$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft File: cJdlx9TTMfTDasa-NH-mah8CNJA.mft (raw, json) Hash identifier: p97eGraKomEYaD1rbICu8HwLlS+2w0+bIz1Crk66e3Q= Subject key identifier: 50:E9:02:BB:24:3B:6F:FD:8D:5F:E0:16:5A:FD:26:B3:9D:E2:B1:79 Authority key identifier: 70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90 Certificate issuer: /CN=A91AE85E/serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490 Certificate serial: 3418 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft Manifest number: 33E7 Signing time: Sat 04 May 2024 14:18:48 +0000 Manifest this update: Sat 04 May 2024 14:18:47 +0000 Manifest next update: Sat 11 May 2024 14:18:47 +0000 Files and hashes: 1: cJdlx9TTMfTDasa-NH-mah8CNJA.crl (hash: kgnOzWTTGGlNHE5PL/ehXJc/fLspPi0LvmJ6LtGF7WQ=) 2: 392987D254F611E79DF7E643C4F9AE02.roa (hash: 4h7J78rlX+2vspK7F8UUEGHUI6kq314rWzgttdFWu+g=) 3: 09E2DC32B12B11E59337F35AC4F9AE02.roa (hash: 8FFLZzcqxB9olqH/wxHcdyGypFHaehu5WrrAFHlsuD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:18:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13336 (0x3418) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE85E/serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490 Validity Not Before: May 4 14:18:47 2024 GMT Not After : May 11 14:18:47 2024 GMT Subject: CN=663643c8-ba1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:77:33:97:82:3c:79:b9:05:e8:8b:9b:17:dc: ba:c0:c1:2e:ae:0e:9d:b0:b0:0f:e0:88:5f:ce:1e: 5f:19:8c:bc:69:54:f1:5c:5d:17:5c:e1:b9:e3:96: 6e:2c:82:e9:09:ef:36:1a:35:74:e9:a4:5d:92:d2: e3:24:63:e1:66:7f:1f:a5:7f:a1:f1:1c:a9:55:d1: 8d:48:b4:4f:58:4a:1f:91:1f:a5:4a:d4:59:a9:e5: ab:5b:d5:30:b5:1c:3b:e7:f0:4e:22:06:c9:2b:91: 33:21:55:62:94:98:3c:63:00:80:6e:d6:3a:31:ac: 71:30:5d:ca:2f:a2:8d:8f:a2:7b:dd:7d:61:68:a5: 0d:24:17:d5:cf:18:96:4a:d9:e4:d9:18:80:8b:2c: 12:70:c5:b3:81:12:ef:ef:37:f0:6f:dc:c5:21:a5: c7:29:6f:12:4f:42:52:6d:d2:f9:da:c8:d0:ab:98: 46:f0:ce:03:7d:50:3f:46:26:c5:ff:4b:ee:2e:a1: 4f:02:86:43:b7:46:bf:3a:9d:dd:45:b8:67:6e:9f: 2b:13:0e:50:65:2e:02:db:81:29:bd:20:a0:27:30: ed:98:a0:65:53:83:70:b7:c9:4d:13:94:ba:21:cd: 5d:26:e0:d7:0f:2c:f2:74:8a:e4:64:17:0d:b0:46: 52:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E9:02:BB:24:3B:6F:FD:8D:5F:E0:16:5A:FD:26:B3:9D:E2:B1:79 X509v3 Authority Key Identifier: keyid:70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:3f:99:ee:73:d9:f1:9e:65:1f:1e:00:40:f3:ea:c1:57:85: