$ rpki-client -vvf rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft File: cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft (raw, json) Hash identifier: HL57/xPNMerskuvLMkVEzT/FxjQm31d564XJkQrzIk0= Subject key identifier: 51:0E:D2:EB:B2:6A:9D:20:6C:CA:27:EC:1F:CF:10:86:1D:06:88:0C Authority key identifier: 72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF Certificate issuer: /CN=A911923C/serialNumber=7268743E5C50DD9F54D2A695C5A0EBF540CF9BAF Certificate serial: 025D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft Manifest number: 0258 Signing time: Fri 31 May 2024 04:31:47 +0000 Manifest this update: Fri 31 May 2024 04:31:46 +0000 Manifest next update: Fri 07 Jun 2024 04:31:46 +0000 Files and hashes: 1: cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl (hash: E4V+zAxV8moHbV+aUzS4xVApbmUmJjMGfj98K8pMg+I=) 2: 4AC993D8D34A11EC8796812AC4F9AE02.roa (hash: 9fQigC3wlL74leAFIK8l0szB2VeeXSwlgNExBhvCRPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 04:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 605 (0x25d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911923C/serialNumber=7268743E5C50DD9F54D2A695C5A0EBF540CF9BAF Validity Not Before: May 31 04:31:46 2024 GMT Not After : Jun 7 04:31:46 2024 GMT Subject: CN=665952b3-d03c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:f6:73:2d:45:7f:ff:e7:70:ed:02:70:8f:9e: 15:b0:26:ad:59:29:61:25:d1:bb:1f:dc:d3:18:90: fa:b5:a5:ba:9f:2b:00:5a:57:34:d3:e3:29:c1:c1: b0:fb:56:8a:db:be:cf:eb:e7:6d:af:f2:b1:d9:e7: 9a:b6:16:56:31:84:9c:1b:ee:67:dd:1f:0a:2f:3c: 59:07:49:89:1d:4c:8f:0b:03:b2:94:56:57:28:2a: 0d:71:89:d0:d7:3e:ea:17:e1:66:ca:05:a6:01:f2: 2c:07:40:a5:d0:90:c7:f6:bb:48:9a:0b:94:25:4a: 97:79:22:3f:aa:23:ec:62:e1:37:40:0b:b5:15:bb: a5:5e:4f:5d:f5:49:ac:a9:09:1e:55:07:1e:3c:1c: 34:a1:20:dc:ab:e4:a1:4d:be:cf:89:47:e6:d8:a5: 30:f0:01:d1:c2:8e:73:ec:f4:d0:1d:6f:17:d0:8a: 16:d0:b4:8f:6f:af:13:b6:a0:57:58:b1:22:25:89: 85:22:8c:62:3b:05:08:62:0f:c0:d2:73:db:0c:12: 0c:4b:2b:fa:63:b1:8d:32:3f:a6:bc:17:96:1b:de: 3b:5c:80:2e:85:e2:2c:8d:b2:59:53:94:cd:de:3f: e9:c3:bf:06:d2:d2:e4:2d:59:36:66:6e:b9:04:81: 36:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0E:D2:EB:B2:6A:9D:20:6C:CA:27:EC:1F:CF:10:86:1D:06:88:0C X509v3 Authority Key Identifier: keyid:72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:d2:80:26:70:a6:05:ea:9b:77:53:3c:e2:f8:cd:c0:17:ae: 