$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft File: xgie68VWt39k5EJJpouV1b2UHkA.mft (raw, json) Hash identifier: De6iY3nEZU6Hu/ptzJqJhv7nAUw5kleCMsXsp8BNvvE= Subject key identifier: F3:3A:7D:69:F3:A9:17:BD:24:BA:B3:14:9F:D8:8E:EC:35:88:DC:66 Authority key identifier: C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40 Certificate issuer: /CN=A91ADFD3/serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40 Certificate serial: 2267 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft Manifest number: 223B Signing time: Sat 04 May 2024 16:14:38 +0000 Manifest this update: Sat 04 May 2024 16:14:37 +0000 Manifest next update: Sat 11 May 2024 16:14:37 +0000 Files and hashes: 1: xgie68VWt39k5EJJpouV1b2UHkA.crl (hash: 4oY1H/c8kLQJVxeDDNsp6RBmYLvrrN/iIVN46SMQaO4=) 2: 6880FA2C59D211EAB77C8C13C4F9AE02.roa (hash: IhQ7eTqBdRib/DA5N6YpIbUC+S3mXMSoqBokw69dd1M=) 3: 678DA8FE59D211EAB77C8C13C4F9AE02.roa (hash: UOaxMQztH6OfRmI3k4wAxIdXb76oWhevbZkXsQ8dCZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8807 (0x2267) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADFD3/serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40 Validity Not Before: May 4 16:14:37 2024 GMT Not After : May 11 16:14:37 2024 GMT Subject: CN=66365eed-ef3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:87:9d:5a:00:41:fd:fd:99:0c:59:09:02:13: 6a:1d:b8:2c:a9:57:1f:58:50:5a:15:b6:db:a8:de: c6:27:05:21:c0:d3:7e:24:8d:dc:bf:f6:ed:9a:88: 59:aa:a8:dc:91:d0:b5:5c:24:56:99:f9:91:c5:66: e9:c3:85:18:63:96:ee:29:f2:65:46:8a:1f:ad:3f: 61:07:c5:9d:4d:1a:23:7d:41:d8:e4:42:75:4f:dd: 6f:91:63:0b:de:32:52:13:db:2d:61:95:62:9d:77: d2:00:81:fa:1c:47:83:c7:a9:0d:65:f5:7e:79:13: 82:c3:5d:17:6b:a1:33:bf:44:49:1b:33:78:01:69: 3d:a1:9b:2f:82:37:9a:2d:2d:7c:ff:ca:34:b4:18: 80:c0:04:9a:90:23:cc:1c:e9:9d:99:5d:0b:d1:47: a5:1b:d0:37:db:9b:14:5c:f5:cb:dd:38:c7:cb:55: ce:d1:b8:8d:89:69:b9:b5:83:77:06:d6:b8:37:ef: 2b:cb:87:b0:cb:9c:e5:b7:ed:fa:54:cd:33:b3:67: 77:7a:51:58:25:a0:f1:0c:45:b1:95:d3:3d:bf:cb: 38:00:4c:f9:9e:fc:38:9b:76:31:d9:cc:d4:2c:5f: d1:95:97:50:55:0d:53:5b:c1:35:f1:04:af:0d:71: bd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3A:7D:69:F3:A9:17:BD:24:BA:B3:14:9F:D8:8E:EC:35:88:DC:66 X509v3 Authority Key Identifier: keyid:C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:07:f5:2a:d6:09:28:76:7d:ec:39:90:a4:99:45:2e:61:10: