$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft File: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft (raw, json) Hash identifier: RP1IDgKUHhHKlSMEwdbAWbeR344C1GUSD0tAB5hwE1w= Subject key identifier: 67:9C:B9:D0:82:83:26:82:9F:5F:8B:71:A2:3F:8F:74:A1:B0:1A:DF Authority key identifier: 0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14 Certificate issuer: /CN=A91886CC/serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft Manifest number: 2F Signing time: Sun 19 May 2024 06:17:07 +0000 Manifest this update: Sun 19 May 2024 06:17:06 +0000 Manifest next update: Sun 26 May 2024 06:17:06 +0000 Files and hashes: 1: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl (hash: smFi4OId43D1sbVOzGmGM7gB71Pg0FYrGfKVDxu/9Ko=) 2: 36AFF164DA1711EEA499A417C4F9AE02.roa (hash: LdO50RdTD1VxTwpUjKNOfgQOFMahR83q9cWtVg99vY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886CC/serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14 Validity Not Before: May 19 06:17:06 2024 GMT Not After : May 26 06:17:06 2024 GMT Subject: CN=66499963-ff62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a6:71:3b:c7:94:b1:3c:f1:00:7c:0e:ce:60: c4:1c:f1:78:e9:59:1b:65:b1:92:9a:a9:1f:93:93: 15:8e:2d:24:38:76:7f:cf:93:bb:62:68:49:dd:c7: f5:ea:d0:95:49:28:61:b8:ad:1b:d8:64:21:e0:13: b7:7b:fd:91:43:c9:7b:5d:17:e4:4c:46:d4:29:ae: 53:03:f6:92:ca:64:b9:d9:4b:98:02:92:fc:1e:0b: 64:dd:75:0c:47:82:f9:80:ce:9f:b6:a3:79:b3:40: 09:28:d6:6b:4d:6c:d6:32:1d:2a:15:21:63:88:3f: 34:fa:da:73:bc:b1:c0:9e:c1:e7:d4:dd:74:bf:d2: 91:be:17:c3:06:43:0d:aa:ce:95:fd:04:d8:84:ae: fc:64:cc:d8:c5:e3:af:4a:0c:69:a2:8f:8a:b2:36: 10:ba:67:be:ec:5d:00:60:09:93:2d:4f:f2:f2:05: ff:16:f7:5b:55:61:a2:46:9a:69:8e:38:01:fa:4e: 7b:3f:e3:67:6e:c9:6b:83:8e:16:dd:49:80:b2:86: 4e:25:ed:94:06:32:f6:c4:87:8a:9e:aa:b4:91:54: f9:10:88:93:e7:02:af:f6:73:82:e2:6d:65:e4:43: 6f:c4:a7:cc:e0:f6:e7:2b:10:35:e5:50:d6:de:20: 2c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:9C:B9:D0:82:83:26:82:9F:5F:8B:71:A2:3F:8F:74:A1:B0:1A:DF X509v3 Authority Key Identifier: keyid:0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:26:5c:e7:aa:4d:44:ea:88:15:75:69:8d:92:ba:78:1f:20: fa:ff:9e:81:52:41:f6:43:98:0f:ef:39:ca:23:7e:77:5d:be: 1b:71:8c:b4:07:20:51:a6:59:17:c8:d2:a0:ad:42:35:71:16: fa:53:6b:c8:d6:63:18:cc:a3:04:0a:da:a6:d9:69:96:13:24: 28:94:b4:21:8b:96:e5:f7:21:66:30:0c:57:fa:46:90:86:c3: 47:b9:43:0f:18:1e:db:5c:6e:d3:14:56:24:6f:11:d2:72:12: d1:f1:89:da:22:a6:fe:f3:75:ea:55:b8:52:d0:d5:7b:cf:3e: 16:d1:6e:e2:60:31:4a:ec:e0:94:14:73:f4:a0:79:c3:af:92: 9c:26:4b:83:87:e5:7a:c0:dc:f9:63:e7:b6:0d:fe:48:a2:23: 0c:13:af:cb:3b:0d:c8:85:b0:e6:cf:2e:4e:2a:91:d3:7d:bd: f3:45:e6:b9:61:f8:94:09:15:1e:d4:da:fc:85:15:a2:0b:e7: a6:82:8f:51:45:2c:66:8d:7d:80:d7:7f:df:a9:6f:6b:94:7f: b2:de:c0:49:93:5e:9f:a5:c7:82:62:6f:4b:c0:e8:a4:65:f5: 7b:92:e6:5c:98:20:73:56:7c:7e:db:32:2f:dc:07:48:36:5c: 06:c6:a4:bf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 ODZDQzExMC8GA1UEBRMoMEIxMEU1RUZFRjMwRjhDRTA0RUQ0QzVCOEY0OEE5Q0Qy NEJDQkExNDAeFw0yNDA1MTkwNjE3MDZaFw0yNDA1MjYwNjE3MDZaMBgxFjAUBgNV BAMTDTY2NDk5OTYzLWZmNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDApnE7x5SxPPEAfA7OYMQc8XjpWRtlsZKaqR+TkxWOLSQ4dn/Pk7tiaEndx/Xq 0JVJKGG4rRvYZCHgE7d7/ZFDyXtdF+RMRtQprlMD9pLKZLnZS5gCkvweC2TddQxH gvmAzp+2o3mzQAko1mtNbNYyHSoVIWOIPzT62nO8scCewefU3XS/0pG+F8MGQw2q zpX9BNiErvxkzNjF469KDGmij4qyNhC6Z77sXQBgCZMtT/LyBf8W91tVYaJGmmmO OAH6Tns/42duyWuDjhbdSYCyhk4l7ZQGMvbEh4qeqrSRVPkQiJPnAq/2c4LibWXk Q2/Ep8zg9ucrEDXlUNbeICxLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZ5y50IKD JoKfX4txoj+PdKGwGt8wHwYDVR0jBBgwFoAUCxDl7+8w+M4E7Uxbj0ipzSS8uhQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4NkNDLzUxMjE0MTVFRDVG NTExRUVCMEZBNjA1QkM0RjlBRTAyL0N4RGw3LTh3LU00RTdVeGJqMGlwelNTOHVo US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ3hEbDctOHctTTRFN1V4YmowaXB6U1M4dWhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 NkNDLzUxMjE0MTVFRDVGNTExRUVCMEZBNjA1QkM0RjlBRTAyL0N4RGw3LTh3LU00 RTdVeGJqMGlwelNTOHVoUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAkmXOeqTUTqiBV1aY2SungfIPr/noFSQfZDmA/vOcojfnddvhtxjLQH IFGmWRfI0qCtQjVxFvpTa8jWYxjMowQK2qbZaZYTJCiUtCGLluX3IWYwDFf6RpCG w0e5Qw8YHttcbtMUViRvEdJyEtHxidoipv7zdepVuFLQ1XvPPhbRbuJgMUrs4JQU c/SgecOvkpwmS4OH5XrA3Plj57YN/kiiIwwTr8s7DciFsObPLk4qkdN9vfNF5rlh +JQJFR7U2vyFFaIL56aCj1FFLGaNfYDXf9+pb2uUf7LewEmTXp+lx4Jib0vA6KRl 9XuS5lyYIHNWfH7bMi/cB0g2XAbGpL8= -----END CERTIFICATE-----Generated at Sun May 19 08:25:03 2024 by rpki-client on console-ams.rpki-client.org