$ rpki-client -vvf rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft File: XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft (raw, json) Hash identifier: x9oVuCD9Z6ptRoSVE7TDSTSfwtaZBsLmzgQe7KduGdQ= Subject key identifier: 4A:1D:6C:F5:C5:25:F4:D5:1F:43:96:89:D3:95:7F:5B:46:F4:D0:60 Authority key identifier: 5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 Certificate issuer: /CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Certificate serial: 0C0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft Manifest number: 0BF5 Signing time: Fri 26 Apr 2024 19:03:28 +0000 Manifest this update: Fri 26 Apr 2024 19:03:28 +0000 Manifest next update: Fri 03 May 2024 19:03:28 +0000 Files and hashes: 1: XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl (hash: kCDiCcGURvJB3mAmqHIcypkxRubLgxOi5nxCS8oMCvw=) 2: 65DCB430F25A11E9937D9D73C4F9AE02.roa (hash: g8AtMP8I6yqyvKB1e5W7725XdH9whZm2gw04J8HNztg=) 3: 653CF2F6F25A11E9937D9D73C4F9AE02.roa (hash: pT3Nq0P+4Jema2X2zuBOQ9nFwsOWD5baJlKRlePVWaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 19:03:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3084 (0xc0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Validity Not Before: Apr 26 19:03:28 2024 GMT Not After : May 3 19:03:28 2024 GMT Subject: CN=662bfa80-57b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f3:8b:b1:1a:a9:50:f8:e0:64:1b:03:3c:2f: eb:14:0b:57:35:c2:0c:d4:cd:e5:f5:10:47:81:c1: bd:e3:14:4f:70:54:d9:99:5f:41:e9:62:6f:0d:70: 17:aa:b4:66:42:67:96:6a:e7:04:cb:10:31:ad:ef: b1:d2:6d:29:1a:3f:47:34:81:a2:d6:99:b1:7e:82: 82:8e:05:1b:b2:fa:5b:11:ca:fb:f2:43:03:96:81: af:5a:94:b4:02:36:d3:d0:13:dc:69:f1:f6:4e:6c: 2c:33:20:13:a6:73:1a:11:ab:02:d8:83:65:c6:3d: f0:d7:40:9d:72:92:d7:a7:ee:cb:43:18:0e:42:5c: 19:18:06:94:a7:7e:53:33:2b:ee:8d:03:df:b7:40: cc:5e:3a:8a:f2:3d:59:a5:ff:41:a9:d0:87:81:d2: bd:b7:bb:37:50:a9:d1:31:4a:08:61:80:dc:e7:00: 2c:9f:56:31:c0:ec:3b:b7:53:d0:a7:71:0d:09:d8: 57:38:81:d5:1b:64:38:36:a3:45:9a:49:8b:a2:5e: 1f:aa:a0:af:ae:91:aa:59:09:de:6a:c3:7b:75:69: cf:ea:cb:03:f8:e4:cc:25:66:4f:5d:d6:40:22:56: 74:3a:b2:c4:1b:74:7b:bf:6d:55:5f:47:5e:d5:6a: b1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1D:6C:F5:C5:25:F4:D5:1F:43:96:89:D3:95:7F:5B:46:F4:D0:60 X509v3 Authority Key Identifier: keyid:5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:e2:a7:87:a6:94:62:64:b8:ec:1b:93:a7:60:3c:4d:ed:d2: be:31:bf:ce:64:5c:99:5e:9a:a8:f3:b5:8f:22:97:ae:1b:c5: ad:e5:3b:cc:54:e6:9b:cd:90:67:4f:aa:8a:0d:9d:08:57:c8: 76:7f:dc:46:51:57:6b:fd:9d:55:bd:b5:99:56:8a:9f:60:ae: 2d:81:bb:67:9d:4c:80:3f:e5:d5:39:33:b9:8c:a5:91:66:23: e7:81:af:d9:dd:ac:de:93:92:f8:4e:66:ba:eb:2f:3e:d7:cb: 84:1b:23:9c:7e:b1:78:e4:85:58:06:b3:4c:75:0a:33:48:cf: 5e:cb:0d:44:50:51:43:12:8a:c8:d1:3d:97:22:8e:4a:af:b8: 14:7c:46:d7:2c:cf:e1:a9:15:61:de:31:8c:3c:a4:7d:16:54: fe:f3:92:53:a7:78:48:b2:9c:66:b7:95:1e:52:c0:52:ec:02: e4:3a:4a:0d:8c:44:06:fd:0d:b6:d1:15:83:aa:ed:e7:6e:fa: 6f:e2:29:53:24:c3:d6:1e:5e:9e:22:e8:5c:7b:5e:7b:f8:e1: 82:5c:f8:42:de:36:a8:b0:5a:25:91:7f:10:cf:08:9e:42:94: d2:92:ca:6c:7e:0a:ea:7c:b8:c6:80:b1:df:d2:c1:91:36:e4: 6d:20:70:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5OTgxMTAvBgNVBAUTKDVFQTFBN0I4MDJFN0U3RUZDNzdDQTFBMzhFNTJGNzJB Q0Q0NjM5MzAwHhcNMjQwNDI2MTkwMzI4WhcNMjQwNTAzMTkwMzI4WjAYMRYwFAYD VQQDEw02NjJiZmE4MC01N2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5POLsRqpUPjgZBsDPC/rFAtXNcIM1M3l9RBHgcG94xRPcFTZmV9B6WJvDXAX qrRmQmeWaucEyxAxre+x0m0pGj9HNIGi1pmxfoKCjgUbsvpbEcr78kMDloGvWpS0 AjbT0BPcafH2TmwsMyATpnMaEasC2INlxj3w10CdcpLXp+7LQxgOQlwZGAaUp35T MyvujQPft0DMXjqK8j1Zpf9BqdCHgdK9t7s3UKnRMUoIYYDc5wAsn1YxwOw7t1PQ p3ENCdhXOIHVG2Q4NqNFmkmLol4fqqCvrpGqWQneasN7dWnP6ssD+OTMJWZPXdZA IlZ0OrLEG3R7v21VX0de1WqxiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEodbPXF JfTVH0OWidOVf1tG9NBgMB8GA1UdIwQYMBaAFF6hp7gC5+fvx3yho45S9yrNRjkw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTk5OC9BQjM0RkJENEYy NTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUtX0hmS0dqamxMM0tzMUdP VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hxR251QUxuNS1fSGZLR2pqbEwzS3MxR09UQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTk5OC9BQjM0RkJENEYyNTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUt X0hmS0dqamxMM0tzMUdPVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf4qeHppRiZLjsG5OnYDxN7dK+Mb/OZFyZXpqo87WPIpeuG8Wt5TvM VOabzZBnT6qKDZ0IV8h2f9xGUVdr/Z1VvbWZVoqfYK4tgbtnnUyAP+XVOTO5jKWR ZiPnga/Z3azek5L4Tma66y8+18uEGyOcfrF45IVYBrNMdQozSM9eyw1EUFFDEorI 0T2XIo5Kr7gUfEbXLM/hqRVh3jGMPKR9FlT+85JTp3hIspxmt5UeUsBS7ALkOkoN jEQG/Q220RWDqu3nbvpv4ilTJMPWHl6eIuhce157+OGCXPhC3jaosFolkX8Qzwie QpTSkspsfgrqfLjGgLHf0sGRNuRtIHBC -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:57 2024 by rpki-client on console-ams.rpki-client.org