$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft File: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft (raw, json) Hash identifier: L8rz/ChE/l/1249Om6fhP5/SwgHluXrSr52tyTWdLY4= Subject key identifier: 40:48:AE:B7:60:46:9F:60:21:E2:AB:8E:D8:96:B1:37:79:AA:47:C8 Authority key identifier: F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92 Certificate issuer: /CN=A91C9484/serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792 Certificate serial: 33F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft Manifest number: 33DC Signing time: Mon 06 May 2024 14:55:09 +0000 Manifest this update: Mon 06 May 2024 14:55:09 +0000 Manifest next update: Mon 13 May 2024 14:55:09 +0000 Files and hashes: 1: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl (hash: 2Y/gw/eTIa9vCNXJZ22Tt7tToAZTfQ+W+j1AhQgMMcY=) 2: 49036D2CB0D711E58B185E0FC4F9AE02.roa (hash: YazdyMwHOwoF8umaAipXjtQtje6WJc0WXJZNFJEXGA0=) 3: FFC89DF8CECD11EEA4AA6D44C4F9AE02.roa (hash: 2NUudbVYezITXTQtX0YxAZtsoAo14kkfj/OCaZq7JSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 14:55:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13297 (0x33f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9484/serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792 Validity Not Before: May 6 14:55:09 2024 GMT Not After : May 13 14:55:09 2024 GMT Subject: CN=6638ef4d-0364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:4a:49:d9:eb:ea:81:19:c3:fc:23:ca:67:e0: 26:a5:a7:c1:42:bd:ac:4e:b4:f7:db:ec:7d:3f:96: 57:cc:05:13:fa:bb:79:e0:64:d5:02:8c:b6:d1:d1: d0:c8:6b:9a:f7:10:dd:4a:a6:d2:f7:11:24:d6:e7: d8:d1:ca:5d:fc:21:10:32:3f:b6:a7:86:fe:ba:d0: 2a:d7:82:57:6f:61:f6:3d:09:ce:42:f2:ce:52:72: 00:86:07:9e:4a:13:f8:2f:99:82:18:40:54:71:5e: e0:22:a5:46:42:1c:df:db:21:44:44:80:fb:3e:45: 3e:99:43:d0:68:64:1e:9f:59:85:4c:50:7e:db:19: db:48:dd:53:ea:b0:64:25:17:bb:54:a3:e7:8f:b1: 78:6f:a4:31:0f:35:16:a6:77:00:d5:27:68:17:5e: 2a:66:49:c3:05:e1:be:aa:5a:d6:27:af:9f:4f:76: c9:5a:ff:59:6c:74:38:ad:da:98:7b:68:a0:e1:1f: 02:bb:56:7f:70:f5:66:d0:8d:08:6d:7d:2c:be:b2: 2b:5d:58:5a:85:eb:55:3d:ab:70:45:b7:4b:d8:12: ed:2f:73:20:8e:08:09:e0:7b:19:a2:d4:cf:07:0e: 56:6c:5d:4f:3f:4b:8e:03:89:34:25:b0:aa:cb:a0: 11:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:48:AE:B7:60:46:9F:60:21:E2:AB:8E:D8:96:B1:37:79:AA:47:C8 X509v3 Authority Key Identifier: