$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DF8/EB831BD8013711EAB94D7D3CC4F9AE02/XENrkWFWuLhSZ8SPuJc7ibST9YE.mft File: XENrkWFWuLhSZ8SPuJc7ibST9YE.mft (raw, json) Hash identifier: y4wusHJxbzYPXxY7Mb5Papr2f24x2jZLYthdEklDkMk= Subject key identifier: F5:A3:4D:D0:9B:6A:14:A7:53:56:A5:7D:64:C5:B6:B2:5A:14:50:E5 Authority key identifier: 5C:43:6B:91:61:56:B8:B8:52:67:C4:8F:B8:97:3B:89:B4:93:F5:81 Certificate issuer: /CN=A91C1DF8/serialNumber=5C436B916156B8B85267C48FB8973B89B493F581 Certificate serial: 0796 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XENrkWFWuLhSZ8SPuJc7ibST9YE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DF8/EB831BD8013711EAB94D7D3CC4F9AE02/XENrkWFWuLhSZ8SPuJc7ibST9YE.mft Manifest number: 1316 Signing time: Sat 04 May 2024 19:27:23 +0000 Manifest this update: Sat 04 May 2024 19:27:23 +0000 Manifest next update: Sat 11 May 2024 19:27:23 +0000 Files and hashes: 1: XENrkWFWuLhSZ8SPuJc7ibST9YE.crl (hash: rh3JxVpEFZ3SDYoscLnOwFpxGAPnK9kw15aN3GvA+oE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1DF8/EB831BD8013711EAB94D7D3CC4F9AE02/XENrkWFWuLhSZ8SPuJc7ibST9YE.crl rsync://rpki.apnic.net/member_repository/A91C1DF8/EB831BD8013711EAB94D7D3CC4F9AE02/XENrkWFWuLhSZ8SPuJc7ibST9YE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XENrkWFWuLhSZ8SPuJc7ibST9YE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1942 (0x796) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1DF8/serialNumber=5C436B916156B8B85267C48FB8973B89B493F581 Validity Not Before: May 4 19:27:23 2024 GMT Not After : May 11 19:27:23 2024 GMT Subject: CN=66368c1b-68d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:dc:d4:d9:ca:d5:cb:e7:e3:f7:de:64:8f:52: 4c:1a:06:0c:8c:41:fb:3b:f4:96:ef:86:ce:49:22: 5a:0d:ee:3a:2d:36:3f:f8:b3:ef:79:b0:01:41:d2: 75:55:e7:5b:30:17:ac:47:c4:5f:9e:7f:37:75:9c: 44:ee:ae:02:b3:36:dd:c3:3a:bd:a7:c9:97:bc:29: b6:4d:a2:89:be:93:36:de:1b:f2:83:4a:17:1a:ae: 20:f1:ad:22:3c:87:4f:4e:0c:9e:69:20:fd:eb:40: 11:68:ab:83:b5:c0:cd:c5:61:7d:a6:f6:5f:7b:86: 88:f7:09:70:3a:b3:c9:0d:ec:62:19:a4:7c:ac:37: de:fd:13:2b:f1:f2:03:0f:9d:3b:e8:08:3c:11:b8: 5b:db:db:fb:17:e9:0c:2e:bd:f7:3f:11:81:40:bd: 60:72:c5:18:e6:39:d3:60:77:a9:ae:25:3d:53:d6: 23:2e:3b:13:6d:1d:05:dc:53:1f:d0:e3:b6:69:21: fd:f6:92:1f:04:dd:c0:76:aa:ba:b4:46:f1:9e:b0: cb:5c:1d:d8:8a:65:ff:d4:c5:47:be:f8:70:de:5c: ab:24:31:26:23:2f:91:90:4f:bf:a1:d9:b7:d0:36: 8b:09:b4:a4:c2:b5:0c:ae:19:81:ce:52:12:da:49: 62:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A3:4D:D0:9B:6A:14:A7:53:56:A5:7D:64:C5:B6:B2:5A:14:50:E5 X509v3 Authority Key Identifier: keyid:5C:43:6B:91:61:56:B8:B8:52:67:C4:8F:B8:97:3B:89:B4:93:F5:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1DF8/EB831BD8013711EAB94D7D3CC4F9AE02/XENrkWFWuLhSZ8SPuJc7ibST9YE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XENrkWFWuLhSZ8SPuJc7ibST9YE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DF8/EB831BD8013711EAB94D7D3CC4F9AE02/XENrkWFWuLhSZ8SPuJc7ibST9YE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:85:ad:8e:60:e2:9e:3d:57:fb:5d:88:3f:d3:4b:ee:e3:0d: 92:e7:0b:53:7e:85:91:ba:56:f2:d6:4a:0c:72:ce:8f:4d:29: 15:b7:c8:25:b5:0f:33:18:0b:2a:9f:71:6d:14:1e:ed:fd:b2: a1:45:85:9a:70:4a:59:31:34:fa:fe:eb:5c:b5:65:39:c9:93: 83:40:0b:7a:1c:79:69:49:3c:56:b9:68:7d:2b:05:9a:49:6d: 76:92:38:37:e3:70:56:a5:62:58:7c:a0:ed:85:7b:2f:a7:5e: 57:1b:67:2e:4c:e5:be:3b:fb:1e:ed:68:db:f0:6d:98:15:a2: b0:b3:1d:d9:ed:9e:fc:6b:28:e9:0c:b6:c6:47:a1:bd:2a:d1: 24:87:a9:3d:3e:8d:23:0f:38:65:2a:d1:a7:2f:00:51:a1:0d: 7a:7a:1e:82:71:a0:24:5c:7f:2f:c0:dc:c6:fb:1f:69:f0:4d: c2:f7:89:3a:da:65:26:a3:f8:c9:46:b1:9f:f1:85:72:16:e6: 85:6f:32:25:9e:4a:7a:0d:90:c2:56:16:d2:7c:42:29:c5:e7: 4c:50:91:f2:16:44:5f:e1:c9:da:65:6c:09:40:2a:9e:85:f1: d7:69:29:21:b8:3b:2b:a8:c1:91:cb:50:0d:4b:97:81:cc:a7: 12:55:60:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFERjgxMTAvBgNVBAUTKDVDNDM2QjkxNjE1NkI4Qjg1MjY3QzQ4RkI4OTczQjg5 QjQ5M0Y1ODEwHhcNMjQwNTA0MTkyNzIzWhcNMjQwNTExMTkyNzIzWjAYMRYwFAYD VQQDEw02NjM2OGMxYi02OGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyNzU2crVy+fj995kj1JMGgYMjEH7O/SW74bOSSJaDe46LTY/+LPvebABQdJ1 VedbMBesR8Rfnn83dZxE7q4Cszbdwzq9p8mXvCm2TaKJvpM23hvyg0oXGq4g8a0i PIdPTgyeaSD960ARaKuDtcDNxWF9pvZfe4aI9wlwOrPJDexiGaR8rDfe/RMr8fID D5076Ag8Ebhb29v7F+kMLr33PxGBQL1gcsUY5jnTYHepriU9U9YjLjsTbR0F3FMf 0OO2aSH99pIfBN3Adqq6tEbxnrDLXB3YimX/1MVHvvhw3lyrJDEmIy+RkE+/odm3 0DaLCbSkwrUMrhmBzlIS2kliIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPWjTdCb ahSnU1alfWTFtrJaFFDlMB8GA1UdIwQYMBaAFFxDa5FhVri4UmfEj7iXO4m0k/WB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURGOC9FQjgzMUJEODAx MzcxMUVBQjk0RDdEM0NDNEY5QUUwMi9YRU5ya1dGV3VMaFNaOFNQdUpjN2liU1Q5 WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hFTnJrV0ZXdUxoU1o4U1B1SmM3aWJTVDlZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MURGOC9FQjgzMUJEODAxMzcxMUVBQjk0RDdEM0NDNEY5QUUwMi9YRU5ya1dGV3VM aFNaOFNQdUpjN2liU1Q5WUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdha2OYOKePVf7XYg/00vu4w2S5wtTfoWRulby1koMcs6PTSkVt8gl tQ8zGAsqn3FtFB7t/bKhRYWacEpZMTT6/utctWU5yZODQAt6HHlpSTxWuWh9KwWa SW12kjg343BWpWJYfKDthXsvp15XG2cuTOW+O/se7Wjb8G2YFaKwsx3Z7Z78ayjp DLbGR6G9KtEkh6k9Po0jDzhlKtGnLwBRoQ16eh6CcaAkXH8vwNzG+x9p8E3C94k6 2mUmo/jJRrGf8YVyFuaFbzIlnkp6DZDCVhbSfEIpxedMUJHyFkRf4cnaZWwJQCqe hfHXaSkhuDsrqMGRy1ANS5eBzKcSVWBL -----END CERTIFICATE-----Generated at Sat May 4 20:37:17 2024 by rpki-client on console-fra.rpki-client.org