f5:c7:95:67:16:07:e4:89:ff:ca:28:c3:68:82:2f:ca:8a:43: 76:01:d8:c2:c1:f9:91:47:86:ec:ce:e8:03:d0:0c:60:92:6d: 3b:10:24:14:64:84:8a:dc:39:e1:11:ec:7a:84:b8:71:4d:38: 95:32:ee:d9:20:1e:40:f4:1f:28:a5:30:76:b0:38:a6:c8:08: dd:e1:88:4f:47:6c:64:19:1e:30:a4:f6:4e:2f:84:ea:dc:ac: 4c:67:89:45:0d:a6:ac:b1:2b:39:17:2a:b2:91:e8:e5:87:da: d9:d0:13:b9:ad:ba:6a:9e:47:27:3d:f7:14:e6:18:07:c5:7f: 97:86:bf:dc:b5:4a:eb:9c:2d:38:be:d9:a1:1a:7c:5c:01:35: f3:b0:88:af:a7:37:7e:bb:01:cf:c6:48:db:28:6a:5d:ff:4f: cb:af:2c:d0:7f:ef:f1:7f:15:78:0c:8c:20:9d:23:1c:f8:8e: 7e:4e:ff:ab:e8:52:51:de:b3:2e:06:01:37:8b:4f:84:71:67: cf:92:b3:4b:f6:82:62:93:6c:00:e6:8f:d4:a7:99:31:f8:5e: 1d:60:27:db:9d:0e:2b:6f:cc:74:6b:64:ee:f5:77:b1:76:05: 9f:b7:cc:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU4NUUxMTAvBgNVBAUTKDcwOTc2NUM3RDREMzMxRjRDMzZBQzZCRTM0N0ZBNjZB MUYwMjM0OTAwHhcNMjQwNTA0MTQxODQ3WhcNMjQwNTExMTQxODQ3WjAYMRYwFAYD VQQDEw02NjM2NDNjOC1iYTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAonczl4I8ebkF6IubF9y6wMEurg6dsLAP4Ihfzh5fGYy8aVTxXF0XXOG545Zu LILpCe82GjV06aRdktLjJGPhZn8fpX+h8RypVdGNSLRPWEofkR+lStRZqeWrW9Uw tRw75/BOIgbJK5EzIVVilJg8YwCAbtY6MaxxMF3KL6KNj6J73X1haKUNJBfVzxiW Stnk2RiAiywScMWzgRLv7zfwb9zFIaXHKW8ST0JSbdL52sjQq5hG8M4DfVA/RibF /0vuLqFPAoZDt0a/Op3dRbhnbp8rEw5QZS4C24EpvSCgJzDtmKBlU4Nwt8lNE5S6 Ic1dJuDXDyzydIrkZBcNsEZSFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDpArsk O2/9jV/gFlr9JrOd4rF5MB8GA1UdIwQYMBaAFHCXZcfU0zH0w2rGvjR/pmofAjSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTg1RS8wQkVEMzUyNjFE NkUxMUUyQjA0QTYxQUYwOEIwMkNEMi9jSmRseDlUVE1mVERhc2EtTkgtbWFoOENO SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NKZGx4OVRUTWZURGFzYS1OSC1tYWg4Q05KQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTg1RS8wQkVEMzUyNjFENkUxMUUyQjA0QTYxQUYwOEIwMkNEMi9jSmRseDlUVE1m VERhc2EtTkgtbWFoOENOSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfP5nuc9nxnmUfHgBA8+rBV4X1x5VnFgfkif/KKMNogi/KikN2AdjC wfmRR4bszugD0Axgkm07ECQUZISK3DnhEex6hLhxTTiVMu7ZIB5A9B8opTB2sDim yAjd4YhPR2xkGR4wpPZOL4Tq3KxMZ4lFDaassSs5Fyqykejlh9rZ0BO5rbpqnkcn PfcU5hgHxX+Xhr/ctUrrnC04vtmhGnxcATXzsIivpzd+uwHPxkjbKGpd/0/LryzQ f+/xfxV4DIwgnSMc+I5+Tv+r6FJR3rMuBgE3i0+EcWfPkrNL9oJik2wA5o/Up5kx +F4dYCfbnQ4rb8x0a2Tu9XexdgWft8zv -----END CERTIFICATE-----Generated at Sat May 4 15:45:49 2024 by rpki-client on console-fra.rpki-client.org