$ rpki-client -vvf rpki.apnic.net/member_repository/A911D8BA/48B40A8401D411EDA92EAA2DC4F9AE02/cxjac6CrPdCQ5rc_xN8NdRAYXPE.mft File: cxjac6CrPdCQ5rc_xN8NdRAYXPE.mft (raw, json) Hash identifier: CNvzTejkh/4hV+cXJCgozkLglXmE1wUu0Xca5ihXPf8= Subject key identifier: C5:C6:7C:CE:7F:A3:E0:EF:D2:8B:70:40:B8:24:4D:B2:7C:3A:68:0F Authority key identifier: 73:18:DA:73:A0:AB:3D:D0:90:E6:B7:3F:C4:DF:0D:75:10:18:5C:F1 Certificate issuer: /CN=A911D8BA/serialNumber=7318DA73A0AB3DD090E6B73FC4DF0D7510185CF1 Certificate serial: 01D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxjac6CrPdCQ5rc_xN8NdRAYXPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D8BA/48B40A8401D411EDA92EAA2DC4F9AE02/cxjac6CrPdCQ5rc_xN8NdRAYXPE.mft Manifest number: 01CB Signing time: Wed 01 May 2024 04:40:50 +0000 Manifest this update: Wed 01 May 2024 04:40:49 +0000 Manifest next update: Wed 08 May 2024 04:40:49 +0000 Files and hashes: 1: cxjac6CrPdCQ5rc_xN8NdRAYXPE.crl (hash: 2Ih1dV8hKg36ZvFku9yFDdJOYT8G6d45ah5/dpdBves=) 2: 9F393A5801D611EDA3BFA62EC4F9AE02.roa (hash: OrBeQ7nQdK2tiYksQ5hHLLr4gJzqWAkLwYiHXPFHMac=) 3: 9E92DC7601D611EDA3BFA62EC4F9AE02.roa (hash: 4sJrY40XID6x70wPMbTytvzBnbXtyYy2Q8zs31+4ta8=) 4: 9FE7159201D611EDA3BFA62EC4F9AE02.roa (hash: VVdMpQJfWJzeEGllDWHOaKV26ooqf2lxHQS0gQIblUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D8BA/48B40A8401D411EDA92EAA2DC4F9AE02/cxjac6CrPdCQ5rc_xN8NdRAYXPE.crl rsync://rpki.apnic.net/member_repository/A911D8BA/48B40A8401D411EDA92EAA2DC4F9AE02/cxjac6CrPdCQ5rc_xN8NdRAYXPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxjac6CrPdCQ5rc_xN8NdRAYXPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 465 (0x1d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D8BA/serialNumber=7318DA73A0AB3DD090E6B73FC4DF0D7510185CF1 Validity Not Before: May 1 04:40:49 2024 GMT Not After : May 8 04:40:49 2024 GMT Subject: CN=6631c7d1-65f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a4:69:4e:79:8d:5f:ed:30:55:69:31:46:ae: 0a:9a:a9:83:c5:3b:9c:e7:47:2c:44:92:f3:5b:95: 3f:70:8b:14:09:1f:af:a9:91:15:ef:b4:e5:84:71: bd:79:f3:a7:b1:b6:3e:ee:d8:15:88:05:50:60:d5: 1c:11:27:4a:17:6e:e7:0f:ee:c2:2a:6a:be:29:69: 7e:ba:a9:b2:fd:a3:55:d9:6b:85:fc:a8:e1:e0:3c: 31:5e:5a:b9:2d:8f:b2:03:8a:9d:a6:ab:57:e3:85: 45:ad:65:80:83:4c:41:bd:cf:e9:c4:ca:8f:ff:27: 4f:1f:e7:d5:4e:21:d6:82:26:fb:e0:df:a2:86:99: 43:72:51:de:ed:95:c1:31:fb:2b:67:87:4c:01:44: d8:5e:20:ca:37:eb:4c:ef:34:24:94:ff:b3:f6:33: e2:3e:12:f1:a7:64:57:c5:51:b6:b8:a5:41:94:2d: 34:76:87:4a:49:16:92:2f:70:e0:32:66:b0:d0:6a: 69:03:0d:4e:7e:dc:d7:70:bd:7c:6d:b3:12:3a:42: 86:bf:5a:de:c7:6e:b6:54:d3:84:6b:2e:18:de:7a: 20:63:6f:39:d4:2a:b1:dc:94:d3:30:e1:15:34:3d: 27:a5:d5:da:0d:58:5c:21:ff:f3:6b:5e:ed:2a:24: 07:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C6:7C:CE:7F:A3:E0:EF:D2:8B:70:40:B8:24:4D:B2:7C:3A:68:0F X509v3 Authority