$ rpki-client -vvf rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft File: r-cn5CCdzfgnYldLXjPICDeHoY8.mft (raw, json) Hash identifier: OfPArHpI+bVt0TGP7UdMdSZhgs/4QhXZPX/kdae/YME= Subject key identifier: 5E:57:7A:AB:7A:09:EA:F8:50:B5:C1:DD:3C:F2:63:92:1C:65:15:10 Authority key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F Certificate issuer: /CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Certificate serial: 1DD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft Manifest number: 1D7D Signing time: Sat 04 May 2024 16:33:26 +0000 Manifest this update: Sat 04 May 2024 16:33:25 +0000 Manifest next update: Sat 11 May 2024 16:33:25 +0000 Files and hashes: 1: r-cn5CCdzfgnYldLXjPICDeHoY8.crl (hash: HWUJEO4p51s3xli19kyHgU/3v5ivpcKA46fZOUu5dRA=) 2: 7EFB8A6E885311E6BDE50A80C4F9AE02.roa (hash: TImxH9JTLcXW5IxN9KJ3rWqoq711teMsa+dHA5TQbng=) 3: D80B013A172011EEB3A9C124C4F9AE02.roa (hash: NQthKb3GChge6T5RUI263G1tlKE7DYI5g1q3XSDyXjY=) 4: 882AC358E1F511EE9188A919C4F9AE02.roa (hash: fGaqipOEAJZROlVHqINmszGLW3Dq7A8zFedH5L1wbHs=) 5: CF946690E5E711EE89AF4E5AC4F9AE02.roa (hash: zy+QFw5iZEfYuF0zeVE4tfDmqgvqeWibFWaXm9tRuko=) 6: 5C6A7BE6E1F511EEA08A5519C4F9AE02.roa (hash: /c8FLvOyw45M3Wp6VhAYx9qw35M/yT9sGg6i1whIIQ0=) 7: B0ACAB905A2011EA9E34F70BC4F9AE02.roa (hash: 4bDo/tDT4JePQ+cpzsR27sq8dyUPCkgeO1cf4JyV7Mg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7640 (0x1dd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Validity Not Before: May 4 16:33:25 2024 GMT Not After : May 11 16:33:25 2024 GMT Subject: CN=66366356-2017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2c:56:8b:85:b2:38:8d:f9:54:70:27:64:58: 00:56:af:35:ca:82:bd:c4:01:9f:1a:28:dc:42:da: a3:c5:6d:dd:6f:e2:4c:ed:ae:3d:75:0d:05:5a:e9: cb:57:a2:df:94:2a:62:42:a2:55:2a:42:10:71:23: bd:50:eb:39:a8:dc:57:95:2d:8b:ac:93:43:d0:63: ec:60:18:fb:c1:e8:4f:33:e7:07:d8:c0:54:f1:b7: 3c:58:aa:88:ac:26:b6:c5:9e:f5:84:8d:49:bf:3e: 84:e2:3e:1e:5f:ec:d5:cb:9e:78:bf:a1:ae:eb:fd: 9b:57:3f:97:d6:cf:cf:6a:9e:59:2d:92:ee:59:87: af:37:9f:5e:14:a6:8b:21:07:dc:32:0a:2c:51:fb: ad:cc:f8:17:e5:a3:49:a5:55:43:f0:6a:36:bd:40: 7a:ea:50:e4:36:3f:e9:76:0f:2e:88:0d:7f:e7:be: ff:44:e9:a1:ce:44:5b:0a:e9:da:27:2a:fc:58:61: c4:2a:13:0a:55:59:c7:47:70:1b:31:e0:a4:a0:eb: fa:bf:c0:a4:8e:3d:98:96:29:ea:41:7f:23:c3:61: f3:38:f7:21:8f:9f:a8:68:e4:18:cc:4c:4e:13:57: 56:4d:ac:17:9b:48:fe:7e:b9:5c:6e:7f:0d:6c:f7: d4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:57:7A:AB:7A:09:EA:F8:50:B5:C1:DD:3C:F2:63:92:1C:65:15:10 