 2024 06:55:18 +0000 Manifest this update: Fri 17 May 2024 06:55:18 +0000 Manifest next update: Fri 24 May 2024 06:55:18 +0000 Files and hashes: 1: xlk2W58uMddajSCpuY4VOklvRJk.crl (hash: FyT9dM9tY4wOy3NFG02HuQJJBqOtpYA31R1wB2DUfKM=) 2: CA1D2934296011EEB6BB2647C4F9AE02.roa (hash: PB+Fwr7+OFv5312gtz53yebHRvlqOj9H0ezMU/u7UvY=) 3: 6CAF60F0296011EEB0606446C4F9AE02.roa (hash: DCf9qWND7QA7KzN3251dDDXozk2L05NK9fYFAhwBS80=) 4: 38A8C602296011EEA8C6E645C4F9AE02.roa (hash: 7iSRAuuGUowQHuYkrt9kMhGQ/KkLrZ5lfcWCt+JN0bI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Validity Not Before: May 17 06:55:18 2024 GMT Not After : May 24 06:55:18 2024 GMT Subject: CN=6646ff56-9dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3f:eb:fe:d8:99:d8:6c:1b:b3:5c:ab:8d:1d: 84:e0:3d:39:90:d7:3e:3d:23:8d:e1:d8:d7:0d:89: 1d:12:8c:74:57:fe:d8:d1:37:17:e9:d1:3c:5d:46: af:1f:0c:4c:33:28:13:44:f4:46:78:31:cd:48:b9: c9:f2:d1:64:6e:b3:08:ed:10:1d:17:dd:ad:4d:42: 78:2d:7c:7e:89:6f:b8:bb:db:e1:9d:84:32:a1:b2: c7:8f:d7:49:db:5d:86:d0:88:58:ae:87:15:74:f1: 53:8c:3d:95:6e:0d:8a:a2:0d:f2:51:cd:cc:4a:a6: 5d:e8:41:60:89:99:fa:04:f6:cc:b8:f8:e8:d1:99: a8:4b:52:29:a4:7d:32:6f:2a:00:24:44:5f:71:e1: 29:e0:17:b6:46:8a:06:51:4f:07:4d:58:e7:c6:09: 57:f2:97:13:d9:f9:1b:47:db:72:b3:a0:56:ef:59: dc:ec:e8:38:4b:60:48:59:74:a9:75:dc:2d:e2:e9: 8b:bb:b7:27:f9:79:26:da:d9:59:2e:5e:6a:a2:38: 9c:dc:52:b6:eb:77:64:82:85:a6:39:47:d8:0a:4a: fe:9b:c7:eb:06:bd:19:5e:c4:11:93:c2:ae:34:64: 1b:42:b2:7a:5f:cb:d1:f8:b0:9c:d5:85:89:17:64: 2b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A0:68:50:8B:D3:55:E5:56:44:87:23:02:F0:B1:43:DE:98:62:A7 X509v3 Authority Key Identifier: keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:d4:7f:43:6a:ff:e5:4d:38:a1:a3:b7:c2:3f:e2:68:0e:bb: b8:33:25:de:96:7e:81:26:3d:5c:6a:98:04:1d:25:4a:58:52: d3:9f:05:85:5c:ce:ac:fd:df:9a:05:4a:37:90:76:02:1e:d4: 13:f8:0f:d6:9c:e4:a9:7b:c2:b8:c0:e8:13:49:d6:6e:fd:48: ba:65:48:45:0b:07:10:eb:c5:ec:59:17:dc:48:d7:d4:b7:ae: 05:91:70:33:49:40:ef:b5:66:1f:e6:de:07:95:0d:e1:32:d4: 55:29:09:f7:5e:8a:d8:a2:39:3e:9f:a5:a5:d4:6d:85:1f:e5: cc:b3:90:1b:fb:7a:be:9f:95:94:49:a9:7e:e3:3a:c6:d1:0a: 50:8f:0a:d9:58:73:d9:99:fc:fc:4b:f9:f2:77:23:31:ed:e6: dc:10:5c:99:72:f1:b3:d1:2f:b0:d4:c9:0c:21:d5:c0:b9:f7: 59:22:67:8d:2b:dd:40:50:04:72:43:c6:f5:a0:40:7a:68:d5: f4:fa:7d:33:a4:c8:43:c2:35:32:49:27:b4:c0:6e:70:2b:a0: 05:71:a3:92:e8:83:c2:be:35:29:cb:f4:e7:5c:f1:cb:15:02: 83:b2:f4:74:9f:d9:d1:d5:da:40:fe:6c:93:7e:56:63:2d:7e: bb:18:8e:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0QTAxMTAvBgNVBAUTKEM2NTkzNjVCOUYyRTMxRDc1QThEMjBBOUI5OEUxNTNB NDk2RjQ0OTkwHhcNMjQwNTE3MDY1NTE4WhcNMjQwNTI0MDY1NTE4WjAYMRYwFAYD VQQDEw02NjQ2ZmY1Ni05ZGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApz/r/tiZ2Gwbs1yrjR2E4D05kNc+PSON4djXDYkdEox0V/7Y0TcX6dE8XUav HwxMMygTRPRGeDHNSLnJ8tFkbrMI7RAdF92tTUJ4LXx+iW+4u9vhnYQyobLHj9dJ 212G0IhYrocVdPFTjD2Vbg2Kog3yUc3MSqZd6EFgiZn6BPbMuPjo0ZmoS1IppH0y byoAJERfceEp4Be2RooGUU8HTVjnxglX8pcT2fkbR9tys6BW71nc7Og4S2BIWXSp ddwt4umLu7cn+Xkm2tlZLl5qojic3FK263dkgoWmOUfYCkr+m8frBr0ZXsQRk8Ku NGQbQrJ6X8vR+LCc1YWJF2Qr+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMegaFCL 01XlVkSHIwLwsUPemGKnMB8GA1UdIwQYMBaAFMZZNlufLjHXWo0gqbmOFTpJb0SZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTRBMC85MEI3QTc5QTI3 MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1kZGFqU0NwdVk0Vk9rbHZS SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsazJXNTh1TWRkYWpTQ3B1WTRWT2tsdlJKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTRBMC85MEI3QTc5QTI3MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1k ZGFqU0NwdVk0Vk9rbHZSSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN1H9Dav/lTTiho7fCP+JoDru4MyXeln6BJj1capgEHSVKWFLTnwWF XM6s/d+aBUo3kHYCHtQT+A/WnOSpe8K4wOgTSdZu/Ui6ZUhFCwcQ68XsWRfcSNfU t64FkXAzSUDvtWYf5t4HlQ3hMtRVKQn3XorYojk+n6Wl1G2FH+XMs5Ab+3q+n5WU Sal+4zrG0QpQjwrZWHPZmfz8S/nydyMx7ebcEFyZcvGz0S+w1MkMIdXAufdZImeN K91AUARyQ8b1oEB6aNX0+n0zpMhDwjUySSe0wG5wK6AFcaOS6IPCvjUpy/TnXPHL FQKDsvR0n9nR1dpA/myTflZjLX67GI5J -----END CERTIFICATE-----Generated at Fri May 17 08:13:52 2024 by rpki-client on console-fra.rpki-client.org