$ rpki-client -vvf rpki.apnic.net/member_repository/A919C0C5/C35049CA553B11EBAE9ED26FC4F9AE02/xhlIJCxagX94h_N49IM8VrevtXw.mft File: xhlIJCxagX94h_N49IM8VrevtXw.mft (raw, json) Hash identifier: BQXVowHXMbirlOgSq3eOkVwmC5uwY9hou7A2IaDW0fo= Subject key identifier: CF:17:3B:36:C5:E8:78:02:0B:34:77:52:55:74:16:66:66:A8:6C:DA Authority key identifier: C6:19:48:24:2C:5A:81:7F:78:87:F3:78:F4:83:3C:56:B7:AF:B5:7C Certificate issuer: /CN=A919C0C5/serialNumber=C61948242C5A817F7887F378F4833C56B7AFB57C Certificate serial: 0614 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhlIJCxagX94h_N49IM8VrevtXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C0C5/C35049CA553B11EBAE9ED26FC4F9AE02/xhlIJCxagX94h_N49IM8VrevtXw.mft Manifest number: 060C Signing time: Mon 06 May 2024 23:53:27 +0000 Manifest this update: Mon 06 May 2024 23:53:26 +0000 Manifest next update: Mon 13 May 2024 23:53:26 +0000 Files and hashes: 1: xhlIJCxagX94h_N49IM8VrevtXw.crl (hash: ZrCVuJj2P7DEdXelWAj0evVv5bJlYTCuvkUDB+j3wNc=) 2: 014E44B0553D11EBBF79C170C4F9AE02.roa (hash: BFP9Tj4zNmRAa3cLxHVOfZTSNmrLw/rym63IdR2AULE=) 3: 00B844B0553D11EBBF79C170C4F9AE02.roa (hash: 1baRnXTmkUhCfQDEbcLW2ezWijXSsxfYPnOfDxomYPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C0C5/C35049CA553B11EBAE9ED26FC4F9AE02/xhlIJCxagX94h_N49IM8VrevtXw.crl rsync://rpki.apnic.net/member_repository/A919C0C5/C35049CA553B11EBAE9ED26FC4F9AE02/xhlIJCxagX94h_N49IM8VrevtXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhlIJCxagX94h_N49IM8VrevtXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 23:53:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1556 (0x614) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C0C5/serialNumber=C61948242C5A817F7887F378F4833C56B7AFB57C Validity Not Before: May 6 23:53:26 2024 GMT Not After : May 13 23:53:26 2024 GMT Subject: CN=66396d77-e0cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f7:7c:4e:00:b2:01:aa:e6:d5:ec:e4:0e:7c: 00:4e:f2:9d:b6:66:bc:2b:1d:0a:ed:bd:8e:67:2d: 9a:d3:fc:40:8f:87:8c:e1:b0:4a:55:ac:90:88:00: eb:07:37:8e:1a:4b:8e:92:de:92:c5:4c:a5:f1:6c: 8c:41:38:69:87:fb:e8:d4:85:f6:c6:47:74:ae:9a: 02:94:56:67:a3:7b:b3:47:de:b8:c2:71:b2:c1:51: d6:61:b0:ee:29:a5:c1:da:e5:df:14:99:db:9f:de: 0d:67:f3:c6:de:2c:4c:e5:36:a2:24:93:e9:cf:cf: 99:54:d2:26:49:c4:2c:8c:ca:2a:60:e6:5b:d6:ae: 15:86:7e:e6:86:ba:94:cd:37:fe:a5:e5:70:30:1c: d8:bf:1e:82:78:f0:56:9a:97:ed:0a:8a:05:d3:17: 13:7a:4f:63:d7:ff:0c:ee:15:3b:b0:40:64:ee:3b: b8:29:5a:b3:b6:02:88:f4:7d:1d:41:d3:a9:cf:4b: 55:cd:cc:36:18:0a:d3:36:99:f9:97:f6:35:95:9d: df:e0:33:85:67:9c:c0:e1:f1:32:9f:27:61:60:e7: 7e:a3:d4:1f:32:71:fc:08:40:b3:10:45:ac:b0:0a: 50:94:95:e4:d2:99:8a:e6:92:4d:7b:0a:5a:58:9c: 0a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:17:3B:36:C5:E8:78:02:0B:34:77:52:55:74:16:66:66:A8:6C:DA X509v3 Authority Key Identifier: