$ rpki-client -vvf rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft File: ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft (raw, json) Hash identifier: fZ6/NJL0HAJ08wTzAJW0v4l6ysh8OE+gp3eWglsr2zw= Subject key identifier: 3C:96:48:D7:5D:1F:F3:47:A4:0B:EE:8D:B3:73:99:5A:23:AD:7C:2D Authority key identifier: 72:21:78:D5:91:D9:85:96:89:E4:B9:2F:2D:0C:87:FA:47:E3:5E:0A Certificate issuer: /CN=A915D010/serialNumber=722178D591D9859689E4B92F2D0C87FA47E35E0A Certificate serial: 0CDD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft Manifest number: 0CD7 Signing time: Sat 18 May 2024 18:46:42 +0000 Manifest this update: Sat 18 May 2024 18:46:41 +0000 Manifest next update: Sat 25 May 2024 18:46:41 +0000 Files and hashes: 1: ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl (hash: 63PnkwVvDp7IJcOwY7wUaScKDubCvA2PWBkJCUP4SaA=) 2: FCFEAA74DB9111E9B70EDD2EC4F9AE02.roa (hash: aXe20RRl6XwAwg/IjyCn/m+o6VBWy+OXN2e0lyF4doc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3293 (0xcdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D010/serialNumber=722178D591D9859689E4B92F2D0C87FA47E35E0A Validity Not Before: May 18 18:46:41 2024 GMT Not After : May 25 18:46:41 2024 GMT Subject: CN=6648f791-fafc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:aa:5e:57:1a:67:97:4d:10:be:46:d9:ac:c0: ef:ab:34:be:3e:77:b7:66:06:b6:21:ca:12:9e:49: 4b:04:24:fc:83:d2:03:40:4e:82:9d:d7:93:c3:fc: 4f:2f:97:aa:1f:37:c8:76:9b:0a:40:49:e8:ec:15: 7d:77:3c:dd:93:5f:f9:db:cf:c6:29:c8:ce:17:06: c6:8d:25:ec:72:cc:a9:4f:9f:ac:c1:96:ab:bc:1d: 18:63:bf:85:7b:b9:5a:cf:90:89:6e:43:cd:bd:81: 79:41:fa:2d:e5:8f:89:37:2e:fd:0b:2d:8d:95:8c: dc:1a:51:06:b3:59:da:f0:69:27:1f:55:44:11:f1: 92:bd:f3:b5:fe:ed:cf:e3:73:d0:1f:29:d6:f1:ba: 36:63:47:c9:df:25:89:fc:50:ff:69:f4:ea:54:14: 58:d3:74:ff:3a:15:d1:42:25:a9:df:17:03:14:1f: 84:0d:b8:b9:89:34:bd:51:c2:80:af:b0:9d:7b:db: 74:61:72:aa:5a:75:05:be:04:1b:25:79:05:d7:50: 34:3d:3b:a2:71:39:f7:3c:db:73:ba:a0:ae:81:a5: f6:de:ba:1a:0d:2c:15:f5:43:3a:71:f8:91:9e:32: 9e:63:e4:78:22:cb:46:ce:e0:2f:b8:48:ab:13:c8: c6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:96:48:D7:5D:1F:F3:47:A4:0B:EE:8D:B3:73:99:5A:23:AD:7C:2D X509v3 Authority Key Identifier: keyid:72:21:78:D5:91:D9:85:96:89:E4:B9:2F:2D:0C:87:FA:47:E3:5E:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:f4:ae:05:97:a0:6b:7f:f9:ce:7c:ab:30:7b:2f:43:2c:df: 