$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft File: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft (raw, json) Hash identifier: N0BmAZnNFPIOoSbk7BWQwZUx1i984c2y9wUXBSwcBVQ= Subject key identifier: F4:93:53:8B:F3:4C:63:5A:29:30:B7:18:C7:D0:A7:72:0E:B8:D9:FA Authority key identifier: E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F Certificate issuer: /CN=A911BDDF/serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft Manifest number: 0114 Signing time: Sun 19 May 2024 05:24:45 +0000 Manifest this update: Sun 19 May 2024 05:24:45 +0000 Manifest next update: Sun 26 May 2024 05:24:45 +0000 Files and hashes: 1: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl (hash: rk5kI88Caugvib61X0wV+1lGDJ6PvRfOqniE7ELBotM=) 2: B97A5C70771511EEBBCCCD1AC4F9AE02.roa (hash: +UvHfDsYPcQO2Qih7ly7+y8g8H1CLfx7+QoA+C6BaM8=) 3: 089F5864771611EE908B571BC4F9AE02.roa (hash: 71QFUv7lunMYDACn4tEWBXzGx+rZa1ca+kR0yu5ipRw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDDF/serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F Validity Not Before: May 19 05:24:45 2024 GMT Not After : May 26 05:24:45 2024 GMT Subject: CN=66498d1d-eff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:25:ed:c2:ee:4f:10:2d:60:50:8d:9b:06:c2: 2e:f1:01:2a:3e:29:65:3f:a3:f2:17:41:8f:99:3e: 2b:b3:eb:8b:6c:92:62:30:3d:e4:11:7b:a0:4b:95: 4d:78:4f:12:f2:2a:47:a5:2e:d2:ea:1b:53:3e:22: 3d:8b:b0:fa:43:23:a1:d1:18:07:6a:35:0b:33:38: 81:8d:fd:b7:e7:da:f4:da:fe:5d:a8:d1:d7:c9:dc: b5:44:d9:6b:66:c8:14:88:b6:19:f2:db:13:f3:53: 27:d2:81:6f:15:c0:be:4a:85:81:39:15:3a:bf:5b: 37:99:07:1d:4c:d8:75:78:49:0c:42:61:af:0b:2b: 26:7b:a3:6e:55:42:32:a2:a8:8e:c7:b6:f2:52:11: 10:a8:80:5b:d5:82:4c:8b:05:f0:f5:f1:aa:61:46: 3b:ff:e8:cb:38:c4:1f:04:37:e9:32:4e:ac:fc:9f: 4f:e4:f5:4c:80:36:c5:30:94:59:b8:c9:00:7c:29: 71:02:02:34:e9:2c:23:fc:d3:ca:a3:34:e3:33:66: c0:30:91:29:c2:2f:3d:fc:89:a5:c3:bc:dc:91:9d: 96:7b:db:b9:b1:37:63:bf:23:df:6a:be:10:ed:b3: 12:5d:c3:71:8e:18:e5:72:7a:dd:e5:d4:ea:42:29: b0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:93:53:8B:F3:4C:63:5A:29:30:B7:18:C7:D0:A7:72:0E:B8:D9:FA X509v3 Authority Key Identifier: keyid:E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:1f:13:4d:5a:7b:aa:10:83:86:27:56:c6:13:ac:db:43:93: a2:ed:4e:aa:79:99:0b:14:cf:50:f0:70:fd:68:b9:b6:1b:07: f1:5b:5e:bc:c2:72:1c:71:4a:9d:73:74:f8:5f:5b:ec:ad:ec: ad:f1:41:31:84:1c:da:dc:64:b8:cd:0c:bb:51:7c:0f:c6:d1: 7c:96:b7:dc:9a:d8:8a:48:07:ee:c0:ab:53:97:8d:20:ee:16: 94:ac:a9:4f:57:3f:3f:e3:95:78:48:a2:ff:c7:b5:d9:d6:38: 8d:1a:b5:74:df:4b:5a:12:ff:47:d7:24:53:16:6c:9e:26:2e: 92:69:b6:c2:f1:22:3d:20:9f:49:61:17:00:37:c6:24:8c:b0: ed:e9:6b:d3:9a:5c:41:5e:19:17:99:9b:81:8a:70:76:93:86: 0a:0d:3c:a4:ab:dc:3c:3a:c9:cd:9b:a8:b7:11:c3:b2:78:67: b0:1e:33:89:b7:12:5f:81:13:34:13:fa:08:4c:48:dc:b6:68: 38:0f:a6:2a:b8:6b:05:b3:30:71:b2:0e:9d:61:f5:25:db:30: 0d:6a:a3:80:d5:ca:e8:e7:bd:3b:9c:30:64:01:8d:90:51:5f: 29:a2:3e:e4:1a:41:34:92:e5:64:6f:ac:29:e9:cf:8c:9f:66: 45:45:9b:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEREYxMTAvBgNVBAUTKEUzRTFDQ0NGODNENTJDQjhBM0M5ODdBODExRTFGODA3 RjMzOTNFN0YwHhcNMjQwNTE5MDUyNDQ1WhcNMjQwNTI2MDUyNDQ1WjAYMRYwFAYD VQQDEw02NjQ5OGQxZC1lZmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqCXtwu5PEC1gUI2bBsIu8QEqPillP6PyF0GPmT4rs+uLbJJiMD3kEXugS5VN eE8S8ipHpS7S6htTPiI9i7D6QyOh0RgHajULMziBjf2359r02v5dqNHXydy1RNlr ZsgUiLYZ8tsT81Mn0oFvFcC+SoWBORU6v1s3mQcdTNh1eEkMQmGvCysme6NuVUIy oqiOx7byUhEQqIBb1YJMiwXw9fGqYUY7/+jLOMQfBDfpMk6s/J9P5PVMgDbFMJRZ uMkAfClxAgI06Swj/NPKozTjM2bAMJEpwi89/Imlw7zckZ2We9u5sTdjvyPfar4Q 7bMSXcNxjhjlcnrd5dTqQimwZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPSTU4vz TGNaKTC3GMfQp3IOuNn6MB8GA1UdIwQYMBaAFOPhzM+D1Sy4o8mHqBHh+AfzOT5/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRERi9BMjEyNzY4Qzc2 MEIxMUVEOEM2Q0YyNEVDNEY5QUUwMi80LUhNejRQVkxMaWp5WWVvRWVINEJfTTVQ bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtSE16NFBWTExpanlZZW9FZUg0Ql9NNVBuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRERi9BMjEyNzY4Qzc2MEIxMUVEOEM2Q0YyNEVDNEY5QUUwMi80LUhNejRQVkxM aWp5WWVvRWVINEJfTTVQbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5HxNNWnuqEIOGJ1bGE6zbQ5Oi7U6qeZkLFM9Q8HD9aLm2GwfxW168 wnIccUqdc3T4X1vsreyt8UExhBza3GS4zQy7UXwPxtF8lrfcmtiKSAfuwKtTl40g 7haUrKlPVz8/45V4SKL/x7XZ1jiNGrV030taEv9H1yRTFmyeJi6SabbC8SI9IJ9J YRcAN8YkjLDt6WvTmlxBXhkXmZuBinB2k4YKDTykq9w8OsnNm6i3EcOyeGewHjOJ txJfgRM0E/oITEjctmg4D6YquGsFszBxsg6dYfUl2zANaqOA1cro5707nDBkAY2Q UV8poj7kGkE0kuVkb6wp6c+Mn2ZFRZvT -----END CERTIFICATE-----Generated at Sun May 19 05:48:49 2024 by rpki-client on console-fra.rpki-client.org