keyid:C6:19:48:24:2C:5A:81:7F:78:87:F3:78:F4:83:3C:56:B7:AF:B5:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C0C5/C35049CA553B11EBAE9ED26FC4F9AE02/xhlIJCxagX94h_N49IM8VrevtXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhlIJCxagX94h_N49IM8VrevtXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C0C5/C35049CA553B11EBAE9ED26FC4F9AE02/xhlIJCxagX94h_N49IM8VrevtXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:ea:bf:96:02:cf:b5:bf:0a:41:11:04:a4:cd:f8:1a:cd:59: e8:65:5a:14:32:f2:9e:2a:f9:6f:5c:8a:2d:4e:cf:a9:0c:58: d3:bc:51:d5:50:a4:95:04:c1:c1:d0:34:48:29:c6:4f:45:1f: 5c:c5:50:79:ab:5d:82:34:6c:b0:3d:d9:9d:ed:09:0e:31:16: 0d:cf:91:97:a1:fa:28:26:b7:fe:a6:21:d4:df:7d:3c:b5:5e: 7c:4b:59:77:a8:c8:18:d8:74:34:e9:e5:d0:a9:c2:f1:da:9b: de:7d:a3:20:07:35:00:44:e4:b2:78:01:bf:3f:32:aa:cf:01: d2:4a:15:57:33:f8:06:f1:30:4a:7e:69:cb:bd:ba:e4:c8:c7: 36:90:8c:a7:26:c1:26:c0:33:ca:b8:23:64:53:af:44:fb:6a: d6:10:e1:d1:a1:a5:f0:80:7b:d4:3d:8b:d8:34:e7:82:b0:82: d3:58:d6:5a:10:10:85:93:32:45:f9:d0:97:e0:84:74:90:c9: b1:ee:0f:8b:c2:54:aa:a5:20:d1:24:48:7f:61:d8:ad:49:12: cc:71:53:12:db:fe:2a:89:06:49:e9:ba:a9:09:85:20:6a:0a: c6:69:06:ad:79:65:10:a6:13:df:87:9c:0c:13:7d:75:86:ab: 42:41:e7:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMwQzUxMTAvBgNVBAUTKEM2MTk0ODI0MkM1QTgxN0Y3ODg3RjM3OEY0ODMzQzU2 QjdBRkI1N0MwHhcNMjQwNTA2MjM1MzI2WhcNMjQwNTEzMjM1MzI2WjAYMRYwFAYD VQQDEw02NjM5NmQ3Ny1lMGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPd8TgCyAarm1ezkDnwATvKdtma8Kx0K7b2OZy2a0/xAj4eM4bBKVayQiADr BzeOGkuOkt6SxUyl8WyMQThph/vo1IX2xkd0rpoClFZno3uzR964wnGywVHWYbDu KaXB2uXfFJnbn94NZ/PG3ixM5TaiJJPpz8+ZVNImScQsjMoqYOZb1q4Vhn7mhrqU zTf+peVwMBzYvx6CePBWmpftCooF0xcTek9j1/8M7hU7sEBk7ju4KVqztgKI9H0d QdOpz0tVzcw2GArTNpn5l/Y1lZ3f4DOFZ5zA4fEynydhYOd+o9QfMnH8CECzEEWs sApQlJXk0pmK5pJNewpaWJwK/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8XOzbF 6HgCCzR3UlV0FmZmqGzaMB8GA1UdIwQYMBaAFMYZSCQsWoF/eIfzePSDPFa3r7V8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzBDNS9DMzUwNDlDQTU1 M0IxMUVCQUU5RUQyNkZDNEY5QUUwMi94aGxJSkN4YWdYOTRoX040OUlNOFZyZXZ0 WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hobElKQ3hhZ1g5NGhfTjQ5SU04VnJldnRYdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzBDNS9DMzUwNDlDQTU1M0IxMUVCQUU5RUQyNkZDNEY5QUUwMi94aGxJSkN4YWdY OTRoX040OUlNOFZyZXZ0WHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB26r+WAs+1vwpBEQSkzfgazVnoZVoUMvKeKvlvXIotTs+pDFjTvFHV UKSVBMHB0DRIKcZPRR9cxVB5q12CNGywPdmd7QkOMRYNz5GXofooJrf+piHU3308 tV58S1l3qMgY2HQ06eXQqcLx2pvefaMgBzUAROSyeAG/PzKqzwHSShVXM/gG8TBK fmnLvbrkyMc2kIynJsEmwDPKuCNkU69E+2rWEOHRoaXwgHvUPYvYNOeCsILTWNZa EBCFkzJF+dCX4IR0kMmx7g+LwlSqpSDRJEh/YditSRLMcVMS2/4qiQZJ6bqpCYUg agrGaQateWUQphPfh5wME311hqtCQedw -----END CERTIFICATE-----Generated at Tue May 7 01:58:25 2024 by rpki-client on console-fra.rpki-client.org