$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft File: cx4n4S-z2wtszAsg8YaAm6CNCRU.mft (raw, json) Hash identifier: CjOBtsdNxW2kR4sSAo+l3Pwk6/j/U/cs+xCaCPFUvss= Subject key identifier: 9E:D1:D5:E6:27:61:61:DB:8B:B3:C4:42:BF:D7:60:4C:EF:32:56:0F Authority key identifier: 73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15 Certificate issuer: /CN=A91D58EC/serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915 Certificate serial: 0E29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft Manifest number: 0E1E Signing time: Sat 18 May 2024 18:27:18 +0000 Manifest this update: Sat 18 May 2024 18:27:17 +0000 Manifest next update: Sat 25 May 2024 18:27:17 +0000 Files and hashes: 1: cx4n4S-z2wtszAsg8YaAm6CNCRU.crl (hash: 9EQ8QoNx62A1fD37mGsdPqftui3ehiKlFa/eNFPZPXU=) 2: 76C782CC836811E9B8830935C4F9AE02.roa (hash: WoHbJhMvH/ZwYJNsVnkRnd796L/SgDr9ccLHss2SvW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3625 (0xe29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D58EC/serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915 Validity Not Before: May 18 18:27:17 2024 GMT Not After : May 25 18:27:17 2024 GMT Subject: CN=6648f305-d675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:48:41:d9:2b:06:de:64:79:91:3f:5c:c7:9c: 78:78:1f:cd:00:45:cb:36:5a:86:00:2b:d0:0d:3a: 26:85:e5:0e:21:88:5b:df:65:3b:7c:7d:07:7a:7b: bb:fd:2f:b7:7a:e5:f0:a5:59:10:fe:24:1c:7d:8d: 81:46:4e:b0:8f:a4:59:ad:6d:e7:af:ce:5a:8a:bb: 04:7c:33:33:7b:53:89:f7:64:a1:8f:09:39:2c:7e: b4:4f:34:a9:f9:c6:7c:cd:dd:e6:a3:10:4e:81:a3: 3c:b0:58:50:7f:78:57:cb:f9:e6:23:96:01:e3:f9: 22:af:8f:d9:bd:e2:10:6c:18:dc:ff:ed:e1:cf:99: 72:27:79:0e:b4:79:e0:a2:5f:e7:64:55:5c:8d:24: 65:4c:a9:b4:0b:a8:30:4b:c0:28:ee:af:33:ee:8b: 72:be:ba:72:8a:0d:93:f1:7e:61:72:89:65:a1:97: 43:76:2f:47:87:e8:24:bd:87:ac:fe:74:c6:d0:4b: b6:54:89:eb:44:13:84:84:93:86:c8:24:e0:47:3d: be:0b:3b:eb:a9:2a:47:c0:7b:d7:1e:6f:63:17:8c: 65:54:a8:84:0e:e9:c0:95:21:bc:82:0e:83:3a:fc: b2:2e:bf:9e:5a:b1:c3:9a:7f:40:e2:e4:23:7c:ea: 7e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D1:D5:E6:27:61:61:DB:8B:B3:C4:42:BF:D7:60:4C:EF:32:56:0F X509v3 Authority Key Identifier: keyid:73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:3b:03:bc:e2:05:e4:63:7c:9b:ec:67:43:e7:fd:0f:1d:56: 82:1b:00:c3:40:03:c8:59:68:1b:ee:8d:05:45:77:4a:fe:ac: