$ rpki-client -vvf rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft File: CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft (raw, json) Hash identifier: 2ck5OgZoNhVk2EoDkglDZrxTuq/C0jskcLpuU/xiO44= Subject key identifier: D9:9F:0F:51:24:5F:59:FC:09:C7:C5:44:93:47:78:ED:A2:E7:4B:83 Authority key identifier: 09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30 Certificate issuer: /CN=A912559E/serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft Manifest number: 46 Signing time: Tue 07 May 2024 08:06:53 +0000 Manifest this update: Tue 07 May 2024 08:06:53 +0000 Manifest next update: Tue 14 May 2024 08:06:53 +0000 Files and hashes: 1: CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl (hash: MF0VXx1ItAMa/uc/bo8HEc7gNMMYne1kBctpRMJWDUI=) 2: E3485FDECBC511EE8716C92EC4F9AE02.roa (hash: P7p5mgn6kBZjLG5t0HDXhk9LE8raxDE4BqNJkxmApEg=) 3: E4236570CBC511EE8716C92EC4F9AE02.roa (hash: A6lKZcvIz+r1CptHeLmXJsOAs02Me8cj9pxIEDLAhPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 08:04:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912559E/serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30 Validity Not Before: May 7 08:06:53 2024 GMT Not After : May 14 08:06:53 2024 GMT Subject: CN=6639e11d-47d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:87:8c:41:f5:fd:b2:ff:30:f2:71:4f:2b:02: 21:12:52:53:8b:f9:e8:f5:d0:34:d4:8e:f1:84:af: 01:af:85:ab:a6:e9:0c:9c:cd:9a:0b:e2:97:5c:df: f6:f5:41:a1:c6:d3:ea:ca:ec:14:21:2d:d3:3d:ab: b8:15:41:16:81:82:eb:9b:4a:d8:a2:68:34:33:cb: cc:18:08:c6:61:f6:36:aa:5b:2c:8a:43:b0:86:0e: 9a:1e:ab:17:2c:67:60:2c:82:c6:25:04:87:cd:52: c1:6c:11:99:81:19:b1:d6:eb:7b:f7:62:b7:74:c3: ec:13:fa:44:03:da:b0:c9:8e:bb:ac:a2:cf:4e:72: 87:2f:54:2f:cc:a5:44:06:77:ba:66:80:2a:0c:df: 2a:92:2e:86:f5:38:ea:0a:33:bf:0c:a9:c5:43:a2: 48:df:2e:5f:58:68:9f:ee:e9:ad:d8:bf:b4:92:7a: f8:a9:36:9d:fc:2f:5e:fc:9a:09:7e:f0:33:16:6b: d8:12:9f:6e:fa:c4:6f:f7:4b:3f:23:e3:1d:29:d2: f0:8c:cd:21:4f:73:c3:77:4f:0f:09:68:58:b6:11: c4:92:10:3e:d4:a2:16:10:42:fd:d9:ae:12:3f:64: 3f:3f:84:0c:8a:78:9f:83:18:da:73:16:12:97:16: 87:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:9F:0F:51:24:5F:59:FC:09:C7:C5:44:93:47:78:ED:A2:E7:4B:83 X509v3 Authority Key Identifier: keyid:09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c5:b1:ea:42:80:bf:f9:b3:1c:8b:29:8a:9b:93:21:d6:a7: 