$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft File: X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft (raw, json) Hash identifier: yWG95xskfpJYC8HM8d5I6tCFk2wcmH2HAQY5XcMj444= Subject key identifier: 55:41:54:10:05:32:51:6C:39:23:CC:47:DA:24:B0:9E:C3:4F:41:8C Authority key identifier: 5F:93:3D:30:F2:47:D0:41:9F:F0:BE:06:03:E1:6D:5C:27:C4:04:07 Certificate issuer: /CN=A91A6B8E/serialNumber=5F933D30F247D0419FF0BE0603E16D5C27C40407 Certificate serial: 0676 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft Manifest number: 066F Signing time: Tue 30 Apr 2024 23:49:34 +0000 Manifest this update: Tue 30 Apr 2024 23:49:34 +0000 Manifest next update: Tue 07 May 2024 23:49:34 +0000 Files and hashes: 1: X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl (hash: LllPZkxtnttiQFJsBzbDl5AXZZWJwMh0VzZDMRRrWb8=) 2: 4D12DEAE2E9311EBB9FC5259C4F9AE02.roa (hash: I9VnR1RWM0VR2Kj2xG0fGQ4fg7twbJNXtLcE/L58FFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 23:49:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1654 (0x676) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6B8E/serialNumber=5F933D30F247D0419FF0BE0603E16D5C27C40407 Validity Not Before: Apr 30 23:49:34 2024 GMT Not After : May 7 23:49:34 2024 GMT Subject: CN=6631838e-2564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4b:b9:a8:32:40:04:19:dc:de:b2:07:89:48: 2e:50:ea:f1:68:16:ab:36:fa:22:f4:83:60:03:c9: c7:cb:d6:80:52:2b:59:4b:dd:bf:4d:a4:05:09:f4: ad:0f:c0:cd:04:7d:25:ff:99:f3:bf:99:f9:4a:f1: 01:f1:ba:80:e2:61:f0:3d:31:c0:c8:01:19:7c:80: 62:73:a2:09:df:c9:c3:e1:8d:db:78:34:6f:c9:01: 68:fb:8e:76:9f:43:ec:2d:5d:a8:91:4d:75:3f:60: f1:e9:9b:c5:d3:87:af:ac:75:cf:04:cd:c5:df:4e: 4d:fe:9a:50:87:63:1e:96:c7:7d:30:32:69:50:b7: 7e:51:b7:ca:1d:ac:fe:f1:f2:a2:3e:0b:c5:16:e1: 99:06:1c:e9:55:38:4b:f5:1b:f5:f8:f9:7f:00:60: 22:60:3c:7c:42:b0:1a:b6:8f:2f:23:79:9f:04:ca: 23:50:95:65:3a:91:28:33:5e:b1:6a:9c:45:2e:1a: 7d:4e:1a:2e:ea:07:36:ed:c5:9e:bf:9d:ba:26:d5: 51:6b:ef:44:6a:0f:30:75:e4:3b:5d:6d:db:62:12: 49:06:c8:ea:d9:bf:2f:f4:52:de:4b:28:e4:93:e4: 7b:a4:6f:2f:37:6f:3d:17:76:4e:97:45:9e:78:3b: 42:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:41:54:10:05:32:51:6C:39:23:CC:47:DA:24:B0:9E:C3:4F:41:8C X509v3 Authority Key Identifier: keyid:5F:93:3D:30:F2:47:D0:41:9F:F0:BE:06:03:E1:6D:5C:27:C4:04:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:97:64:43:fd:ed:d1:8b:7e:28:22:63:1f:65:86:3a:9d:9b: 