$ rpki-client -vvf rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/xYjecPKsY-wWHdqc3CADirBHKkU.mft File: xYjecPKsY-wWHdqc3CADirBHKkU.mft (raw, json) Hash identifier: 8Rzl+xM+TXWLKNNsTb7aOxlq6pf0Qp6YSqk4Jvf4SV8= Subject key identifier: BD:1B:A8:07:4D:B9:8D:AB:F2:04:AA:54:57:14:83:E2:16:E8:AD:43 Authority key identifier: C5:88:DE:70:F2:AC:63:EC:16:1D:DA:9C:DC:20:03:8A:B0:47:2A:45 Certificate issuer: /CN=A919DFF7/serialNumber=C588DE70F2AC63EC161DDA9CDC20038AB0472A45 Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xYjecPKsY-wWHdqc3CADirBHKkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/xYjecPKsY-wWHdqc3CADirBHKkU.mft Manifest number: 017B Signing time: Fri 03 May 2024 04:51:58 +0000 Manifest this update: Fri 03 May 2024 04:51:58 +0000 Manifest next update: Fri 10 May 2024 04:51:58 +0000 Files and hashes: 1: xYjecPKsY-wWHdqc3CADirBHKkU.crl (hash: 0H0caTW29MyCK3W1q6kf4toop+L7b6Z02CWIVdimMDA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/xYjecPKsY-wWHdqc3CADirBHKkU.crl rsync://rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/xYjecPKsY-wWHdqc3CADirBHKkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xYjecPKsY-wWHdqc3CADirBHKkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DFF7/serialNumber=C588DE70F2AC63EC161DDA9CDC20038AB0472A45 Validity Not Before: May 3 04:51:58 2024 GMT Not After : May 10 04:51:58 2024 GMT Subject: CN=66346d6e-6eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:94:af:7a:a5:19:19:1b:e4:1e:85:39:e4:d4: 51:f9:54:47:3d:c8:6b:c3:9e:30:d9:e4:0b:1e:1c: 6e:b1:dc:24:64:01:95:35:00:05:c7:a8:39:94:b5: b6:5c:9d:83:6a:23:3e:5c:42:4c:aa:61:7a:65:7f: 81:ab:e8:99:97:77:d1:ec:38:7f:73:d0:e1:29:02: a3:5e:16:75:f7:bb:40:7b:49:29:65:97:ee:bc:79: ea:82:ad:8e:0d:d2:6f:0c:b8:05:9e:f9:48:7f:8b: 22:3e:91:91:c4:73:96:a3:c9:21:45:0e:0d:87:a7: f0:13:92:22:05:13:fd:a8:8f:26:de:7e:74:a4:b2: d2:ba:21:59:a0:5d:6c:d1:6b:02:da:a8:ac:ba:9b: 3d:77:ed:05:ac:a1:59:a5:6e:ac:c6:aa:ce:43:67: f6:09:e8:3e:fe:5b:d4:90:db:f0:e9:11:07:22:32: 51:83:62:23:1b:a6:5c:c6:98:b4:26:01:ae:f0:57: 0c:9a:b0:1e:44:2b:28:03:45:f4:34:c4:43:b2:0c: f5:84:68:5d:c7:8e:bb:da:ac:5a:12:5e:a2:a9:c8: 7d:27:e3:37:87:d8:31:c4:4f:58:15:07:e6:8a:ee: 4a:2e:70:3b:2d:cf:ee:c8:96:a4:20:c5:07:b8:3f: 8d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:1B:A8:07:4D:B9:8D:AB:F2:04:AA:54:57:14:83:E2:16:E8:AD:43 X509v3 Authority Key Identifier: