$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft File: x5XlnAMMfJKfy-R0Gfxexp4frP0.mft (raw, json) Hash identifier: PQMf6Qo/qE62sLDXQ98DehY8rROU4Z/C+oGuLx+tupU= Subject key identifier: 9C:8D:4D:6D:2A:27:20:D3:CD:CE:6E:B1:A3:8E:F2:39:CE:6D:28:83 Authority key identifier: C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD Certificate issuer: /CN=A91A3FEB/serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD Certificate serial: 0688 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft Manifest number: 0683 Signing time: Mon 06 May 2024 23:27:50 +0000 Manifest this update: Mon 06 May 2024 23:27:49 +0000 Manifest next update: Mon 13 May 2024 23:27:49 +0000 Files and hashes: 1: x5XlnAMMfJKfy-R0Gfxexp4frP0.crl (hash: LbaGLz4YQufJ/Cdydp+jPOexUyOsYzbcBkIMHtOh9C8=) 2: B722FC542A0411EB992DD32EC4F9AE02.roa (hash: T2Lsfba/5wcE3DtMzCheps9cMl47tWjTgMCBmWf+3eA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 23:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1672 (0x688) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3FEB/serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD Validity Not Before: May 6 23:27:49 2024 GMT Not After : May 13 23:27:49 2024 GMT Subject: CN=66396776-58ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:03:fc:ec:7a:6e:ae:c1:d4:cb:22:7c:d2:85: 12:fa:96:b7:e2:24:d7:f9:dc:d0:39:25:9a:98:ce: 80:1a:5e:ad:a9:0d:f7:09:a8:65:d9:1d:5e:18:12: 1b:a0:30:f1:9d:7d:d5:32:98:ee:93:3d:9f:19:1b: a6:ac:72:1b:24:76:06:75:4e:e2:18:19:bd:f6:89: f7:51:9e:95:ea:f9:f3:50:d8:d4:b2:18:55:b2:04: 55:53:0b:fb:1e:8d:f4:6d:56:f4:48:59:49:90:43: 28:c6:6c:9c:d4:bd:3a:e8:19:ec:1c:18:2c:e9:05: 0d:c5:62:85:81:63:30:1a:15:1b:01:fc:ea:58:90: a6:09:ed:61:14:9b:35:9f:e5:ed:5a:3e:26:ab:41: 8b:8d:e7:12:b0:ed:d6:66:a1:3e:df:21:b9:db:bc: 62:1a:cd:08:4b:ae:05:f4:05:a0:4e:57:a1:e9:f5: 70:11:9f:fa:85:a2:cb:95:44:af:e8:21:62:0f:7b: eb:96:3c:15:8c:30:18:ad:ce:6c:25:da:57:ac:6b: cc:fb:11:17:54:3e:70:90:3a:a9:9d:56:65:87:9c: 67:25:71:2e:32:1f:71:08:00:86:f7:da:3a:f9:0e: 88:22:ed:71:df:b4:c6:5c:15:bb:45:54:fc:82:77: b9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8D:4D:6D:2A:27:20:D3:CD:CE:6E:B1:A3:8E:F2:39:CE:6D:28:83 X509v3 Authority Key Identifier: keyid:C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:aa:ea:4c:4a:ce:10:3c:2c:65:7a:12:a0:47:1b:40:67:98: