$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft File: 4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft (raw, json) Hash identifier: adjFZc2V3FLEAlnZgntj+y4WheX26JfkdBKWbKeWzA8= Subject key identifier: 7B:3C:37:68:6A:00:8E:9E:48:E4:66:4C:F2:95:99:93:7B:EA:EA:A2 Authority key identifier: E3:EB:95:4B:44:72:1E:41:1A:AF:09:38:31:0C:C1:03:EA:4C:8B:B4 Certificate issuer: /CN=A9112DEF/serialNumber=E3EB954B44721E411AAF0938310CC103EA4C8BB4 Certificate serial: 02A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft Manifest number: 029F Signing time: Sun 19 May 2024 03:36:32 +0000 Manifest this update: Sun 19 May 2024 03:36:32 +0000 Manifest next update: Sun 26 May 2024 03:36:32 +0000 Files and hashes: 1: 4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl (hash: IZrvpb2zaGt3ryChnbmOtjy4sCuaiusAw3Ju64eBSP8=) 2: FE37F6E0E71711ECA4C60269C4F9AE02.roa (hash: IIvzz0A/cMs27e+lpxOre2emOQgWpY2xeKIFN2INhWA=) 3: E386F672068711EDA1C2070DC4F9AE02.roa (hash: pgW2HGqxPEc6bhBwtiyxHITeZ/6F8jFtPrUAExwaxN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 680 (0x2a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112DEF/serialNumber=E3EB954B44721E411AAF0938310CC103EA4C8BB4 Validity Not Before: May 19 03:36:32 2024 GMT Not After : May 26 03:36:32 2024 GMT Subject: CN=664973c0-b851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7b:6d:c3:23:da:b5:62:49:87:21:b6:73:0b: 39:1e:8d:43:09:07:eb:e6:79:d5:62:d5:45:62:52: be:9c:83:75:6c:c2:5f:e6:1a:94:79:67:e8:ac:30: ab:f3:f4:1d:1c:09:09:4b:7d:91:bd:ff:99:27:cc: 6e:52:4f:6f:32:26:62:dc:81:ba:60:0e:fb:83:44: 66:e5:be:4d:64:05:4f:66:84:69:c6:41:39:f2:15: 20:13:f1:6c:22:ec:20:78:01:10:a8:d1:88:4d:37: 1b:e3:64:25:2c:96:c4:03:92:50:c5:e9:fa:26:7f: f8:b5:7c:f8:f5:35:7b:5c:90:65:56:6a:e8:49:24: fa:9c:3c:67:d4:45:1b:dc:27:47:d6:bb:8b:cb:1f: ab:d1:aa:30:9a:9d:d9:00:dc:a8:2e:08:fc:08:95: f7:42:00:38:d1:bd:a4:71:d0:90:21:6c:69:ce:61: 88:5c:2c:4e:d1:9e:f2:55:27:d7:a4:f4:6a:de:23: 21:73:b0:d1:4f:c1:e0:b5:3f:86:ed:34:57:e5:5a: 41:0d:fc:ec:ad:56:1a:73:8e:b1:e0:bc:46:31:bf: b1:38:f7:d1:26:e5:ad:5a:e9:d6:b1:48:e0:51:f1: 07:ab:c5:d2:c7:ff:ad:b8:d8:e7:b5:e7:86:4a:a8: f0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:3C:37:68:6A:00:8E:9E:48:E4:66:4C:F2:95:99:93:7B:EA:EA:A2 X509v3 Authority Key Identifier: keyid:E3:EB:95:4B:44:72:1E:41:1A:AF:09:38:31:0C:C1:03:EA:4C:8B:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:95:ee:5d:73:99:43:b4:0d:6d:6b:59:a7:e7:29:26:6b:c3: 