X509v3 Authority Key Identifier: keyid:AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:dd:21:b2:fe:7b:d9:f7:e5:a5:c9:a9:ce:90:86:0b:98:40: 77:ea:06:c0:07:38:8a:5c:39:06:7a:2e:06:86:f0:e3:aa:28: 9b:cd:e8:a4:49:02:f7:3c:9c:21:af:c0:e4:b5:1f:30:61:e7: 63:18:de:c7:ce:ce:5a:39:69:b0:c2:ab:c7:36:22:60:49:6a: f5:3c:c3:e3:73:cd:5e:6a:65:43:f6:a6:a6:ff:4d:65:bb:96: af:5c:2a:16:67:ed:c7:25:0c:28:b9:f3:5b:ba:8d:f4:bd:36: 36:89:ae:8a:e9:27:3b:57:84:d9:a1:51:69:9b:47:70:f7:76: aa:80:a7:45:5c:d4:cf:d0:48:4c:1e:44:30:19:e8:9e:86:30: 8b:59:60:0d:91:8f:fe:11:de:84:c4:9d:2c:9c:af:78:4f:f1: e9:5e:95:7e:5b:8d:dc:be:2e:37:b8:e1:04:59:58:ce:03:82: 3e:63:1a:73:28:a3:db:e1:b6:b9:40:6b:37:72:19:9a:ed:73: c6:6c:6f:17:4c:82:eb:d5:fa:30:ad:f1:9c:7b:80:a7:52:a7: 88:7d:61:fc:dd:ac:af:b0:c1:97:ff:b0:a4:9a:8e:9a:99:4a: c9:b9:8d:7c:ff:2a:21:af:46:44:ec:2b:59:a2:16:26:87:b3: 8d:f6:9c:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFFNUYxMTAvBgNVBAUTKEFGRTcyN0U0MjA5RENERjgyNzYyNTc0QjVFMzNDODA4 Mzc4N0ExOEYwHhcNMjQwNTA0MTYzMzI1WhcNMjQwNTExMTYzMzI1WjAYMRYwFAYD VQQDEw02NjM2NjM1Ni0yMDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSxWi4WyOI35VHAnZFgAVq81yoK9xAGfGijcQtqjxW3db+JM7a49dQ0FWunL V6LflCpiQqJVKkIQcSO9UOs5qNxXlS2LrJND0GPsYBj7wehPM+cH2MBU8bc8WKqI rCa2xZ71hI1Jvz6E4j4eX+zVy554v6Gu6/2bVz+X1s/Pap5ZLZLuWYevN59eFKaL IQfcMgosUfutzPgX5aNJpVVD8Go2vUB66lDkNj/pdg8uiA1/577/ROmhzkRbCuna Jyr8WGHEKhMKVVnHR3AbMeCkoOv6v8Ckjj2YlinqQX8jw2HzOPchj5+oaOQYzExO E1dWTawXm0j+frlcbn8NbPfUsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5Xeqt6 Cer4ULXB3TzyY5IcZRUQMB8GA1UdIwQYMBaAFK/nJ+Qgnc34J2JXS14zyAg3h6GP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUU1Ri84Qjc5QjY3ODg4 NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpmZ25ZbGRMWGpQSUNEZUhv WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItY241Q0NkemZnbllsZExYalBJQ0RlSG9ZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUU1Ri84Qjc5QjY3ODg4NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpm Z25ZbGRMWGpQSUNEZUhvWTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA03SGy/nvZ9+WlyanOkIYLmEB36gbABziKXDkGei4GhvDjqiibzeik SQL3PJwhr8DktR8wYedjGN7Hzs5aOWmwwqvHNiJgSWr1PMPjc81eamVD9qam/01l u5avXCoWZ+3HJQwoufNbuo30vTY2ia6K6Sc7V4TZoVFpm0dw93aqgKdFXNTP0EhM HkQwGeiehjCLWWANkY/+Ed6ExJ0snK94T/HpXpV+W43cvi43uOEEWVjOA4I+Yxpz KKPb4ba5QGs3chma7XPGbG8XTILr1fowrfGce4CnUqeIfWH83ayvsMGX/7Ckmo6a mUrJuY18/yohr0ZE7CtZohYmh7ON9pzN -----END CERTIFICATE-----Generated at Sat May 4 17:19:48 2024 by rpki-client on console-fra.rpki-client.org