$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft File: xzON8bdowFB0za7Q_bGkwUrfuLU.mft (raw, json) Hash identifier: 6SqpdU/OAsjxqjmu/jRU/E9bEDhgHgCjIomOTav7S7Q= Subject key identifier: BA:51:E8:60:71:86:4E:55:1B:31:61:BB:71:DB:CF:CB:C0:FB:2A:CB Authority key identifier: C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 Certificate issuer: /CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft Manifest number: 3C Signing time: Fri 17 May 2024 08:26:37 +0000 Manifest this update: Fri 17 May 2024 08:26:36 +0000 Manifest next update: Fri 24 May 2024 08:26:36 +0000 Files and hashes: 1: xzON8bdowFB0za7Q_bGkwUrfuLU.crl (hash: gpJjfULT0HJhREgaz8aFbC2eigJ5276/efbb0LElO/4=) 2: F2E15D04EB2011EEA69D7D3CC4F9AE02.roa (hash: miXibqoerWuKGoPKLds6grN1XvfnTFLYmDiQektnfTI=) 3: ADA9E52EE45111EE8E1D470AC4F9AE02.roa (hash: YCCCz55y7bYNQkJC0blMFJgBVWAeh19j4f+SeSVfFPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Validity Not Before: May 17 08:26:36 2024 GMT Not After : May 24 08:26:36 2024 GMT Subject: CN=664714bc-0450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:73:89:f3:a5:f9:61:93:2f:7a:85:fb:38:de: 12:90:f3:6f:3d:bd:7b:b5:dc:eb:f4:85:3e:09:57: 5c:9e:44:72:37:05:20:47:2b:5e:c6:9d:73:91:2c: d4:b2:8d:17:4a:9e:2e:a8:7f:ef:a4:fe:70:ba:78: c2:7c:23:5d:06:ac:38:1c:90:48:45:74:35:c0:e8: 1b:e8:e7:29:3d:06:be:de:af:0c:c7:16:79:d6:f0: 1c:01:8b:b2:a6:3f:0f:97:b4:00:5d:b4:77:81:b1: c8:3a:56:95:33:e2:80:ab:3a:60:89:50:80:c7:e5: 20:62:b1:36:a5:90:05:bd:71:b3:0c:4e:cd:0c:11: 8a:82:68:18:5c:c2:7b:4d:39:c2:0a:6d:f7:b5:4b: 89:99:25:06:36:4b:15:c6:83:be:df:e6:c8:18:03: e4:e9:ed:f7:83:3c:dd:6e:15:ea:86:98:74:9d:2e: 7b:11:54:8b:6a:70:b7:f4:6b:aa:39:fb:00:5d:36: 04:e5:58:fc:d5:65:77:aa:a9:05:93:ca:b3:48:aa: 34:8f:bd:63:66:6b:15:c2:6e:dd:ee:48:23:c4:9f: b9:47:8c:52:db:28:70:d4:72:6e:92:a5:7d:db:cf: a3:4a:98:4e:87:94:51:46:6e:96:a6:56:f2:38:ec: 85:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:51:E8:60:71:86:4E:55:1B:31:61:BB:71:DB:CF:CB:C0:FB:2A:CB X509v3 Authority Key Identifier: keyid:C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:34:f6:99:57:88:1c:7e:9f:17:6d:81:30:0f:63:0f:fa:59: 23:9d:ad:1a:4a:b5:4f:62:26:d0:a7:ab:4b:ca:29:08:cf:91: 55:c7:5f:d9:e6:b7:96:9c:48:32:58:40:14:d6:fa:52:75:f8: 