keyid:C5:88:DE:70:F2:AC:63:EC:16:1D:DA:9C:DC:20:03:8A:B0:47:2A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/xYjecPKsY-wWHdqc3CADirBHKkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xYjecPKsY-wWHdqc3CADirBHKkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/xYjecPKsY-wWHdqc3CADirBHKkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:5d:52:37:42:a6:cc:20:d8:d3:f6:37:e8:6d:f4:90:9f:f3: 9c:0a:c0:45:a6:c2:ae:2d:fc:46:4e:2c:28:e0:60:b4:4d:3d: 15:1a:a5:79:96:cb:0d:ba:53:cf:ff:b7:54:b8:27:30:6d:01: 38:66:6b:28:91:81:98:74:69:d9:56:f9:f5:7a:91:81:b3:11: 4c:7b:96:72:a1:7c:41:cf:4b:97:eb:51:c7:5a:66:e9:2f:71: 85:a4:f0:93:73:23:31:00:f5:ca:dd:fa:6d:96:f4:63:7b:6a: f8:b1:79:a6:c3:1a:12:ab:01:f9:7d:f4:e5:e1:42:1e:71:2e: 60:e8:1e:eb:2d:8f:00:39:97:55:fa:65:c6:cc:2b:71:4a:b4: 3d:07:05:3d:7f:c7:68:7e:7f:31:37:32:b2:71:0b:a6:a9:89: 0a:e3:73:12:66:27:2a:5a:a4:44:d1:36:ad:ea:ae:22:b3:86: 15:dd:7d:25:b4:84:b7:4b:c5:00:f9:6c:48:dc:a6:3a:66:cb: f9:d0:7c:89:a7:b9:38:63:1c:0e:30:ea:56:9c:47:0b:8d:05: a4:de:32:2d:31:32:fb:7a:b6:82:0d:15:2b:28:5c:87:84:df: e8:9d:90:87:a2:fb:b0:d8:49:b6:af:1e:a2:6d:7e:17:ec:38: b0:c3:19:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURGRjcxMTAvBgNVBAUTKEM1ODhERTcwRjJBQzYzRUMxNjFEREE5Q0RDMjAwMzhB QjA0NzJBNDUwHhcNMjQwNTAzMDQ1MTU4WhcNMjQwNTEwMDQ1MTU4WjAYMRYwFAYD VQQDEw02NjM0NmQ2ZS02ZWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ZSveqUZGRvkHoU55NRR+VRHPchrw54w2eQLHhxusdwkZAGVNQAFx6g5lLW2 XJ2DaiM+XEJMqmF6ZX+Bq+iZl3fR7Dh/c9DhKQKjXhZ197tAe0kpZZfuvHnqgq2O DdJvDLgFnvlIf4siPpGRxHOWo8khRQ4Nh6fwE5IiBRP9qI8m3n50pLLSuiFZoF1s 0WsC2qisups9d+0FrKFZpW6sxqrOQ2f2Ceg+/lvUkNvw6REHIjJRg2IjG6Zcxpi0 JgGu8FcMmrAeRCsoA0X0NMRDsgz1hGhdx4672qxaEl6iqch9J+M3h9gxxE9YFQfm iu5KLnA7Lc/uyJakIMUHuD+NNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0bqAdN uY2r8gSqVFcUg+IW6K1DMB8GA1UdIwQYMBaAFMWI3nDyrGPsFh3anNwgA4qwRypF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REZGNy8zMzJEMEVENjIz NjcxMUVEQThBQzFGMjhDNEY5QUUwMi94WWplY1BLc1ktd1dIZHFjM0NBRGlyQkhL a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hZamVjUEtzWS13V0hkcWMzQ0FEaXJCSEtrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REZGNy8zMzJEMEVENjIzNjcxMUVEQThBQzFGMjhDNEY5QUUwMi94WWplY1BLc1kt d1dIZHFjM0NBRGlyQkhLa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXXVI3QqbMINjT9jfobfSQn/OcCsBFpsKuLfxGTiwo4GC0TT0VGqV5 lssNulPP/7dUuCcwbQE4ZmsokYGYdGnZVvn1epGBsxFMe5ZyoXxBz0uX61HHWmbp L3GFpPCTcyMxAPXK3fptlvRje2r4sXmmwxoSqwH5ffTl4UIecS5g6B7rLY8AOZdV +mXGzCtxSrQ9BwU9f8dofn8xNzKycQumqYkK43MSZicqWqRE0Tat6q4is4YV3X0l tIS3S8UA+WxI3KY6Zsv50HyJp7k4YxwOMOpWnEcLjQWk3jItMTL7eraCDRUrKFyH hN/onZCHovuw2Em2rx6ibX4X7Diwwxnn -----END CERTIFICATE-----Generated at Fri May 3 06:29:21 2024 by rpki-client on console-fra.rpki-client.org