$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft File: CdjxREM-7h4qRDmROjZuPDxZBTc.mft (raw, json) Hash identifier: XesrNTt7+1/w33WzFgSs5BdfVSchEsXlZ+Srh9rFzXM= Subject key identifier: 69:83:05:6C:0A:E8:B3:A5:C0:2F:F0:C9:CB:22:2C:D2:67:3E:45:B5 Authority key identifier: 09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37 Certificate issuer: /CN=A91E9635/serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537 Certificate serial: 0BAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft Manifest number: 0BA3 Signing time: Wed 08 May 2024 19:18:17 +0000 Manifest this update: Wed 08 May 2024 19:18:16 +0000 Manifest next update: Wed 15 May 2024 19:18:16 +0000 Files and hashes: 1: CdjxREM-7h4qRDmROjZuPDxZBTc.crl (hash: V14t2oLDxnAmzED2Wp3RRISm10Xg/wRTW7Ol8m3utaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2987 (0xbab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9635/serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537 Validity Not Before: May 8 19:18:16 2024 GMT Not After : May 15 19:18:16 2024 GMT Subject: CN=663bcff9-502b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8c:06:c8:33:36:fb:aa:82:0e:4e:3e:d0:8b: 66:4e:43:b0:e8:76:a8:50:75:6e:27:ea:a2:cb:70: f9:17:7c:b7:b3:6a:d3:cf:b7:c8:fe:50:70:e6:d6: 64:52:02:0a:88:7b:5d:7d:11:a3:75:26:83:cd:a2: f9:ee:be:6a:0f:34:64:22:ec:cf:1e:40:76:c8:f9: b3:c7:c0:26:bb:86:e3:83:b9:2e:21:5b:5e:db:41: c5:0b:c4:3e:db:ab:14:d5:85:8d:0e:9a:e5:88:4f: 49:83:cc:8a:e0:83:4a:ba:0d:d9:5a:d5:d9:d8:a3: 14:07:92:9a:d7:c0:0d:31:d2:e7:26:a0:71:5a:a5: a8:d8:10:d3:60:e9:c3:02:2c:c7:99:9f:92:de:d1: eb:a0:ec:e7:12:fb:5c:fe:5c:95:36:92:2e:f7:d3: 99:3a:06:69:b3:40:4d:7c:03:43:fa:ff:29:da:9c: 3c:da:eb:fb:45:c8:0d:cf:e4:08:a9:e4:0d:cc:62: ee:61:ff:01:1e:85:cb:27:87:f9:dc:7c:06:20:22: fc:12:89:53:e9:c2:ff:73:20:a2:af:1e:2c:b9:31: c4:03:10:66:25:2d:3d:fb:bf:af:fb:70:9a:68:ad: c2:2c:3c:5c:a2:d7:9c:44:b0:6e:cd:cd:36:44:6d: ba:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:83:05:6C:0A:E8:B3:A5:C0:2F:F0:C9:CB:22:2C:D2:67:3E:45:B5 X509v3 Authority Key Identifier: keyid:09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:94:86:c7:32:b1:51:5d:54:b4:b3:a3:76:bf:20:03:0d:a9: 95:d5:b4:8f:a8:a3:a5:62:8f:82:9f:33:23:a6:52:b7:b8:a2: 0f:85:a0:29:5e:a8:eb:68:8e:21:72:31:de:89:69:39:c4:10: 9a:da:c7:23:2c:a8:5b:2b:56:52:2a:c2:2d:46:10:16:08:0a: bf:22:31:14:9f:4c:c0:cb:33:a5:df:c2:92:cd:22:e4:23:d8: 83:b7:2a:82:e5:28:94:6f:e4:6a:4e:e1:5c:72:6f:33:d1:0e: 36:e5:25:66:1d:59:25:62:c2:d3:88:0d:aa:15:cd:d7:38:a4: cc:82:88:44:90:13:9a:55:dc:f9:5f:09:31:15:7e:48:ea:31: 27:6b:96:bb:35:fc:01:35:1f:c6:ed:3d:7f:33:fc:50:4b:01: 37:8d:32:e2:5f:3c:9e:ee:79:4c:22:d5:9d:bb:89:d0:b7:4e: 7a:21:43:a9:49:d8:90:bb:8a:fb:fc:65:a5:d2:ae:5c:b4:c7: da:91:ac:d9:c3:8d:5c:f8:d2:0e:44:54:a5:75:cb:4a:06:00: e1:03:a0:c5:99:2f:37:cb:5b:15:df:6b:4d:58:a8:66:91:2f: 5c:b5:53:34:e9:d6:9a:b2:91:99:41:49:d2:ab:a2:78:0f:c3: 2a:c2:f7:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2MzUxMTAvBgNVBAUTKDA5RDhGMTQ0NDMzRUVFMUUyQTQ0Mzk5MTNBMzY2RTND M0M1OTA1MzcwHhcNMjQwNTA4MTkxODE2WhcNMjQwNTE1MTkxODE2WjAYMRYwFAYD VQQDEw02NjNiY2ZmOS01MDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApYwGyDM2+6qCDk4+0ItmTkOw6HaoUHVuJ+qiy3D5F3y3s2rTz7fI/lBw5tZk UgIKiHtdfRGjdSaDzaL57r5qDzRkIuzPHkB2yPmzx8Amu4bjg7kuIVte20HFC8Q+ 26sU1YWNDprliE9Jg8yK4INKug3ZWtXZ2KMUB5Ka18ANMdLnJqBxWqWo2BDTYOnD AizHmZ+S3tHroOznEvtc/lyVNpIu99OZOgZps0BNfAND+v8p2pw82uv7RcgNz+QI qeQNzGLuYf8BHoXLJ4f53HwGICL8EolT6cL/cyCirx4suTHEAxBmJS09+7+v+3Ca aK3CLDxcotecRLBuzc02RG26NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmDBWwK 6LOlwC/wycsiLNJnPkW1MB8GA1UdIwQYMBaAFAnY8URDPu4eKkQ5kTo2bjw8WQU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTYzNS9CQTY3Mzk5MEZG MjkxMUU5OTRGNEY0MTlDNEY5QUUwMi9DZGp4UkVNLTdoNHFSRG1ST2padVBEeFpC VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NkanhSRU0tN2g0cVJEbVJPalp1UER4WkJUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTYzNS9CQTY3Mzk5MEZGMjkxMUU5OTRGNEY0MTlDNEY5QUUwMi9DZGp4UkVNLTdo NHFSRG1ST2padVBEeFpCVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNlIbHMrFRXVS0s6N2vyADDamV1bSPqKOlYo+CnzMjplK3uKIPhaAp XqjraI4hcjHeiWk5xBCa2scjLKhbK1ZSKsItRhAWCAq/IjEUn0zAyzOl38KSzSLk I9iDtyqC5SiUb+RqTuFccm8z0Q425SVmHVklYsLTiA2qFc3XOKTMgohEkBOaVdz5 XwkxFX5I6jEna5a7NfwBNR/G7T1/M/xQSwE3jTLiXzye7nlMItWdu4nQt056IUOp SdiQu4r7/GWl0q5ctMfakazZw41c+NIORFSldctKBgDhA6DFmS83y1sV32tNWKhm kS9ctVM06daaspGZQUnSq6J4D8MqwvcP -----END CERTIFICATE-----Generated at Wed May 8 21:04:05 2024 by rpki-client on console-fra.rpki-client.org