$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft File: cM0ClgpxFOH9f9syrJqj6NKuv0E.mft (raw, json) Hash identifier: cfMZLTHbinT8MozVP/j5jjQl3cHlRKi7oMP9+nqz8/o= Subject key identifier: E6:2E:9F:9B:7A:8D:F3:F4:A4:08:E9:5B:2E:D4:10:6E:A1:CF:2F:9C Authority key identifier: 70:CD:02:96:0A:71:14:E1:FD:7F:DB:32:AC:9A:A3:E8:D2:AE:BF:41 Certificate issuer: /CN=A916EF5E/serialNumber=70CD02960A7114E1FD7FDB32AC9AA3E8D2AEBF41 Certificate serial: 156F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft Manifest number: 245D Signing time: Sat 18 May 2024 17:16:28 +0000 Manifest this update: Sat 18 May 2024 17:16:28 +0000 Manifest next update: Sat 25 May 2024 17:16:28 +0000 Files and hashes: 1: cM0ClgpxFOH9f9syrJqj6NKuv0E.crl (hash: nfqVPJ3lkkJk0GEYoz124q8YWgKu3nZLnV2seFcJBlU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.crl rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5487 (0x156f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EF5E/serialNumber=70CD02960A7114E1FD7FDB32AC9AA3E8D2AEBF41 Validity Not Before: May 18 17:16:28 2024 GMT Not After : May 25 17:16:28 2024 GMT Subject: CN=6648e26c-6064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:66:8d:8a:3d:3d:f2:fe:55:1a:65:b7:69:11: 06:48:26:ca:c8:f5:02:4f:ab:96:b2:87:9d:a5:65: 83:b4:d7:40:53:d0:e8:54:38:6c:0f:f4:eb:64:b1: cc:a1:12:40:0f:d1:1c:97:2d:a3:d3:f4:98:a2:19: 57:92:3a:21:35:95:83:c0:ff:9a:c6:76:6f:86:9f: 36:60:0d:0d:1a:9e:ee:43:ec:97:7a:a0:17:e6:a5: 24:7d:86:52:73:69:d6:1b:74:fa:5a:1c:d8:3a:50: 3a:04:0f:2b:44:94:6e:b5:c9:87:7e:f2:34:7f:d8: 59:d5:6e:8d:37:18:eb:e0:2a:1e:92:59:a2:de:9a: d3:23:1d:a4:af:6e:c3:6c:a0:3d:11:fc:c9:b6:b6: eb:36:a0:62:7f:95:32:0f:44:48:0c:c8:fe:54:87: 9c:2c:c9:4e:bd:7e:71:30:77:0c:4d:b0:7d:9a:84: d6:9b:9f:de:15:27:06:23:99:c8:b7:23:50:3a:f7: 4b:0f:86:c9:6e:1c:4d:05:63:92:c2:16:3c:f2:e7: 58:0d:03:29:85:4b:dc:24:af:17:a8:1d:fd:3b:fd: 43:c2:e6:bf:5f:26:d2:b0:50:2f:cf:8e:7f:69:e0: d8:a4:4a:71:07:bc:95:e0:95:92:3e:4c:d9:fa:76: bc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:2E:9F:9B:7A:8D:F3:F4:A4:08:E9:5B:2E:D4:10:6E:A1:CF:2F:9C X509v3 Authority Key Identifier: keyid:70:CD:02:96:0A:71:14:E1:FD:7F:DB:32:AC:9A:A3:E8:D2:AE:BF:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:92:06:54:61:bb:fc:2c:5d:27:67:65:e7:35:03:4f:a0:98: 0a:fd:ec:0e:dc:26:4f:91:0a:19:7d:07:34:80:51:61:1e:2a: 