$ rpki-client -vvf rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft File: cDXbQxmt4s_Ooig68PFrYgkCbao.mft (raw, json) Hash identifier: YrOsuQ+Kc42FSUMWwRAzhpYQCwLhRf3mkqx9rV7bJik= Subject key identifier: 62:2F:98:93:0D:22:35:5B:6A:FA:9F:E9:52:C0:B2:C7:1D:2A:76:7B Authority key identifier: 70:35:DB:43:19:AD:E2:CF:CE:A2:28:3A:F0:F1:6B:62:09:02:6D:AA Certificate issuer: /CN=A918387F/serialNumber=7035DB4319ADE2CFCEA2283AF0F16B6209026DAA Certificate serial: 0571 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft Manifest number: 0571 Signing time: Sun 19 May 2024 00:39:30 +0000 Manifest this update: Sun 19 May 2024 00:39:30 +0000 Manifest next update: Sun 26 May 2024 00:39:30 +0000 Files and hashes: 1: cDXbQxmt4s_Ooig68PFrYgkCbao.crl (hash: ZxaIHwfh5M783htKfh/aFsALy4+Msh5GSeRiMOtn6Yc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.crl rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1393 (0x571) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918387F/serialNumber=7035DB4319ADE2CFCEA2283AF0F16B6209026DAA Validity Not Before: May 19 00:39:30 2024 GMT Not After : May 26 00:39:30 2024 GMT Subject: CN=66494a42-d48e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:44:0f:a0:86:1c:85:a9:58:b3:06:a9:f1:5e: 00:4a:76:82:bb:26:5a:90:1c:9a:07:a1:73:6f:b0: d1:e9:50:06:8a:bb:17:1e:f3:13:0d:44:fd:29:05: ee:f0:f9:47:eb:e3:d0:0a:20:1b:7a:0e:b3:f0:65: ca:ae:a7:38:25:41:75:33:f1:19:db:f4:95:62:b3: 9c:9f:31:70:57:2c:5a:40:d3:b9:7d:54:a1:09:d6: db:ce:44:9c:a2:ae:43:4d:71:55:fb:b5:f3:4d:ee: 7f:50:23:58:22:8c:e7:e4:14:17:ed:6d:be:4e:34: 52:58:3d:34:1e:db:3a:54:03:34:fa:17:31:38:71: 91:42:aa:d9:5b:13:62:82:2d:3a:ae:c5:67:ba:1e: 06:27:7c:98:da:62:48:6c:5b:fb:66:97:91:39:65: 99:1c:3b:83:dd:e3:9d:2b:f8:da:26:f2:7b:c5:bf: 26:b3:49:3c:df:72:5a:fe:22:7b:a3:1b:4c:e2:6e: cf:ae:82:c1:37:0e:08:1a:ca:f2:4a:ee:d4:8d:8e: 3d:ab:ab:8a:85:b9:c7:b3:3e:d6:8d:39:bb:7b:d6: ff:17:de:aa:cf:8f:1b:ff:79:d1:46:cb:cb:eb:fb: 67:e0:b6:f2:45:81:1e:0d:e4:01:1d:71:93:d7:96: 84:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:2F:98:93:0D:22:35:5B:6A:FA:9F:E9:52:C0:B2:C7:1D:2A:76:7B X509v3 Authority Key Identifier: keyid:70:35:DB:43:19:AD:E2:CF:CE:A2:28:3A:F0:F1:6B:62:09:02:6D:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:52:35:15:61:06:62:a5:b0:f6:e0:4d:f9:45:b9:6b:20:c7: 4b:a8:78:e5:67:8d:a8:24:43:ce:ad:70:52:0c:4f:09:ca:9b: c1:b8:2d:f4:cd:69:a0:21:a2:b9:e4:2a:93:26:73:e5:22:83: 45:c0:a4:7c:f5:ba:0a:9b:36:2a:fc:41:b6:7c:5c:f1:9b:db: 85:84:de:a0:18:01:64:27:41:9e:62:08:a9:69:9c:7d:9b:5d: cc:b3:7b:64:0c:de:24:d8:a0:11:68:82:75:68:44:0b:57:8d: 30:f4:21:eb:21:8d:1a:65:48:8b:3c:f1:c6:0b:31:19:83:bc: 1c:42:3c:b1:8f:55:02:ae:59:17:5f:f5:2f:ad:42:da:3e:9a: 85:a6:28:e2:a8:3e:4d:6e:08:43:a7:c3:b4:cb:ae:19:8e:7c: ec:92:37:4c:2b:43:43:32:c4:f3:15:ae:37:63:3e:82:e7:6b: 20:56:aa:d2:34:57:1b:b9:10:46:5b:77:81:a7:c7:09:b6:da: f7:e9:c0:46:e2:ca:14:c2:0c:3d:13:24:29:a2:83:58:ec:07: ca:69:f2:8c:e6:bb:13:69:5c:20:34:d2:13:a4:d3:a4:e7:28: 4b:43:2d:3b:9f:b9:c7:15:ab:f8:02:2c:81:a2:93:d0:2e:37: 70:dc:28:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4N0YxMTAvBgNVBAUTKDcwMzVEQjQzMTlBREUyQ0ZDRUEyMjgzQUYwRjE2QjYy MDkwMjZEQUEwHhcNMjQwNTE5MDAzOTMwWhcNMjQwNTI2MDAzOTMwWjAYMRYwFAYD VQQDEw02NjQ5NGE0Mi1kNDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA00QPoIYchalYswap8V4ASnaCuyZakByaB6Fzb7DR6VAGirsXHvMTDUT9KQXu 8PlH6+PQCiAbeg6z8GXKrqc4JUF1M/EZ2/SVYrOcnzFwVyxaQNO5fVShCdbbzkSc oq5DTXFV+7XzTe5/UCNYIozn5BQX7W2+TjRSWD00Hts6VAM0+hcxOHGRQqrZWxNi gi06rsVnuh4GJ3yY2mJIbFv7ZpeROWWZHDuD3eOdK/jaJvJ7xb8ms0k833Ja/iJ7 oxtM4m7ProLBNw4IGsrySu7UjY49q6uKhbnHsz7WjTm7e9b/F96qz48b/3nRRsvL 6/tn4LbyRYEeDeQBHXGT15aEsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGIvmJMN IjVbavqf6VLAsscdKnZ7MB8GA1UdIwQYMBaAFHA120MZreLPzqIoOvDxa2IJAm2q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg3Ri9CNEM3OUFGODkz NDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9jRFhiUXhtdDRzX09vaWc2OFBGcllna0Ni YW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NEWGJReG10NHNfT29pZzY4UEZyWWdrQ2Jhby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzg3Ri9CNEM3OUFGODkzNDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9jRFhiUXhtdDRz X09vaWc2OFBGcllna0NiYW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYUjUVYQZipbD24E35RblrIMdLqHjlZ42oJEPOrXBSDE8JypvBuC30 zWmgIaK55CqTJnPlIoNFwKR89boKmzYq/EG2fFzxm9uFhN6gGAFkJ0GeYgipaZx9 m13Ms3tkDN4k2KARaIJ1aEQLV40w9CHrIY0aZUiLPPHGCzEZg7wcQjyxj1UCrlkX X/UvrULaPpqFpijiqD5NbghDp8O0y64ZjnzskjdMK0NDMsTzFa43Yz6C52sgVqrS NFcbuRBGW3eBp8cJttr36cBG4soUwgw9EyQpooNY7AfKafKM5rsTaVwgNNITpNOk 5yhLQy07n7nHFav4AiyBopPQLjdw3CjG -----END CERTIFICATE-----Generated at Sun May 19 01:47:14 2024 by rpki-client on console-ams.rpki-client.org