$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft File: XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft (raw, json) Hash identifier: at/kCwIAXue0qw3fg18kPkkjYc5RyB9qN5VdWlsSjoI= Subject key identifier: 18:E0:10:89:45:FB:10:68:3F:8E:AF:D0:67:B3:EF:FC:68:13:B2:C7 Authority key identifier: 5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32 Certificate issuer: /CN=A91D83B3/serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32 Certificate serial: 08CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft Manifest number: 08C5 Signing time: Thu 18 Apr 2024 21:24:33 +0000 Manifest this update: Thu 18 Apr 2024 21:24:33 +0000 Manifest next update: Thu 25 Apr 2024 21:24:33 +0000 Files and hashes: 1: XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl (hash: EDaBDHgaoy20urbE5i2uP9BlPwauCxK0hEGJCwAp+qU=) 2: B01A5D448A0E11EAA8C40916C4F9AE02.roa (hash: wep3EHpCma6Z95dtPMJHeRO9CQY07Hw/pOnNGpa1mGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Apr 2024 21:24:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2251 (0x8cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D83B3/serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32 Validity Not Before: Apr 18 21:24:33 2024 GMT Not After : Apr 25 21:24:33 2024 GMT Subject: CN=66218f91-6157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:8c:3a:dd:b0:75:5d:d1:94:58:e3:28:df:31: c5:fe:e1:b3:5d:78:f2:1f:12:62:94:73:f9:05:58: a9:1f:4e:a1:cd:6a:40:bf:b4:58:a5:88:86:28:78: 67:52:17:f8:61:8c:a5:b2:8d:44:49:48:b0:61:8a: 1d:b7:ad:a7:1b:b2:4b:5f:9c:0f:bc:39:84:69:83: 8f:b1:0c:f9:fd:c1:dc:5d:fa:67:cc:61:ea:48:1a: 6d:84:35:02:63:ba:20:bf:46:9c:f4:fe:a3:e1:86: da:04:eb:2f:de:f0:fa:5a:9d:a8:3d:16:19:33:01: 8a:32:54:0e:fa:6b:2a:5e:e4:7c:cb:48:8a:ca:4a: 96:32:38:60:ea:10:6a:3c:6b:c6:84:20:e9:95:11: f7:47:41:b3:8e:06:35:7d:22:1e:b2:73:4b:f3:56: 4f:0a:b5:c9:1c:ce:40:bd:45:6a:02:98:c3:58:86: 65:df:99:5f:5e:17:22:19:0a:f4:90:42:15:ae:38: 3b:57:6e:8f:ca:67:37:bf:db:bc:fb:b4:3f:7b:2f: da:d7:ae:62:eb:81:87:4e:30:30:63:62:d5:f7:cb: 0b:06:91:41:e5:61:3a:c6:1d:d5:a9:d0:c5:6b:83: de:d5:6f:ca:2f:9b:88:a8:52:1e:46:86:d9:96:a6: 5e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E0:10:89:45:FB:10:68:3F:8E:AF:D0:67:B3:EF:FC:68:13:B2:C7 X509v3 Authority Key Identifier: keyid:5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:ee:5a:89:0c:b8:cc:15:b7:f8:66:9f:24:c3:26:f0:ee:80: 7e:59:1e:29:99:ca:6c:8d:f5:2a:53:05:03:2e:f3:ac:d1:8b: 52:68:5b:06:ac:88:3a:33:ce:15:64:10:93:1a:20:25:90:80: e2:af:c2:87:8b:8e:fa:6e:31:18:73:4a:53:9f:7e:53:ea:ec: 10:51:39:ba:06:d5:81:6e:bc:50:a1:e3:dd:60:55:11:eb:7e: a9:5d:7c:dd:40:81:3a:0b:de:10:ae:d3:9d:73:a2:34:8e:88: 04:da:0b:d9:6d:3c:4e:b0:50:2d:44:dd:fe:08:1d:f3:9c:12: 35:c5:a1:9a:f6:ba:6a:d4:5e:df:83:1b:90:5f:40:d8:ef:9f: 2a:03:3a:b9:9e:a6:a1:e2:9a:0c:51:96:da:94:85:cf:25:7f: 0c:87:00:9b:48:f7:09:a8:8e:07:7d:c6:11:d2:91:46:a4:d9: ea:75:12:46:74:69:6d:60:36:48:ce:38:ca:19:2c:b9:a6:31: a7:f5:ee:df:23:58:ff:1e:d5:d8:9d:33:4f:8b:77:dd:12:41: 02:98:4e:fc:94:bf:b2:2d:e0:8a:2f:82:9d:1a:50:17:13:9a: 3b:79:64:f0:f0:e4:ce:aa:9f:08:20:54:21:5d:44:15:e2:48: bb:7e:83:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzQjMxMTAvBgNVBAUTKDVFMDU3NDQ2QzQ5NjFFNEQyNkMzN0ZGRUE4QUMzRjdB QUREODNCMzIwHhcNMjQwNDE4MjEyNDMzWhcNMjQwNDI1MjEyNDMzWjAYMRYwFAYD VQQDEw02NjIxOGY5MS02MTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ow63bB1XdGUWOMo3zHF/uGzXXjyHxJilHP5BVipH06hzWpAv7RYpYiGKHhn Uhf4YYylso1ESUiwYYodt62nG7JLX5wPvDmEaYOPsQz5/cHcXfpnzGHqSBpthDUC Y7ogv0ac9P6j4YbaBOsv3vD6Wp2oPRYZMwGKMlQO+msqXuR8y0iKykqWMjhg6hBq PGvGhCDplRH3R0GzjgY1fSIesnNL81ZPCrXJHM5AvUVqApjDWIZl35lfXhciGQr0 kEIVrjg7V26Pymc3v9u8+7Q/ey/a165i64GHTjAwY2LV98sLBpFB5WE6xh3VqdDF a4Pe1W/KL5uIqFIeRobZlqZeHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBjgEIlF +xBoP46v0Gez7/xoE7LHMB8GA1UdIwQYMBaAFF4FdEbElh5NJsN//qisP3qt2Dsy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODNCMy9BM0QzRDgyMjhB MEQxMUVBQTUwNTk3MTRDNEY5QUUwMi9YZ1YwUnNTV0hrMG13M18tcUt3X2VxM1lP ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hnVjBSc1NXSGswbXczXy1xS3dfZXEzWU96SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODNCMy9BM0QzRDgyMjhBMEQxMUVBQTUwNTk3MTRDNEY5QUUwMi9YZ1YwUnNTV0hr MG13M18tcUt3X2VxM1lPekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF7lqJDLjMFbf4Zp8kwybw7oB+WR4pmcpsjfUqUwUDLvOs0YtSaFsG rIg6M84VZBCTGiAlkIDir8KHi476bjEYc0pTn35T6uwQUTm6BtWBbrxQoePdYFUR 636pXXzdQIE6C94QrtOdc6I0jogE2gvZbTxOsFAtRN3+CB3znBI1xaGa9rpq1F7f gxuQX0DY758qAzq5nqah4poMUZbalIXPJX8MhwCbSPcJqI4HfcYR0pFGpNnqdRJG dGltYDZIzjjKGSy5pjGn9e7fI1j/HtXYnTNPi3fdEkECmE78lL+yLeCKL4KdGlAX E5o7eWTw8OTOqp8IIFQhXUQV4ki7foME -----END CERTIFICATE-----Generated at Thu Apr 18 22:03:44 2024 by rpki-client on console-fra.rpki-client.org