de:87:84:b6:4a:c5:6c:c1:f6:b5:9c:94:f1:64:bc:44:c4:de: de:41:d6:24:90:46:48:24:45:40:99:8c:ae:4a:81:e9:18:10: 43:fc:6b:0b:e8:af:49:12:c0:fb:d1:7b:fc:3a:b1:48:63:8f: f2:cf:b3:da:61:b0:85:f6:04:88:4a:64:71:d2:10:0f:83:a3: 24:e4:e5:ab:dd:83:96:3a:32:27:90:af:c1:e0:4d:a4:72:e8: 42:fb:99:b0:24:3d:59:24:a7:b8:16:9f:46:21:1c:20:29:4b: 7a:4c:3d:ce:06:ee:e3:83:d8:58:27:46:3b:fd:97:5f:e1:9b: 6d:3f:d0:f9:0c:c4:67:b4:54:bf:ca:8c:a3:97:8a:af:bf:ca: 01:2d:f3:b7:74:ba:52:8d:a0:94:f0:09:54:aa:f3:ea:69:09: 5d:bc:13:ae:b6:36:fb:7e:5b:1c:5d:3d:4f:d8:02:91:23:82: 89:d9:b1:b8:f6:79:ee:93:66:ef:e9:10:82:39:48:24:b3:53: 23:ed:38:08:57:62:37:8c:50:39:03:07:d0:a5:7d:d7:36:fd: 94:ce:ea:db:09:73:68:1c:5d:35:97:24:eb:f1:a4:44:7b:1a: 12:ad:68:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICImcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURGRDMxMTAvBgNVBAUTKEM2MDg5RUVCQzU1NkI3N0Y2NEU0NDI0OUE2OEI5NUQ1 QkQ5NDFFNDAwHhcNMjQwNTA0MTYxNDM3WhcNMjQwNTExMTYxNDM3WjAYMRYwFAYD VQQDEw02NjM2NWVlZC1lZjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYedWgBB/f2ZDFkJAhNqHbgsqVcfWFBaFbbbqN7GJwUhwNN+JI3cv/btmohZ qqjckdC1XCRWmfmRxWbpw4UYY5buKfJlRoofrT9hB8WdTRojfUHY5EJ1T91vkWML 3jJSE9stYZVinXfSAIH6HEeDx6kNZfV+eROCw10Xa6Ezv0RJGzN4AWk9oZsvgjea LS18/8o0tBiAwASakCPMHOmdmV0L0UelG9A325sUXPXL3TjHy1XO0biNiWm5tYN3 Bta4N+8ry4ewy5zlt+36VM0zs2d3elFYJaDxDEWxldM9v8s4AEz5nvw4m3Yx2czU LF/RlZdQVQ1TW8E18QSvDXG9KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPM6fWnz qRe9JLqzFJ/Yjuw1iNxmMB8GA1UdIwQYMBaAFMYInuvFVrd/ZORCSaaLldW9lB5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREZEMy8xRkQxQThCRTk0 ODYxMUU1QUUwQzhCNzJDNEY5QUUwMi94Z2llNjhWV3QzOWs1RUpKcG91VjFiMlVI a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hnaWU2OFZXdDM5azVFSkpwb3VWMWIyVUhrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REZEMy8xRkQxQThCRTk0ODYxMUU1QUUwQzhCNzJDNEY5QUUwMi94Z2llNjhWV3Qz OWs1RUpKcG91VjFiMlVIa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9B/Uq1gkodn3sOZCkmUUuYRDeh4S2SsVswfa1nJTxZLxExN7eQdYk kEZIJEVAmYyuSoHpGBBD/GsL6K9JEsD70Xv8OrFIY4/yz7PaYbCF9gSISmRx0hAP g6Mk5OWr3YOWOjInkK/B4E2kcuhC+5mwJD1ZJKe4Fp9GIRwgKUt6TD3OBu7jg9hY J0Y7/Zdf4ZttP9D5DMRntFS/yoyjl4qvv8oBLfO3dLpSjaCU8AlUqvPqaQldvBOu tjb7flscXT1P2AKRI4KJ2bG49nnuk2bv6RCCOUgks1Mj7TgIV2I3jFA5AwfQpX3X Nv2UzurbCXNoHF01lyTr8aREexoSrWhS -----END CERTIFICATE-----Generated at Sat May 4 17:44:41 2024 by rpki-client on console-ams.rpki-client.org