92:86:0d:7c:a0:da:60:80:c4:d3:a8:20:1f:21:a2:02:b4:59: c9:0e:ac:c6:bb:b6:64:00:36:ed:8d:c5:6f:14:11:15:fc:b6: 3d:3d:1f:dd:08:ad:a1:24:9d:e2:8a:ab:f3:5c:99:6e:1e:68: 2e:51:6d:42:d3:95:f8:75:86:66:83:a4:4f:6a:5b:77:e3:1e: 42:d7:6b:17:29:bb:63:52:31:c0:62:2b:33:ad:64:d3:a9:c0: c1:8e:2b:d6:25:09:a3:d3:25:4e:59:ae:6b:6b:53:59:f0:96: 4c:08:b2:52:09:e9:d3:10:43:cd:04:98:aa:b7:92:81:b4:fc: 53:9f:49:b7:fe:2f:f2:ad:f8:f1:7c:e6:03:1b:68:09:b2:b4: 50:14:70:c0:0a:a9:8f:76:6e:f9:99:d7:5a:2f:65:e1:55:c5: e7:ba:d5:0c:f9:02:1e:73:f3:57:7b:44:30:f8:c0:ff:67:03: 3b:62:ae:9f:ae:aa:55:ba:00:6f:18:13:bf:e3:f5:be:50:6f: 2c:c9:72:d9:f8:85:ee:d8:2b:3c:f6:79:3f:3e:f3:ab:31:8d: 7a:cc:f0:fd:85:9d:ff:02:3e:89:81:57:fa:d6:c2:96:62:56: 30:f7:e7:17 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTU5RTExMC8GA1UEBRMoMDk0MDdGNzBGOTc3MTYwMEY0RkJBQTc1QzBGRTk2OTBE OEM2NUEzMDAeFw0yNDA1MDcwODA2NTNaFw0yNDA1MTQwODA2NTNaMBgxFjAUBgNV BAMTDTY2MzllMTFkLTQ3ZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgh4xB9f2y/zDycU8rAiESUlOL+ej10DTUjvGErwGvhaum6QyczZoL4pdc3/b1 QaHG0+rK7BQhLdM9q7gVQRaBguubStiiaDQzy8wYCMZh9jaqWyyKQ7CGDpoeqxcs Z2AsgsYlBIfNUsFsEZmBGbHW63v3Yrd0w+wT+kQD2rDJjrusos9OcocvVC/MpUQG d7pmgCoM3yqSLob1OOoKM78MqcVDokjfLl9YaJ/u6a3Yv7SSevipNp38L178mgl+ 8DMWa9gSn276xG/3Sz8j4x0p0vCMzSFPc8N3Tw8JaFi2EcSSED7UohYQQv3ZrhI/ ZD8/hAyKeJ+DGNpzFhKXFodTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2Z8PUSRf WfwJx8VEk0d47aLnS4MwHwYDVR0jBBgwFoAUCUB/cPl3FgD0+6p1wP6WkNjGWjAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1NTlFLzM1MEFGRUJFQTQ3 MzExRUVCREZCQjc1OUM0RjlBRTAyL0NVQl9jUGwzRmdEMC02cDF3UDZXa05qR1dq QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1VCX2NQbDNGZ0QwLTZwMXdQNldrTmpHV2pBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 NTlFLzM1MEFGRUJFQTQ3MzExRUVCREZCQjc1OUM0RjlBRTAyL0NVQl9jUGwzRmdE MC02cDF3UDZXa05qR1dqQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJrFsepCgL/5sxyLKYqbkyHWp5KGDXyg2mCAxNOoIB8hogK0WckOrMa7 tmQANu2NxW8UERX8tj09H90IraEkneKKq/NcmW4eaC5RbULTlfh1hmaDpE9qW3fj HkLXaxcpu2NSMcBiKzOtZNOpwMGOK9YlCaPTJU5ZrmtrU1nwlkwIslIJ6dMQQ80E mKq3koG0/FOfSbf+L/Kt+PF85gMbaAmytFAUcMAKqY92bvmZ11ovZeFVxee61Qz5 Ah5z81d7RDD4wP9nAztirp+uqlW6AG8YE7/j9b5QbyzJctn4he7YKzz2eT8+86sx jXrM8P2Fnf8CPomBV/rWwpZiVjD35xc= -----END CERTIFICATE-----Generated at Tue May 7 09:19:43 2024 by rpki-client on console-ams.rpki-client.org