25:a7:e6:40:01:36:c5:4d:e1:0e:49:48:70:8a:6f:e0:ac:0d: ab:ce:30:e8:dd:81:b3:2a:25:01:e5:cb:86:9c:fb:ab:96:78: 0d:8f:49:83:48:c2:79:04:e4:09:18:f7:66:df:b1:29:0b:0b: 00:16:f3:d9:21:fb:dd:3f:ef:d7:a8:18:c2:fe:fb:2e:25:43: 8c:27:40:d8:90:98:69:95:71:bc:c3:26:77:4c:15:80:b1:d8: 71:e4:c7:ac:66:12:2b:1b:2d:2e:e7:73:dd:35:f1:62:fb:3c: 5a:60:8a:66:65:91:32:a7:92:02:be:5a:aa:f5:bc:cc:07:99: 7b:db:a9:13:a3:51:99:94:ab:c5:91:fc:cc:32:b6:ab:f4:9a: 89:a3:58:12:da:ed:48:2c:29:6a:0b:57:a0:78:ce:cd:77:31: b5:12:63:6e:36:8d:9a:ca:ad:8c:33:f8:8b:38:d9:5b:ac:77: 61:5d:a2:e5:e7:52:a3:5f:77:9a:77:cf:12:fe:28:64:6d:45: fa:4e:cd:59:37:0b:c4:c9:4b:81:f5:4b:5c:68:7e:00:c2:5e: 71:98:5c:e6:e3:21:38:1a:de:ad:e1:bb:92:3f:5f:71:a3:64: dd:d6:67:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZCOEUxMTAvBgNVBAUTKDVGOTMzRDMwRjI0N0QwNDE5RkYwQkUwNjAzRTE2RDVD MjdDNDA0MDcwHhcNMjQwNDMwMjM0OTM0WhcNMjQwNTA3MjM0OTM0WjAYMRYwFAYD VQQDEw02NjMxODM4ZS0yNTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEu5qDJABBnc3rIHiUguUOrxaBarNvoi9INgA8nHy9aAUitZS92/TaQFCfSt D8DNBH0l/5nzv5n5SvEB8bqA4mHwPTHAyAEZfIBic6IJ38nD4Y3beDRvyQFo+452 n0PsLV2okU11P2Dx6ZvF04evrHXPBM3F305N/ppQh2Melsd9MDJpULd+UbfKHaz+ 8fKiPgvFFuGZBhzpVThL9Rv1+Pl/AGAiYDx8QrAato8vI3mfBMojUJVlOpEoM16x apxFLhp9Thou6gc27cWev526JtVRa+9Eag8wdeQ7XW3bYhJJBsjq2b8v9FLeSyjk k+R7pG8vN289F3ZOl0WeeDtC7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVBVBAF MlFsOSPMR9oksJ7DT0GMMB8GA1UdIwQYMBaAFF+TPTDyR9BBn/C+BgPhbVwnxAQH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkI4RS85N0E0NTFCNjJF OTExMUVCQTUxRUU4M0NDNEY5QUUwMi9YNU05TVBKSDBFR2Y4TDRHQS1GdFhDZkVC QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g1TTlNUEpIMEVHZjhMNEdBLUZ0WENmRUJBYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkI4RS85N0E0NTFCNjJFOTExMUVCQTUxRUU4M0NDNEY5QUUwMi9YNU05TVBKSDBF R2Y4TDRHQS1GdFhDZkVCQWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANl2RD/e3Ri34oImMfZYY6nZslp+ZAATbFTeEOSUhwim/grA2rzjDo 3YGzKiUB5cuGnPurlngNj0mDSMJ5BOQJGPdm37EpCwsAFvPZIfvdP+/XqBjC/vsu JUOMJ0DYkJhplXG8wyZ3TBWAsdhx5MesZhIrGy0u53PdNfFi+zxaYIpmZZEyp5IC vlqq9bzMB5l726kTo1GZlKvFkfzMMrar9JqJo1gS2u1ILClqC1egeM7NdzG1EmNu No2ayq2MM/iLONlbrHdhXaLl51KjX3ead88S/ihkbUX6Ts1ZNwvEyUuB9UtcaH4A wl5xmFzm4yE4Gt6t4buSP19xo2Td1mdc -----END CERTIFICATE-----Generated at Wed May 1 00:24:02 2024 by rpki-client on console-fra.rpki-client.org