$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft File: C41jj_04sfd-SOG7XfKZKc59eLU.mft (raw, json) Hash identifier: BRbT36Bt7EgT2nUQncurKwWk3lWLUWiVTQ6CM7vWlSw= Subject key identifier: C6:6B:AA:A9:FB:AA:EB:7E:9D:94:F7:8E:85:30:FC:1C:C5:DB:5A:63 Authority key identifier: 0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 Certificate issuer: /CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft Manifest number: B7 Signing time: Fri 17 May 2024 06:44:57 +0000 Manifest this update: Fri 17 May 2024 06:44:57 +0000 Manifest next update: Fri 24 May 2024 06:44:57 +0000 Files and hashes: 1: C41jj_04sfd-SOG7XfKZKc59eLU.crl (hash: Q2Bg4ebGe2+696/5xHHP7pBYNwj+kivmPkIVfkyHv2s=) 2: 19E264067A0C11EEAA6E2D82C4F9AE02.roa (hash: 7owgtKNZJKWaFEbUpSNT+QUFPCnteoO6nZf4jiwxxUk=) 3: 5D94C57C5E2311EE8D7C9433C4F9AE02.roa (hash: 3L9sx4o5VZVE9U56m2KHKx6pH41Nhd8fV88sPKs/Jrs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:44:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Validity Not Before: May 17 06:44:57 2024 GMT Not After : May 24 06:44:57 2024 GMT Subject: CN=6646fce9-d3a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:38:60:73:2c:a3:44:c5:14:e4:fe:a4:df:de: 9a:fa:bd:3c:89:39:7d:5a:64:a6:0c:f0:cd:bf:23: 14:2b:52:2b:b9:77:9c:58:76:89:28:76:3f:0b:3f: 9c:93:56:3f:6a:75:22:4f:26:71:47:25:b7:ef:d3: b9:88:61:15:b6:ef:d7:5b:5d:74:23:ad:d9:e9:19: 84:6f:d1:a7:37:ed:61:f2:18:29:e5:ba:6e:42:6f: 21:1b:41:d0:2f:bb:d1:f7:33:15:6b:c0:f9:42:04: c8:89:68:7e:66:6f:0d:09:e7:d7:41:05:08:fa:4e: 6f:ce:7c:7b:25:27:35:68:3c:89:f6:35:47:7a:fd: d5:4f:1d:94:bb:81:5e:b8:64:2c:be:55:ba:e2:17: 0d:ac:26:6e:4f:ab:61:7f:03:0b:44:be:49:42:c9: 2e:aa:56:7d:be:89:b4:ca:b6:27:97:35:1a:2b:b1: 34:38:26:f8:11:93:5e:9f:21:44:96:41:40:c7:12: f9:db:11:7a:32:1f:22:9d:68:19:eb:e8:ca:d4:56: d6:0a:04:2d:bb:d2:a6:01:58:87:b2:80:ce:84:76: 0a:5f:2d:d3:f5:5c:28:ee:60:34:29:1e:d2:14:7d: c0:c0:4d:6b:e4:a6:b7:29:da:f6:0c:02:02:67:57: 27:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:6B:AA:A9:FB:AA:EB:7E:9D:94:F7:8E:85:30:FC:1C:C5:DB:5A:63 X509v3 Authority Key Identifier: keyid:0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:2a:89:0c:08:9f:fc:66:67:f3:e5:c9:f9:e4:6a:98:cd:7d: df:09:76:f8:22:28:7a:1a:fc:6b:e1:9d:36:bc:bd:fd:97:3a: 53:92:f0:35:9e:66:54:72:0a:0a:2e:aa:0c:bc:eb:2f:8e:f6: 7e:6a:29:02:65:e9:53:b8:74:5b:63:f0:c0:d7:cd:75:cc:f9: 93:12:4d:63:2d:4a:99:f4:ad:98:d9:c7:e8:03:3b:d3:e6:e7: 53:29:b5:7f:1d:13:a5:ac:a9:d7:63:77:73:df:69:c6:d8:ee: 62:0a:f8:b4:bb:3d:b0:df:17:d3:ba:cd:22:dd:ae:c5:73:a4: 01:60:3c:cd:8d:3b:6d:71:ef:0a:7f:cb:32:59:68:8a:a4:9f: 79:a3:91:6c:be:71:bc:2b:ea:54:84:91:76:e2:fc:57:73:6f: 10:54:31:52:85:8d:66:6a:10:f2:29:21:7a:53:34:6d:9b:6a: 72:d8:63:b1:4a:26:be:ac:1a:2b:16:fb:de:03:9d:b1:33:66: 2d:7e:62:b4:a6:6c:0b:a6:1a:1f:0d:3a:ef:29:d7:cc:5f:79: 7a:69:af:77:ef:5d:e2:4e:7b:54:7c:52:13:13:82:b1:2d:c4: f5:57:dd:1a:df:75:66:ef:dc:f9:ba:e7:9a:e6:7c:4e:6d:dd: 0e:95:fd:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFQTcxMTAvBgNVBAUTKDBCOEQ2MzhGRkQzOEIxRjc3RTQ4RTFCQjVERjI5OTI5 Q0U3RDc4QjUwHhcNMjQwNTE3MDY0NDU3WhcNMjQwNTI0MDY0NDU3WjAYMRYwFAYD VQQDEw02NjQ2ZmNlOS1kM2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtThgcyyjRMUU5P6k396a+r08iTl9WmSmDPDNvyMUK1IruXecWHaJKHY/Cz+c k1Y/anUiTyZxRyW379O5iGEVtu/XW110I63Z6RmEb9GnN+1h8hgp5bpuQm8hG0HQ L7vR9zMVa8D5QgTIiWh+Zm8NCefXQQUI+k5vznx7JSc1aDyJ9jVHev3VTx2Uu4Fe uGQsvlW64hcNrCZuT6thfwMLRL5JQskuqlZ9vom0yrYnlzUaK7E0OCb4EZNenyFE lkFAxxL52xF6Mh8inWgZ6+jK1FbWCgQtu9KmAViHsoDOhHYKXy3T9Vwo7mA0KR7S FH3AwE1r5Ka3Kdr2DAICZ1cnrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZrqqn7 qut+nZT3joUw/BzF21pjMB8GA1UdIwQYMBaAFAuNY4/9OLH3fkjhu13ymSnOfXi1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVBNy8wNDRGNjQ0ODEx NjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNmZC1TT0c3WGZLWktjNTll TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M0MWpqXzA0c2ZkLVNPRzdYZktaS2M1OWVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVBNy8wNDRGNjQ0ODExNjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNm ZC1TT0c3WGZLWktjNTllTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdKokMCJ/8Zmfz5cn55GqYzX3fCXb4Iih6Gvxr4Z02vL39lzpTkvA1 nmZUcgoKLqoMvOsvjvZ+aikCZelTuHRbY/DA1811zPmTEk1jLUqZ9K2Y2cfoAzvT 5udTKbV/HROlrKnXY3dz32nG2O5iCvi0uz2w3xfTus0i3a7Fc6QBYDzNjTttce8K f8syWWiKpJ95o5FsvnG8K+pUhJF24vxXc28QVDFShY1mahDyKSF6UzRtm2py2GOx Sia+rBorFvveA52xM2YtfmK0pmwLphofDTrvKdfMX3l6aa93713iTntUfFITE4Kx LcT1V90a33Vm79z5uuea5nxObd0Olf2J -----END CERTIFICATE-----Generated at Fri May 17 08:13:51 2024 by rpki-client on console-fra.rpki-client.org