$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft File: 1cjx3JTTw0gdbGlTaVakpSjV7cM.mft (raw, json) Hash identifier: nA3pg1XkqJIW2jE5iFQMbelEYhmvAdZNkaGZ9TtncII= Subject key identifier: D0:73:75:D2:CD:97:4E:FF:2C:46:F7:EF:0B:40:3D:44:B6:DB:D3:C0 Authority key identifier: D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3 Certificate issuer: /CN=A918AA4D/serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3 Certificate serial: 2F8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft Manifest number: 2F5C Signing time: Sat 18 May 2024 15:43:17 +0000 Manifest this update: Sat 18 May 2024 15:43:16 +0000 Manifest next update: Sat 25 May 2024 15:43:16 +0000 Files and hashes: 1: 1cjx3JTTw0gdbGlTaVakpSjV7cM.crl (hash: bWoPaVJOW72F3up/PjEijUAf8RC3EzXx0DOnusMFjR0=) 2: 517E7D1AB0EC11E5A6934B42C4F9AE02.roa (hash: 6U8tdME71ZC1Ejm3sCtPW3kXe5EOVtj1Rs4wYCac8WE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12171 (0x2f8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AA4D/serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3 Validity Not Before: May 18 15:43:16 2024 GMT Not After : May 25 15:43:16 2024 GMT Subject: CN=6648cc94-27ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f8:69:d3:56:17:97:90:3b:ff:c7:d1:68:06: 9c:00:1a:5f:15:86:cb:49:a4:3d:f1:23:0d:c3:9c: 41:72:97:19:ac:87:04:81:60:b3:da:87:d9:69:c0: 7c:8d:8d:b2:dc:7a:f0:5c:4e:89:bc:a8:9e:70:67: cd:b6:c9:62:86:d9:ef:e5:0f:de:43:03:89:d3:e1: c4:80:a5:ef:24:2c:9b:5d:60:81:57:e6:e9:e9:47: 2c:19:ad:18:15:a7:aa:44:53:92:d9:0e:cc:68:d1: f6:2c:0b:b5:dd:e8:a8:02:4e:ca:f7:a4:a0:dc:14: 3d:47:5e:a4:dc:b9:1e:64:f6:39:ca:07:cd:21:51: 34:37:e2:86:76:4b:7b:47:e7:73:25:eb:c7:6f:2f: 28:c8:2c:00:25:71:3c:5e:7e:62:40:62:45:aa:77: 16:5a:cc:b0:2d:e4:db:8d:a1:3c:f8:7b:e4:22:02: 1a:cf:1e:0b:91:87:ac:23:31:4a:d6:04:fe:16:c4: 76:64:83:ac:d0:b0:34:ab:45:fb:44:c4:02:d2:2d: 80:0f:2e:a9:76:87:9f:9f:2b:4a:3d:66:d0:db:67: 76:84:c5:b4:7d:d6:ac:e1:a9:59:0c:57:a7:2a:fe: 25:5b:0a:56:12:40:aa:11:d8:de:a3:8f:ce:a8:06: 31:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:73:75:D2:CD:97:4E:FF:2C:46:F7:EF:0B:40:3D:44:B6:DB:D3:C0 X509v3 Authority Key Identifier: keyid:D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:6d:69:c2:76:f1:fe:d8:bc:75:2d:29:cb:dc:1d:04:c0:07: 27:da:f0:5f:d0:18:6f:42:0a:46:b0:ae:9b:1f:d0:f9:bb:fb: 