$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft File: XYnzqvmxOgelsmTy3rpk1cUAZRw.mft (raw, json) Hash identifier: SQHOV06hgMB1+f29/dxnvpW4Ja4jZWpAx/qwBzyNg4U= Subject key identifier: AC:CE:C2:E7:2B:65:BC:1B:C3:1E:13:F7:EB:12:16:6A:30:B7:CC:73 Authority key identifier: 5D:89:F3:AA:F9:B1:3A:07:A5:B2:64:F2:DE:BA:64:D5:C5:00:65:1C Certificate issuer: /CN=A91D5240/serialNumber=5D89F3AAF9B13A07A5B264F2DEBA64D5C500651C Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft Manifest number: F6 Signing time: Tue 07 May 2024 05:43:14 +0000 Manifest this update: Tue 07 May 2024 05:43:14 +0000 Manifest next update: Tue 14 May 2024 05:43:14 +0000 Files and hashes: 1: XYnzqvmxOgelsmTy3rpk1cUAZRw.crl (hash: f6Oae8UUD6X804IWmJNds2B31W5QG3iUMJDukRHjFwM=) 2: 9EA7B7D8A63911ED874E6630C4F9AE02.roa (hash: J9lQZhRy8nlJurek/6TmeBBfcqfbhz3LFug7IIYnNuk=) 3: 5DCE1A1AA63C11ED9306165AC4F9AE02.roa (hash: G7v93sM93gzZ4BgWqisV58Q1qgwmrLJ0bo2fkE0d3wQ=) 4: 9FBA5FCCA63911ED874E6630C4F9AE02.roa (hash: Ta/ZWvPosDSPnLIBb0P0lxVE7uAqrQxU6Y7zoCnFQ8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.crl rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 05:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5240/serialNumber=5D89F3AAF9B13A07A5B264F2DEBA64D5C500651C Validity Not Before: May 7 05:43:14 2024 GMT Not After : May 14 05:43:14 2024 GMT Subject: CN=6639bf72-7115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ba:68:52:40:ea:45:83:36:c2:6b:3b:14:62: 9b:41:68:5f:9c:fb:a3:85:30:98:27:20:5d:96:1a: 14:81:fc:49:12:e1:de:9e:49:54:70:61:0a:ae:f5: fe:a5:74:ed:d3:4e:6f:23:04:14:a8:d2:66:26:b7: 1c:93:d0:39:86:00:9e:36:64:4d:73:af:1b:75:c0: 8b:24:0c:99:5e:7b:dd:78:e3:bc:53:3c:a0:73:44: 6a:78:a7:61:10:48:2c:d1:cf:24:dc:59:3e:71:67: 08:30:6a:b1:0d:da:9a:aa:9a:49:42:a2:7e:f7:4d: 09:9c:2c:df:a7:e5:cd:75:f6:9f:5d:a3:26:ab:0d: 96:e3:eb:af:c8:e1:a5:02:c4:7e:19:25:2e:95:5b: 4f:e7:1e:f4:42:c8:f5:8b:45:b2:a2:d8:28:bc:69: fe:f8:c2:0c:77:35:43:67:a1:3a:03:71:63:ce:0d: c2:9a:bf:ef:06:cf:8a:ec:73:4e:aa:3d:ed:00:5e: 32:a1:75:a4:09:85:2f:21:3f:78:06:70:34:6a:b8: 9f:4a:bf:d7:30:d7:fd:c4:63:83:6a:d6:46:e0:7b: 02:df:a8:d2:c3:f9:c4:1e:fe:5b:61:78:80:c4:64: 35:84:7f:24:88:6c:f5:f0:2e:79:01:a3:ff:ab:65: eb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:CE:C2:E7:2B:65:BC:1B:C3:1E:13:F7:EB:12:16:6A:30:B7:CC:73 X509v3 Authority Key Identifier: keyid:5D:89:F3:AA:F9:B1:3A:07:A5:B2:64:F2:DE:BA:64:D5:C5:00:65:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:f8:2d:7a:d0:aa:69:8d:2e:9f:fa:d1:b7:ba:94:fe:6e:b8: 93:98:2f:db:fc:9d:ce:02:db:e6:d1:7a:d9:02:17:08:c3:f0: 52:54:05:3a:68:42:65:19:ad:0b:de:ec:55:83:da:d0:4c:ba: e0:e0:21:e0:8c:5b:44:dc:fd:02:40:45:e0:cc:51:ce:46:51: be:07:c9:de:cc:d0:08:9b:44:9b:89:ca:18:a3:95:d5:dc:cc: 9b:a0:c8:89:be:36:2a:81:b9:cc:cc:ce:a9:c1:51:06:2d:cd: 32:5a:01:41:02:17:5c:ec:cb:88:8f:c6:16:11:23:c1:70:93: 7c:2b:74:5a:65:25:7a:0b:05:55:c3:fe:e0:c1:56:26:f0:11: 9e:a2:84:93:44:1d:fb:7d:6b:9c:33:7e:82:7f:95:5f:f1:1d: 89:69:f9:a8:2d:61:4b:a7:6c:1d:c8:cf:0b:b3:37:92:c9:cb: 67:7d:8e:93:df:2d:4b:05:b0:32:33:b0:3b:91:62:c4:3b:6f: e9:9a:86:7c:08:dd:49:6d:b3:58:4e:d8:ee:3c:25:82:99:d3: e7:ac:96:3b:c8:10:20:34:ff:96:e0:ac:51:97:a2:07:27:ff: 97:5c:ca:d7:7e:d1:d9:79:25:94:8e:b9:68:f3:4d:6e:71:4b: cf:4a:59:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUyNDAxMTAvBgNVBAUTKDVEODlGM0FBRjlCMTNBMDdBNUIyNjRGMkRFQkE2NEQ1 QzUwMDY1MUMwHhcNMjQwNTA3MDU0MzE0WhcNMjQwNTE0MDU0MzE0WjAYMRYwFAYD VQQDEw02NjM5YmY3Mi03MTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxrpoUkDqRYM2wms7FGKbQWhfnPujhTCYJyBdlhoUgfxJEuHenklUcGEKrvX+ pXTt005vIwQUqNJmJrcck9A5hgCeNmRNc68bdcCLJAyZXnvdeOO8Uzygc0RqeKdh EEgs0c8k3Fk+cWcIMGqxDdqaqppJQqJ+900JnCzfp+XNdfafXaMmqw2W4+uvyOGl AsR+GSUulVtP5x70Qsj1i0WyotgovGn++MIMdzVDZ6E6A3Fjzg3Cmr/vBs+K7HNO qj3tAF4yoXWkCYUvIT94BnA0arifSr/XMNf9xGODatZG4HsC36jSw/nEHv5bYXiA xGQ1hH8kiGz18C55AaP/q2XroQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKzOwucr Zbwbwx4T9+sSFmowt8xzMB8GA1UdIwQYMBaAFF2J86r5sToHpbJk8t66ZNXFAGUc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTI0MC8yN0RERTdEODlC N0QxMUVEQjNDMzNGNURDNEY5QUUwMi9YWW56cXZteE9nZWxzbVR5M3JwazFjVUFa UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hZbnpxdm14T2dlbHNtVHkzcnBrMWNVQVpSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTI0MC8yN0RERTdEODlCN0QxMUVEQjNDMzNGNURDNEY5QUUwMi9YWW56cXZteE9n ZWxzbVR5M3JwazFjVUFaUncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5+C160KppjS6f+tG3upT+briTmC/b/J3OAtvm0XrZAhcIw/BSVAU6 aEJlGa0L3uxVg9rQTLrg4CHgjFtE3P0CQEXgzFHORlG+B8nezNAIm0SbicoYo5XV 3MyboMiJvjYqgbnMzM6pwVEGLc0yWgFBAhdc7MuIj8YWESPBcJN8K3RaZSV6CwVV w/7gwVYm8BGeooSTRB37fWucM36Cf5Vf8R2JafmoLWFLp2wdyM8LszeSyctnfY6T 3y1LBbAyM7A7kWLEO2/pmoZ8CN1JbbNYTtjuPCWCmdPnrJY7yBAgNP+W4KxRl6IH J/+XXMrXftHZeSWUjrlo801ucUvPSllV -----END CERTIFICATE-----Generated at Tue May 7 06:30:14 2024 by rpki-client on console-ams.rpki-client.org