$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft File: CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft (raw, json) Hash identifier: sMAJG2yWgRI7gE7C39tjMRLIHu8u/m+U2nNXrLd4/Pg= Subject key identifier: 73:69:55:C8:B0:F4:13:EE:DF:AF:F0:5C:FF:ED:AB:D4:18:0F:E5:37 Authority key identifier: 0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F Certificate issuer: /CN=A91FFE9F/serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F Certificate serial: 0E64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft Manifest number: 0E4F Signing time: Sat 18 May 2024 18:25:39 +0000 Manifest this update: Sat 18 May 2024 18:25:39 +0000 Manifest next update: Sat 25 May 2024 18:25:39 +0000 Files and hashes: 1: CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl (hash: KDbQNuKtn7afZlhJvfYuEGjzdn5mGLR0ymyQNPFu97Q=) 2: 6153EE40A64911EEA2F9C24AC4F9AE02.roa (hash: QIdbycmAzICjdq4Ejm56/thwNV4IPuBoSnigpujRkHg=) 3: D6559988887511EEB43FE44BC4F9AE02.roa (hash: OslPj8CJ5FYXOt/G/Lsfkkoc++VRrntRZpo+WGrMkLE=) 4: D927A2DAA64A11EE8316D651C4F9AE02.roa (hash: 3Ys9i2rW+0uSjWkapdAScDQChG9tqZSNsFf5TZC0+ZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3684 (0xe64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFE9F/serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F Validity Not Before: May 18 18:25:39 2024 GMT Not After : May 25 18:25:39 2024 GMT Subject: CN=6648f2a3-ecac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:37:b2:02:88:01:ce:68:53:ee:15:02:28:65: aa:69:36:09:f5:d5:23:3a:77:f2:2b:9f:1b:e4:a7: bd:16:b3:fe:ff:44:b7:72:90:67:f5:9c:43:00:d7: 28:4e:cf:aa:7a:da:00:b2:0f:87:5c:10:2e:7c:46: 32:c0:cd:31:ae:9c:e0:90:8b:8b:02:57:90:45:00: dd:8e:90:6e:c1:79:e7:39:a5:32:83:e1:2d:d6:b6: 98:80:20:88:3b:67:a8:b1:f5:ce:e5:77:d0:05:60: b6:9a:8a:79:36:7a:43:df:64:32:8c:0b:89:66:a2: 2c:6f:26:23:c5:d3:04:d3:70:a4:8d:c2:74:a1:07: c2:dc:a5:55:f4:dd:50:9f:64:32:0b:5d:a9:9a:f4: 9f:15:71:29:f2:8a:dc:c4:4c:9c:cc:5e:04:73:25: 23:11:c1:ec:27:d8:a0:cd:db:99:b0:1e:88:0a:d7: ed:46:6a:57:e4:60:a9:59:4b:0c:a9:f0:4f:24:d6: d1:71:23:f6:f9:b1:fb:c2:a8:fb:cf:5d:2f:97:b6: ab:6b:63:b7:f9:e5:08:7e:89:59:1d:94:67:f5:91: 4d:81:a0:6a:e4:96:dd:ee:2d:c9:bb:49:eb:3d:7e: f2:b1:06:54:df:a6:11:86:35:4c:58:59:71:41:e7: 19:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:69:55:C8:B0:F4:13:EE:DF:AF:F0:5C:FF:ED:AB:D4:18:0F:E5:37 X509v3 Authority Key Identifier: keyid:0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:c2:ff:af:7c:93:f0:8d:5f:6b:00:79:91:00:3a:dd:8f:23: d0:5b:3c:42:ea:a4:a9:2f:cf:98:3f:36:61:c9:dd:28:67:17: 39:4d:e9:68:4a:df:cb:61:d3:4b:c8:8c:2d:15:48:8d:c5:84: 3f:6a:b9:a2:4c:71:ee:85:b8:af:9c:94:84:0a:3c:fe:4f:65: 17:2a:93:82:f6:15:6c:43:d8:23:3d:cd:d2:a6:48:08:5a:c0: 21:b6:05:e0:f3:51:fd:08:c9:08:23:de:1f:be:b9:b4:0a:67: 5e:01:b0:22:73:c5:ba:39:61:ef:07:ab:78:e2:83:16:b9:c8: 6a:ce:fd:3a:a4:28:f0:a1:7f:89:c8:3c:48:cd:8b:aa:1a:d4: dd:a9:ba:41:2d:db:e7:42:ad:ad:db:f8:90:b2:c8:c7:b9:ce: ca:a4:e2:10:94:58:e7:84:a2:1c:84:51:d6:8e:ed:0f:7f:10: 8e:77:4b:cb:07:c2:86:53:8a:f4:3c:bb:e8:f5:88:12:72:28: c2:d3:9b:01:7d:2b:6f:7f:f8:84:54:47:25:66:cd:3f:14:0f: ef:b2:b6:1a:f0:a2:c5:3b:86:1f:7e:b3:14:61:22:ee:24:41: 11:36:67:f4:77:0b:33:72:4a:d7:11:a7:bd:51:42:d7:b8:d8: a7:3a:99:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZFOUYxMTAvBgNVBAUTKDBCMDk1MjM2MjM0RTY5MzVCQUEzNDFFMzIzNUEzREI0 NzNBQ0M2N0YwHhcNMjQwNTE4MTgyNTM5WhcNMjQwNTI1MTgyNTM5WjAYMRYwFAYD VQQDEw02NjQ4ZjJhMy1lY2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3zeyAogBzmhT7hUCKGWqaTYJ9dUjOnfyK58b5Ke9FrP+/0S3cpBn9ZxDANco Ts+qetoAsg+HXBAufEYywM0xrpzgkIuLAleQRQDdjpBuwXnnOaUyg+Et1raYgCCI O2eosfXO5XfQBWC2mop5NnpD32QyjAuJZqIsbyYjxdME03CkjcJ0oQfC3KVV9N1Q n2QyC12pmvSfFXEp8orcxEyczF4EcyUjEcHsJ9igzduZsB6ICtftRmpX5GCpWUsM qfBPJNbRcSP2+bH7wqj7z10vl7ara2O3+eUIfolZHZRn9ZFNgaBq5Jbd7i3Ju0nr PX7ysQZU36YRhjVMWFlxQecZWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNpVciw 9BPu36/wXP/tq9QYD+U3MB8GA1UdIwQYMBaAFAsJUjYjTmk1uqNB4yNaPbRzrMZ/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkU5Ri84QkUwNjNFMDdC MTYxMUU5OTk0OUFDNTFDNEY5QUUwMi9Dd2xTTmlOT2FUVzZvMEhqSTFvOXRIT3N4 bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N3bFNOaU5PYVRXNm8wSGpJMW85dEhPc3huOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkU5Ri84QkUwNjNFMDdCMTYxMUU5OTk0OUFDNTFDNEY5QUUwMi9Dd2xTTmlOT2FU VzZvMEhqSTFvOXRIT3N4bjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMwv+vfJPwjV9rAHmRADrdjyPQWzxC6qSpL8+YPzZhyd0oZxc5Telo St/LYdNLyIwtFUiNxYQ/armiTHHuhbivnJSECjz+T2UXKpOC9hVsQ9gjPc3SpkgI WsAhtgXg81H9CMkII94fvrm0CmdeAbAic8W6OWHvB6t44oMWuchqzv06pCjwoX+J yDxIzYuqGtTdqbpBLdvnQq2t2/iQssjHuc7KpOIQlFjnhKIchFHWju0PfxCOd0vL B8KGU4r0PLvo9YgScijC05sBfStvf/iEVEclZs0/FA/vsrYa8KLFO4YffrMUYSLu JEERNmf0dwszckrXEae9UULXuNinOpl/ -----END CERTIFICATE-----Generated at Sat May 18 19:21:06 2024 by rpki-client on console-fra.rpki-client.org