$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft File: cPhdBJUBOFatAizAkilp4Mj8ReI.mft (raw, json) Hash identifier: ayXg3M1gXNjlf8b4rWP/fVjH97xksUPdimPle0kM05k= Subject key identifier: E5:21:F3:1D:7C:0D:56:C3:12:4C:90:86:78:09:DD:D0:17:FE:5F:07 Authority key identifier: 70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2 Certificate issuer: /CN=A9184F2D/serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2 Certificate serial: 04C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft Manifest number: 04BD Signing time: Tue 07 May 2024 01:26:12 +0000 Manifest this update: Tue 07 May 2024 01:26:12 +0000 Manifest next update: Tue 14 May 2024 01:26:12 +0000 Files and hashes: 1: cPhdBJUBOFatAizAkilp4Mj8ReI.crl (hash: CWLMSIXkjabWLLQU0NZohdMggUXxR8yYjg61wgNi6n4=) 2: C454E4B4D94F11EBAB5C652FC4F9AE02.roa (hash: syBXC7ebrcWuxme293dyFbNYbwtGgLiP1an4cvhn7co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 01:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1217 (0x4c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184F2D/serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2 Validity Not Before: May 7 01:26:12 2024 GMT Not After : May 14 01:26:12 2024 GMT Subject: CN=66398334-1a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:2b:59:2c:69:7a:f5:50:70:94:13:9c:47:ca: 65:a3:ee:43:fe:0b:6e:dd:55:31:0e:84:4a:48:eb: d7:5f:55:9f:53:bf:88:a2:96:66:91:55:70:f3:cb: 7c:21:e8:01:68:d6:bf:ab:db:f5:ae:cd:60:58:d6: e2:05:32:34:53:29:0c:e7:65:d5:93:b3:92:34:20: 50:47:24:45:6d:e0:39:9b:22:84:41:01:98:2f:ef: 1a:47:01:3d:d7:32:81:fb:44:d8:61:29:96:93:cd: 68:77:67:7a:a3:a5:85:f0:2a:4f:97:43:61:9d:b7: de:a9:87:4c:a9:09:8b:2c:4f:5b:ef:7e:ac:08:34: b1:0c:6a:5b:78:43:10:78:5f:24:49:86:72:3a:19: d7:03:ed:a4:91:32:c0:7f:79:3e:35:40:49:48:9b: 39:f7:0b:ad:18:79:5c:2e:1e:90:1d:7e:f5:7d:6f: 3a:c5:ee:52:e3:f3:2a:a6:a7:85:d3:52:1f:e3:e5: 65:76:80:a7:f8:d8:a0:b8:75:26:22:05:93:ea:b7: 0c:1b:6e:74:a1:9a:51:28:f2:7d:77:1c:0a:f5:e3: 13:88:0a:9e:38:bc:00:3e:96:b7:0a:8e:2a:6e:e5: 20:c1:a4:30:89:18:61:2d:58:b4:56:68:8c:5e:83: bf:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:21:F3:1D:7C:0D:56:C3:12:4C:90:86:78:09:DD:D0:17:FE:5F:07 X509v3 Authority Key Identifier: keyid:70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e9:ef:2d:79:bf:15:32:30:52:33:bd:11:a3:60:fc:4e:c7: db:49:59:5e:a0:e7:9a:cd:49:33:ee:45:92:48:70:87:52:8e: 0c:bc:a3:d9:00:2a:f4:16:0d:72:ee:bc:45:8c:37:51:79:8d: 3f:e4:d0:2c:e2:fa:5c:01:ac:63:7f:9a:4b:9a:6c:37:73:78: 17:18:c5:ed:81:6e:e1:e6:61:bb:b3:8f:a9:75:57:b7:40:0e: 19:d9:45:a2:2b:4d:5e:c8:f5:fb:69:98:e5:d9:fa:03:20:4e: db:f9:bc:23:5f:79:e7:26:ba:e9:c8:43:2b:fb:32:9e:87:1a: 66:ea:1d:67:20:db:9b:33:9f:cb:01:28:36:00:56:81:3e:d5: 67:35:91:75:49:5c:99:5c:0d:63:e6:51:88:db:25:54:a8:ce: fe:d3:e2:47:72:83:11:4b:39:14:eb:18:db:b8:9e:17:f0:4a: 88:29:be:30:47:81:61:52:d8:29:10:87:70:27:9a:7e:e0:bc: 44:e9:40:36:7a:18:c8:cc:29:f7:66:a2:fb:09:01:a6:f8:06: 74:2b:b8:9e:eb:44:e2:10:56:9c:38:47:1f:30:5e:ac:ec:1d: c6:04:89:89:bd:c6:37:4f:b7:3a:8b:fa:64:35:e9:13:83:74: 19:9c:75:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRGMkQxMTAvBgNVBAUTKDcwRjg1RDA0OTUwMTM4NTZBRDAyMkNDMDkyMjk2OUUw QzhGQzQ1RTIwHhcNMjQwNTA3MDEyNjEyWhcNMjQwNTE0MDEyNjEyWjAYMRYwFAYD VQQDEw02NjM5ODMzNC0xYTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ytZLGl69VBwlBOcR8plo+5D/gtu3VUxDoRKSOvXX1WfU7+IopZmkVVw88t8 IegBaNa/q9v1rs1gWNbiBTI0UykM52XVk7OSNCBQRyRFbeA5myKEQQGYL+8aRwE9 1zKB+0TYYSmWk81od2d6o6WF8CpPl0NhnbfeqYdMqQmLLE9b736sCDSxDGpbeEMQ eF8kSYZyOhnXA+2kkTLAf3k+NUBJSJs59wutGHlcLh6QHX71fW86xe5S4/MqpqeF 01If4+VldoCn+NiguHUmIgWT6rcMG250oZpRKPJ9dxwK9eMTiAqeOLwAPpa3Co4q buUgwaQwiRhhLVi0VmiMXoO/swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUh8x18 DVbDEkyQhngJ3dAX/l8HMB8GA1UdIwQYMBaAFHD4XQSVAThWrQIswJIpaeDI/EXi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEYyRC9DRkJFRDM3MEQ5 NEQxMUVCQkU1RDMxMkZDNEY5QUUwMi9jUGhkQkpVQk9GYXRBaXpBa2lscDRNajhS ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NQaGRCSlVCT0ZhdEFpekFraWxwNE1qOFJlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEYyRC9DRkJFRDM3MEQ5NEQxMUVCQkU1RDMxMkZDNEY5QUUwMi9jUGhkQkpVQk9G YXRBaXpBa2lscDRNajhSZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK6e8teb8VMjBSM70Ro2D8TsfbSVleoOeazUkz7kWSSHCHUo4MvKPZ ACr0Fg1y7rxFjDdReY0/5NAs4vpcAaxjf5pLmmw3c3gXGMXtgW7h5mG7s4+pdVe3 QA4Z2UWiK01eyPX7aZjl2foDIE7b+bwjX3nnJrrpyEMr+zKehxpm6h1nINubM5/L ASg2AFaBPtVnNZF1SVyZXA1j5lGI2yVUqM7+0+JHcoMRSzkU6xjbuJ4X8EqIKb4w R4FhUtgpEIdwJ5p+4LxE6UA2ehjIzCn3ZqL7CQGm+AZ0K7ie60TiEFacOEcfMF6s 7B3GBImJvcY3T7c6i/pkNekTg3QZnHVG -----END CERTIFICATE-----Generated at Tue May 7 03:12:20 2024 by rpki-client on console-fra.rpki-client.org