$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft File: cPhdBJUBOFatAizAkilp4Mj8ReI.mft (raw, json) Hash identifier: pUqdCaEx1B9WxulnrbF5U3JoTVL7l55pf7gGprCyH48= Subject key identifier: 7D:B4:78:30:E0:FD:67:E2:AF:A7:F1:95:B7:59:66:03:88:C0:11:FB Authority key identifier: 70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2 Certificate issuer: /CN=A9184F2D/serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2 Certificate serial: 04C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft Manifest number: 04C2 Signing time: Sun 19 May 2024 01:25:09 +0000 Manifest this update: Sun 19 May 2024 01:25:08 +0000 Manifest next update: Sun 26 May 2024 01:25:08 +0000 Files and hashes: 1: cPhdBJUBOFatAizAkilp4Mj8ReI.crl (hash: wFZ7wrXzgWq9mAcuzQUmY98Nu2CiU1zmBqf8D9eCOiE=) 2: C454E4B4D94F11EBAB5C652FC4F9AE02.roa (hash: syBXC7ebrcWuxme293dyFbNYbwtGgLiP1an4cvhn7co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1222 (0x4c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184F2D/serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2 Validity Not Before: May 19 01:25:08 2024 GMT Not After : May 26 01:25:08 2024 GMT Subject: CN=664954f4-0e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6b:4c:60:3b:e7:a3:ad:33:ee:4d:07:e0:79: 33:5d:ac:1c:f5:9c:e0:a6:fa:5d:6d:76:18:ed:99: 06:3a:41:62:c4:64:4e:5b:d6:31:cb:94:83:69:ea: 0e:a2:2a:fc:d8:6d:22:55:eb:60:5f:25:79:f4:96: 76:29:5c:31:be:4a:d5:fa:a9:c8:12:bf:59:2d:ca: d0:0b:4e:18:2d:47:c2:5c:7c:3b:e7:c0:de:1f:8c: 20:b2:d5:e8:d1:01:b7:f9:50:dd:13:13:3c:2b:28: 00:f3:e4:8a:3c:57:9b:45:ac:f8:07:6f:00:d9:f6: 15:e1:02:28:1f:d4:81:7b:c2:cd:b6:b6:ae:40:ca: bf:ff:c5:17:f6:b3:6a:31:a0:42:5d:89:0d:28:29: 4c:0b:6e:e9:7c:08:07:7f:d1:fc:52:d2:6d:71:98: 72:20:78:5d:cb:fe:22:18:32:5e:de:da:7a:77:7a: e4:c8:0b:ae:61:7a:23:5e:e9:d3:09:eb:3f:c3:1c: 1e:6f:00:07:ad:0a:46:9c:ff:0d:6b:5b:66:11:a0: 80:57:67:b2:16:bb:9d:8c:30:a9:f9:56:2c:9f:01: 69:83:21:07:62:be:6d:c5:8c:59:ff:00:2e:0d:77: 7e:df:59:05:b2:7e:ef:25:0f:f9:16:2b:39:73:3f: cc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B4:78:30:E0:FD:67:E2:AF:A7:F1:95:B7:59:66:03:88:C0:11:FB X509v3 Authority Key Identifier: keyid:70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:1a:05:03:9e:13:15:eb:98:fe:fe:9d:24:5d:13:da:59:2a: 77:69:68:29:df:6e:55:18:e7:27:e3:f6:b6:e8:3f:38:86:1b: eb:49:cc:a4:0b:2e:87:68:f4:85:4d:78:0b:73:8f:c8:6e:c8: 85:15:49:0d:92:0b:17:85:97:7c:d3:74:7c:31:c4:94:71:53: 00:56:eb:c1:3d:a0:79:21:61:2d:86:b3:ff:82:42:84:af:22: 05:4c:92:00:f7:75:4f:0c:67:9d:03:e7:ef:55:bf:a8:37:2f: 4f:e7:cb:a0:0f:41:de:ce:34:3a:d9:86:68:5a:72:1b:0b:13: 91:6c:75:69:26:6c:9c:bb:e9:af:bf:02:dd:cc:bb:a8:d2:cb: f8:86:27:f7:6a:e2:fa:44:bf:bd:e9:fc:9a:3e:e5:02:bd:dd: 28:37:35:ef:45:18:64:ab:85:a8:9f:90:ee:ac:f2:67:b3:ec: b1:c7:f8:ad:d0:a1:92:f1:50:de:ee:8c:f9:38:82:43:87:b1: 44:3a:d7:f8:be:9f:47:c7:1c:7c:4a:cb:36:b1:86:fc:da:9d: c8:4a:a4:86:aa:31:aa:f3:f4:c5:d1:06:7c:b5:24:bd:56:00: 5f:81:43:de:55:7f:d1:8a:42:66:9e:bc:f5:5d:7d:73:68:ef: 37:b9:70:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRGMkQxMTAvBgNVBAUTKDcwRjg1RDA0OTUwMTM4NTZBRDAyMkNDMDkyMjk2OUUw QzhGQzQ1RTIwHhcNMjQwNTE5MDEyNTA4WhcNMjQwNTI2MDEyNTA4WjAYMRYwFAYD VQQDEw02NjQ5NTRmNC0wZTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmtMYDvno60z7k0H4HkzXawc9ZzgpvpdbXYY7ZkGOkFixGROW9Yxy5SDaeoO oir82G0iVetgXyV59JZ2KVwxvkrV+qnIEr9ZLcrQC04YLUfCXHw758DeH4wgstXo 0QG3+VDdExM8KygA8+SKPFebRaz4B28A2fYV4QIoH9SBe8LNtrauQMq//8UX9rNq MaBCXYkNKClMC27pfAgHf9H8UtJtcZhyIHhdy/4iGDJe3tp6d3rkyAuuYXojXunT Ces/wxwebwAHrQpGnP8Na1tmEaCAV2eyFrudjDCp+VYsnwFpgyEHYr5txYxZ/wAu DXd+31kFsn7vJQ/5Fis5cz/M6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH20eDDg /Wfir6fxlbdZZgOIwBH7MB8GA1UdIwQYMBaAFHD4XQSVAThWrQIswJIpaeDI/EXi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEYyRC9DRkJFRDM3MEQ5 NEQxMUVCQkU1RDMxMkZDNEY5QUUwMi9jUGhkQkpVQk9GYXRBaXpBa2lscDRNajhS ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NQaGRCSlVCT0ZhdEFpekFraWxwNE1qOFJlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEYyRC9DRkJFRDM3MEQ5NEQxMUVCQkU1RDMxMkZDNEY5QUUwMi9jUGhkQkpVQk9G YXRBaXpBa2lscDRNajhSZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANGgUDnhMV65j+/p0kXRPaWSp3aWgp325VGOcn4/a26D84hhvrScyk Cy6HaPSFTXgLc4/IbsiFFUkNkgsXhZd803R8McSUcVMAVuvBPaB5IWEthrP/gkKE ryIFTJIA93VPDGedA+fvVb+oNy9P58ugD0HezjQ62YZoWnIbCxORbHVpJmycu+mv vwLdzLuo0sv4hif3auL6RL+96fyaPuUCvd0oNzXvRRhkq4Won5DurPJns+yxx/it 0KGS8VDe7oz5OIJDh7FEOtf4vp9Hxxx8Sss2sYb82p3ISqSGqjGq8/TF0QZ8tSS9 VgBfgUPeVX/RikJmnrz1XX1zaO83uXCY -----END CERTIFICATE-----Generated at Sun May 19 02:59:08 2024 by rpki-client on console-ams.rpki-client.org