1c:5f:83:56:af:ec:3c:68:1f:7f:0d:62:55:b0:bc:83:ea:2b: fb:25:28:55:25:92:b9:34:bb:57:56:1d:86:ca:b5:95:a2:75: f1:5a:8d:6a:bb:31:ba:7b:fe:42:b0:06:9b:41:46:be:6b:41: 61:3c:22:a5:92:07:f2:92:2d:8a:8a:fb:b1:83:08:ae:11:b5: 30:41:b9:be:1c:7f:a1:64:ae:e2:84:a1:c4:07:0a:26:00:c0: 7a:03:33:04:69:d3:6e:6a:9e:c9:e7:39:c5:40:9c:e4:ba:8b: 48:9b:34:8d:e1:59:ad:8e:de:08:5d:2d:07:19:a0:29:05:9e: 32:ef:8b:e6:5d:8e:d7:d0:13:e3:f8:14:e2:b5:e0:fb:be:e8: 2a:7f:6a:54:94:b5:61:47:ee:9f:39:f7:69:50:bc:93:3d:cb: dc:f7:84:5f:38:54:f3:79:9c:34:a8:32:9a:f8:32:4a:de:9e: bb:6b:19:f0:e6:4d:04:3e:9b:94:0b:7a:e5:a9:8f:d6:03:04: b5:e7:01:f5:4b:38:06:27:6f:54:8a:a5:8d:a1:21:97:96:69: 39:40:58:82:69:1c:1e:1b:f9:4d:38:02:7e:35:b2:ca:b3:b8: a6:0d:80:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwMTAxMTAvBgNVBAUTKDcyMjE3OEQ1OTFEOTg1OTY4OUU0QjkyRjJEMEM4N0ZB NDdFMzVFMEEwHhcNMjQwNTE4MTg0NjQxWhcNMjQwNTI1MTg0NjQxWjAYMRYwFAYD VQQDEw02NjQ4Zjc5MS1mYWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2apeVxpnl00QvkbZrMDvqzS+Pne3Zga2IcoSnklLBCT8g9IDQE6CndeTw/xP L5eqHzfIdpsKQEno7BV9dzzdk1/528/GKcjOFwbGjSXscsypT5+swZarvB0YY7+F e7laz5CJbkPNvYF5Qfot5Y+JNy79Cy2NlYzcGlEGs1na8GknH1VEEfGSvfO1/u3P 43PQHynW8bo2Y0fJ3yWJ/FD/afTqVBRY03T/OhXRQiWp3xcDFB+EDbi5iTS9UcKA r7Cde9t0YXKqWnUFvgQbJXkF11A0PTuicTn3PNtzuqCugaX23roaDSwV9UM6cfiR njKeY+R4IstGzuAvuEirE8jGMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDyWSNdd H/NHpAvujbNzmVojrXwtMB8GA1UdIwQYMBaAFHIheNWR2YWWieS5Ly0Mh/pH414K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDAxMC81N0I3NjcxQUMy MUMxMUU5ODRBMTVEMTJDNEY5QUUwMi9jaUY0MVpIWmhaYUo1TGt2TFF5SC1rZmpY Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NpRjQxWkhaaFphSjVMa3ZMUXlILWtmalhnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDAxMC81N0I3NjcxQUMyMUMxMUU5ODRBMTVEMTJDNEY5QUUwMi9jaUY0MVpIWmha YUo1TGt2TFF5SC1rZmpYZ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz9K4Fl6Brf/nOfKswey9DLN8cX4NWr+w8aB9/DWJVsLyD6iv7JShV JZK5NLtXVh2GyrWVonXxWo1quzG6e/5CsAabQUa+a0FhPCKlkgfyki2Kivuxgwiu EbUwQbm+HH+hZK7ihKHEBwomAMB6AzMEadNuap7J5znFQJzkuotImzSN4Vmtjt4I XS0HGaApBZ4y74vmXY7X0BPj+BTiteD7vugqf2pUlLVhR+6fOfdpULyTPcvc94Rf OFTzeZw0qDKa+DJK3p67axnw5k0EPpuUC3rlqY/WAwS15wH1SzgGJ29UiqWNoSGX lmk5QFiCaRweG/lNOAJ+NbLKs7imDYDV -----END CERTIFICATE-----Generated at Sat May 18 20:16:00 2024 by rpki-client on console-ams.rpki-client.org