$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft File: XBJjPm2nhhExvM_qH3t6vTUdIy8.mft (raw, json) Hash identifier: rQTMus15eeB76Z6xa+0D5v+5lXMly/fRuNpeZtlSvpo= Subject key identifier: 8F:BF:B0:BB:EB:D8:F1:9A:25:DA:45:AC:F4:32:40:48:CE:42:09:5C Authority key identifier: 5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F Certificate issuer: /CN=A91A5577/serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft Manifest number: 01CC Signing time: Sat 27 Apr 2024 04:19:37 +0000 Manifest this update: Sat 27 Apr 2024 04:19:37 +0000 Manifest next update: Sat 04 May 2024 04:19:37 +0000 Files and hashes: 1: XBJjPm2nhhExvM_qH3t6vTUdIy8.crl (hash: +MsYYPW+Ffabkq68t5unv+z+Lrm3osyPGMGXTUBib2s=) 2: 92F62AF0032811ED8DFE1842C4F9AE02.roa (hash: dkz+gF26Xc/+XSfz37sjrLbIjn5mCtOakqy6C1/N76s=) 3: 6B10211E032B11ED8B3C5B4EC4F9AE02.roa (hash: GP8Rd5sLIMj2hhm+cySJQkfOGdakl1Y56iIlQMs7Li8=) 4: 418966DA032011ED84D6CA1EC4F9AE02.roa (hash: 1sAVZxZLRigkgsZXyp5pu4RHA9hASSeOHSEnVJg/XEI=) 5: 94584738031A11ED934E3D58C4F9AE02.roa (hash: XEcInF/4DluT/tcvLCcSWynq7+tP3kZx9jXwQt73Rj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5577/serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F Validity Not Before: Apr 27 04:19:37 2024 GMT Not After : May 4 04:19:37 2024 GMT Subject: CN=662c7cd9-48f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8a:c5:cc:2d:72:0c:f4:9e:fd:70:4d:cc:53: 50:ee:7e:42:f8:7f:d3:39:c9:22:3b:d5:19:58:66: 57:47:4a:6c:c5:6d:d7:c9:bf:45:7f:da:e5:f1:aa: 4a:04:99:35:88:8d:22:cb:b0:cc:14:37:4b:f7:52: fe:6a:d8:04:56:e8:36:13:0b:a3:73:a3:7a:ab:bd: 30:d3:9d:9a:cc:99:ed:1d:cf:8e:91:d5:89:6d:4a: f3:56:b8:c6:26:23:5d:c6:db:92:97:be:2f:bf:9e: 50:17:0a:88:39:fd:60:c1:e4:f9:4e:f1:b3:98:5e: 15:09:4a:30:c6:e9:f3:67:9b:ae:d2:ba:45:08:10: df:d2:9e:12:c7:08:d8:b0:ef:73:74:44:5d:f9:e0: e0:94:0f:ed:ad:10:86:c3:ac:3d:3f:35:46:fa:51: 94:ce:e8:c1:37:3f:13:d7:a9:22:16:0b:99:b6:93: 21:6d:d9:cf:be:15:f3:b6:1f:d0:ad:bb:2e:0e:a1: 2b:d3:90:0a:ff:66:b9:bd:2d:c9:0f:c9:85:dd:b0: 41:ca:60:1d:1e:e2:77:1a:8f:d9:f0:2c:8f:47:09: 01:eb:b1:00:c2:e4:20:0f:4b:b5:59:38:9b:52:f9: 35:52:c3:eb:06:7e:5a:39:99:a5:25:1f:c1:a2:99: 68:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:BF:B0:BB:EB:D8:F1:9A:25:DA:45:AC:F4:32:40:48:CE:42:09:5C X509v3 Authority Key Identifier: keyid:5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:76:ed:47:cc:14:1b:59:91:12:ea:b0:2d:b9:c5:24:4d:0a: ab:a4:e8:30:3e:e0:9b:af:c3:fe:8d:4c:2f:1d:ba:bc:87:b1: c0:50:22:3e:a5:40:59:06:86:53:11:d4:53:e5:6d:9e:0f:1c: 4a:11:03:0e:ee:32:90:8e:dd:92:32:f6:02:a1:75:e2:5d:b9: 1f:2f:2f:18:5c:a9:68:61:55:dd:d0:7d:30:1b:eb:c9:26:26: 3e:b6:8f:d2:af:93:31:a7:95:e5:6d:5e:2b:41:c0:e8:24:81: 36:3f:67:f5:ba:5f:d8:9f:59:7b:56:c2:be:e1:85:7f:74:df: c9:be:69:1a:8d:85:19:36:45:b6:dc:02:22:1e:84:36:71:92: da:32:8d:9f:50:6f:0f:50:17:da:f4:0f:b0:14:a3:93:5a:19: c7:45:55:6b:8d:d3:96:3c:20:a2:b1:09:e6:cf:9c:9a:ba:71: e9:cd:a4:85:30:0a:12:1f:7c:59:6a:a5:40:f5:bf:f8:17:9b: ab:ba:e8:81:ca:a1:92:b4:68:ff:eb:fe:f9:24:90:60:8b:26: d8:a7:41:7d:7c:2b:2a:e3:c8:46:cf:7f:1f:43:6b:05:86:c6: 1d:61:14:0d:8e:ad:ff:80:c0:47:49:d1:6f:30:69:d8:7e:59: 72:0c:d7:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1NzcxMTAvBgNVBAUTKDVDMTI2MzNFNkRBNzg2MTEzMUJDQ0ZFQTFGN0I3QUJE MzUxRDIzMkYwHhcNMjQwNDI3MDQxOTM3WhcNMjQwNTA0MDQxOTM3WjAYMRYwFAYD VQQDEw02NjJjN2NkOS00OGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4rFzC1yDPSe/XBNzFNQ7n5C+H/TOckiO9UZWGZXR0psxW3Xyb9Ff9rl8apK BJk1iI0iy7DMFDdL91L+atgEVug2Ewujc6N6q70w052azJntHc+OkdWJbUrzVrjG JiNdxtuSl74vv55QFwqIOf1gweT5TvGzmF4VCUowxunzZ5uu0rpFCBDf0p4SxwjY sO9zdERd+eDglA/trRCGw6w9PzVG+lGUzujBNz8T16kiFguZtpMhbdnPvhXzth/Q rbsuDqEr05AK/2a5vS3JD8mF3bBBymAdHuJ3Go/Z8CyPRwkB67EAwuQgD0u1WTib Uvk1UsPrBn5aOZmlJR/BoplopwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+/sLvr 2PGaJdpFrPQyQEjOQglcMB8GA1UdIwQYMBaAFFwSYz5tp4YRMbzP6h97er01HSMv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTU3Ny85MDNFNEM3ODAz MTYxMUVEOTBGODg0NEZDNEY5QUUwMi9YQkpqUG0ybmhoRXh2TV9xSDN0NnZUVWRJ eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hCSmpQbTJuaGhFeHZNX3FIM3Q2dlRVZEl5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTU3Ny85MDNFNEM3ODAzMTYxMUVEOTBGODg0NEZDNEY5QUUwMi9YQkpqUG0ybmho RXh2TV9xSDN0NnZUVWRJeTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCidu1HzBQbWZES6rAtucUkTQqrpOgwPuCbr8P+jUwvHbq8h7HAUCI+ pUBZBoZTEdRT5W2eDxxKEQMO7jKQjt2SMvYCoXXiXbkfLy8YXKloYVXd0H0wG+vJ JiY+to/Sr5Mxp5XlbV4rQcDoJIE2P2f1ul/Yn1l7VsK+4YV/dN/JvmkajYUZNkW2 3AIiHoQ2cZLaMo2fUG8PUBfa9A+wFKOTWhnHRVVrjdOWPCCisQnmz5yaunHpzaSF MAoSH3xZaqVA9b/4F5uruuiByqGStGj/6/75JJBgiybYp0F9fCsq48hGz38fQ2sF hsYdYRQNjq3/gMBHSdFvMGnYfllyDNf7 -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:05 2024 by rpki-client on console-ams.rpki-client.org