$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft File: CViGFDhyEOi2mtPDGnNhnXVe0MA.mft (raw, json) Hash identifier: hlvA2YLLiCoOQeVCG+JO9JihypaKC4O8rLy1pzUkzw0= Subject key identifier: 76:23:8E:8E:75:41:26:5D:1F:38:20:09:D2:D9:A1:C7:29:0B:E2:D3 Authority key identifier: 09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0 Certificate issuer: /CN=A914CB22/serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft Manifest number: 5B Signing time: Sun 19 May 2024 07:46:00 +0000 Manifest this update: Sun 19 May 2024 07:45:59 +0000 Manifest next update: Sun 26 May 2024 07:45:59 +0000 Files and hashes: 1: CViGFDhyEOi2mtPDGnNhnXVe0MA.crl (hash: obNCyWPVFjd5nJoY5zczgtXXYWHnAHsM4io7cUJA1Vs=) 2: 2F996DC6C77311EEBD6F2D2BC4F9AE02.roa (hash: 8p5oyeJWoCkbAhlsrDLfWLW3ixfy6hkbFthdXEroMts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CB22/serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0 Validity Not Before: May 19 07:45:59 2024 GMT Not After : May 26 07:45:59 2024 GMT Subject: CN=6649ae38-ae42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:78:d9:f8:89:e4:0d:40:0c:7c:fc:1c:ea:56: 90:9d:c1:d4:74:31:d1:3a:be:21:92:cb:3e:5e:35: 59:d8:74:af:9f:13:c5:41:a6:6a:a7:fa:3b:cb:8a: 64:cb:ae:2c:6a:fb:f7:94:23:08:9f:97:fa:a2:6c: 74:19:af:40:43:98:40:65:39:b4:2c:7b:1a:6c:48: ec:bb:f7:ff:f7:24:9f:23:44:8b:65:db:63:ab:55: ff:0c:b2:49:40:06:49:ec:aa:56:94:a3:01:aa:dd: 5d:aa:65:cb:ce:a3:a5:17:0b:f9:e9:3b:ae:09:fd: da:12:50:d0:63:50:f4:99:8c:c8:61:30:3b:c9:15: f9:9f:51:30:37:bb:1f:73:d1:86:bf:2d:1b:99:a9: 2f:5c:9e:0c:eb:13:61:e6:05:d2:d7:77:30:7f:60: 2a:27:52:65:5d:77:84:ce:61:13:73:c8:e4:93:da: c5:e2:8a:b3:f5:e1:29:5e:63:81:57:52:19:e6:73: 18:6c:69:9a:af:1c:61:3b:b5:c8:07:38:b9:42:00: 27:84:52:36:14:e6:a3:37:2f:12:c9:1a:fe:fe:1e: 40:02:e5:e4:d9:e7:a2:4c:a2:0c:68:c1:66:b4:04: 87:64:50:3c:a8:5f:06:5b:24:eb:20:f7:08:ef:6b: 1e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:23:8E:8E:75:41:26:5D:1F:38:20:09:D2:D9:A1:C7:29:0B:E2:D3 X509v3 Authority Key Identifier: keyid:09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:61:a9:98:d6:b8:69:67:b9:38:8b:8c:4f:13:0c:bb:e2:30: f0:e7:d4:59:ec:76:e1:fb:16:d3:7c:3e:c4:39:18:37:4c:9e: 44:27:6d:bc:e3:1c:a0:d5:43:21:37:48:fd:a9:58:73:e7:bd: 51:6a:ce:b7:08:bd:c6:07:28:88:1b:59:87:db:70:71:6f:55: 5c:ae:fe:6e:81:94:e6:32:b7:a2:d9:60:3f:72:ee:ba:a2:40: 9f:4b:9c:5b:9a:5b:0f:b2:e5:ff:bf:0a:0f:ea:cc:a0:85:84: 30:73:c9:f0:8c:9d:5e:35:e6:ec:07:5f:8c:f9:64:e2:43:31: bf:16:c8:a5:96:11:7e:ed:70:37:d2:40:98:a1:5d:c2:eb:4f: 12:26:84:2d:d4:49:7c:7c:e0:3c:09:7c:d1:64:e8:81:41:ea: 1d:80:bc:cc:6c:12:0c:04:57:28:ad:48:57:39:7c:97:b4:5e: 76:a0:f1:69:8d:cb:bf:48:99:82:02:71:60:7f:c1:66:b9:1e: c1:76:8c:ae:05:20:f5:63:f6:44:08:3c:f2:1d:58:09:94:60: c2:e9:01:e0:3a:74:81:42:ac:91:6e:ad:ff:b4:56:8b:c2:0b: 47:33:5d:8c:3e:a0:20:b6:a0:fb:8f:ff:95:4e:9a:78:0b:db: 36:73:d1:d3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Q0IyMjExMC8GA1UEBRMoMDk1ODg2MTQzODcyMTBFOEI2OUFEM0MzMUE3MzYxOUQ3 NTVFRDBDMDAeFw0yNDA1MTkwNzQ1NTlaFw0yNDA1MjYwNzQ1NTlaMBgxFjAUBgNV BAMTDTY2NDlhZTM4LWFlNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTeNn4ieQNQAx8/BzqVpCdwdR0MdE6viGSyz5eNVnYdK+fE8VBpmqn+jvLimTL rixq+/eUIwifl/qibHQZr0BDmEBlObQsexpsSOy79//3JJ8jRItl22OrVf8MsklA BknsqlaUowGq3V2qZcvOo6UXC/npO64J/doSUNBjUPSZjMhhMDvJFfmfUTA3ux9z 0Ya/LRuZqS9cngzrE2HmBdLXdzB/YConUmVdd4TOYRNzyOST2sXiirP14SleY4FX UhnmcxhsaZqvHGE7tcgHOLlCACeEUjYU5qM3LxLJGv7+HkAC5eTZ56JMogxowWa0 BIdkUDyoXwZbJOsg9wjvax79AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdiOOjnVB Jl0fOCAJ0tmhxykL4tMwHwYDVR0jBBgwFoAUCViGFDhyEOi2mtPDGnNhnXVe0MAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDQjIyLzY2MDJFOTc4OENE MTExRUVCNjFGQzYzOEM0RjlBRTAyL0NWaUdGRGh5RU9pMm10UERHbk5oblhWZTBN QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1ZpR0ZEaHlFT2kybXRQREduTmhuWFZlME1BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRD QjIyLzY2MDJFOTc4OENEMTExRUVCNjFGQzYzOEM0RjlBRTAyL0NWaUdGRGh5RU9p Mm10UERHbk5oblhWZTBNQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKJhqZjWuGlnuTiLjE8TDLviMPDn1FnsduH7FtN8PsQ5GDdMnkQnbbzj HKDVQyE3SP2pWHPnvVFqzrcIvcYHKIgbWYfbcHFvVVyu/m6BlOYyt6LZYD9y7rqi QJ9LnFuaWw+y5f+/Cg/qzKCFhDBzyfCMnV415uwHX4z5ZOJDMb8WyKWWEX7tcDfS QJihXcLrTxImhC3USXx84DwJfNFk6IFB6h2AvMxsEgwEVyitSFc5fJe0Xnag8WmN y79ImYICcWB/wWa5HsF2jK4FIPVj9kQIPPIdWAmUYMLpAeA6dIFCrJFurf+0VovC C0czXYw+oCC2oPuP/5VOmngL2zZz0dM= -----END CERTIFICATE-----Generated at Sun May 19 08:26:43 2024 by rpki-client on console-fra.rpki-client.org