$ rpki-client -vvf rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft File: cDXbQxmt4s_Ooig68PFrYgkCbao.mft (raw, json) Hash identifier: MAxpFQsJ/HIQhLpcubEdgER7nPtersC6ayHkRed+Fd8= Subject key identifier: 39:CA:F5:4F:78:8F:E0:DE:13:54:5E:77:3C:6F:89:BF:D5:D5:3C:57 Authority key identifier: 70:35:DB:43:19:AD:E2:CF:CE:A2:28:3A:F0:F1:6B:62:09:02:6D:AA Certificate issuer: /CN=A918387F/serialNumber=7035DB4319ADE2CFCEA2283AF0F16B6209026DAA Certificate serial: 0577 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft Manifest number: 0577 Signing time: Fri 31 May 2024 01:11:39 +0000 Manifest this update: Fri 31 May 2024 01:11:39 +0000 Manifest next update: Fri 07 Jun 2024 01:11:39 +0000 Files and hashes: 1: cDXbQxmt4s_Ooig68PFrYgkCbao.crl (hash: ltmWZwleRqWspc21fWU/jfGPZHVr1HEXQ2ersPQklpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.crl rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 01:11:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1399 (0x577) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918387F/serialNumber=7035DB4319ADE2CFCEA2283AF0F16B6209026DAA Validity Not Before: May 31 01:11:39 2024 GMT Not After : Jun 7 01:11:39 2024 GMT Subject: CN=665923cb-be65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4a:a3:cf:22:c6:ee:3d:50:e8:fd:d6:cc:5c: c1:a5:83:b3:e6:ca:3d:5a:e4:37:bb:87:0c:08:fa: 30:1e:fd:4d:79:e8:38:e3:dd:a9:39:03:d5:42:cf: 1c:8d:59:83:de:d3:b8:37:5e:ae:87:3f:90:34:52: 5d:4b:5a:8d:e0:28:79:a0:a7:5d:4d:a1:ed:d8:79: 3f:ee:9a:39:1d:46:33:4c:5c:9a:a2:ac:86:46:a7: fd:10:74:b4:a9:ee:17:9d:62:95:c6:2f:7a:fc:39: fc:c6:7e:b2:9c:59:48:54:da:da:55:5a:23:35:4a: e3:21:b7:de:6c:81:d5:62:05:29:b3:07:e0:54:3a: 75:fe:2a:f8:c0:60:0f:5a:c4:9e:2a:2c:99:d7:c3: 91:63:4f:b0:1e:ea:f5:4a:77:a3:34:e7:db:ca:22: 97:24:fd:d6:05:84:b9:67:9a:ae:aa:53:81:15:b1: e4:78:c7:48:7d:31:59:e3:1f:26:49:92:8e:65:f6: 43:8e:89:59:2e:7a:19:85:49:b4:23:0e:64:50:03: 8c:ce:fb:9f:a3:5c:a1:e4:98:41:b1:2f:e7:0b:2b: af:15:3d:0d:38:31:d1:60:00:c3:84:14:0f:67:7e: 16:8e:18:b1:13:c1:66:3b:eb:5f:97:34:bb:7e:2f: d2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CA:F5:4F:78:8F:E0:DE:13:54:5E:77:3C:6F:89:BF:D5:D5:3C:57 X509v3 Authority Key Identifier: keyid:70:35:DB:43:19:AD:E2:CF:CE:A2:28:3A:F0:F1:6B:62:09:02:6D:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:27:13:b2:cb:87:5b:e1:9c:05:b0:fa:29:f5:af:da:64:da: f3:85:2f:b1:4c:3f:42:3f:8d:67:3c:88:0c:b8:af:6d:09:06: 03:ed:57:01:b9:9b:23:3a:45:73:9a:66:54:32:21:fc:10:8a: ef:78:0e:e2:87:f4:d1:7f:9d:95:77:cd:bf:86:81:2d:f5:a6: 17:7d:8a:42:d7:51:2f:c4:c5:67:31:2f:0b:19:1f:38:b8:23: 58:18:5c:72:aa:9e:32:97:1d:42:e3:0c:e9:43:b9:59:9c:41: 6e:4d:dc:17:1d:f0:3f:3f:b5:23:c2:43:b4:7a:3f:2f:f3:2a: d8:37:38:88:93:f4:be:1e:95:3f:4f:d4:9c:e8:97:ea:65:50: d4:09:02:d9:0e:8b:ff:8d:89:96:53:64:c4:33:02:a2:ef:06: 26:1f:60:ef:7e:26:6e:6c:f1:e8:47:9f:78:9c:9f:a2:86:ea: e7:eb:8a:b9:ba:70:71:d6:30:f6:a4:7e:a5:23:88:fe:a6:7e: 17:51:44:7b:35:53:65:19:2b:ee:b1:51:fc:4e:60:84:ea:5f: f7:0e:8f:8b:5f:d5:42:2f:a8:ae:0b:2f:3b:a3:75:65:92:0f: fc:49:8a:41:f7:37:19:f6:67:0f:55:58:86:0a:f8:f2:c8:9f: d0:08:1f:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4N0YxMTAvBgNVBAUTKDcwMzVEQjQzMTlBREUyQ0ZDRUEyMjgzQUYwRjE2QjYy MDkwMjZEQUEwHhcNMjQwNTMxMDExMTM5WhcNMjQwNjA3MDExMTM5WjAYMRYwFAYD VQQDEw02NjU5MjNjYi1iZTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkqjzyLG7j1Q6P3WzFzBpYOz5so9WuQ3u4cMCPowHv1Neeg4492pOQPVQs8c jVmD3tO4N16uhz+QNFJdS1qN4Ch5oKddTaHt2Hk/7po5HUYzTFyaoqyGRqf9EHS0 qe4XnWKVxi96/Dn8xn6ynFlIVNraVVojNUrjIbfebIHVYgUpswfgVDp1/ir4wGAP WsSeKiyZ18ORY0+wHur1SnejNOfbyiKXJP3WBYS5Z5quqlOBFbHkeMdIfTFZ4x8m SZKOZfZDjolZLnoZhUm0Iw5kUAOMzvufo1yh5JhBsS/nCyuvFT0NODHRYADDhBQP Z34WjhixE8FmO+tflzS7fi/SRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnK9U94 j+DeE1Redzxvib/V1TxXMB8GA1UdIwQYMBaAFHA120MZreLPzqIoOvDxa2IJAm2q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg3Ri9CNEM3OUFGODkz NDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9jRFhiUXhtdDRzX09vaWc2OFBGcllna0Ni YW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NEWGJReG10NHNfT29pZzY4UEZyWWdrQ2Jhby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzg3Ri9CNEM3OUFGODkzNDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9jRFhiUXhtdDRz X09vaWc2OFBGcllna0NiYW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvJxOyy4db4ZwFsPop9a/aZNrzhS+xTD9CP41nPIgMuK9tCQYD7VcB uZsjOkVzmmZUMiH8EIrveA7ih/TRf52Vd82/hoEt9aYXfYpC11EvxMVnMS8LGR84 uCNYGFxyqp4ylx1C4wzpQ7lZnEFuTdwXHfA/P7UjwkO0ej8v8yrYNziIk/S+HpU/ T9Sc6JfqZVDUCQLZDov/jYmWU2TEMwKi7wYmH2DvfiZubPHoR594nJ+ihurn64q5 unBx1jD2pH6lI4j+pn4XUUR7NVNlGSvusVH8TmCE6l/3Do+LX9VCL6iuCy87o3Vl kg/8SYpB9zcZ9mcPVViGCvjyyJ/QCB/E -----END CERTIFICATE-----Generated at Fri May 31 03:15:00 2024 by rpki-client on console-ams.rpki-client.org