$ rpki-client -vvf rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.mft File: cXie4rLIt_u60_eFpd3s7xXMFaQ.mft (raw, json) Hash identifier: Usg12YoF94Ldmdva+6GZjgudT78UnpuecsfZfKu4/LM= Subject key identifier: 58:E5:1A:48:19:B9:52:0F:32:70:F0:93:C9:38:64:8F:E8:36:16:50 Authority key identifier: 71:78:9E:E2:B2:C8:B7:FB:BA:D3:F7:85:A5:DD:EC:EF:15:CC:15:A4 Certificate issuer: /CN=A9138171/serialNumber=71789EE2B2C8B7FBBAD3F785A5DDECEF15CC15A4 Certificate serial: 06B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXie4rLIt_u60_eFpd3s7xXMFaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.mft Manifest number: 06AC Signing time: Thu 02 May 2024 23:22:04 +0000 Manifest this update: Thu 02 May 2024 23:22:04 +0000 Manifest next update: Thu 09 May 2024 23:22:04 +0000 Files and hashes: 1: cXie4rLIt_u60_eFpd3s7xXMFaQ.crl (hash: tzKrmb2JTY0rihfkPSzsG62cRfxOzTJM7JlJnofKRaw=) 2: 4848EB6E18BF11EBA5E2E946C4F9AE02.roa (hash: 3hCDFMftxdMJaktdcv1bEnM2+B6FOPnkdRrwhP0xHz0=) 3: 47B8C6B018BF11EBA5E2E946C4F9AE02.roa (hash: U/tx3MraILOec7vkpEGffo5QsXSNEbPW1wesnqKSc8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.crl rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXie4rLIt_u60_eFpd3s7xXMFaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1719 (0x6b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138171/serialNumber=71789EE2B2C8B7FBBAD3F785A5DDECEF15CC15A4 Validity Not Before: May 2 23:22:04 2024 GMT Not After : May 9 23:22:04 2024 GMT Subject: CN=6634201c-39c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4c:94:8f:19:e4:07:cb:9c:19:ef:de:90:8e: 22:80:d0:ae:db:02:1e:d1:5b:fb:b8:da:1d:31:04: bf:91:d5:97:dd:f0:c3:77:2d:3f:d2:be:22:e0:37: e9:66:a7:6a:d8:42:04:7c:4f:15:a5:d3:e1:08:d0: c0:7b:f2:f7:37:30:20:04:44:dd:5f:80:c1:27:78: bf:68:bd:3b:fd:b9:9f:ab:04:f7:49:98:a3:77:43: 9e:e8:8c:0c:ad:72:e6:af:ac:2f:50:36:e5:3d:83: b3:36:2b:6d:93:69:58:80:44:08:e4:22:44:41:71: ce:57:b5:a2:ec:76:f4:e2:fa:63:1f:14:59:98:0d: 26:79:18:d2:b0:b7:1a:3a:12:60:88:f3:4a:0b:c0: 9b:bb:4a:dc:86:a9:0d:0f:34:0c:c6:7a:e1:0c:b1: 9c:d7:11:e0:19:db:12:29:2f:c4:4b:44:7a:b3:24: 5d:17:9c:d2:c4:20:17:f5:35:75:69:0f:77:b1:99: 6b:68:e2:ea:d7:43:01:9f:05:9c:68:18:4b:94:e9: 7b:27:1a:01:94:6f:c9:d0:c0:84:c6:35:9f:2b:87: 51:db:b0:41:d8:75:e3:5c:cc:b8:03:6e:21:38:84: bc:39:bf:f4:be:9e:3b:24:2e:b4:1d:8a:70:13:b4: ff:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E5:1A:48:19:B9:52:0F:32:70:F0:93:C9:38:64:8F:E8:36:16:50 X509v3 Authority Key Identifier: keyid:71:78:9E:E2:B2:C8:B7:FB:BA:D3:F7:85:A5:DD:EC:EF:15:CC:15:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXie4rLIt_u60_eFpd3s7xXMFaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:8a:76:ca:01:25:6e:89:bd:ac:77:ba:cb:03:72:db:36:29: 60:35:e0:9a:bc:43:91:46:b7:89:eb:2a:23:82:29:a2:c8:05: e5:fd:46:f6:6a:b3:20:f3:58:a9:f5:cb:72:f3:72:c5:6d:03: 6e:4a:16:77:35:5a:6b:b3:69:61:54:a6:e5:f8:eb:af:71:a9: 94:40:6f:28:10:c4:9b:a0:e0:87:a8:a6:17:75:c5:24:31:1e: ff:3c:84:d3:69:97:ba:04:0a:14:84:57:90:f1:8e:73:3c:ef: 5b:b9:de:f1:5c:69:89:f3:f0:e4:d4:7a:18:1e:90:b3:03:ef: 4c:0b:61:de:9a:d4:3d:a8:19:e2:49:54:0b:2b:7b:1d:20:5b: ea:ba:e0:6d:7c:a9:b5:57:40:9c:f3:1f:d5:d5:84:51:a8:9f: e4:9e:64:7f:db:69:6d:c5:06:9b:78:59:82:7a:50:9d:28:9d: 18:0c:bb:67:15:83:7c:d8:47:ba:91:6e:49:f3:db:ca:55:2c: 68:6a:90:51:54:c0:bc:53:6d:fd:99:5e:e2:04:ca:6c:ea:e9: dd:1e:6a:84:ae:72:dc:21:f8:56:6e:f2:c0:dc:3b:2a:67:ef: e8:d5:f7:15:6b:a5:b3:12:c6:57:ad:ba:96:76:ff:ad:b8:0c: 73:05:97:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgxNzExMTAvBgNVBAUTKDcxNzg5RUUyQjJDOEI3RkJCQUQzRjc4NUE1RERFQ0VG MTVDQzE1QTQwHhcNMjQwNTAyMjMyMjA0WhcNMjQwNTA5MjMyMjA0WjAYMRYwFAYD VQQDEw02NjM0MjAxYy0zOWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4kyUjxnkB8ucGe/ekI4igNCu2wIe0Vv7uNodMQS/kdWX3fDDdy0/0r4i4Dfp Zqdq2EIEfE8VpdPhCNDAe/L3NzAgBETdX4DBJ3i/aL07/bmfqwT3SZijd0Oe6IwM rXLmr6wvUDblPYOzNittk2lYgEQI5CJEQXHOV7Wi7Hb04vpjHxRZmA0meRjSsLca OhJgiPNKC8Cbu0rchqkNDzQMxnrhDLGc1xHgGdsSKS/ES0R6syRdF5zSxCAX9TV1 aQ93sZlraOLq10MBnwWcaBhLlOl7JxoBlG/J0MCExjWfK4dR27BB2HXjXMy4A24h OIS8Ob/0vp47JC60HYpwE7T/qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjlGkgZ uVIPMnDwk8k4ZI/oNhZQMB8GA1UdIwQYMBaAFHF4nuKyyLf7utP3haXd7O8VzBWk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODE3MS83NUQ2NEQxMjE4 QkQxMUVCOEI4NDQzNDVDNEY5QUUwMi9jWGllNHJMSXRfdTYwX2VGcGQzczd4WE1G YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NYaWU0ckxJdF91NjBfZUZwZDNzN3hYTUZhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODE3MS83NUQ2NEQxMjE4QkQxMUVCOEI4NDQzNDVDNEY5QUUwMi9jWGllNHJMSXRf dTYwX2VGcGQzczd4WE1GYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfinbKASVuib2sd7rLA3LbNilgNeCavEORRreJ6yojgimiyAXl/Ub2 arMg81ip9cty83LFbQNuShZ3NVprs2lhVKbl+OuvcamUQG8oEMSboOCHqKYXdcUk MR7/PITTaZe6BAoUhFeQ8Y5zPO9bud7xXGmJ8/Dk1HoYHpCzA+9MC2HemtQ9qBni SVQLK3sdIFvquuBtfKm1V0Cc8x/V1YRRqJ/knmR/22ltxQabeFmCelCdKJ0YDLtn FYN82Ee6kW5J89vKVSxoapBRVMC8U239mV7iBMps6undHmqErnLcIfhWbvLA3Dsq Z+/o1fcVa6WzEsZXrbqWdv+tuAxzBZe/ -----END CERTIFICATE-----Generated at Fri May 3 00:07:11 2024 by rpki-client on console-ams.rpki-client.org