$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft File: xsGRae6n0Ga8m8py3YgwvBg6EmY.mft (raw, json) Hash identifier: dF/rj/6IlzTue3qKsrEUeFKZuLJwobb8/MEjzV9FliU= Subject key identifier: EC:2F:46:E1:15:B6:62:C6:FC:63:40:6D:C7:F0:69:DD:EE:51:9A:85 Authority key identifier: C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66 Certificate issuer: /CN=A91F1C46/serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266 Certificate serial: 0714 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft Manifest number: 070D Signing time: Thu 02 May 2024 22:45:02 +0000 Manifest this update: Thu 02 May 2024 22:45:02 +0000 Manifest next update: Thu 09 May 2024 22:45:02 +0000 Files and hashes: 1: xsGRae6n0Ga8m8py3YgwvBg6EmY.crl (hash: ovrXHToxSE/BIclRQpo5I9RYI4jxsAF7GceWS6sJVbk=) 2: D3EA977EF32D11EA8498822CC4F9AE02.roa (hash: j0UnLWBGpCaeQYA5kWoEMvgya4WYOWhttnlu48+KRik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1812 (0x714) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1C46/serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266 Validity Not Before: May 2 22:45:02 2024 GMT Not After : May 9 22:45:02 2024 GMT Subject: CN=6634176e-e478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ab:b8:af:bf:49:5e:f0:d4:91:e6:4a:54:64: 81:f5:c5:5c:b5:e9:d3:a4:5e:03:95:41:0d:b7:22: 36:34:6e:1b:3e:46:24:92:0d:3b:f2:71:b5:a6:d6: 05:a2:5c:37:96:df:5d:b3:2c:58:93:01:4a:cf:51: e7:5d:a5:dc:00:15:29:36:75:b9:74:64:40:f8:e4: 53:2a:3d:c4:46:e6:75:4d:0b:5e:ef:e5:91:1c:39: 95:0a:3a:44:f5:14:30:0f:c6:8b:c7:8a:f1:c1:59: ea:83:24:e7:61:84:52:2e:a3:e6:78:e9:a8:e4:84: 26:8a:e2:74:80:07:e2:66:8b:c1:13:0e:c9:75:5b: e9:dc:a2:00:ce:f4:c0:cc:17:4d:35:16:63:53:3d: 6a:79:77:04:80:8b:d1:a3:80:d2:83:5e:cd:a5:77: 81:5b:c7:e3:e6:88:48:fa:90:4e:02:8f:b4:80:3a: 06:de:56:48:92:1b:0d:e8:5b:8c:90:94:b0:82:5f: 2d:5b:a1:49:eb:1e:3b:98:7d:f4:77:39:57:3c:24: dd:5b:0b:d3:d6:ab:6d:ec:18:88:1b:52:cd:69:92: 04:80:37:25:9d:6a:56:8a:b2:ac:0f:03:f7:62:63: 8f:e1:50:67:9a:41:1e:cc:0f:20:e8:f2:5a:8d:11: 6f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:2F:46:E1:15:B6:62:C6:FC:63:40:6D:C7:F0:69:DD:EE:51:9A:85 X509v3 Authority Key Identifier: keyid:C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:d4:64:42:c4:03:34:60:24:6a:be:db:72:9d:7a:12:99:c5: 0d:e5:cc:5d:3d:08:6d:9e:ed:c4:c4:10:02:b6:7f:03:16:c3: bf:36:8b:a3:ff:aa:14:d2:dd:1e:a9:22:1d:2e:87:b5:99:b5: 67:9d:03:37:68:13:53:56:be:0f:5d:f5:1c:11:5a:c8:18:28: 72:25:63:37:4e:37:3f:59:3d:8f:a7:8a:c1:ed:ef:44:5d:b5: 20:8f:d8:e2:61:3a:82:7d:46:6b:17:32:83:e5:a7:45:d9:7a: 2b:d0:0d:11:95:14:66:b1:64:2e:c2:b2:93:0e:51:c2:cb:75: 63:3d:94:30:dc:be:57:b0:a9:01:1b:3f:e1:ca:20:28:d4:4f: c4:2e:26:35:1e:68:6c:ae:54:aa:9c:94:42:04:46:77:bd:5c: c1:bb:bf:51:6f:7a:79:13:46:2a:da:1b:a8:74:b6:22:ae:c5: 75:78:9a:c6:dc:4b:a3:76:66:1b:80:9d:d0:77:1c:03:c7:b4: f3:a1:ee:1a:33:78:c7:8d:f5:ec:b1:1a:68:77:ce:78:1c:a1: f0:76:3b:db:37:77:7d:2a:e8:b4:8c:af:db:6b:97:97:f8:82: f7:4b:b4:56:53:88:52:0e:56:3b:4f:48:31:75:b2:34:ce:ad: 4a:77:a5:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFDNDYxMTAvBgNVBAUTKEM2QzE5MTY5RUVBN0QwNjZCQzlCQ0E3MkREODgzMEJD MTgzQTEyNjYwHhcNMjQwNTAyMjI0NTAyWhcNMjQwNTA5MjI0NTAyWjAYMRYwFAYD VQQDEw02NjM0MTc2ZS1lNDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKu4r79JXvDUkeZKVGSB9cVctenTpF4DlUENtyI2NG4bPkYkkg078nG1ptYF olw3lt9dsyxYkwFKz1HnXaXcABUpNnW5dGRA+ORTKj3ERuZ1TQte7+WRHDmVCjpE 9RQwD8aLx4rxwVnqgyTnYYRSLqPmeOmo5IQmiuJ0gAfiZovBEw7JdVvp3KIAzvTA zBdNNRZjUz1qeXcEgIvRo4DSg17NpXeBW8fj5ohI+pBOAo+0gDoG3lZIkhsN6FuM kJSwgl8tW6FJ6x47mH30dzlXPCTdWwvT1qtt7BiIG1LNaZIEgDclnWpWirKsDwP3 YmOP4VBnmkEezA8g6PJajRFvyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwvRuEV tmLG/GNAbcfwad3uUZqFMB8GA1UdIwQYMBaAFMbBkWnup9BmvJvKct2IMLwYOhJm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUM0Ni8wNUNBREQxNkYx ODYxMUVBOERFQzNDMTRDNEY5QUUwMi94c0dSYWU2bjBHYThtOHB5M1lnd3ZCZzZF bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hzR1JhZTZuMEdhOG04cHkzWWd3dkJnNkVtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUM0Ni8wNUNBREQxNkYxODYxMUVBOERFQzNDMTRDNEY5QUUwMi94c0dSYWU2bjBH YThtOHB5M1lnd3ZCZzZFbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB31GRCxAM0YCRqvttynXoSmcUN5cxdPQhtnu3ExBACtn8DFsO/Nouj /6oU0t0eqSIdLoe1mbVnnQM3aBNTVr4PXfUcEVrIGChyJWM3Tjc/WT2Pp4rB7e9E XbUgj9jiYTqCfUZrFzKD5adF2Xor0A0RlRRmsWQuwrKTDlHCy3VjPZQw3L5XsKkB Gz/hyiAo1E/ELiY1HmhsrlSqnJRCBEZ3vVzBu79Rb3p5E0Yq2huodLYirsV1eJrG 3EujdmYbgJ3QdxwDx7Tzoe4aM3jHjfXssRpod854HKHwdjvbN3d9Kui0jK/ba5eX +IL3S7RWU4hSDlY7T0gxdbI0zq1Kd6Wl -----END CERTIFICATE-----Generated at Thu May 2 23:48:45 2024 by rpki-client on console-fra.rpki-client.org