$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft File: cxFBrwp5OqMW733dLxsF-JHFZrI.mft (raw, json) Hash identifier: lZwJt9B1uACTUCPdzFSzLDdkjEBwadE5j0ZW8TpP08w= Subject key identifier: C4:44:96:AE:A0:96:ED:CA:27:BB:6A:2A:FD:CC:55:03:26:07:00:4F Authority key identifier: 73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2 Certificate issuer: /CN=A91CDE0E/serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2 Certificate serial: 15BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft Manifest number: 15B1 Signing time: Sat 18 May 2024 17:15:03 +0000 Manifest this update: Sat 18 May 2024 17:15:03 +0000 Manifest next update: Sat 25 May 2024 17:15:03 +0000 Files and hashes: 1: cxFBrwp5OqMW733dLxsF-JHFZrI.crl (hash: 8mlUEt2UIoTFq+ScJyVRsgG0k2uBgble0gjI801Q2kE=) 2: E940EF3464B611EA9B743415C4F9AE02.roa (hash: 7Xx9UE44DwGeyKwhiiS/2v5Rq4p5F1fjKHI+6cXUu50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5562 (0x15ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDE0E/serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2 Validity Not Before: May 18 17:15:03 2024 GMT Not After : May 25 17:15:03 2024 GMT Subject: CN=6648e217-fe17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:04:ff:86:f4:db:f3:f5:ab:ab:ec:48:4e:d6: 18:70:ae:9f:c1:d1:e8:50:61:ab:b5:39:86:d7:72: e4:34:f0:ff:30:1e:da:25:3e:44:e4:c6:21:95:fd: 29:e7:f6:ae:bc:a0:0f:5c:79:25:62:57:b1:14:74: 43:79:47:b0:cb:4e:f8:d2:75:0e:64:44:5a:16:bd: 23:24:d4:e7:f6:2c:9c:f9:87:27:35:ce:06:e8:ec: 3a:0b:0a:3c:f0:de:83:79:c3:37:8a:20:c0:79:82: ce:15:9f:fd:da:a2:20:47:46:f8:53:92:bd:9f:66: 05:34:2c:14:83:a3:68:7f:73:66:3b:bc:2b:99:65: ce:59:8e:3e:25:d3:0e:96:d8:5d:6f:08:d6:47:30: 9d:38:49:16:2c:53:51:33:8e:ae:92:c7:bb:90:30: 93:9d:74:f0:e8:8f:f2:dc:d6:86:3a:2c:3f:cf:02: 48:fa:d2:e2:8b:23:69:15:50:af:4e:30:f9:13:f0: 43:32:e7:96:e0:83:99:c3:ec:b7:df:8b:20:4e:34: a1:f2:ce:65:bd:82:34:5b:87:30:af:64:31:21:aa: a1:c4:73:0b:b8:8e:7e:55:c8:81:32:f3:60:b4:7a: 99:06:14:38:fe:10:31:ec:f3:b5:52:c9:b4:0f:72: 73:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:44:96:AE:A0:96:ED:CA:27:BB:6A:2A:FD:CC:55:03:26:07:00:4F X509v3 Authority Key Identifier: keyid:73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:aa:21:4e:e8:81:a3:02:13:59:32:74:d4:85:5b:8b:24:6e: d1:ff:73:2c:69:69:ee:91:0b:6d:96:69:87:3d:72:dc:9b:4e: 30:6c:a4:d1:9d:cd:8b:37:cb:e6:31:b1:2a:10:6f:07:62:47: bc:95:64:3f:bb:68:e0:ba:79:ff:3d:52:16:cd:e6:b9:25:05: 8b:b4:dd:36:40:ee:89:61:16:3e:6d:83:63:58:b2:a5:be:20: ef:fa:0b:53:3e:a7:55:8f:d6:80:54:58:fc:25:be:0b:3a:f0: 84:a1:ae:f6:cc:ca:6f:72:58:9a:39:83:bc:fb:a3:12:79:c2: dc:85:47:b2:b2:01:98:d5:f2:ca:24:df:85:2d:6d:e9:69:3b: c0:f4:aa:6b:f1:98:ae:7b:3a:ee:58:d3:db:62:52:18:bb:7b: 9a:be:9a:5c:ad:50:55:34:ba:e8:2f:f6:b5:0a:dd:d9:96:d6: 3c:d3:b5:98:b5:27:51:4e:0c:8c:2c:47:aa:b1:66:5c:3a:31: 6a:f7:9f:57:18:83:fd:92:b0:e1:82:d3:c6:30:90:dd:66:5b: 30:82:a2:b3:09:d9:c6:d7:91:de:f4:1b:f4:bf:3f:46:e5:ea: f0:1e:4c:33:68:c4:f2:2a:d6:70:09:5b:81:fe:51:87:24:e2: fb:5b:23:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RFMEUxMTAvBgNVBAUTKDczMTE0MUFGMEE3OTNBQTMxNkVGN0RERDJGMUIwNUY4 OTFDNTY2QjIwHhcNMjQwNTE4MTcxNTAzWhcNMjQwNTI1MTcxNTAzWjAYMRYwFAYD VQQDEw02NjQ4ZTIxNy1mZTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApAT/hvTb8/Wrq+xITtYYcK6fwdHoUGGrtTmG13LkNPD/MB7aJT5E5MYhlf0p 5/auvKAPXHklYlexFHRDeUewy0740nUOZERaFr0jJNTn9iyc+YcnNc4G6Ow6Cwo8 8N6DecM3iiDAeYLOFZ/92qIgR0b4U5K9n2YFNCwUg6Nof3NmO7wrmWXOWY4+JdMO lthdbwjWRzCdOEkWLFNRM46ukse7kDCTnXTw6I/y3NaGOiw/zwJI+tLiiyNpFVCv TjD5E/BDMueW4IOZw+y334sgTjSh8s5lvYI0W4cwr2QxIaqhxHMLuI5+VciBMvNg tHqZBhQ4/hAx7PO1Usm0D3JzFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMRElq6g lu3KJ7tqKv3MVQMmBwBPMB8GA1UdIwQYMBaAFHMRQa8KeTqjFu993S8bBfiRxWay MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREUwRS82RTFFN0RFNDA1 N0MxMUU4ODJGRThFMjhDNEY5QUUwMi9jeEZCcndwNU9xTVc3MzNkTHhzRi1KSEZa ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4RkJyd3A1T3FNVzczM2RMeHNGLUpIRlpySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REUwRS82RTFFN0RFNDA1N0MxMUU4ODJGRThFMjhDNEY5QUUwMi9jeEZCcndwNU9x TVc3MzNkTHhzRi1KSEZackkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHqiFO6IGjAhNZMnTUhVuLJG7R/3MsaWnukQttlmmHPXLcm04wbKTR nc2LN8vmMbEqEG8HYke8lWQ/u2jgunn/PVIWzea5JQWLtN02QO6JYRY+bYNjWLKl viDv+gtTPqdVj9aAVFj8Jb4LOvCEoa72zMpvcliaOYO8+6MSecLchUeysgGY1fLK JN+FLW3paTvA9Kpr8ZiuezruWNPbYlIYu3uavppcrVBVNLroL/a1Ct3ZltY807WY tSdRTgyMLEeqsWZcOjFq959XGIP9krDhgtPGMJDdZlswgqKzCdnG15He9Bv0vz9G 5erwHkwzaMTyKtZwCVuB/lGHJOL7WyN2 -----END CERTIFICATE-----Generated at Sat May 18 18:12:33 2024 by rpki-client on console-fra.rpki-client.org