$ rpki-client -vvf rpki.apnic.net/member_repository/A911D8BA/48B40A8401D411EDA92EAA2DC4F9AE02/cxjac6CrPdCQ5rc_xN8NdRAYXPE.mft File: cxjac6CrPdCQ5rc_xN8NdRAYXPE.mft (raw, json) Hash identifier: uG3JgLfyatT+Hwvzvs00I55u/711oCIEhOCRru3tbcM= Subject key identifier: DA:49:F4:84:4B:F8:E9:2B:F3:D8:EF:EE:1A:17:C2:AB:E8:91:76:96 Authority key identifier: 73:18:DA:73:A0:AB:3D:D0:90:E6:B7:3F:C4:DF:0D:75:10:18:5C:F1 Certificate issuer: /CN=A911D8BA/serialNumber=7318DA73A0AB3DD090E6B73FC4DF0D7510185CF1 Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxjac6CrPdCQ5rc_xN8NdRAYXPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D8BA/48B40A8401D411EDA92EAA2DC4F9AE02/cxjac6CrPdCQ5rc_xN8NdRAYXPE.mft Manifest number: 01D4 Signing time: Sun 19 May 2024 04:19:51 +0000 Manifest this update: Sun 19 May 2024 04:19:51 +0000 Manifest next update: Sun 26 May 2024 04:19:51 +0000 Files and hashes: 1: cxjac6CrPdCQ5rc_xN8NdRAYXPE.crl (hash: xJ8+INsqTcPzjOo60k/b7QmqTebmH1Y4+t0JT7lx9cQ=) 2: 9F393A5801D611EDA3BFA62EC4F9AE02.roa (hash: OrBeQ7nQdK2tiYksQ5hHLLr4gJzqWAkLwYiHXPFHMac=) 3: 9E92DC7601D611EDA3BFA62EC4F9AE02.roa (hash: 4sJrY40XID6x70wPMbTytvzBnbXtyYy2Q8zs31+4ta8=) 4: 9FE7159201D611EDA3BFA62EC4F9AE02.roa (hash: VVdMpQJfWJzeEGllDWHOaKV26ooqf2lxHQS0gQIblUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D8BA/48B40A8401D411EDA92EAA2DC4F9AE02/cxjac6CrPdCQ5rc_xN8NdRAYXPE.crl rsync://rpki.apnic.net/member_repository/A911D8BA/48B40A8401D411EDA92EAA2DC4F9AE02/cxjac6CrPdCQ5rc_xN8NdRAYXPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxjac6CrPdCQ5rc_xN8NdRAYXPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D8BA/serialNumber=7318DA73A0AB3DD090E6B73FC4DF0D7510185CF1 Validity Not Before: May 19 04:19:51 2024 GMT Not After : May 26 04:19:51 2024 GMT Subject: CN=66497de7-3a9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ee:42:d4:fc:32:44:83:13:04:7e:ab:0f:9f: db:0d:6a:3a:d7:67:2b:1d:62:7e:dd:7a:73:57:22: fe:61:a8:31:3f:c7:90:9f:79:10:38:d5:34:7d:8b: fb:cb:d8:cd:e3:99:2e:4b:4f:ed:bd:b3:5e:02:04: c1:0b:52:ad:d1:dc:2c:e0:85:db:ce:21:17:df:c9: b1:00:d2:96:03:01:9b:05:95:7b:8e:95:9c:5e:86: e2:90:b8:0c:5d:e2:67:f6:37:81:10:3d:2b:3f:18: f8:b0:61:7a:2f:ad:d4:4a:cf:a0:0d:0a:0b:00:6a: 11:71:3f:1e:c7:15:75:e1:7e:28:14:cf:a5:b3:54: 3b:d7:de:0e:96:3c:7a:64:11:4b:43:4a:e5:2e:21: 22:b8:5b:ea:a1:0f:41:a3:d5:c0:6e:0c:4d:4b:db: b8:8f:02:b3:0d:3a:6d:91:ce:38:2a:98:ef:01:58: 66:03:dd:21:a9:3f:de:92:f2:36:c0:5f:6a:8e:d7: 4c:2d:ac:90:0c:13:79:37:6f:66:c8:7f:f4:f1:3e: 56:4e:28:7d:34:01:b1:c3:ce:08:94:61:49:8c:ed: 08:9f:68:52:49:5f:bf:41:98:c0:a4:60:74:d6:a9: a3:65:00:83:fd:b7:ba:e7:45:84:95:57:89:68:9a: b7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:49:F4:84:4B:F8:E9:2B:F3:D8:EF:EE:1A:17:C2:AB:E8:91:76:96 X509v3 Authority Key Identifier: keyid:73:18:DA:73:A0:AB:3D:D0:90:E6:B7:3F:C4:DF:0D:75:10:18:5C:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D8BA/48B40A8401D411EDA92EAA2DC4F9AE02/cxjac6CrPdCQ5rc_xN8NdRAYXPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxjac6CrPdCQ5rc_xN8NdRAYXPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D8BA/48B40A8401D411EDA92EAA2DC4F9AE02/cxjac6CrPdCQ5rc_xN8NdRAYXPE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:be:26:23:c5:1e:87:66:d7:7f:b0:7a:59:4f:9e:dc:14:50: 1f:e3:b4:6a:8a:d2:16:e2:85:1c:eb:ad:c5:c9:5b:97:01:9d: db:f7:41:8d:1a:e4:4e:b5:76:69:7c:a2:ae:55:77:6a:24:b6: ee:13:a6:78:ed:23:1a:a4:57:38:cd:f7:65:31:89:18:4c:c4: f1:ba:d9:0c:c9:fc:e0:6d:c5:ad:2e:fa:74:ec:73:12:4c:be: 03:e0:bb:c9:17:4e:c2:3a:0e:29:33:a9:93:2f:85:a2:df:3b: d5:86:6c:f2:d6:1f:5b:c3:81:2f:a5:e1:25:61:c3:60:41:53: 77:c9:a7:88:91:82:21:4e:ac:3b:cb:a2:3a:9a:96:99:b7:06: b1:53:4f:72:93:33:e4:4b:91:8e:6f:f3:23:19:ac:b8:ed:8c: 97:57:12:72:c0:b8:22:86:c7:0b:1d:29:cd:a4:1f:a2:19:f7: d0:5e:fc:52:94:69:0d:85:c5:03:21:1a:1e:d4:50:45:0d:74: 5f:e5:4e:1a:51:7b:23:2c:09:4e:a3:b4:e0:59:0c:e4:8b:e6: 3b:70:5d:55:20:47:6e:21:6e:ce:b8:18:aa:04:92:f1:ea:35: b0:cd:96:07:78:e4:fc:94:88:1f:96:36:26:9b:1e:1e:12:9e: 93:01:3b:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ4QkExMTAvBgNVBAUTKDczMThEQTczQTBBQjNERDA5MEU2QjczRkM0REYwRDc1 MTAxODVDRjEwHhcNMjQwNTE5MDQxOTUxWhcNMjQwNTI2MDQxOTUxWjAYMRYwFAYD VQQDEw02NjQ5N2RlNy0zYTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+5C1PwyRIMTBH6rD5/bDWo612crHWJ+3XpzVyL+YagxP8eQn3kQONU0fYv7 y9jN45kuS0/tvbNeAgTBC1Kt0dws4IXbziEX38mxANKWAwGbBZV7jpWcXobikLgM XeJn9jeBED0rPxj4sGF6L63USs+gDQoLAGoRcT8exxV14X4oFM+ls1Q7194Oljx6 ZBFLQ0rlLiEiuFvqoQ9Bo9XAbgxNS9u4jwKzDTptkc44KpjvAVhmA90hqT/ekvI2 wF9qjtdMLayQDBN5N29myH/08T5WTih9NAGxw84IlGFJjO0In2hSSV+/QZjApGB0 1qmjZQCD/be650WElVeJaJq3FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpJ9IRL +Okr89jv7hoXwqvokXaWMB8GA1UdIwQYMBaAFHMY2nOgqz3QkOa3P8TfDXUQGFzx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDhCQS80OEI0MEE4NDAx RDQxMUVEQTkyRUFBMkRDNEY5QUUwMi9jeGphYzZDclBkQ1E1cmNfeE44TmRSQVlY UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4amFjNkNyUGRDUTVyY194TjhOZFJBWVhQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDhCQS80OEI0MEE4NDAxRDQxMUVEQTkyRUFBMkRDNEY5QUUwMi9jeGphYzZDclBk Q1E1cmNfeE44TmRSQVlYUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDviYjxR6HZtd/sHpZT57cFFAf47RqitIW4oUc663FyVuXAZ3b90GN GuROtXZpfKKuVXdqJLbuE6Z47SMapFc4zfdlMYkYTMTxutkMyfzgbcWtLvp07HMS TL4D4LvJF07COg4pM6mTL4Wi3zvVhmzy1h9bw4EvpeElYcNgQVN3yaeIkYIhTqw7 y6I6mpaZtwaxU09ykzPkS5GOb/MjGay47YyXVxJywLgihscLHSnNpB+iGffQXvxS lGkNhcUDIRoe1FBFDXRf5U4aUXsjLAlOo7TgWQzki+Y7cF1VIEduIW7OuBiqBJLx 6jWwzZYHeOT8lIgfljYmmx4eEp6TATuC -----END CERTIFICATE-----Generated at Sun May 19 04:56:54 2024 by rpki-client on console-fra.rpki-client.org