26:9a:07:58:32:e9:87:17:ee:7d:26:be:ef:91:27:63:d1:9f: 6e:a3:30:c3:47:1c:62:5b:03:94:a9:83:2a:54:05:2e:7b:df: 4b:b2:94:6f:ca:c5:29:b7:98:70:0d:2c:10:a0:1d:fd:3c:2d: 64:35:62:cd:df:fe:9c:a2:3a:6c:ea:b4:de:40:12:9c:28:5c: 23:56:1f:8d:e0:22:5f:2c:7a:15:35:e0:b6:67:69:68:bb:84: 52:db:c9:03:67:32:5f:71:6d:05:c0:35:ea:9e:ab:91:b8:ec: bd:2d:10:fa:97:ad:62:33:83:2b:96:9b:ac:59:9f:f6:b0:b6: 10:7a:cb:9b:de:b6:1a:5d:88:c2:eb:6c:e3:79:91:73:ce:63: f8:89:75:63:b1:16:5a:f0:75:26:92:92:b2:94:c6:a5:8c:a2: 95:44:d8:22:7b:a6:55:62:5a:76:6d:27:7f:57:10:4f:a6:a2: a2:d6:39:7f:3d:22:5b:dc:92:68:e2:73:d6:04:97:c1:9e:64: a6:84:2e:4c:9d:d3:a2:04:be:62:94:bb:2e:05:c6:7f:cb:b0: 6b:15:05:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICL4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFBNEQxMTAvBgNVBAUTKEQ1QzhGMURDOTREM0MzNDgxRDZDNjk1MzY5NTZBNEE1 MjhENUVEQzMwHhcNMjQwNTE4MTU0MzE2WhcNMjQwNTI1MTU0MzE2WjAYMRYwFAYD VQQDEw02NjQ4Y2M5NC0yN2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/hp01YXl5A7/8fRaAacABpfFYbLSaQ98SMNw5xBcpcZrIcEgWCz2ofZacB8 jY2y3HrwXE6JvKiecGfNtslihtnv5Q/eQwOJ0+HEgKXvJCybXWCBV+bp6UcsGa0Y FaeqRFOS2Q7MaNH2LAu13eioAk7K96Sg3BQ9R16k3LkeZPY5ygfNIVE0N+KGdkt7 R+dzJevHby8oyCwAJXE8Xn5iQGJFqncWWsywLeTbjaE8+HvkIgIazx4LkYesIzFK 1gT+FsR2ZIOs0LA0q0X7RMQC0i2ADy6pdoefnytKPWbQ22d2hMW0fdas4alZDFen Kv4lWwpWEkCqEdjeo4/OqAYx2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNBzddLN l07/LEb37wtAPUS229PAMB8GA1UdIwQYMBaAFNXI8dyU08NIHWxpU2lWpKUo1e3D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUE0RC82QzA1NTgyNDA1 ODcxMUUzQkZFNTdDQTE1OTExRUEzMi8xY2p4M0pUVHcwZ2RiR2xUYVZha3BTalY3 Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjangzSlRUdzBnZGJHbFRhVmFrcFNqVjdjTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUE0RC82QzA1NTgyNDA1ODcxMUUzQkZFNTdDQTE1OTExRUEzMi8xY2p4M0pUVHcw Z2RiR2xUYVZha3BTalY3Y00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhbWnCdvH+2Lx1LSnL3B0EwAcn2vBf0BhvQgpGsK6bH9D5u/smmgdY MumHF+59Jr7vkSdj0Z9uozDDRxxiWwOUqYMqVAUue99LspRvysUpt5hwDSwQoB39 PC1kNWLN3/6cojps6rTeQBKcKFwjVh+N4CJfLHoVNeC2Z2lou4RS28kDZzJfcW0F wDXqnquRuOy9LRD6l61iM4MrlpusWZ/2sLYQesub3rYaXYjC62zjeZFzzmP4iXVj sRZa8HUmkpKylMaljKKVRNgie6ZVYlp2bSd/VxBPpqKi1jl/PSJb3JJo4nPWBJfB nmSmhC5MndOiBL5ilLsuBcZ/y7BrFQXL -----END CERTIFICATE-----Generated at Sat May 18 16:19:53 2024 by rpki-client on console-fra.rpki-client.org