dd:11:82:24:da:5e:fb:c4:a0:07:51:c4:8a:66:06:92:92:2a: 65:73:cb:f3:9a:1d:21:06:67:5f:c8:13:ec:e1:52:03:f4:b8: 79:a5:3f:2a:ab:3d:1c:a4:ee:4c:7a:91:6d:2f:bc:c7:79:5b: a6:3f:99:e5:94:48:09:e1:1d:55:24:ba:74:23:fe:f2:6d:c8: a2:32:87:36:a3:fc:6c:99:e5:3e:f6:c9:c8:6f:15:2a:8a:2e: ef:b8:2d:6a:e2:b7:dd:4d:23:d6:0d:68:b3:f4:7c:74:da:eb: ad:5a:f9:46:56:57:49:4c:67:a0:ca:e0:af:31:90:dd:33:a1: 26:da:e8:c4:a3:a9:be:1a:9b:75:7b:7a:cf:97:1a:f4:fc:0e: 7b:6e:53:d5:bf:b0:02:05:9b:d9:b8:b9:2b:ec:7e:48:45:27: c3:f9:5a:c2:6e:65:18:34:77:04:8e:76:ec:4b:c4:3a:ad:1f: e6:63:2c:7c:62:dc:d0:dc:13:05:91:91:77:19:a5:05:5b:77: 46:bb:34:5e:a4:38:6a:40:9b:d3:4a:dd:d4:d8:61:2e:7f:3e: ed:87:ef:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4RUMxMTAvBgNVBAUTKDczMUUyN0UxMkZCM0RCMEI2Q0NDMEIyMEYxODY4MDlC QTA4RDA5MTUwHhcNMjQwNTE4MTgyNzE3WhcNMjQwNTI1MTgyNzE3WjAYMRYwFAYD VQQDEw02NjQ4ZjMwNS1kNjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkhB2SsG3mR5kT9cx5x4eB/NAEXLNlqGACvQDTomheUOIYhb32U7fH0Henu7 /S+3euXwpVkQ/iQcfY2BRk6wj6RZrW3nr85airsEfDMze1OJ92Shjwk5LH60TzSp +cZ8zd3moxBOgaM8sFhQf3hXy/nmI5YB4/kir4/ZveIQbBjc/+3hz5lyJ3kOtHng ol/nZFVcjSRlTKm0C6gwS8Ao7q8z7otyvrpyig2T8X5hcolloZdDdi9Hh+gkvYes /nTG0Eu2VInrRBOEhJOGyCTgRz2+CzvrqSpHwHvXHm9jF4xlVKiEDunAlSG8gg6D OvyyLr+eWrHDmn9A4uQjfOp+VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7R1eYn YWHbi7PEQr/XYEzvMlYPMB8GA1UdIwQYMBaAFHMeJ+Evs9sLbMwLIPGGgJugjQkV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThFQy9BRjUwQTBFODgz NjcxMUU5ODQ0Mzc3MzRDNEY5QUUwMi9jeDRuNFMtejJ3dHN6QXNnOFlhQW02Q05D UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4NG40Uy16Mnd0c3pBc2c4WWFBbTZDTkNSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NThFQy9BRjUwQTBFODgzNjcxMUU5ODQ0Mzc3MzRDNEY5QUUwMi9jeDRuNFMtejJ3 dHN6QXNnOFlhQW02Q05DUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1OwO84gXkY3yb7GdD5/0PHVaCGwDDQAPIWWgb7o0FRXdK/qzdEYIk 2l77xKAHUcSKZgaSkiplc8vzmh0hBmdfyBPs4VID9Lh5pT8qqz0cpO5MepFtL7zH eVumP5nllEgJ4R1VJLp0I/7ybciiMoc2o/xsmeU+9snIbxUqii7vuC1q4rfdTSPW DWiz9Hx02uutWvlGVldJTGegyuCvMZDdM6Em2ujEo6m+Gpt1e3rPlxr0/A57blPV v7ACBZvZuLkr7H5IRSfD+VrCbmUYNHcEjnbsS8Q6rR/mYyx8YtzQ3BMFkZF3GaUF W3dGuzRepDhqQJvTSt3U2GEufz7th+9/ -----END CERTIFICATE-----Generated at Sat May 18 19:15:26 2024 by rpki-client on console-ams.rpki-client.org