6e:86:20:0a:06:7a:15:98:75:d0:45:ba:08:1f:4f:e4:29:4c: 7d:ce:91:c2:14:f5:fa:66:65:1b:1b:f7:f3:21:ed:19:c1:e5: 81:3b:91:5c:73:df:3e:5d:0b:c1:74:b3:c9:04:30:76:ab:d6: 92:9c:41:95:79:e5:d9:43:98:16:81:8b:c9:92:3c:de:34:35: a3:2e:8d:11:ec:b6:2a:70:cd:79:70:4d:ce:c7:c7:d8:32:39: c9:ed:7a:6d:1c:bd:d3:88:5b:d9:e4:7b:88:28:45:17:47:3d: db:5d:03:43:a7:f9:fb:84:a8:2a:e0:0e:40:37:2b:82:25:a3: f6:40:34:f1:88:6b:10:1d:2b:a1:86:40:f0:f4:95:2a:1b:4a: 39:d9:d9:4e:16:3d:08:bb:20:b7:0f:7e:de:8c:ab:dd:96:98: 3b:f8:8b:7f:fd:da:c5:a7:a7:e3:13:7c:bd:e4:0c:ce:c6:a7: 74:3d:70:6a:59:f3:48:cb:46:ff:f3:94:35:ef:cb:0d:e0:d1: de:0f:e2:c2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MTY3RjExMC8GA1UEBRMoQzczMzhERjFCNzY4QzA1MDc0Q0RBRUQwRkRCMUE0QzE0 QURGQjhCNTAeFw0yNDA1MTcwODI2MzZaFw0yNDA1MjQwODI2MzZaMBgxFjAUBgNV BAMTDTY2NDcxNGJjLTA0NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIc4nzpflhky96hfs43hKQ8289vXu13Ov0hT4JV1yeRHI3BSBHK17GnXORLNSy jRdKni6of++k/nC6eMJ8I10GrDgckEhFdDXA6Bvo5yk9Br7erwzHFnnW8BwBi7Km Pw+XtABdtHeBscg6VpUz4oCrOmCJUIDH5SBisTalkAW9cbMMTs0MEYqCaBhcwntN OcIKbfe1S4mZJQY2SxXGg77f5sgYA+Tp7feDPN1uFeqGmHSdLnsRVItqcLf0a6o5 +wBdNgTlWPzVZXeqqQWTyrNIqjSPvWNmaxXCbt3uSCPEn7lHjFLbKHDUcm6SpX3b z6NKmE6HlFFGbpamVvI47IVxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUulHoYHGG TlUbMWG7cdvPy8D7KsswHwYDVR0jBBgwFoAUxzON8bdowFB0za7Q/bGkwUrfuLUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMxNjdGLzRBQUI3QkNBQzQ3 RDExRUU5RkM3QzgwRkM0RjlBRTAyL3h6T044YmRvd0ZCMHphN1FfYkdrd1VyZnVM VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveHpPTjhiZG93RkIwemE3UV9iR2t3VXJmdUxVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMx NjdGLzRBQUI3QkNBQzQ3RDExRUU5RkM3QzgwRkM0RjlBRTAyL3h6T044YmRvd0ZC MHphN1FfYkdrd1VyZnVMVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL009plXiBx+nxdtgTAPYw/6WSOdrRpKtU9iJtCnq0vKKQjPkVXHX9nm t5acSDJYQBTW+lJ1+G6GIAoGehWYddBFuggfT+QpTH3OkcIU9fpmZRsb9/Mh7RnB 5YE7kVxz3z5dC8F0s8kEMHar1pKcQZV55dlDmBaBi8mSPN40NaMujRHstipwzXlw Tc7Hx9gyOcntem0cvdOIW9nke4goRRdHPdtdA0On+fuEqCrgDkA3K4Ilo/ZANPGI axAdK6GGQPD0lSobSjnZ2U4WPQi7ILcPft6Mq92WmDv4i3/92sWnp+MTfL3kDM7G p3Q9cGpZ80jLRv/zlDXvyw3g0d4P4sI= -----END CERTIFICATE-----Generated at Fri May 17 10:59:13 2024 by rpki-client on console-ams.rpki-client.org