$ rpki-client -vvf rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft File: cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft (raw, json) Hash identifier: qS5QZ+yl5UMmwO0QwHSdAqvBmMoklDnvLb1btpkx+10= Subject key identifier: 1C:90:95:99:B0:02:A0:DF:25:46:01:6C:E6:96:69:89:3D:1C:DA:39 Authority key identifier: 70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C Certificate issuer: /CN=A917B540/serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft Manifest number: C5 Signing time: Fri 31 May 2024 07:08:26 +0000 Manifest this update: Fri 31 May 2024 07:08:26 +0000 Manifest next update: Fri 07 Jun 2024 07:08:26 +0000 Files and hashes: 1: cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl (hash: qJGwcGrwcWhvZGkbzDogxjma3VHehsznMGiEwjbdo00=) 2: 1966C856FB9E11ED8309FC1DC4F9AE02.roa (hash: 0ApTySfWss7BCgDJo5NI3CLB1Q6H4KVApSNhXj+3R8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B540/serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Validity Not Before: May 31 07:08:26 2024 GMT Not After : Jun 7 07:08:26 2024 GMT Subject: CN=6659776a-8353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f0:60:b8:54:9f:b8:f3:70:4f:43:b7:99:31: fd:29:38:56:2d:e3:df:25:c7:cc:94:eb:e3:77:3e: 7f:62:93:cb:50:98:4f:45:cc:25:75:71:f3:e9:ba: fa:b0:2f:34:d1:9c:90:80:8b:de:23:12:93:9f:cc: 7c:03:d6:e0:55:28:1d:a4:4e:6a:42:98:6f:29:d6: a4:0a:4a:66:8f:21:a4:d8:e7:be:5e:c7:02:04:ad: 99:58:e9:5f:77:fd:34:6f:ce:cf:4e:97:98:2f:45: b2:54:1d:2c:1e:1a:94:b6:c2:86:bb:a6:5d:11:be: a5:60:a1:58:8d:22:ad:fe:90:2a:77:d2:53:cf:38: 9d:6b:6d:ce:7e:da:6d:8f:85:9a:ad:46:ac:0a:af: c2:a0:38:e1:ce:ee:80:3b:19:4a:74:e3:6f:ea:1a: ae:bf:63:8d:b5:1a:e1:33:42:7a:4d:f0:c7:83:3b: ae:98:75:c1:de:1b:ea:cb:71:e4:ac:97:21:2a:30: 4d:fe:7a:a1:d2:30:4c:0f:0e:81:63:fc:54:d8:8b: e8:75:a3:6a:03:4f:2f:ed:ff:13:e4:7e:42:1d:34: 97:c2:63:9a:cf:70:59:40:59:2e:2f:ba:56:93:bd: 84:6c:d5:10:b8:02:22:c1:1b:e5:e8:47:ab:0e:7a: 4b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:90:95:99:B0:02:A0:DF:25:46:01:6C:E6:96:69:89:3D:1C:DA:39 X509v3 Authority Key Identifier: keyid:70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:d7:29:6e:5f:a4:ef:4e:a8:b3:6b:f7:c6:a9:67:0e:5d:bc: 9e:10:ad:51:32:21:34:01:b1:6a:d6:5a:a4:05:f8:76:31:64: 68:d1:f4:f9:4a:70:09:43:ce:12:72:1d:21:12:79:cc:c0:97: 7a:20:47:e4:90:77:25:29:4c:fc:bf:a6:73:71:3b:2a:60:b3: fe:c6:a7:20:c2:2f:63:db:dc:46:3b:eb:60:53:d8:6e:9d:66: 13:43:69:58:5f:8b:63:f8:cb:c5:be:7a:01:07:d0:31:68:55: 84:78:ed:75:3c:7a:68:05:d2:78:c8:7b:f3:89:80:73:55:50: 79:c8:6a:4e:30:fa:42:1d:fd:01:3d:32:6d:af:5c:0d:82:06: 22:54:30:17:c3:b8:f7:e6:88:21:9b:4b:a7:ae:a1:0f:ed:b9: 05:5d:b0:9c:98:0f:29:a4:cc:f6:67:ee:19:86:48:c3:e6:2f: 19:2e:ae:d6:e9:ed:fa:e5:73:e7:8f:a9:b0:fd:e7:07:fd:c5: eb:4a:54:df:10:2d:bd:0c:c6:fe:87:48:d0:ae:3a:54:cc:55: 52:e1:5e:36:2a:be:59:67:88:5d:04:c2:e4:6d:02:7d:c6:b2: f7:7f:c1:8c:ea:8d:fc:e0:77:41:1b:d4:77:d5:33:35:46:bf: 24:5c:09:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1NDAxMTAvBgNVBAUTKDcwMkZBMUFFOTY4MkIyQjIyRUNERDlBNTMwMTJGMEU2 RjFCQTFCOUMwHhcNMjQwNTMxMDcwODI2WhcNMjQwNjA3MDcwODI2WjAYMRYwFAYD VQQDEw02NjU5Nzc2YS04MzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPBguFSfuPNwT0O3mTH9KThWLePfJcfMlOvjdz5/YpPLUJhPRcwldXHz6br6 sC800ZyQgIveIxKTn8x8A9bgVSgdpE5qQphvKdakCkpmjyGk2Oe+XscCBK2ZWOlf d/00b87PTpeYL0WyVB0sHhqUtsKGu6ZdEb6lYKFYjSKt/pAqd9JTzzida23Oftpt j4WarUasCq/CoDjhzu6AOxlKdONv6hquv2ONtRrhM0J6TfDHgzuumHXB3hvqy3Hk rJchKjBN/nqh0jBMDw6BY/xU2IvodaNqA08v7f8T5H5CHTSXwmOaz3BZQFkuL7pW k72EbNUQuAIiwRvl6EerDnpLBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFByQlZmw AqDfJUYBbOaWaYk9HNo5MB8GA1UdIwQYMBaAFHAvoa6WgrKyLs3ZpTAS8Obxuhuc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjU0MC9EOTdBOTVCQ0Y4 ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3NySXV6ZG1sTUJMdzV2RzZH NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NDLWhycGFDc3JJdXpkbWxNQkx3NXZHNkc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjU0MC9EOTdBOTVCQ0Y4ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3Ny SXV6ZG1sTUJMdzV2RzZHNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAi1yluX6TvTqiza/fGqWcOXbyeEK1RMiE0AbFq1lqkBfh2MWRo0fT5 SnAJQ84Sch0hEnnMwJd6IEfkkHclKUz8v6ZzcTsqYLP+xqcgwi9j29xGO+tgU9hu nWYTQ2lYX4tj+MvFvnoBB9AxaFWEeO11PHpoBdJ4yHvziYBzVVB5yGpOMPpCHf0B PTJtr1wNggYiVDAXw7j35oghm0unrqEP7bkFXbCcmA8ppMz2Z+4ZhkjD5i8ZLq7W 6e365XPnj6mw/ecH/cXrSlTfEC29DMb+h0jQrjpUzFVS4V42Kr5ZZ4hdBMLkbQJ9 xrL3f8GM6o384HdBG9R31TM1Rr8kXAlE -----END CERTIFICATE-----Generated at Fri May 31 08:38:31 2024 by rpki-client on console-fra.rpki-client.org