$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft File: cxFBrwp5OqMW733dLxsF-JHFZrI.mft (raw, json) Hash identifier: 2GWd2QWrhkNAKGl2TaNZ9I+1mHW30J6g3hToi0aZb0A= Subject key identifier: E4:55:AA:F3:BB:7E:24:B9:87:47:D3:43:5D:1A:72:B4:1F:67:6B:1F Authority key identifier: 73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2 Certificate issuer: /CN=A91CDE0E/serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2 Certificate serial: 15B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft Manifest number: 15A9 Signing time: Thu 02 May 2024 17:19:08 +0000 Manifest this update: Thu 02 May 2024 17:19:07 +0000 Manifest next update: Thu 09 May 2024 17:19:07 +0000 Files and hashes: 1: cxFBrwp5OqMW733dLxsF-JHFZrI.crl (hash: 1jChplFkLEdqs/yFrwwqPpIuK4B0tCdfi/QPvDXtHgo=) 2: E940EF3464B611EA9B743415C4F9AE02.roa (hash: 7Xx9UE44DwGeyKwhiiS/2v5Rq4p5F1fjKHI+6cXUu50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:19:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5554 (0x15b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDE0E/serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2 Validity Not Before: May 2 17:19:07 2024 GMT Not After : May 9 17:19:07 2024 GMT Subject: CN=6633cb0b-367c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a4:49:bd:29:75:1a:59:30:98:ca:c1:00:8a: e1:ff:b7:39:ce:4c:52:75:eb:64:cf:f5:5f:ed:3d: f3:fd:16:e2:70:16:fb:cd:be:bc:22:79:67:78:6c: bc:80:18:da:01:b3:30:e0:85:be:70:2a:a9:85:48: 21:f3:33:3c:24:a8:07:d1:b7:ad:e8:d0:e6:27:73: b3:91:ee:cd:63:53:c2:d9:80:e8:f4:d8:66:b3:95: 13:08:a4:a8:4d:10:75:ef:3e:9f:d5:67:bd:40:ba: 4d:ca:83:8a:d8:7a:c7:85:f1:25:f9:6c:37:ed:69: 11:28:cf:95:d5:e9:61:e7:f5:f1:ca:24:99:f4:86: f8:09:20:b4:e4:0e:7e:db:7a:33:18:74:0f:ad:c4: 3e:8f:3e:f0:08:49:55:21:f9:92:a0:a7:26:d4:70: 6c:f5:4f:0e:bc:f3:a4:c4:f4:f4:fa:a9:83:da:74: 2c:2e:50:40:d5:e5:e1:78:04:25:6d:f9:5e:55:0c: 92:b2:f7:ae:23:8b:3e:5b:c7:0e:23:93:be:52:16: 12:31:b0:0a:6d:c9:9d:d0:f1:67:f3:e7:2d:bb:62: 39:e2:78:cd:da:8b:48:0b:5a:ea:5d:ec:24:16:7e: f5:73:18:de:73:fc:d4:ae:e3:05:4f:4d:b1:e6:cf: 90:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:55:AA:F3:BB:7E:24:B9:87:47:D3:43:5D:1A:72:B4:1F:67:6B:1F X509v3 Authority Key Identifier: keyid:73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:da:1f:12:e4:08:ab:3c:e5:a4:9c:b8:df:f6:db:cb:07:63: e4:b4:16:69:ad:2c:61:07:89:ec:36:16:33:b3:44:40:63:af: 49:d4:48:51:bd:9f:ac:c0:4b:18:c1:dc:86:34:5f:72:f8:f5: bb:87:ee:bc:96:46:75:ea:10:d1:ae:d9:f0:1b:a2:38:15:6e: 1d:0b:75:1d:8f:50:5b:ec:8a:21:78:1d:52:8b:60:13:ff:f1: 90:c0:88:9e:4d:56:52:c1:84:70:87:96:1a:6b:48:0b:9c:90: b1:e4:a8:4d:42:50:82:20:29:b9:25:88:de:6a:4a:a5:77:45: 52:ae:05:7c:ea:ef:2f:c6:28:1b:0b:49:82:43:9f:de:f0:79: 69:39:7a:ae:c6:3c:a6:d0:ec:f1:00:5b:68:c3:ed:c7:b6:21: 10:6a:e5:6c:0d:3a:8c:f6:20:ba:99:7f:23:42:ad:10:59:5c: 94:c5:cd:ab:e6:13:56:d3:e6:fc:e7:d9:24:9f:87:c6:85:ae: 76:f6:3b:11:02:eb:fb:2b:78:6a:b3:63:5c:22:3d:d7:01:1e: 24:f9:3c:dd:19:23:a8:f5:c9:80:cd:9d:f6:ae:ec:d4:87:3f: 4d:43:1b:34:5f:fa:28:fc:1f:00:7a:ac:8f:48:4f:c9:cb:62: e2:e9:33:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RFMEUxMTAvBgNVBAUTKDczMTE0MUFGMEE3OTNBQTMxNkVGN0RERDJGMUIwNUY4 OTFDNTY2QjIwHhcNMjQwNTAyMTcxOTA3WhcNMjQwNTA5MTcxOTA3WjAYMRYwFAYD VQQDEw02NjMzY2IwYi0zNjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKRJvSl1GlkwmMrBAIrh/7c5zkxSdetkz/Vf7T3z/RbicBb7zb68InlneGy8 gBjaAbMw4IW+cCqphUgh8zM8JKgH0bet6NDmJ3Ozke7NY1PC2YDo9Nhms5UTCKSo TRB17z6f1We9QLpNyoOK2HrHhfEl+Ww37WkRKM+V1elh5/XxyiSZ9Ib4CSC05A5+ 23ozGHQPrcQ+jz7wCElVIfmSoKcm1HBs9U8OvPOkxPT0+qmD2nQsLlBA1eXheAQl bfleVQySsveuI4s+W8cOI5O+UhYSMbAKbcmd0PFn8+ctu2I54njN2otIC1rqXewk Fn71cxjec/zUruMFT02x5s+QKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORVqvO7 fiS5h0fTQ10acrQfZ2sfMB8GA1UdIwQYMBaAFHMRQa8KeTqjFu993S8bBfiRxWay MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREUwRS82RTFFN0RFNDA1 N0MxMUU4ODJGRThFMjhDNEY5QUUwMi9jeEZCcndwNU9xTVc3MzNkTHhzRi1KSEZa ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4RkJyd3A1T3FNVzczM2RMeHNGLUpIRlpySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REUwRS82RTFFN0RFNDA1N0MxMUU4ODJGRThFMjhDNEY5QUUwMi9jeEZCcndwNU9x TVc3MzNkTHhzRi1KSEZackkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCx2h8S5AirPOWknLjf9tvLB2PktBZprSxhB4nsNhYzs0RAY69J1EhR vZ+swEsYwdyGNF9y+PW7h+68lkZ16hDRrtnwG6I4FW4dC3Udj1Bb7IoheB1Si2AT //GQwIieTVZSwYRwh5Yaa0gLnJCx5KhNQlCCICm5JYjeakqld0VSrgV86u8vxigb C0mCQ5/e8HlpOXquxjym0OzxAFtow+3HtiEQauVsDTqM9iC6mX8jQq0QWVyUxc2r 5hNW0+b859kkn4fGha529jsRAuv7K3hqs2NcIj3XAR4k+TzdGSOo9cmAzZ32ruzU hz9NQxs0X/oo/B8AeqyPSE/Jy2Li6TPf -----END CERTIFICATE-----Generated at Thu May 2 20:50:36 2024 by rpki-client on console-fra.rpki-client.org