$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft File: cxr37OuNcapcrpOXPuGmWXYUwkQ.mft (raw, json) Hash identifier: JVFZ1++fKIxwYV66wTGbTHmN2mMtq4qiypenlVbiXVo= Subject key identifier: 08:95:98:4C:75:FA:DC:67:B3:A0:FC:AC:A8:2C:54:F4:D5:60:F0:CF Authority key identifier: 73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44 Certificate issuer: /CN=A9169E68/serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244 Certificate serial: 070F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft Manifest number: 070A Signing time: Mon 06 May 2024 22:41:48 +0000 Manifest this update: Mon 06 May 2024 22:41:48 +0000 Manifest next update: Mon 13 May 2024 22:41:48 +0000 Files and hashes: 1: cxr37OuNcapcrpOXPuGmWXYUwkQ.crl (hash: Llt4TvjE6942T20BnPjCGSH9uzvbSL0/fTluQEgkOwg=) 2: 6A23B8EAF25411EA9DE4FF2DC4F9AE02.roa (hash: GY6iG3mI54ZOqWSZO04Mflmm/Rhf06jLZ1mpHCp28Bg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 22:41:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1807 (0x70f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169E68/serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244 Validity Not Before: May 6 22:41:48 2024 GMT Not After : May 13 22:41:48 2024 GMT Subject: CN=66395cac-1f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:28:ad:2e:02:cd:87:84:7d:05:c1:29:a7:d5: 76:a6:30:20:32:df:5f:e8:2a:b4:7a:c1:f4:d1:6e: bc:1c:ad:a4:cb:dd:b7:6c:c0:7a:77:b9:05:3b:ea: 15:02:7e:f7:f9:16:c2:a0:a3:b7:b7:46:9e:54:9a: a4:fa:2f:e6:86:55:8f:88:46:d0:b0:6d:4c:f6:73: 91:32:7c:e6:fa:39:a7:36:08:fc:a0:32:b0:1d:25: a3:b3:49:7f:56:30:c6:10:8d:20:09:09:46:4f:f3: c9:7d:15:98:e5:51:00:78:f3:30:41:93:0b:b8:ac: 3a:5d:e5:3e:c8:04:2d:66:b6:fd:b4:5f:30:bc:9a: 4d:bd:ba:80:1f:78:fb:7d:34:2b:db:91:a4:1d:37: 85:b5:63:f2:d2:ca:72:f6:03:56:70:19:86:64:7a: 6c:50:20:fc:04:6b:c2:28:c7:61:f8:8e:84:5b:5e: 12:1e:89:a7:77:fe:92:b7:13:6c:7c:1e:7a:c5:48: 45:2d:ab:05:4b:27:0a:87:00:5a:e5:9a:4f:f4:b9: 28:95:dc:74:64:f9:2a:eb:d7:d0:1a:cc:f2:56:b5: 87:d9:93:cf:ef:a8:d7:2c:1e:75:b1:6d:9d:71:e0: b8:4d:e3:49:43:16:46:31:44:c0:e1:71:9f:cb:9c: 40:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:95:98:4C:75:FA:DC:67:B3:A0:FC:AC:A8:2C:54:F4:D5:60:F0:CF X509v3 Authority Key Identifier: keyid:73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f6:32:e2:a6:cc:4a:7c:86:68:c1:75:84:8f:98:a5:7b:60: d1:34:11:af:83:16:b4:82:3e:fa:7b:4e:91:4e:cd:b8:b8:1c: b2:df:4c:18:b8:2b:4e:ca:9a:95:b5:fb:4e:35:c1:7f:4b:77: 94:5b:43:f8:38:75:aa:08:e6:55:ae:5b:32:5e:54:43:b6:bd: f4:0d:b4:37:6b:ea:19:df:da:0d:87:0b:b3:c2:c5:87:01:f6: aa:a6:fe:23:bf:10:b7:97:81:4d:e4:c4:e8:4d:ae:ce:17:5c: f8:74:34:12:e6:3a:2f:95:d9:63:b8:69:87:48:b2:f2:11:80: a6:f8:51:d5:54:66:41:0e:c0:8c:21:c9:fe:16:81:43:e6:f9: 25:dc:7c:3c:76:10:ae:81:6e:49:fd:5f:cd:c8:60:81:61:8a: ff:30:da:cf:03:c9:f0:ae:eb:5b:75:ca:3d:c0:32:91:3a:ef: ef:90:76:65:78:ec:72:ab:05:52:c9:70:76:cd:c2:71:cc:17: 4e:43:f1:01:eb:8b:bc:d9:4a:07:2d:d9:e5:14:07:51:cb:e0: 8e:a3:b4:45:47:37:7a:34:5f:33:3e:5e:d1:79:af:15:dc:1a: 4d:39:22:ad:18:ea:10:9d:80:d5:2f:03:b8:34:7a:6a:6f:2d: e3:f1:1c:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlFNjgxMTAvBgNVBAUTKDczMUFGN0VDRUI4RDcxQUE1Q0FFOTM5NzNFRTFBNjU5 NzYxNEMyNDQwHhcNMjQwNTA2MjI0MTQ4WhcNMjQwNTEzMjI0MTQ4WjAYMRYwFAYD VQQDEw02NjM5NWNhYy0xZjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoyitLgLNh4R9BcEpp9V2pjAgMt9f6Cq0esH00W68HK2ky923bMB6d7kFO+oV An73+RbCoKO3t0aeVJqk+i/mhlWPiEbQsG1M9nORMnzm+jmnNgj8oDKwHSWjs0l/ VjDGEI0gCQlGT/PJfRWY5VEAePMwQZMLuKw6XeU+yAQtZrb9tF8wvJpNvbqAH3j7 fTQr25GkHTeFtWPy0spy9gNWcBmGZHpsUCD8BGvCKMdh+I6EW14SHomnd/6StxNs fB56xUhFLasFSycKhwBa5ZpP9Lkoldx0ZPkq69fQGszyVrWH2ZPP76jXLB51sW2d ceC4TeNJQxZGMUTA4XGfy5xA4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAiVmEx1 +txns6D8rKgsVPTVYPDPMB8GA1UdIwQYMBaAFHMa9+zrjXGqXK6Tlz7hpll2FMJE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUU2OC82MzIyQTMzQ0Yy NTIxMUVBQkI4RUI0MEZDNEY5QUUwMi9jeHIzN091TmNhcGNycE9YUHVHbVdYWVV3 a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4cjM3T3VOY2FwY3JwT1hQdUdtV1hZVXdrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUU2OC82MzIyQTMzQ0YyNTIxMUVBQkI4RUI0MEZDNEY5QUUwMi9jeHIzN091TmNh cGNycE9YUHVHbVdYWVV3a1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO9jLipsxKfIZowXWEj5ile2DRNBGvgxa0gj76e06RTs24uByy30wY uCtOypqVtftONcF/S3eUW0P4OHWqCOZVrlsyXlRDtr30DbQ3a+oZ39oNhwuzwsWH Afaqpv4jvxC3l4FN5MToTa7OF1z4dDQS5jovldljuGmHSLLyEYCm+FHVVGZBDsCM Icn+FoFD5vkl3Hw8dhCugW5J/V/NyGCBYYr/MNrPA8nwrutbdco9wDKROu/vkHZl eOxyqwVSyXB2zcJxzBdOQ/EB64u82UoHLdnlFAdRy+COo7RFRzd6NF8zPl7Rea8V 3BpNOSKtGOoQnYDVLwO4NHpqby3j8RzC -----END CERTIFICATE-----Generated at Tue May 7 00:53:17 2024 by rpki-client on console-ams.rpki-client.org