$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft File: CdjxREM-7h4qRDmROjZuPDxZBTc.mft (raw, json) Hash identifier: ScyViEPw4NRotue0gagxTEhBFhhakN4HqEzVj5a/wi4= Subject key identifier: 19:11:2E:5D:9D:B6:6A:F8:FF:74:BA:DD:3A:52:B8:AC:AA:94:3B:69 Authority key identifier: 09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37 Certificate issuer: /CN=A91E9635/serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537 Certificate serial: 0BB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft Manifest number: 0BA8 Signing time: Sat 18 May 2024 19:11:53 +0000 Manifest this update: Sat 18 May 2024 19:11:52 +0000 Manifest next update: Sat 25 May 2024 19:11:52 +0000 Files and hashes: 1: CdjxREM-7h4qRDmROjZuPDxZBTc.crl (hash: PB+jdVQiS4H3zOa4P/2mcrKvAqCAVNzahUXcAfOw21A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2992 (0xbb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9635/serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537 Validity Not Before: May 18 19:11:52 2024 GMT Not After : May 25 19:11:52 2024 GMT Subject: CN=6648fd78-4693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c3:1d:dc:6b:17:ab:3d:60:d0:f8:90:72:39: 4f:fb:03:56:47:a8:ac:b8:60:68:c4:f0:c5:ca:9d: 70:be:c2:69:10:e1:c7:c2:c8:98:0f:ca:38:5b:3b: fb:e7:cc:00:9d:a5:4b:0e:85:cd:83:55:cb:9a:23: d9:31:67:27:ed:10:cc:18:5f:5d:8c:10:6e:6b:12: 9a:a8:45:e0:5c:d5:90:4e:ae:8a:0a:cb:94:36:7f: a7:dd:53:b7:78:80:76:63:d8:d0:ba:c7:93:23:18: 15:cc:2c:57:d1:78:90:39:61:b9:7d:79:01:16:2b: 7f:83:77:aa:e1:8e:7d:cc:fb:16:2f:d2:d7:e9:a4: 45:b2:17:b8:82:59:c6:42:10:80:f6:b4:0f:11:c7: 83:a3:d0:fd:8a:ec:20:92:e8:22:d6:3e:9c:db:9b: dc:07:62:aa:d4:8a:60:ce:5f:20:39:eb:38:d6:b5: 86:63:53:cf:1d:4b:74:3e:7d:26:14:1c:7c:6b:d1: d8:c4:2e:95:f7:56:46:36:61:f1:9d:a0:21:3a:99: ff:39:ae:b6:ce:e8:a5:f3:90:5e:b2:95:e5:d7:cf: 32:f0:fb:57:ca:c3:99:7f:30:32:0f:93:47:17:9c: b9:db:e7:a7:ef:78:b3:8d:c1:9d:ff:aa:5d:f3:bb: f5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:11:2E:5D:9D:B6:6A:F8:FF:74:BA:DD:3A:52:B8:AC:AA:94:3B:69 X509v3 Authority Key Identifier: keyid:09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:ce:3a:48:d7:d1:c1:4e:12:8b:8e:ff:68:22:f3:f9:ca:70: 0e:0e:e7:16:c5:66:65:50:d0:96:a8:7b:6e:ed:5e:6f:4a:46: 5c:ef:d0:e1:e4:d3:a8:7e:3b:23:d1:82:27:c7:e6:38:f1:54: 6a:b8:a5:6b:b9:da:75:4e:48:4d:99:1a:cc:99:99:32:b7:38: 5b:e1:5d:2d:04:3e:27:ca:7a:0f:40:e4:30:6b:f9:5b:7f:4b: 6d:81:a2:a8:df:f6:90:b5:65:85:98:d8:65:88:e5:25:11:6e: 60:df:e1:57:aa:d0:65:55:25:44:84:9b:c0:7e:06:33:64:10: 52:20:9a:a8:a0:4b:d3:9b:45:e8:17:2e:7d:65:ea:6a:f1:36: 12:4d:c4:ef:17:9b:95:f6:00:1f:8e:90:dd:4c:ef:93:26:8a: a1:a2:50:82:d5:66:eb:73:2c:0b:c0:14:1d:b7:03:6e:d4:b6: 44:47:8b:b6:59:7c:7e:1a:07:75:c0:10:71:6c:65:6e:b1:f6: ee:79:78:45:9e:ef:87:b4:f1:9b:0c:b2:bd:1f:a0:dd:77:b9: 9b:6a:7b:5a:00:3d:c7:a7:ac:17:52:a3:75:9a:52:3e:6e:77: 93:9a:09:79:25:97:97:85:85:22:7f:25:68:12:0f:83:f0:d6: 57:7f:7f:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2MzUxMTAvBgNVBAUTKDA5RDhGMTQ0NDMzRUVFMUUyQTQ0Mzk5MTNBMzY2RTND M0M1OTA1MzcwHhcNMjQwNTE4MTkxMTUyWhcNMjQwNTI1MTkxMTUyWjAYMRYwFAYD VQQDEw02NjQ4ZmQ3OC00NjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsMd3GsXqz1g0PiQcjlP+wNWR6isuGBoxPDFyp1wvsJpEOHHwsiYD8o4Wzv7 58wAnaVLDoXNg1XLmiPZMWcn7RDMGF9djBBuaxKaqEXgXNWQTq6KCsuUNn+n3VO3 eIB2Y9jQuseTIxgVzCxX0XiQOWG5fXkBFit/g3eq4Y59zPsWL9LX6aRFshe4glnG QhCA9rQPEceDo9D9iuwgkugi1j6c25vcB2Kq1Ipgzl8gOes41rWGY1PPHUt0Pn0m FBx8a9HYxC6V91ZGNmHxnaAhOpn/Oa62zuil85BespXl188y8PtXysOZfzAyD5NH F5y52+en73izjcGd/6pd87v1UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkRLl2d tmr4/3S63TpSuKyqlDtpMB8GA1UdIwQYMBaAFAnY8URDPu4eKkQ5kTo2bjw8WQU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTYzNS9CQTY3Mzk5MEZG MjkxMUU5OTRGNEY0MTlDNEY5QUUwMi9DZGp4UkVNLTdoNHFSRG1ST2padVBEeFpC VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NkanhSRU0tN2g0cVJEbVJPalp1UER4WkJUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTYzNS9CQTY3Mzk5MEZGMjkxMUU5OTRGNEY0MTlDNEY5QUUwMi9DZGp4UkVNLTdo NHFSRG1ST2padVBEeFpCVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSzjpI19HBThKLjv9oIvP5ynAODucWxWZlUNCWqHtu7V5vSkZc79Dh 5NOofjsj0YInx+Y48VRquKVrudp1TkhNmRrMmZkytzhb4V0tBD4nynoPQOQwa/lb f0ttgaKo3/aQtWWFmNhliOUlEW5g3+FXqtBlVSVEhJvAfgYzZBBSIJqooEvTm0Xo Fy59Zepq8TYSTcTvF5uV9gAfjpDdTO+TJoqholCC1WbrcywLwBQdtwNu1LZER4u2 WXx+Ggd1wBBxbGVusfbueXhFnu+HtPGbDLK9H6Ddd7mbantaAD3Hp6wXUqN1mlI+ bneTmgl5JZeXhYUifyVoEg+D8NZXf38h -----END CERTIFICATE-----Generated at Sat May 18 19:56:07 2024 by rpki-client on console-fra.rpki-client.org