$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft File: xhcbemowv7ipfMAGg1yMk60C3k4.mft (raw, json) Hash identifier: 2rPeuLH5dSy2ozFG4pNar0wJa37p2w0HBXt58GAf2dk= Subject key identifier: 39:73:49:B9:3A:A2:F0:A0:EA:CB:81:72:80:FC:A3:81:90:85:31:BA Authority key identifier: C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E Certificate issuer: /CN=A91A80CB/serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft Manifest number: D1 Signing time: Fri 03 May 2024 06:15:26 +0000 Manifest this update: Fri 03 May 2024 06:15:26 +0000 Manifest next update: Fri 10 May 2024 06:15:26 +0000 Files and hashes: 1: xhcbemowv7ipfMAGg1yMk60C3k4.crl (hash: 4EIbSrJuBRF9I0OeiEn8QJgVDOUWy2HH8PKzTzbZKwo=) 2: 48485D88CC6411EDA7970484C4F9AE02.roa (hash: ncbBfvNfTN+9UCNMy82nzUawOBbP+HTp1MNHAi4I74c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 06:15:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80CB/serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E Validity Not Before: May 3 06:15:26 2024 GMT Not After : May 10 06:15:26 2024 GMT Subject: CN=663480fe-77ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8f:f2:2f:f3:07:42:7b:6d:da:79:9d:43:b4: 0d:65:a5:b4:d6:04:1e:fe:a4:91:eb:74:59:ab:66: 8d:ef:6b:d5:86:79:ba:90:99:a3:77:fd:50:4b:ce: 62:b1:36:19:08:3f:7e:2f:35:bf:7a:1f:a3:88:38: cf:c4:86:99:0f:58:d5:11:12:73:7e:8d:3f:a4:b8: e8:10:26:44:2f:06:ec:15:8a:5c:65:ee:f0:77:e2: 19:96:3f:cc:b7:b7:48:d6:88:25:37:53:44:58:36: e9:c6:0d:5d:8c:aa:f0:9d:1a:ff:06:67:5f:6c:76: b0:fa:c8:3d:6b:33:c7:22:08:e2:1d:d7:6f:c4:12: 46:18:b6:df:3f:d4:58:f7:f6:e5:35:db:05:5f:86: 65:a9:f5:10:7a:54:d3:ce:18:58:f0:ca:36:0d:60: 1d:7a:48:ae:e6:1d:a4:ef:74:0b:ae:0b:9d:e5:06: 04:5a:14:27:ac:74:aa:6c:1f:04:38:72:33:15:2e: 14:64:33:f9:63:c9:79:4a:e1:75:65:5a:c6:88:7d: e4:cf:55:b9:cd:24:e2:47:94:81:cc:e0:3c:83:12: de:73:4a:1d:e6:95:fa:71:47:84:cd:9c:a1:c9:f5: 05:84:43:6d:4b:c1:c5:ad:93:4d:66:f3:9f:ae:98: 31:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:73:49:B9:3A:A2:F0:A0:EA:CB:81:72:80:FC:A3:81:90:85:31:BA X509v3 Authority Key Identifier: keyid:C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:42:f6:2f:ca:92:39:71:13:17:60:e8:19:2e:cd:f6:7d:bc: d5:37:94:40:3a:5c:da:0f:d2:17:97:bd:be:f4:6f:4d:7c:7a: 62:bb:68:73:68:91:5d:e9:26:5e:6a:8c:54:85:cd:e1:65:bc: b8:ce:41:95:e1:db:05:60:0e:f1:ca:b2:33:89:03:09:d8:dc: 0c:7d:5d:37:3b:9d:74:22:d0:d0:d6:02:aa:83:01:33:c4:7e: c2:b5:f1:8d:c2:78:0f:d1:78:b6:87:3a:ff:75:c7:3b:7d:e4: e8:03:ca:4d:2b:b2:6e:af:44:2c:f7:aa:10:20:21:a3:5d:24: d3:6a:20:9b:e5:9b:91:c4:c8:de:ef:34:9c:71:f1:bb:36:b1: 0a:b9:2d:3b:22:1c:b6:86:21:79:1e:44:32:9d:8a:63:00:37: 6a:5f:3b:35:7a:a5:0e:8e:ba:09:a6:8c:94:62:20:24:89:7b: 96:78:39:c8:06:61:6f:1c:63:40:3d:d2:9f:4c:d6:cb:12:ac: ee:b8:82:fe:93:ac:a1:23:b9:f4:60:e2:37:bc:f3:dc:aa:a2: 29:8d:ee:b6:ea:ca:47:28:fd:56:32:32:e1:17:da:bf:75:6f: 55:28:8a:a2:37:fc:0d:27:6a:87:e1:ad:aa:94:15:0e:5c:d5: ca:2c:58:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwQ0IxMTAvBgNVBAUTKEM2MTcxQjdBNkEzMEJGQjhBOTdDQzAwNjgzNUM4Qzkz QUQwMkRFNEUwHhcNMjQwNTAzMDYxNTI2WhcNMjQwNTEwMDYxNTI2WjAYMRYwFAYD VQQDEw02NjM0ODBmZS03N2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlo/yL/MHQntt2nmdQ7QNZaW01gQe/qSR63RZq2aN72vVhnm6kJmjd/1QS85i sTYZCD9+LzW/eh+jiDjPxIaZD1jVERJzfo0/pLjoECZELwbsFYpcZe7wd+IZlj/M t7dI1oglN1NEWDbpxg1djKrwnRr/BmdfbHaw+sg9azPHIgjiHddvxBJGGLbfP9RY 9/blNdsFX4ZlqfUQelTTzhhY8Mo2DWAdekiu5h2k73QLrgud5QYEWhQnrHSqbB8E OHIzFS4UZDP5Y8l5SuF1ZVrGiH3kz1W5zSTiR5SBzOA8gxLec0od5pX6cUeEzZyh yfUFhENtS8HFrZNNZvOfrpgxNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDlzSbk6 ovCg6suBcoD8o4GQhTG6MB8GA1UdIwQYMBaAFMYXG3pqML+4qXzABoNcjJOtAt5O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBDQi85MDE0ODJCOEND NUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3aXBmTUFHZzF5TWs2MEMz azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hoY2JlbW93djdpcGZNQUdnMXlNazYwQzNrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODBDQi85MDE0ODJCOENDNUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3 aXBmTUFHZzF5TWs2MEMzazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxQvYvypI5cRMXYOgZLs32fbzVN5RAOlzaD9IXl72+9G9NfHpiu2hz aJFd6SZeaoxUhc3hZby4zkGV4dsFYA7xyrIziQMJ2NwMfV03O510ItDQ1gKqgwEz xH7CtfGNwngP0Xi2hzr/dcc7feToA8pNK7Jur0Qs96oQICGjXSTTaiCb5ZuRxMje 7zSccfG7NrEKuS07Ihy2hiF5HkQynYpjADdqXzs1eqUOjroJpoyUYiAkiXuWeDnI BmFvHGNAPdKfTNbLEqzuuIL+k6yhI7n0YOI3vPPcqqIpje626spHKP1WMjLhF9q/ dW9VKIqiN/wNJ2qH4a2qlBUOXNXKLFgI -----END CERTIFICATE-----Generated at Fri May 3 08:21:38 2024 by rpki-client on console-ams.rpki-client.org