52:b8:47:7f:d1:94:f5:76:17:a7:37:5e:c5:33:11:87:8e:89: 4e:9e:27:c8:60:f4:ec:ed:77:15:f9:e7:05:47:80:15:5b:b7: d7:6e:01:58:dc:84:32:cf:1b:d5:85:8b:66:2d:df:bd:b1:9e: ea:b5:ff:07:5c:02:b9:77:8d:87:2c:64:98:c1:7a:d4:da:d2: 79:8e:0e:bb:41:63:29:d6:eb:d9:93:95:48:02:a1:6e:61:27: fd:06:3b:32:27:83:db:2a:e2:8a:c3:13:d4:85:ae:55:1d:46: a5:40:9f:33:2c:af:c0:12:aa:69:d2:1b:78:ae:45:15:d9:eb: 3e:a9:c2:0d:6d:11:33:de:d8:38:86:73:95:c0:5b:ba:85:7b: 48:1c:fd:eb:08:46:c5:29:91:98:2f:03:12:5f:16:f6:b2:81: 06:f4:5f:d4:a3:e5:03:8b:e4:ed:cc:76:63:80:f5:dd:fa:e8: 8b:a0:9f:1b:35:d1:74:ca:fa:5d:bc:27:50:3a:21:7d:5c:2d: 96:56:a4:d7:83:bc:41:2e:99:2a:bf:22:7c:30:63:77:30:0f: a7:6f:09:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVGNUUxMTAvBgNVBAUTKDcwQ0QwMjk2MEE3MTE0RTFGRDdGREIzMkFDOUFBM0U4 RDJBRUJGNDEwHhcNMjQwNTE4MTcxNjI4WhcNMjQwNTI1MTcxNjI4WjAYMRYwFAYD VQQDEw02NjQ4ZTI2Yy02MDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWaNij098v5VGmW3aREGSCbKyPUCT6uWsoedpWWDtNdAU9DoVDhsD/TrZLHM oRJAD9Ecly2j0/SYohlXkjohNZWDwP+axnZvhp82YA0NGp7uQ+yXeqAX5qUkfYZS c2nWG3T6WhzYOlA6BA8rRJRutcmHfvI0f9hZ1W6NNxjr4Coeklmi3prTIx2kr27D bKA9EfzJtrbrNqBif5UyD0RIDMj+VIecLMlOvX5xMHcMTbB9moTWm5/eFScGI5nI tyNQOvdLD4bJbhxNBWOSwhY88udYDQMphUvcJK8XqB39O/1Dwua/XybSsFAvz45/ aeDYpEpxB7yV4JWSPkzZ+na8HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOYun5t6 jfP0pAjpWy7UEG6hzy+cMB8GA1UdIwQYMBaAFHDNApYKcRTh/X/bMqyao+jSrr9B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY1RS9GMzhEQ0Y4QTEw NkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9jTTBDbGdweEZPSDlmOXN5ckpxajZOS3V2 MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNMENsZ3B4Rk9IOWY5c3lySnFqNk5LdXYwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUY1RS9GMzhEQ0Y4QTEwNkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9jTTBDbGdweEZP SDlmOXN5ckpxajZOS3V2MEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDkgZUYbv8LF0nZ2XnNQNPoJgK/ewO3CZPkQoZfQc0gFFhHipSuEd/ 0ZT1dhenN17FMxGHjolOnifIYPTs7XcV+ecFR4AVW7fXbgFY3IQyzxvVhYtmLd+9 sZ7qtf8HXAK5d42HLGSYwXrU2tJ5jg67QWMp1uvZk5VIAqFuYSf9BjsyJ4PbKuKK wxPUha5VHUalQJ8zLK/AEqpp0ht4rkUV2es+qcINbREz3tg4hnOVwFu6hXtIHP3r CEbFKZGYLwMSXxb2soEG9F/Uo+UDi+TtzHZjgPXd+uiLoJ8bNdF0yvpdvCdQOiF9 XC2WVqTXg7xBLpkqvyJ8MGN3MA+nbwmo -----END CERTIFICATE-----Generated at Sat May 18 18:12:32 2024 by rpki-client on console-fra.rpki-client.org