f0:dd:29:ce:5f:f0:b9:92:0c:49:0c:4d:4d:be:a1:f4:78:4f: 46:66:26:89:8c:f2:ab:da:c8:16:1f:ff:98:c6:c4:6c:c3:c5: a6:1f:6c:4c:90:09:5f:9d:77:27:a6:e8:91:8a:98:31:1d:a0: 76:1d:e2:a8:f7:47:20:9a:c6:1f:39:3b:44:97:66:b5:c4:c7: 3f:5d:2c:7e:06:9e:e3:bd:bd:3b:d3:1a:91:32:d8:16:a1:ed: 83:4f:5c:3c:6a:b5:d6:ea:a5:2b:ce:70:21:b7:42:5c:41:67: 8e:2a:15:dd:5e:73:22:f8:62:64:c1:e3:db:3a:c3:fb:9d:87: 41:40:50:46:ce:36:3e:39:11:60:65:0b:60:24:27:78:f1:04: ce:d1:84:7b:08:01:de:e4:f3:f9:e8:f9:72:cf:5e:c9:20:7c: a1:66:8f:71:23:e7:a3:ae:1e:ef:da:c9:d4:e3:72:a3:20:9a: f8:11:67:f9:e1:3b:62:00:f6:a9:6d:74:18:56:e7:e4:c8:76: 89:e8:e8:f3:c5:c9:ef:d4:08:26:93:48:96:2e:29:33:e6:66: 0b:2e:a1:da:43:e0:c4:8c:be:a5:f6:68:6f:4d:0f:5c:8d:06: ad:c7:c0:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGRUIxMTAvBgNVBAUTKEM3OTVFNTlDMDMwQzdDOTI5RkNCRTQ3NDE5RkM1RUM2 OUUxRkFDRkQwHhcNMjQwNTA2MjMyNzQ5WhcNMjQwNTEzMjMyNzQ5WjAYMRYwFAYD VQQDEw02NjM5Njc3Ni01OGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmgP87HpursHUyyJ80oUS+pa34iTX+dzQOSWamM6AGl6tqQ33Cahl2R1eGBIb oDDxnX3VMpjukz2fGRumrHIbJHYGdU7iGBm99on3UZ6V6vnzUNjUshhVsgRVUwv7 Ho30bVb0SFlJkEMoxmyc1L066BnsHBgs6QUNxWKFgWMwGhUbAfzqWJCmCe1hFJs1 n+XtWj4mq0GLjecSsO3WZqE+3yG527xiGs0IS64F9AWgTleh6fVwEZ/6haLLlUSv 6CFiD3vrljwVjDAYrc5sJdpXrGvM+xEXVD5wkDqpnVZlh5xnJXEuMh9xCACG99o6 +Q6IIu1x37TGXBW7RVT8gne5rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyNTW0q JyDTzc5usaOO8jnObSiDMB8GA1UdIwQYMBaAFMeV5ZwDDHySn8vkdBn8XsaeH6z9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0ZFQi9CMDE4QUQ5NjI5 MTkxMUVCOTg1NDk4NUNDNEY5QUUwMi94NVhsbkFNTWZKS2Z5LVIwR2Z4ZXhwNGZy UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g1WGxuQU1NZkpLZnktUjBHZnhleHA0ZnJQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0ZFQi9CMDE4QUQ5NjI5MTkxMUVCOTg1NDk4NUNDNEY5QUUwMi94NVhsbkFNTWZK S2Z5LVIwR2Z4ZXhwNGZyUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKqupMSs4QPCxlehKgRxtAZ5jw3SnOX/C5kgxJDE1NvqH0eE9GZiaJ jPKr2sgWH/+YxsRsw8WmH2xMkAlfnXcnpuiRipgxHaB2HeKo90cgmsYfOTtEl2a1 xMc/XSx+Bp7jvb070xqRMtgWoe2DT1w8arXW6qUrznAht0JcQWeOKhXdXnMi+GJk wePbOsP7nYdBQFBGzjY+ORFgZQtgJCd48QTO0YR7CAHe5PP56Plyz17JIHyhZo9x I+ejrh7v2snU43KjIJr4EWf54TtiAPapbXQYVufkyHaJ6Ojzxcnv1Agmk0iWLikz 5mYLLqHaQ+DEjL6l9mhvTQ9cjQatx8AF -----END CERTIFICATE-----Generated at Tue May 7 01:58:25 2024 by rpki-client on console-fra.rpki-client.org