$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft File: CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft (raw, json) Hash identifier: wLNV/TeE/cxOaYw0kRyeOy9YxvAb75e+0UiSh0mkmIg= Subject key identifier: CA:D6:C9:59:7E:2E:52:D8:1F:42:F0:67:7B:18:23:52:63:32:F9:D9 Authority key identifier: 09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E Certificate issuer: /CN=A91CE533/serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E Certificate serial: 187E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft Manifest number: 1873 Signing time: Fri 26 Apr 2024 16:54:47 +0000 Manifest this update: Fri 26 Apr 2024 16:54:47 +0000 Manifest next update: Fri 03 May 2024 16:54:47 +0000 Files and hashes: 1: CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl (hash: ZR2vKky6BNXSyqxCpcXTrD2P2rXEomFn/BQp+cIgeq4=) 2: 290732FC79A211E79F34D81FC4F9AE02.roa (hash: Jf58211mLThLRZI8BWv56J4HhbDeINKve+PZOIHEx7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 16:54:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6270 (0x187e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE533/serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E Validity Not Before: Apr 26 16:54:47 2024 GMT Not After : May 3 16:54:47 2024 GMT Subject: CN=662bdc57-b7e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:25:af:86:6a:65:b7:6d:93:5f:d6:99:ac:7c: f4:39:d6:d6:3f:b4:8f:14:8b:a1:c2:7d:03:ad:94: a5:5a:da:9b:5b:61:65:71:65:b9:2b:b1:b1:21:21: e1:9b:5f:72:79:0c:48:cd:4d:43:e8:fe:bb:f9:c8: fa:1b:fd:22:7f:a5:33:33:ce:78:aa:30:6f:c4:d4: 0a:5b:13:fd:67:27:bb:a0:51:08:ac:ee:ff:98:7b: 2b:95:4e:e8:1a:d2:5a:8d:a1:7e:0f:80:64:a3:12: 7c:6e:1b:87:4d:74:45:2b:b8:21:b0:2d:93:40:f1: 0b:67:d6:d6:85:70:37:7d:a9:26:95:8e:5d:e8:28: 08:a6:db:ff:1e:f1:ad:ef:62:b8:1e:04:ce:79:8c: 08:96:ce:46:01:da:ce:32:85:32:a6:4f:f2:44:99: f0:a1:fd:15:df:48:b8:3f:13:7e:2c:33:53:0e:d5: 1c:02:2b:9f:8c:aa:23:9c:9f:57:bc:3f:3e:a6:fd: 0c:5f:92:6b:ce:28:ce:10:f6:5d:fa:a7:66:71:c6: b7:5a:41:02:2a:95:6f:af:17:19:14:a9:46:72:8d: 02:1f:bb:e1:69:cc:e6:e7:eb:c6:72:24:1b:ea:8b: 73:5d:84:25:67:af:5c:c7:ca:1a:10:a2:0b:29:da: 9e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D6:C9:59:7E:2E:52:D8:1F:42:F0:67:7B:18:23:52:63:32:F9:D9 X509v3 Authority Key Identifier: keyid:09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:38:a5:eb:f8:ba:d7:2e:b9:15:7f:a8:b0:65:7c:69:df:8e: 77:71:55:8c:a9:05:24:83:2d:af:05:d7:5a:77:18:29:7a:31: 9a:13:b5:3d:6b:e5:f1:52:77:78:f9:5b:cd:3d:bf:a6:28:96: c9:00:6b:49:07:6c:b4:46:68:9e:71:3f:03:2f:2c:f0:99:d5: 21:08:1d:24:0c:82:3e:0c:e8:c4:92:56:43:61:8c:a3:61:26: 48:64:5b:90:82:c5:cb:66:99:24:e6:a2:c6:42:70:48:08:1a: 0f:38:7e:1f:47:ac:95:b5:7d:f9:13:0a:e7:3d:29:92:c6:23: 84:31:80:ab:0a:2e:c5:95:e1:31:66:69:7b:0c:54:b7:9a:79: df:0f:63:d0:c2:f5:56:8d:dc:f5:11:ec:4d:b3:56:d0:59:c1: 64:68:79:a5:a7:f2:8f:a0:f9:32:04:11:a4:88:60:b7:17:02: 19:c1:ee:e2:e0:40:d5:3a:ff:cf:2f:b3:1b:2d:94:b3:1d:fc: ee:43:b4:7c:1f:6a:88:03:2d:62:2f:f8:eb:9a:9b:d2:ad:b4: a0:05:53:21:4d:21:d4:5e:29:e7:79:a2:81:09:55:fc:71:56: dc:fe:90:ce:48:86:c7:35:2e:19:8d:27:04:77:e6:7a:24:52: fd:12:ad:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1MzMxMTAvBgNVBAUTKDA5QTNFQ0M0OUY4M0E3OThBRTEzOUYxRENCQzUzNkVF NkY2N0NFN0UwHhcNMjQwNDI2MTY1NDQ3WhcNMjQwNTAzMTY1NDQ3WjAYMRYwFAYD VQQDEw02NjJiZGM1Ny1iN2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSWvhmplt22TX9aZrHz0OdbWP7SPFIuhwn0DrZSlWtqbW2FlcWW5K7GxISHh m19yeQxIzU1D6P67+cj6G/0if6UzM854qjBvxNQKWxP9Zye7oFEIrO7/mHsrlU7o GtJajaF+D4BkoxJ8bhuHTXRFK7ghsC2TQPELZ9bWhXA3fakmlY5d6CgIptv/HvGt 72K4HgTOeYwIls5GAdrOMoUypk/yRJnwof0V30i4PxN+LDNTDtUcAiufjKojnJ9X vD8+pv0MX5JrzijOEPZd+qdmcca3WkECKpVvrxcZFKlGco0CH7vhaczm5+vGciQb 6otzXYQlZ69cx8oaEKILKdqeqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrWyVl+ LlLYH0LwZ3sYI1JjMvnZMB8GA1UdIwQYMBaAFAmj7MSfg6eYrhOfHcvFNu5vZ85+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTUzMy9FOEZENEZBNDc5 OUYxMUU3Qjg3OTEwMURDNEY5QUUwMi9DYVBzeEotRHA1aXVFNThkeThVMjdtOW56 bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NhUHN4Si1EcDVpdUU1OGR5OFUyN205bnpuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTUzMy9FOEZENEZBNDc5OUYxMUU3Qjg3OTEwMURDNEY5QUUwMi9DYVBzeEotRHA1 aXVFNThkeThVMjdtOW56bjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeOKXr+LrXLrkVf6iwZXxp3453cVWMqQUkgy2vBddadxgpejGaE7U9 a+XxUnd4+VvNPb+mKJbJAGtJB2y0RmiecT8DLyzwmdUhCB0kDII+DOjEklZDYYyj YSZIZFuQgsXLZpkk5qLGQnBICBoPOH4fR6yVtX35EwrnPSmSxiOEMYCrCi7FleEx Zml7DFS3mnnfD2PQwvVWjdz1EexNs1bQWcFkaHmlp/KPoPkyBBGkiGC3FwIZwe7i 4EDVOv/PL7MbLZSzHfzuQ7R8H2qIAy1iL/jrmpvSrbSgBVMhTSHUXinneaKBCVX8 cVbc/pDOSIbHNS4ZjScEd+Z6JFL9Eq3u -----END CERTIFICATE-----Generated at Sun Apr 28 15:52:20 2024 by rpki-client on console-fra.rpki-client.org