$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft File: XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft (raw, json) Hash identifier: nXFUI2K5Wi9pGUGIqijzSK37zKgWOJh4hGI138qe7/U= Subject key identifier: E1:0D:0F:6D:53:25:5C:CA:6F:B2:4C:EF:78:53:00:84:94:A2:E9:0B Authority key identifier: 5D:CA:45:28:B9:E4:0C:88:E4:67:A4:3F:DC:12:B7:8F:2B:35:45:E3 Certificate issuer: /CN=A91E4BD2/serialNumber=5DCA4528B9E40C88E467A43FDC12B78F2B3545E3 Certificate serial: 082F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft Manifest number: 082A Signing time: Thu 02 May 2024 21:53:49 +0000 Manifest this update: Thu 02 May 2024 21:53:48 +0000 Manifest next update: Thu 09 May 2024 21:53:48 +0000 Files and hashes: 1: XcpFKLnkDIjkZ6Q_3BK3jys1ReM.crl (hash: Iz/HrT5ibTggxodyecTYT1knQS5eMHEfuXBX6aCRteE=) 2: A862F866AA3111EA9E08C324C4F9AE02.roa (hash: P6WUwOG3h2hLZW1yORkyhvXGUkpkZnArYZ915ZC7GaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.crl rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:53:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2095 (0x82f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4BD2/serialNumber=5DCA4528B9E40C88E467A43FDC12B78F2B3545E3 Validity Not Before: May 2 21:53:48 2024 GMT Not After : May 9 21:53:48 2024 GMT Subject: CN=66340b6d-da9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4d:1c:53:7d:cd:53:0d:f9:c4:f5:30:bc:54: c9:59:0d:9d:02:3c:77:72:1f:a8:eb:af:5e:f0:0e: ec:1b:b5:8b:14:72:36:b2:74:97:aa:bb:72:c7:de: 42:ae:06:ac:68:13:75:7e:aa:b5:23:c2:df:ba:d2: 14:da:79:29:cf:81:07:47:f3:66:26:54:24:df:58: dd:35:27:f1:21:dd:50:61:71:30:35:68:4c:6e:2f: 31:46:a3:63:eb:3b:56:22:69:e9:78:ce:ea:1c:cf: ad:6e:81:37:6e:9b:f2:21:c5:45:f2:2d:8e:00:c1: 3d:43:39:91:bd:4c:f7:bc:db:76:58:29:51:4f:12: 62:f4:59:2e:ff:7d:0d:62:31:b7:52:48:ff:4e:38: d8:1b:08:c1:ff:c8:78:76:e9:b0:21:b9:b1:12:34: af:da:06:db:59:f4:32:0d:60:c0:b3:3a:5e:e0:37: f9:e1:42:a6:34:cf:93:91:83:c9:ae:ab:80:e2:27: 45:40:1e:2c:46:2c:a9:c4:50:ad:3c:1c:a8:05:10: f2:ee:43:f6:74:4d:8d:5e:e8:e4:f2:c0:ce:44:70: e2:02:b2:eb:fe:95:19:c9:db:d9:3f:5e:e1:e8:50: 7c:ee:a0:85:5b:a9:04:df:02:8f:2c:a7:d3:a5:98: 8c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0D:0F:6D:53:25:5C:CA:6F:B2:4C:EF:78:53:00:84:94:A2:E9:0B X509v3 Authority Key Identifier: keyid:5D:CA:45:28:B9:E4:0C:88:E4:67:A4:3F:DC:12:B7:8F:2B:35:45:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:70:ac:44:bf:2f:5d:66:39:b7:49:96:11:f4:39:81:e6:d3: d2:a5:62:b6:ff:ba:d7:3e:ac:8b:fb:29:52:c8:0e:d8:7e:b4: c1:45:0d:36:ff:77:bd:d7:6c:34:66:57:0b:80:e0:b8:33:c2: e1:c6:57:db:d2:85:88:d4:4d:97:73:dd:85:34:47:14:dd:52: ca:8d:92:2e:35:bc:54:72:96:7d:c3:db:4b:7b:6c:07:ea:54: d4:16:be:4e:d6:e7:fe:ed:d8:39:8e:ae:6f:f1:b5:86:50:37: 90:30:58:14:25:b2:60:bc:28:c2:6a:70:f9:88:ff:37:07:cf: 02:f2:b9:bf:e6:dc:ec:33:27:8d:17:53:b9:74:e9:d8:4c:ab: 75:ba:e3:db:e6:d0:70:e1:d0:ca:6c:80:d4:6b:32:1a:86:6e: 26:c3:d7:69:c4:63:5b:c7:9b:0a:ed:8a:1e:cf:b3:0c:fd:9d: 5e:14:a3:91:9c:89:2f:29:a7:02:c8:82:75:cf:42:c7:5c:30: 0b:63:fd:88:b4:df:f0:b2:9a:6b:30:5a:33:01:3d:be:ad:07: ea:b6:a7:fb:a1:63:c1:1c:f7:f6:8e:ae:d0:30:57:52:0c:36: 7f:45:1e:e8:ea:e5:e1:96:e1:16:9b:63:15:13:c4:24:a1:d7: 36:2d:21:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRCRDIxMTAvBgNVBAUTKDVEQ0E0NTI4QjlFNDBDODhFNDY3QTQzRkRDMTJCNzhG MkIzNTQ1RTMwHhcNMjQwNTAyMjE1MzQ4WhcNMjQwNTA5MjE1MzQ4WjAYMRYwFAYD VQQDEw02NjM0MGI2ZC1kYTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1E0cU33NUw35xPUwvFTJWQ2dAjx3ch+o669e8A7sG7WLFHI2snSXqrtyx95C rgasaBN1fqq1I8LfutIU2nkpz4EHR/NmJlQk31jdNSfxId1QYXEwNWhMbi8xRqNj 6ztWImnpeM7qHM+tboE3bpvyIcVF8i2OAME9QzmRvUz3vNt2WClRTxJi9Fku/30N YjG3Ukj/TjjYGwjB/8h4dumwIbmxEjSv2gbbWfQyDWDAszpe4Df54UKmNM+TkYPJ rquA4idFQB4sRiypxFCtPByoBRDy7kP2dE2NXujk8sDORHDiArLr/pUZydvZP17h 6FB87qCFW6kE3wKPLKfTpZiMTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOEND21T JVzKb7JM73hTAISUoukLMB8GA1UdIwQYMBaAFF3KRSi55AyI5GekP9wSt48rNUXj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEJEMi9GNDBCMTE2QUFB MkYxMUVBOUMyOTU5MUVDNEY5QUUwMi9YY3BGS0xua0RJamtaNlFfM0JLM2p5czFS ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hjcEZLTG5rRElqa1o2UV8zQkszanlzMVJlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEJEMi9GNDBCMTE2QUFBMkYxMUVBOUMyOTU5MUVDNEY5QUUwMi9YY3BGS0xua0RJ amtaNlFfM0JLM2p5czFSZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVcKxEvy9dZjm3SZYR9DmB5tPSpWK2/7rXPqyL+ylSyA7YfrTBRQ02 /3e912w0ZlcLgOC4M8Lhxlfb0oWI1E2Xc92FNEcU3VLKjZIuNbxUcpZ9w9tLe2wH 6lTUFr5O1uf+7dg5jq5v8bWGUDeQMFgUJbJgvCjCanD5iP83B88C8rm/5tzsMyeN F1O5dOnYTKt1uuPb5tBw4dDKbIDUazIahm4mw9dpxGNbx5sK7Yoez7MM/Z1eFKOR nIkvKacCyIJ1z0LHXDALY/2ItN/wspprMFozAT2+rQfqtqf7oWPBHPf2jq7QMFdS DDZ/RR7o6uXhluEWm2MVE8Qkodc2LSE+ -----END CERTIFICATE-----Generated at Thu May 2 23:03:14 2024 by rpki-client on console-fra.rpki-client.org