$ rpki-client -vvf rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft File: CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft (raw, json) Hash identifier: g1Y5OyiudDxmYrkmU8TJGKgAS2stPZWFvy/xKkd7kYg= Subject key identifier: 1C:B5:1F:A2:D5:06:49:2F:D5:AF:6D:00:1C:1A:62:D2:39:92:1F:A0 Authority key identifier: 09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30 Certificate issuer: /CN=A912559E/serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft Manifest number: 4C Signing time: Sun 19 May 2024 07:59:45 +0000 Manifest this update: Sun 19 May 2024 07:59:45 +0000 Manifest next update: Sun 26 May 2024 07:59:44 +0000 Files and hashes: 1: CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl (hash: vSQCgbqHfVvljqkZwtQ+oG4jfwqG9P78S+yQ+8QxKbQ=) 2: E3485FDECBC511EE8716C92EC4F9AE02.roa (hash: P7p5mgn6kBZjLG5t0HDXhk9LE8raxDE4BqNJkxmApEg=) 3: E4236570CBC511EE8716C92EC4F9AE02.roa (hash: A6lKZcvIz+r1CptHeLmXJsOAs02Me8cj9pxIEDLAhPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912559E/serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30 Validity Not Before: May 19 07:59:45 2024 GMT Not After : May 26 07:59:44 2024 GMT Subject: CN=6649b171-f43e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:49:98:1c:36:21:56:0b:33:0c:fd:47:8d:80: 2b:1e:8d:e4:25:ee:37:63:be:e4:ee:03:df:b2:22: 83:b9:30:d2:94:36:9f:2c:27:59:31:fa:ce:fb:b5: ac:7b:dd:10:72:7f:e9:b7:e9:94:bf:d7:2f:be:9e: 94:b6:4e:42:f2:6a:6c:95:ce:8b:65:c6:fc:0d:e6: ce:52:eb:e2:65:a0:25:11:d4:32:28:18:7e:29:83: c1:f1:78:ac:8c:fe:43:57:76:1f:29:61:8d:18:93: 78:7b:eb:d2:c3:fa:e6:f3:92:b8:11:17:7f:ee:3b: 64:c1:6a:b9:87:32:ae:01:44:ef:aa:41:4e:98:fb: 99:9b:3f:1a:60:85:16:5e:ab:b3:8b:82:98:59:8b: ca:05:77:64:58:d2:da:23:9f:09:a8:ae:25:e5:40: 4c:77:68:a9:5f:ae:45:89:3e:c0:93:64:63:b0:dd: 9b:b5:49:56:5b:5e:e0:8b:f9:94:d4:82:ff:89:65: 15:69:8d:21:18:8b:00:1d:45:62:ce:c4:44:e9:f7: ab:5d:34:74:4a:82:cc:cd:3c:8c:bc:8e:1d:e3:c9: 8f:39:68:8c:33:b3:60:aa:88:26:bc:c8:79:45:ec: 8a:34:f4:97:7d:45:ca:be:06:e2:74:e5:55:b4:90: cf:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B5:1F:A2:D5:06:49:2F:D5:AF:6D:00:1C:1A:62:D2:39:92:1F:A0 X509v3 Authority Key Identifier: keyid:09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:fb:16:39:64:21:24:db:4b:72:9b:c9:92:b8:93:7a:65:b9: 6a:02:20:b3:ad:18:47:b1:e2:eb:f1:de:4f:bc:23:72:6a:5a: 