$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft File: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft (raw, json) Hash identifier: hnZdcUpPX0JZ6ZBu9hSe2kgPelJ8vYeYkqgQe0j1/Fs= Subject key identifier: 68:CF:A4:D2:81:50:43:27:09:30:67:35:BE:B4:21:98:30:37:88:3F Authority key identifier: 5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62 Certificate issuer: /CN=A91F8119/serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62 Certificate serial: 24DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft Manifest number: 24C5 Signing time: Thu 02 May 2024 16:05:50 +0000 Manifest this update: Thu 02 May 2024 16:05:50 +0000 Manifest next update: Thu 09 May 2024 16:05:50 +0000 Files and hashes: 1: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl (hash: XkYL+2b94F65Oat2cH8vAGQCzbDOI3msvy/4yzieEBY=) 2: 171130AE15F011EC805A0A2FC4F9AE02.roa (hash: Ori7x6Ug24EnMmdTF/X3c+lFPZWVZ49paG7mM2LK2nE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:05:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9437 (0x24dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8119/serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62 Validity Not Before: May 2 16:05:50 2024 GMT Not After : May 9 16:05:50 2024 GMT Subject: CN=6633b9de-675f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:08:cb:0a:2d:e4:c1:fc:eb:07:47:16:f2:a8: 79:ea:8a:33:2d:9d:4d:07:32:dd:1b:6e:f0:89:0d: 56:24:a2:dd:21:91:42:d3:cf:ef:65:7e:a9:4a:a5: fd:8b:50:8f:04:c2:dd:b8:88:69:ab:fc:c9:16:ad: cb:7e:a9:72:09:36:b4:23:d8:28:97:4b:6d:db:e2: cc:82:21:91:f3:5e:0a:a8:2f:72:f0:5e:49:97:c1: c9:d7:74:82:7a:28:67:4c:a0:0b:d6:67:3e:b4:54: 06:55:71:49:81:c4:8c:3e:21:a3:b6:4b:42:31:a9: b5:25:a0:e6:dd:ef:81:77:b7:0a:b8:dd:8b:f1:5e: ec:8b:ed:4a:6d:6e:1b:74:c1:d0:65:55:bb:bd:52: 55:da:73:9b:08:4b:41:be:e5:df:eb:cd:b1:2b:82: f4:24:4f:1d:64:48:85:9a:91:a6:5a:fd:78:f3:f7: 60:5e:c6:f3:70:70:1a:98:52:0e:4d:9c:53:7d:13: 40:a7:d0:37:86:8b:aa:a1:c7:7b:b1:bd:0e:35:20: 3e:94:a9:36:77:5c:94:54:c0:11:f3:d2:71:6a:81: 0e:e4:03:b7:e7:d0:fd:1b:ec:10:a2:6c:39:b7:e9: 03:1d:ab:72:1a:7a:ec:0f:af:2e:1b:66:55:a9:e6: 87:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CF:A4:D2:81:50:43:27:09:30:67:35:BE:B4:21:98:30:37:88:3F X509v3 Authority Key Identifier: keyid:5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:6d:3a:39:7e:5c:65:73:59:7a:24:d7:9b:d5:ae:df:cf:d0: 17:28:76:d6:ae:79:35:3a:69:a4:02:22:5f:74:db:c9:38:ab: 82:53:50:9f:bc:4f:df:65:24:c6:f6:b4:d8:3b:b6:1d:be:6e: 7a:55:84:d0:8c:b1:d9:e6:e2:a5:7b:f6:4e:04:fa:27:9c:b0: c2:6d:08:f5:f6:a6:c4:45:87:7b:8b:d4:04:4e:35:a1:79:b7: 87:5a:f5:60:2a:6c:dc:f9:68:95:04:3d:70:18:89:1e:c7:dc: e4:fa:04:dc:aa:c6:c3:53:3c:03:84:1f:25:e1:eb:e0:df:c2: 42:e4:d2:8b:80:a0:40:57:60:32:42:5f:a7:01:86:50:d6:b7: 6e:ca:c0:71:81:a3:b7:f5:0c:73:7c:68:3a:b3:e8:c7:28:84: b8:4c:f3:07:dd:ad:87:d3:35:0d:42:5d:6d:19:7e:11:55:93: 71:50:63:92:6b:89:17:7c:0e:91:5e:e1:7c:67:82:7a:f1:d5: 1a:2b:8f:29:50:88:e5:8b:f2:c9:ed:7b:19:94:40:31:f1:c1: 74:b6:a0:f7:95:43:2e:ef:e9:96:3b:f6:c1:a4:20:b0:0f:99: 26:dc:8d:93:48:55:ea:1d:af:82:03:ed:02:23:40:41:ce:76: db:28:56:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxMTkxMTAvBgNVBAUTKDVGMzhGNDE5NTE2MTYyQkQ4ODZFNDBCREE5MjdGNTVE QzZGRjNFNjIwHhcNMjQwNTAyMTYwNTUwWhcNMjQwNTA5MTYwNTUwWjAYMRYwFAYD VQQDEw02NjMzYjlkZS02NzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7AjLCi3kwfzrB0cW8qh56oozLZ1NBzLdG27wiQ1WJKLdIZFC08/vZX6pSqX9 i1CPBMLduIhpq/zJFq3LfqlyCTa0I9gol0tt2+LMgiGR814KqC9y8F5Jl8HJ13SC eihnTKAL1mc+tFQGVXFJgcSMPiGjtktCMam1JaDm3e+Bd7cKuN2L8V7si+1KbW4b dMHQZVW7vVJV2nObCEtBvuXf682xK4L0JE8dZEiFmpGmWv148/dgXsbzcHAamFIO TZxTfRNAp9A3houqocd7sb0ONSA+lKk2d1yUVMAR89JxaoEO5AO359D9G+wQomw5 t+kDHatyGnrsD68uG2ZVqeaHUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjPpNKB UEMnCTBnNb60IZgwN4g/MB8GA1UdIwQYMBaAFF849BlRYWK9iG5Avakn9V3G/z5i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODExOS9BN0VDNTk2QzEz MzMxMUU1QjgzRDBGN0JDNEY5QUUwMi9YemowR1ZGaFlyMklia0M5cVNmMVhjYl9Q bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h6ajBHVkZoWXIySWJrQzlxU2YxWGNiX1BtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODExOS9BN0VDNTk2QzEzMzMxMUU1QjgzRDBGN0JDNEY5QUUwMi9YemowR1ZGaFly Mklia0M5cVNmMVhjYl9QbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCabTo5flxlc1l6JNeb1a7fz9AXKHbWrnk1OmmkAiJfdNvJOKuCU1Cf vE/fZSTG9rTYO7Ydvm56VYTQjLHZ5uKle/ZOBPonnLDCbQj19qbERYd7i9QETjWh ebeHWvVgKmzc+WiVBD1wGIkex9zk+gTcqsbDUzwDhB8l4evg38JC5NKLgKBAV2Ay Ql+nAYZQ1rduysBxgaO39QxzfGg6s+jHKIS4TPMH3a2H0zUNQl1tGX4RVZNxUGOS a4kXfA6RXuF8Z4J68dUaK48pUIjli/LJ7XsZlEAx8cF0tqD3lUMu7+mWO/bBpCCw D5km3I2TSFXqHa+CA+0CI0BBznbbKFZm -----END CERTIFICATE-----Generated at Thu May 2 17:18:59 2024 by rpki-client on console-ams.rpki-client.org