keyid:F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:8a:4c:56:5f:8c:f0:a9:0d:3e:50:c2:d4:27:0d:93:13:7f: 27:58:56:c5:7f:f6:59:25:08:a5:a9:c5:b9:ab:b4:15:38:6f: 78:67:0d:59:b6:f4:f2:6a:ab:23:3a:13:d9:a3:bf:ae:ac:9c: f1:43:3d:18:07:15:58:88:94:2b:7b:ee:63:ba:89:57:8e:97: 1a:90:e8:de:5f:65:7b:7f:09:e4:b5:2f:14:aa:a5:05:7b:4e: 73:a3:2e:57:b9:b3:37:0d:d2:e7:de:66:e6:b1:5b:c2:e8:03: 0d:4c:03:4b:cd:95:26:8a:40:9a:05:2a:46:ac:b4:7f:dd:33: 82:6f:17:ab:46:73:bc:02:ab:47:6a:79:6d:79:3a:3a:d3:b8: 6b:e4:85:7f:74:fb:28:b2:a7:ed:43:a6:79:62:9a:dd:38:28: 2b:2b:b7:ee:eb:76:62:92:b4:ed:da:b0:cf:03:1b:0d:1a:b1: 1e:86:fd:58:c6:56:c8:3b:d6:e0:d6:e2:4d:83:08:b5:8f:2a: 0c:19:c6:b6:6b:dd:34:ce:8d:8b:04:18:84:9c:8b:1f:a6:f5: 01:20:03:9d:aa:47:54:ba:43:b7:14:0b:bf:6c:92:2f:e7:1b: 0d:cb:3d:ee:f4:50:fa:d9:1c:cb:4d:7a:80:96:d0:7c:1a:f9: 56:65:9d:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0ODQxMTAvBgNVBAUTKEY5NzJFNzVFM0QwM0U1Q0UxOTAxOTMwQzQzRDE2REM0 QTg5QzQ3OTIwHhcNMjQwNTA2MTQ1NTA5WhcNMjQwNTEzMTQ1NTA5WjAYMRYwFAYD VQQDEw02NjM4ZWY0ZC0wMzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA50pJ2evqgRnD/CPKZ+AmpafBQr2sTrT32+x9P5ZXzAUT+rt54GTVAoy20dHQ yGua9xDdSqbS9xEk1ufY0cpd/CEQMj+2p4b+utAq14JXb2H2PQnOQvLOUnIAhgee ShP4L5mCGEBUcV7gIqVGQhzf2yFERID7PkU+mUPQaGQen1mFTFB+2xnbSN1T6rBk JRe7VKPnj7F4b6QxDzUWpncA1SdoF14qZknDBeG+qlrWJ6+fT3bJWv9ZbHQ4rdqY e2ig4R8Cu1Z/cPVm0I0IbX0svrIrXVhahetVPatwRbdL2BLtL3MgjggJ4HsZotTP Bw5WbF1PP0uOA4k0JbCqy6ARwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBIrrdg Rp9gIeKrjtiWsTd5qkfIMB8GA1UdIwQYMBaAFPly5149A+XOGQGTDEPRbcSonEeS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQ4NC82RkYwRERFMDFE OTQxMUUyOURFQ0I1RjgwOEIwMkNEMi8tWExuWGowRDVjNFpBWk1NUTlGdHhLaWNS NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YTG5YajBENWM0WkFaTU1ROUZ0eEtpY1I1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTQ4NC82RkYwRERFMDFEOTQxMUUyOURFQ0I1RjgwOEIwMkNEMi8tWExuWGowRDVj NFpBWk1NUTlGdHhLaWNSNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWikxWX4zwqQ0+UMLUJw2TE38nWFbFf/ZZJQilqcW5q7QVOG94Zw1Z tvTyaqsjOhPZo7+urJzxQz0YBxVYiJQre+5juolXjpcakOjeX2V7fwnktS8UqqUF e05zoy5XubM3DdLn3mbmsVvC6AMNTANLzZUmikCaBSpGrLR/3TOCbxerRnO8AqtH anlteTo607hr5IV/dPsosqftQ6Z5YprdOCgrK7fu63ZikrTt2rDPAxsNGrEehv1Y xlbIO9bg1uJNgwi1jyoMGca2a900zo2LBBiEnIsfpvUBIAOdqkdUukO3FAu/bJIv 5xsNyz3u9FD62RzLTXqAltB8GvlWZZ3b -----END CERTIFICATE-----Generated at Mon May 6 17:36:20 2024 by rpki-client on console-fra.rpki-client.org