$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft File: cxr37OuNcapcrpOXPuGmWXYUwkQ.mft (raw, json) Hash identifier: 8BuvbdNEuY2hJtnBaK4DuSfN6cKy4PHmcBJktpvpfe0= Subject key identifier: C9:01:A9:BC:E6:76:F8:6E:EB:E0:5C:ED:3D:0B:94:BF:D9:7D:0D:B8 Authority key identifier: 73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44 Certificate issuer: /CN=A9169E68/serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244 Certificate serial: 0714 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft Manifest number: 070F Signing time: Sat 18 May 2024 22:36:44 +0000 Manifest this update: Sat 18 May 2024 22:36:43 +0000 Manifest next update: Sat 25 May 2024 22:36:43 +0000 Files and hashes: 1: cxr37OuNcapcrpOXPuGmWXYUwkQ.crl (hash: xrKcpGTidGHBVQv6cJZGz7GB8g/20/MRC9waQgvCPRU=) 2: 6A23B8EAF25411EA9DE4FF2DC4F9AE02.roa (hash: GY6iG3mI54ZOqWSZO04Mflmm/Rhf06jLZ1mpHCp28Bg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1812 (0x714) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169E68/serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244 Validity Not Before: May 18 22:36:43 2024 GMT Not After : May 25 22:36:43 2024 GMT Subject: CN=66492d7b-55c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1b:7d:32:1f:a9:b9:dc:3f:a4:bc:d8:e0:61: b0:a8:f5:60:c2:ec:bf:1f:93:35:6d:83:1c:8b:43: 4c:e8:31:2f:83:a8:b8:05:18:a8:c1:d7:78:08:c4: 08:ee:7d:9a:5c:3b:7d:5e:c0:14:ab:f2:65:1e:c3: b2:2f:ca:9e:e5:2e:00:55:f6:70:a1:94:ed:14:69: cf:47:e4:d2:25:78:98:be:f1:d5:7c:05:0a:d2:86: 22:1d:28:ee:16:3f:26:77:12:a0:27:fb:5e:c5:93: 05:30:d4:7d:f2:d4:ce:ae:13:0f:0c:50:35:49:cb: f9:7a:68:51:5f:2b:70:5b:dc:d6:70:65:15:b7:6c: 1b:70:a0:f5:49:5e:78:37:20:56:17:98:21:95:8b: 79:87:15:b3:73:7c:e8:c7:f4:3f:6a:11:27:68:5b: 03:7f:4e:74:b8:ee:e6:82:45:46:e1:d8:bc:57:0d: e4:b1:d9:66:c8:4b:e2:59:91:95:e3:dd:33:f3:3a: 30:19:3e:13:50:83:96:b6:b1:a5:c8:4a:a9:70:1c: c9:85:81:f3:0f:7c:cc:1d:ba:68:54:08:49:5f:b6: e5:6a:43:dc:18:03:9c:6e:8f:b6:5f:6c:c3:38:1a: b6:1d:13:0a:0e:ff:c9:bb:af:40:2a:75:da:c2:ba: 77:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:01:A9:BC:E6:76:F8:6E:EB:E0:5C:ED:3D:0B:94:BF:D9:7D:0D:B8 X509v3 Authority Key Identifier: keyid:73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:4c:c3:aa:86:a1:df:01:78:52:62:9c:4a:42:87:2b:8b:c6: b7:68:8c:2a:1d:7f:20:d3:33:26:cd:50:22:da:6d:e6:80:6b: c3:46:6a:fd:3c:7c:32:cc:5c:88:0d:7e:f6:02:94:e4:fc:a1: 2a:26:76:95:38:2e:36:d7:31:5f:b1:d9:8f:9a:d1:38:33:f7: ec:a9:7f:6f:ab:3a:a0:04:3d:20:f3:e2:01:fa:82:d9:f1:55: 44:4f:52:79:66:2e:78:b9:42:2b:5d:f2:28:13:21:f6:d2:b5: 01:a1:19:47:2c:3f:e5:e7:d3:85:c6:59:8a:b1:88:b7:04:52: 64:54:dc:5c:4d:7d:e2:30:e4:08:e2:75:6b:78:ce:92:f9:ac: 35:51:43:e9:bc:21:2d:1e:ae:92:94:78:9b:7a:7c:45:a5:fd: 6a:e0:26:1f:69:b0:c3:f4:37:d7:ce:9f:fe:47:cf:0e:d1:a0: 4d:32:25:33:f9:98:18:d4:eb:3e:78:b6:55:06:d9:f6:1b:21: 81:ca:53:84:cd:51:84:e3:fe:bc:75:c3:92:97:36:ec:91:8e: 39:e5:2f:cc:53:86:13:93:6b:20:2e:b4:d0:07:79:8b:2d:66: d9:0a:f1:5f:34:1e:36:f3:0a:40:1a:15:62:fa:bc:34:57:42: 4c:da:c3:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlFNjgxMTAvBgNVBAUTKDczMUFGN0VDRUI4RDcxQUE1Q0FFOTM5NzNFRTFBNjU5 NzYxNEMyNDQwHhcNMjQwNTE4MjIzNjQzWhcNMjQwNTI1MjIzNjQzWjAYMRYwFAYD VQQDEw02NjQ5MmQ3Yi01NWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnxt9Mh+pudw/pLzY4GGwqPVgwuy/H5M1bYMci0NM6DEvg6i4BRiowdd4CMQI 7n2aXDt9XsAUq/JlHsOyL8qe5S4AVfZwoZTtFGnPR+TSJXiYvvHVfAUK0oYiHSju Fj8mdxKgJ/texZMFMNR98tTOrhMPDFA1Scv5emhRXytwW9zWcGUVt2wbcKD1SV54 NyBWF5ghlYt5hxWzc3zox/Q/ahEnaFsDf050uO7mgkVG4di8Vw3ksdlmyEviWZGV 490z8zowGT4TUIOWtrGlyEqpcBzJhYHzD3zMHbpoVAhJX7blakPcGAOcbo+2X2zD OBq2HRMKDv/Ju69AKnXawrp31wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkBqbzm dvhu6+Bc7T0LlL/ZfQ24MB8GA1UdIwQYMBaAFHMa9+zrjXGqXK6Tlz7hpll2FMJE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUU2OC82MzIyQTMzQ0Yy NTIxMUVBQkI4RUI0MEZDNEY5QUUwMi9jeHIzN091TmNhcGNycE9YUHVHbVdYWVV3 a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4cjM3T3VOY2FwY3JwT1hQdUdtV1hZVXdrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUU2OC82MzIyQTMzQ0YyNTIxMUVBQkI4RUI0MEZDNEY5QUUwMi9jeHIzN091TmNh cGNycE9YUHVHbVdYWVV3a1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1TMOqhqHfAXhSYpxKQocri8a3aIwqHX8g0zMmzVAi2m3mgGvDRmr9 PHwyzFyIDX72ApTk/KEqJnaVOC421zFfsdmPmtE4M/fsqX9vqzqgBD0g8+IB+oLZ 8VVET1J5Zi54uUIrXfIoEyH20rUBoRlHLD/l59OFxlmKsYi3BFJkVNxcTX3iMOQI 4nVreM6S+aw1UUPpvCEtHq6SlHibenxFpf1q4CYfabDD9DfXzp/+R88O0aBNMiUz +ZgY1Os+eLZVBtn2GyGBylOEzVGE4/68dcOSlzbskY455S/MU4YTk2sgLrTQB3mL LWbZCvFfNB428wpAGhVi+rw0V0JM2sO9 -----END CERTIFICATE-----Generated at Sun May 19 00:30:16 2024 by rpki-client on console-ams.rpki-client.org