13:16:e2:28:dd:2c:d1:1d:c4:db:75:f3:5e:60:c6:5b:3f:17: 21:85:a5:e9:18:e9:55:fa:f9:d8:d8:fd:54:b9:08:f6:cd:dd: e2:a0:16:5e:08:7f:ca:34:e4:cc:3f:df:ba:6a:83:bf:90:16: 9b:5a:c7:d6:a3:47:a3:19:22:28:68:3a:81:fe:72:5f:29:b9: 70:2f:bb:6b:24:46:02:b5:5e:5a:1d:42:47:00:18:56:4d:cd: 6e:f1:84:1f:40:6d:9e:33:5a:3b:1c:8a:f0:a2:74:23:e7:32: 23:20:a2:e6:96:0f:ac:86:d1:9b:68:97:59:52:35:ae:c2:da: 10:9e:b6:46:84:8b:16:c7:c8:db:72:5f:01:9c:9b:d6:67:5b: d1:6b:5f:2f:db:6f:d7:40:d1:0a:33:2a:36:5c:5a:91:05:c4: 55:06:9e:03:81:b2:e5:15:6a:4f:69:d0:1c:e0:75:ce:f3:73: 0d:94:06:39:1d:2a:49:ab:19:02:f2:62:fe:fb:af:f0:d4:4a: 7d:5b:fd:c2:04:00:a7:0a:7b:7c:3b:c1:dc:b5:84:d3:91:ce: 28:d0:cc:06:46:4e:c1:89:98:24:57:fc:76:73:b8:21:2d:e6: 6f:e7:6c:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkyM0MxMTAvBgNVBAUTKDcyNjg3NDNFNUM1MEREOUY1NEQyQTY5NUM1QTBFQkY1 NDBDRjlCQUYwHhcNMjQwNTMxMDQzMTQ2WhcNMjQwNjA3MDQzMTQ2WjAYMRYwFAYD VQQDEw02NjU5NTJiMy1kMDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8/ZzLUV//+dw7QJwj54VsCatWSlhJdG7H9zTGJD6taW6nysAWlc00+MpwcGw +1aK277P6+dtr/Kx2eeathZWMYScG+5n3R8KLzxZB0mJHUyPCwOylFZXKCoNcYnQ 1z7qF+FmygWmAfIsB0Cl0JDH9rtImguUJUqXeSI/qiPsYuE3QAu1FbulXk9d9Ums qQkeVQcePBw0oSDcq+ShTb7PiUfm2KUw8AHRwo5z7PTQHW8X0IoW0LSPb68TtqBX WLEiJYmFIoxiOwUIYg/A0nPbDBIMSyv6Y7GNMj+mvBeWG947XIAuheIsjbJZU5TN 3j/pw78G0tLkLVk2Zm65BIE2XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEO0uuy ap0gbMon7B/PEIYdBogMMB8GA1UdIwQYMBaAFHJodD5cUN2fVNKmlcWg6/VAz5uv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTIzQy9EQTBDOTcyOEQz NDcxMUVDOThGQTI2MjlDNEY5QUUwMi9jbWgwUGx4UTNaOVUwcWFWeGFEcjlVRFBt NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NtaDBQbHhRM1o5VTBxYVZ4YURyOVVEUG02OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTIzQy9EQTBDOTcyOEQzNDcxMUVDOThGQTI2MjlDNEY5QUUwMi9jbWgwUGx4UTNa OVUwcWFWeGFEcjlVRFBtNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU0oAmcKYF6pt3Uzzi+M3AF64TFuIo3SzRHcTbdfNeYMZbPxchhaXp GOlV+vnY2P1UuQj2zd3ioBZeCH/KNOTMP9+6aoO/kBabWsfWo0ejGSIoaDqB/nJf KblwL7trJEYCtV5aHUJHABhWTc1u8YQfQG2eM1o7HIrwonQj5zIjIKLmlg+shtGb aJdZUjWuwtoQnrZGhIsWx8jbcl8BnJvWZ1vRa18v22/XQNEKMyo2XFqRBcRVBp4D gbLlFWpPadAc4HXO83MNlAY5HSpJqxkC8mL++6/w1Ep9W/3CBACnCnt8O8HctYTT kc4o0MwGRk7BiZgkV/x2c7ghLeZv52w3 -----END CERTIFICATE-----Generated at Fri May 31 05:53:49 2024 by rpki-client on console-fra.rpki-client.org