07:9f:4a:01:3d:30:5f:b6:7f:a5:6f:7a:64:0c:90:24:4f:fa: bc:35:94:e2:32:b3:79:80:3d:f5:5f:4f:0e:b7:27:ab:55:5f: 69:ac:ee:08:e8:16:40:a5:e7:f5:02:23:a9:91:f4:77:66:0a: a5:6d:e7:a8:1d:b4:21:3f:7e:51:a8:de:00:b9:64:09:e0:3c: 51:c0:8c:ac:7e:78:a1:2f:a8:eb:28:ea:e2:4c:9a:f7:52:a4: a1:3d:f6:d1:bb:e4:64:1c:71:80:38:f5:8e:07:d3:5f:bd:ce: 1a:e7:e8:f8:97:4a:06:60:11:cd:43:e5:ee:cb:74:fa:71:43: 36:e2:cd:f0:81:4d:a5:36:4d:0d:11:01:53:fd:bd:d4:57:d9: 55:97:aa:dc:90:6e:34:23:b8:e0:a9:80:62:c1:1d:ef:bb:b2: ab:1d:f2:8c:8a:f1:eb:90:c5:65:d9:3b:ef:b1:e0:21:c3:d6: 46:e1:48:df:d1:b3:58:ea:c5:dd:97:4e:63:12:d3:a9:0e:18: 7f:07:41:36:b1:46:5b:52:61:3f:51:70:6d:a0:62:52:95:c4: f0:c2:7e:93:fb:ac:d9:89:a5:73:9a:e5:61:5b:94:72:e0:fc: 6a:cc:93:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJERUYxMTAvBgNVBAUTKEUzRUI5NTRCNDQ3MjFFNDExQUFGMDkzODMxMENDMTAz RUE0QzhCQjQwHhcNMjQwNTE5MDMzNjMyWhcNMjQwNTI2MDMzNjMyWjAYMRYwFAYD VQQDEw02NjQ5NzNjMC1iODUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnttwyPatWJJhyG2cws5Ho1DCQfr5nnVYtVFYlK+nIN1bMJf5hqUeWforDCr 8/QdHAkJS32Rvf+ZJ8xuUk9vMiZi3IG6YA77g0Rm5b5NZAVPZoRpxkE58hUgE/Fs IuwgeAEQqNGITTcb42QlLJbEA5JQxen6Jn/4tXz49TV7XJBlVmroSST6nDxn1EUb 3CdH1ruLyx+r0aowmp3ZANyoLgj8CJX3QgA40b2kcdCQIWxpzmGIXCxO0Z7yVSfX pPRq3iMhc7DRT8HgtT+G7TRX5VpBDfzsrVYac46x4LxGMb+xOPfRJuWtWunWsUjg UfEHq8XSx/+tuNjnteeGSqjwYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHs8N2hq AI6eSORmTPKVmZN76uqiMB8GA1UdIwQYMBaAFOPrlUtEch5BGq8JODEMwQPqTIu0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkRFRi8xOEY2OTg3Q0Iz RDUxMUVDQjNBMEE4ODJDNEY5QUUwMi80LXVWUzBSeUhrRWFyd2s0TVF6QkEtcE1p N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtdVZTMFJ5SGtFYXJ3azRNUXpCQS1wTWk3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkRFRi8xOEY2OTg3Q0IzRDUxMUVDQjNBMEE4ODJDNEY5QUUwMi80LXVWUzBSeUhr RWFyd2s0TVF6QkEtcE1pN1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAle5dc5lDtA1ta1mn5ykma8MHn0oBPTBftn+lb3pkDJAkT/q8NZTi MrN5gD31X08OtyerVV9prO4I6BZApef1AiOpkfR3ZgqlbeeoHbQhP35RqN4AuWQJ 4DxRwIysfnihL6jrKOriTJr3UqShPfbRu+RkHHGAOPWOB9Nfvc4a5+j4l0oGYBHN Q+Xuy3T6cUM24s3wgU2lNk0NEQFT/b3UV9lVl6rckG40I7jgqYBiwR3vu7KrHfKM ivHrkMVl2TvvseAhw9ZG4Ujf0bNY6sXdl05jEtOpDhh/B0E2sUZbUmE/UXBtoGJS lcTwwn6T+6zZiaVzmuVhW5Ry4PxqzJPb -----END CERTIFICATE-----Generated at Sun May 19 04:22:03 2024 by rpki-client on console-fra.rpki-client.org