$ rpki-client -vvf rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft File: xGfLLMucIacHtd-86roFTBkFI64.mft (raw, json) Hash identifier: q9HRDPfOS8EhOhYw4JajPioFOhP7ao4QzGgihyJIu/o= Subject key identifier: 12:13:93:58:2A:36:6E:31:F0:4D:EF:C7:C2:18:D0:5E:61:17:76:13 Authority key identifier: C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE Certificate issuer: /CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Certificate serial: 0B92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft Manifest number: 0B77 Signing time: Sat 04 May 2024 19:44:03 +0000 Manifest this update: Sat 04 May 2024 19:44:03 +0000 Manifest next update: Sat 11 May 2024 19:44:03 +0000 Files and hashes: 1: xGfLLMucIacHtd-86roFTBkFI64.crl (hash: qUYYhqGZ6jD3BYncSJ6sa8VDC+R3T62sB6xW0Qa8y7c=) 2: AED60FB8889911EE93725C70C4F9AE02.roa (hash: fmDHpP1NTfYOMqbPO6SjQP1Zz2EI1D8Nlv1HBcJ/gMI=) 3: D74998AC889911EE83929070C4F9AE02.roa (hash: LcRUWMp5ylCBuhjZGpu+Gkyj7S0VtZ4hzyMMM+ZG2m0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2962 (0xb92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Validity Not Before: May 4 19:44:03 2024 GMT Not After : May 11 19:44:03 2024 GMT Subject: CN=66369003-ceda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:44:65:25:4f:27:0d:02:5d:c2:56:df:6d:ab: a2:91:29:03:06:c8:0e:c3:57:cc:d9:e1:f1:5d:49: b4:1d:ac:49:fc:1b:df:57:6a:6a:6d:f2:ed:0d:7c: 61:22:1c:16:43:ed:76:d5:55:44:d5:49:91:b8:79: 4b:e0:9f:66:e3:c1:ed:d0:7d:bb:8e:57:83:62:c5: a2:ca:5a:84:f2:4c:a6:5b:ef:f1:5f:22:ef:59:c9: 11:f4:c8:54:1a:56:5b:02:1b:cf:0f:5d:6c:c9:ec: 42:a3:4d:70:0c:06:13:60:73:49:0c:f4:8e:4c:84: 2f:eb:04:2c:bf:14:de:df:22:60:6a:22:71:39:ae: ed:81:48:c0:5d:98:bb:fa:79:c3:e2:f4:f8:31:6a: 67:78:c4:f8:33:85:18:f1:97:1a:23:69:b3:86:50: 3c:7d:42:02:a5:f6:38:d0:04:fb:41:5a:23:59:3e: eb:11:7a:2c:c4:2e:cd:dc:01:e7:aa:8f:00:40:9d: ce:49:39:bd:c4:41:13:29:95:4b:6e:07:fa:3e:83: 04:33:97:58:04:45:2b:72:0d:16:0b:c7:bf:75:2b: 72:76:d0:a6:ee:25:ad:d8:4b:5a:9f:ec:e0:bc:0c: de:23:54:a1:5e:7b:e2:57:75:22:4b:ff:13:14:5d: 62:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:13:93:58:2A:36:6E:31:F0:4D:EF:C7:C2:18:D0:5E:61:17:76:13 X509v3 Authority Key Identifier: keyid:C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:70:a6:6e:56:68:e1:82:e2:35:38:21:1e:7f:dd:1b:29:e9: 89:f0:13:35:52:44:b6:8c:2d:d2:49:b4:16:c5:9a:1a:ed:8d: 48:2b:41:19:bb:b7:43:b7:1b:2c:34:55:0d:56:77:4b:a5:77: 02:cc:71:67:2e:7f:e5:28:c4:4e:61:b7:f8:d1:b5:00:db:34: 2a:82:0c:15:0e:84:d4:f1:30:eb:22:72:8c:9d:82:85:5e:11: 43:14:94:44:06:94:59:39:84:33:24:8a:ae:70:cd:9f:13:32: e4:97:d8:f8:6a:97:91:49:ae:e0:cf:53:c3:61:5c:08:30:f2: 8f:15:58:2d:9b:e0:ae:3a:32:26:21:c7:34:fa:ab:ad:61:6d: ec:ce:1c:ff:ec:94:6e:17:b1:92:d0:44:7b:ba:0e:f5:45:4e: b6:19:42:5b:ed:aa:23:a5:62:c2:c3:37:3f:a0:32:62:01:a9: ff:2d:7d:ff:86:b7:02:4a:73:a3:74:d9:05:26:a8:a0:24:55: 1b:dc:fa:41:60:31:eb:0b:6e:ea:da:5e:36:81:62:ce:84:2e: ea:60:34:3c:b1:79:c6:56:9a:cd:59:32:f9:03:fe:d1:ef:e6: 59:69:eb:df:76:2f:71:c4:ec:87:06:61:be:82:7f:f3:e1:80: 85:85:6d:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMzQkUxMTAvBgNVBAUTKEM0NjdDQjJDQ0I5QzIxQTcwN0I1REZCQ0VBQkEwNTRD MTkwNTIzQUUwHhcNMjQwNTA0MTk0NDAzWhcNMjQwNTExMTk0NDAzWjAYMRYwFAYD VQQDEw02NjM2OTAwMy1jZWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7ERlJU8nDQJdwlbfbauikSkDBsgOw1fM2eHxXUm0HaxJ/BvfV2pqbfLtDXxh IhwWQ+121VVE1UmRuHlL4J9m48Ht0H27jleDYsWiylqE8kymW+/xXyLvWckR9MhU GlZbAhvPD11syexCo01wDAYTYHNJDPSOTIQv6wQsvxTe3yJgaiJxOa7tgUjAXZi7 +nnD4vT4MWpneMT4M4UY8ZcaI2mzhlA8fUICpfY40AT7QVojWT7rEXosxC7N3AHn qo8AQJ3OSTm9xEETKZVLbgf6PoMEM5dYBEUrcg0WC8e/dStydtCm7iWt2Etan+zg vAzeI1ShXnviV3UiS/8TFF1ixQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBITk1gq Nm4x8E3vx8IY0F5hF3YTMB8GA1UdIwQYMBaAFMRnyyzLnCGnB7XfvOq6BUwZBSOu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzNCRS85NDdCMzUwNjA5 MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lhY0h0ZC04NnJvRlRCa0ZJ NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHZkxMTXVjSWFjSHRkLTg2cm9GVEJrRkk2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzNCRS85NDdCMzUwNjA5MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lh Y0h0ZC04NnJvRlRCa0ZJNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxcKZuVmjhguI1OCEef90bKemJ8BM1UkS2jC3SSbQWxZoa7Y1IK0EZ u7dDtxssNFUNVndLpXcCzHFnLn/lKMROYbf40bUA2zQqggwVDoTU8TDrInKMnYKF XhFDFJREBpRZOYQzJIqucM2fEzLkl9j4apeRSa7gz1PDYVwIMPKPFVgtm+CuOjIm Icc0+qutYW3szhz/7JRuF7GS0ER7ug71RU62GUJb7aojpWLCwzc/oDJiAan/LX3/ hrcCSnOjdNkFJqigJFUb3PpBYDHrC27q2l42gWLOhC7qYDQ8sXnGVprNWTL5A/7R 7+ZZaevfdi9xxOyHBmG+gn/z4YCFhW0M -----END CERTIFICATE-----Generated at Sat May 4 21:19:30 2024 by rpki-client on console-ams.rpki-client.org