$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft File: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft (raw, json) Hash identifier: m9BBYEfHaUQUFwtFzTHbtFTLhir8lDRUUWSdgYWtUt0= Subject key identifier: 76:F7:F5:DA:0D:F6:55:81:F3:95:90:00:88:9D:CF:2C:89:21:25:DC Authority key identifier: 5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A Certificate issuer: /CN=A91DB63B/serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Certificate serial: 0866 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft Manifest number: 0862 Signing time: Thu 02 May 2024 21:46:40 +0000 Manifest this update: Thu 02 May 2024 21:46:40 +0000 Manifest next update: Thu 09 May 2024 21:46:40 +0000 Files and hashes: 1: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl (hash: IT5ZY6Z1F/ghoyNpa1dg3kDIiBVq5QmdBd9nfm8h6Og=) 2: 34492B669EC111EE9FA71E2BC4F9AE02.roa (hash: QYoz5H7QEMgBSR68+H46p2ByiEbCwOxDng7qLrV8CXM=) 3: B20CAEB4012511EDBB5C141DC4F9AE02.roa (hash: cuOqxBsuCJ+odz8Cr7DRwP5HxHPgD/rbEN+ufKPJ6IE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2150 (0x866) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB63B/serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Validity Not Before: May 2 21:46:40 2024 GMT Not After : May 9 21:46:40 2024 GMT Subject: CN=663409c0-d078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c7:54:0e:52:e7:9a:94:e7:5f:43:3a:49:0d: 26:fa:31:a4:32:08:c1:3b:2e:76:7a:d2:57:44:3d: c4:5b:5f:38:c1:67:ba:48:f2:28:e4:3d:cc:3f:ca: 86:6c:d6:a2:d9:bc:03:3b:43:dc:e9:97:f4:e7:e2: a8:23:32:0e:be:9a:88:a5:ff:8e:ad:73:bf:5c:23: 55:19:f9:29:05:b6:ff:0c:e5:2d:0e:ab:54:25:85: b5:eb:ff:2e:ad:17:7d:33:5c:cc:ba:4e:c1:66:2e: d7:31:ce:58:ac:cd:10:35:23:fe:0d:7c:92:b6:0c: 60:49:eb:f3:2e:8a:af:ee:ae:e9:fe:b9:9c:80:a3: c9:47:d6:c0:00:67:e7:69:a0:f1:2d:20:9e:e8:c5: 2d:97:76:4f:74:3b:19:a4:dc:3b:e7:52:bb:dc:ff: b8:18:0b:04:84:9c:1c:dd:9a:9c:e7:4d:34:47:39: 21:90:5e:8f:8e:c6:fb:cd:8c:04:f5:2b:87:e5:a2: 24:95:2f:a5:38:75:dd:19:3d:75:39:91:4f:21:22: b2:b4:b3:37:da:0f:33:88:93:85:46:6a:28:17:eb: 6e:cf:07:8f:7c:8c:c6:39:59:a4:f9:57:3d:31:36: 0e:be:5f:6e:7d:f5:b9:5b:0f:42:5b:99:97:2c:38: 08:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F7:F5:DA:0D:F6:55:81:F3:95:90:00:88:9D:CF:2C:89:21:25:DC X509v3 Authority Key Identifier: keyid:5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:f2:c0:88:54:aa:63:2b:10:0e:c6:e4:c4:fb:cc:c8:11:2f: f0:4a:c0:9b:8d:2e:af:24:56:30:3c:df:69:39:1d:b7:4d:88: 5b:4c:5c:2b:48:a2:72:29:42:85:c6:3d:b3:fb:da:d2:48:56: 0a:27:d0:2a:cf:86:c4:29:f7:df:cf:1d:b6:a5:37:8c:b8:e2: 91:25:6a:cb:ce:fa:3d:7d:f3:4e:45:67:83:79:d5:44:b2:48: f2:72:8f:bc:50:19:07:ac:9c:a6:51:4f:07:33:d0:35:73:1b: 73:f7:57:97:1e:31:79:5b:f1:f2:e7:f2:ef:f3:df:b5:87:97: 7c:e9:d4:43:3e:54:d0:aa:ab:23:2a:e1:e5:5b:6d:11:e3:13: cc:94:da:25:88:80:7e:7e:8d:7a:10:be:1a:09:9f:b1:15:ef: fc:15:6a:f1:86:a3:84:48:a7:3a:6b:76:90:1d:b9:06:6f:2e: 9f:2f:42:45:5a:48:7d:f8:d1:0b:e5:20:36:52:6e:f9:c7:42: 07:40:e1:5b:63:b1:66:37:b8:1e:1c:c4:eb:5d:5b:43:a9:73: 36:de:3a:91:6e:f0:08:9c:81:46:56:50:29:da:e5:5a:63:c3: 89:88:5d:93:d3:70:0c:53:6c:2b:cd:8f:0b:17:32:81:eb:14: c3:f4:c6:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2M0IxMTAvBgNVBAUTKDVFRjcyRjlCRTRFM0EyOERFMzU2OUU3NkRFMkQyMjI1 REJGM0ZEOEEwHhcNMjQwNTAyMjE0NjQwWhcNMjQwNTA5MjE0NjQwWjAYMRYwFAYD VQQDEw02NjM0MDljMC1kMDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4cdUDlLnmpTnX0M6SQ0m+jGkMgjBOy52etJXRD3EW184wWe6SPIo5D3MP8qG bNai2bwDO0Pc6Zf05+KoIzIOvpqIpf+OrXO/XCNVGfkpBbb/DOUtDqtUJYW16/8u rRd9M1zMuk7BZi7XMc5YrM0QNSP+DXyStgxgSevzLoqv7q7p/rmcgKPJR9bAAGfn aaDxLSCe6MUtl3ZPdDsZpNw751K73P+4GAsEhJwc3Zqc5000RzkhkF6Pjsb7zYwE 9SuH5aIklS+lOHXdGT11OZFPISKytLM32g8ziJOFRmooF+tuzwePfIzGOVmk+Vc9 MTYOvl9uffW5Ww9CW5mXLDgIOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHb39doN 9lWB85WQAIidzyyJISXcMB8GA1UdIwQYMBaAFF73L5vk46KN41aedt4tIiXb8/2K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjYzQi8yRTJDRUExNjlG NDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9vM2pWcDUyM2kwaUpkdnpf WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h2Y3ZtLVRqb28zalZwNTIzaTBpSmR2el9Zby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjYzQi8yRTJDRUExNjlGNDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9v M2pWcDUyM2kwaUpkdnpfWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC28sCIVKpjKxAOxuTE+8zIES/wSsCbjS6vJFYwPN9pOR23TYhbTFwr SKJyKUKFxj2z+9rSSFYKJ9Aqz4bEKfffzx22pTeMuOKRJWrLzvo9ffNORWeDedVE skjyco+8UBkHrJymUU8HM9A1cxtz91eXHjF5W/Hy5/Lv89+1h5d86dRDPlTQqqsj KuHlW20R4xPMlNoliIB+fo16EL4aCZ+xFe/8FWrxhqOESKc6a3aQHbkGby6fL0JF Wkh9+NEL5SA2Um75x0IHQOFbY7FmN7geHMTrXVtDqXM23jqRbvAInIFGVlAp2uVa Y8OJiF2T03AMU2wrzY8LFzKB6xTD9Mae -----END CERTIFICATE-----Generated at Thu May 2 22:28:58 2024 by rpki-client on console-ams.rpki-client.org