Key Identifier: keyid:73:18:DA:73:A0:AB:3D:D0:90:E6:B7:3F:C4:DF:0D:75:10:18:5C:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D8BA/48B40A8401D411EDA92EAA2DC4F9AE02/cxjac6CrPdCQ5rc_xN8NdRAYXPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxjac6CrPdCQ5rc_xN8NdRAYXPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D8BA/48B40A8401D411EDA92EAA2DC4F9AE02/cxjac6CrPdCQ5rc_xN8NdRAYXPE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:11:89:6f:6f:5a:bc:41:12:95:c0:e0:98:8d:32:51:fb:eb: 7f:27:10:fb:18:cc:16:23:28:ec:dc:8d:22:9e:57:1b:b9:e5: b1:4d:39:75:5d:80:e6:67:52:bf:00:52:f4:5c:21:9a:96:44: 04:5e:b9:fd:04:3b:64:25:ce:c1:4d:93:d6:33:a8:27:5b:1f: f2:05:f2:90:38:f1:a9:01:73:24:9b:ab:25:cd:48:a9:f5:03: 09:bb:3c:71:d5:3d:42:76:a1:ca:9e:10:62:b7:dd:f4:d8:c6: d7:f7:56:5e:16:bc:d1:aa:0f:8e:20:e8:02:9f:eb:57:6d:ef: c2:aa:6c:64:2d:68:d6:de:4a:69:fd:c7:a0:b2:47:11:64:22: a1:c8:28:4e:de:14:be:48:7e:c9:7e:3c:78:f2:d5:9f:59:52: 77:16:50:3b:62:a4:b8:f3:4a:1d:68:18:e5:90:57:f8:47:bf: 89:36:11:c8:e6:41:00:ea:dc:67:be:1e:39:5e:2f:c7:32:7a: 75:95:21:37:7a:31:42:95:72:10:3c:ce:20:c0:02:58:24:a2: 73:a8:a4:28:59:72:fc:ce:ff:24:58:89:2a:95:3d:a5:15:e3: eb:83:9d:5a:da:83:27:62:97:dd:11:74:3e:d0:83:76:74:e4: b9:c2:ad:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ4QkExMTAvBgNVBAUTKDczMThEQTczQTBBQjNERDA5MEU2QjczRkM0REYwRDc1 MTAxODVDRjEwHhcNMjQwNTAxMDQ0MDQ5WhcNMjQwNTA4MDQ0MDQ5WjAYMRYwFAYD VQQDEw02NjMxYzdkMS02NWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA16RpTnmNX+0wVWkxRq4KmqmDxTuc50csRJLzW5U/cIsUCR+vqZEV77TlhHG9 efOnsbY+7tgViAVQYNUcESdKF27nD+7CKmq+KWl+uqmy/aNV2WuF/Kjh4DwxXlq5 LY+yA4qdpqtX44VFrWWAg0xBvc/pxMqP/ydPH+fVTiHWgib74N+ihplDclHe7ZXB MfsrZ4dMAUTYXiDKN+tM7zQklP+z9jPiPhLxp2RXxVG2uKVBlC00dodKSRaSL3Dg Mmaw0GppAw1OftzXcL18bbMSOkKGv1rex262VNOEay4Y3nogY2851Cqx3JTTMOEV ND0npdXaDVhcIf/za17tKiQHdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXGfM5/ o+Dv0otwQLgkTbJ8OmgPMB8GA1UdIwQYMBaAFHMY2nOgqz3QkOa3P8TfDXUQGFzx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDhCQS80OEI0MEE4NDAx RDQxMUVEQTkyRUFBMkRDNEY5QUUwMi9jeGphYzZDclBkQ1E1cmNfeE44TmRSQVlY UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4amFjNkNyUGRDUTVyY194TjhOZFJBWVhQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDhCQS80OEI0MEE4NDAxRDQxMUVEQTkyRUFBMkRDNEY5QUUwMi9jeGphYzZDclBk Q1E1cmNfeE44TmRSQVlYUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7EYlvb1q8QRKVwOCYjTJR++t/JxD7GMwWIyjs3I0inlcbueWxTTl1 XYDmZ1K/AFL0XCGalkQEXrn9BDtkJc7BTZPWM6gnWx/yBfKQOPGpAXMkm6slzUip 9QMJuzxx1T1CdqHKnhBit9302MbX91ZeFrzRqg+OIOgCn+tXbe/CqmxkLWjW3kpp /cegskcRZCKhyChO3hS+SH7Jfjx48tWfWVJ3FlA7YqS480odaBjlkFf4R7+JNhHI 5kEA6txnvh45Xi/HMnp1lSE3ejFClXIQPM4gwAJYJKJzqKQoWXL8zv8kWIkqlT2l FePrg51a2oMnYpfdEXQ+0IN2dOS5wq2Y -----END CERTIFICATE-----Generated at Wed May 1 05:55:38 2024 by rpki-client on console-ams.rpki-client.org