39:a7:dc:2f:7e:4b:bf:e0:f1:2f:50:88:45:0c:b6:66:68:c3: 32:c7:d6:b2:fa:40:b3:93:d0:ca:21:e5:f8:76:79:0a:be:eb: e4:db:e0:be:9f:96:cd:3f:77:ae:e3:6e:20:82:d6:f4:75:13: 68:5b:90:42:34:d3:02:47:a1:ec:0a:8b:7f:f9:e0:52:59:1f: 45:1f:df:12:a8:12:13:0a:e3:75:a3:79:4e:4b:34:84:49:53: 5f:54:82:3c:c2:c5:7d:1b:49:a7:41:f4:66:51:13:96:7c:7c: ac:1d:33:86:0a:8d:ed:d6:a2:2d:af:a9:e3:40:c0:80:a3:26: 7e:09:f2:b8:14:54:fe:ba:9d:80:e2:c2:e6:68:bb:b6:e5:19: a6:08:46:50:d5:16:0e:87:0f:36:9e:ed:91:5f:0f:41:47:86: a0:54:61:8c:ef:37:ea:96:21:62:17:67:99:d9:0d:52:8f:0c: 2b:97:71:79:80:d0:5a:9b:e1:07:ef:4d:63:8b:e9:c2:27:b7: ed:a2:b4:ef:2e:ba:5b:3f:d9:de:a2:f7:76:e0:cc:be:d8:8f: 2f:42:0a:91 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTU5RTExMC8GA1UEBRMoMDk0MDdGNzBGOTc3MTYwMEY0RkJBQTc1QzBGRTk2OTBE OEM2NUEzMDAeFw0yNDA1MTkwNzU5NDVaFw0yNDA1MjYwNzU5NDRaMBgxFjAUBgNV BAMTDTY2NDliMTcxLWY0M2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvSZgcNiFWCzMM/UeNgCsejeQl7jdjvuTuA9+yIoO5MNKUNp8sJ1kx+s77tax7 3RByf+m36ZS/1y++npS2TkLyamyVzotlxvwN5s5S6+JloCUR1DIoGH4pg8HxeKyM /kNXdh8pYY0Yk3h769LD+ubzkrgRF3/uO2TBarmHMq4BRO+qQU6Y+5mbPxpghRZe q7OLgphZi8oFd2RY0tojnwmoriXlQEx3aKlfrkWJPsCTZGOw3Zu1SVZbXuCL+ZTU gv+JZRVpjSEYiwAdRWLOxETp96tdNHRKgszNPIy8jh3jyY85aIwzs2CqiCa8yHlF 7Io09Jd9Rcq+BuJ05VW0kM/vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHLUfotUG SS/Vr20AHBpi0jmSH6AwHwYDVR0jBBgwFoAUCUB/cPl3FgD0+6p1wP6WkNjGWjAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1NTlFLzM1MEFGRUJFQTQ3 MzExRUVCREZCQjc1OUM0RjlBRTAyL0NVQl9jUGwzRmdEMC02cDF3UDZXa05qR1dq QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1VCX2NQbDNGZ0QwLTZwMXdQNldrTmpHV2pBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 NTlFLzM1MEFGRUJFQTQ3MzExRUVCREZCQjc1OUM0RjlBRTAyL0NVQl9jUGwzRmdE MC02cDF3UDZXa05qR1dqQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHr7FjlkISTbS3KbyZK4k3pluWoCILOtGEex4uvx3k+8I3JqWjmn3C9+ S7/g8S9QiEUMtmZowzLH1rL6QLOT0Moh5fh2eQq+6+Tb4L6fls0/d67jbiCC1vR1 E2hbkEI00wJHoewKi3/54FJZH0Uf3xKoEhMK43WjeU5LNIRJU19UgjzCxX0bSadB 9GZRE5Z8fKwdM4YKje3Woi2vqeNAwICjJn4J8rgUVP66nYDiwuZou7blGaYIRlDV Fg6HDzae7ZFfD0FHhqBUYYzvN+qWIWIXZ5nZDVKPDCuXcXmA0Fqb4QfvTWOL6cIn t+2itO8uuls/2d6i93bgzL7Yjy9CCpE= -----END CERTIFICATE-----Generated at Sun May 19 08:26:42 2024 by rpki-client on console-fra.rpki-client.org