$ rpki-client -vvf rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft File: L4vvSDpBiuHAMSMIGG70zXskZuU.mft (raw, json) Hash identifier: 9RHPKDL2E5ptmFAecI4VmllkWWqrbyhwbPX7J8itxZg= Subject key identifier: B1:9D:71:76:A0:EA:DD:9E:A3:E1:B2:91:3C:E0:6D:2E:39:EB:A4:37 Authority key identifier: 2F:8B:EF:48:3A:41:8A:E1:C0:31:23:08:18:6E:F4:CD:7B:24:66:E5 Certificate issuer: /CN=A9125758/serialNumber=2F8BEF483A418AE1C0312308186EF4CD7B2466E5 Certificate serial: 016C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft Manifest number: 0169 Signing time: Sun 19 May 2024 04:49:31 +0000 Manifest this update: Sun 19 May 2024 04:49:30 +0000 Manifest next update: Sun 26 May 2024 04:49:30 +0000 Files and hashes: 1: L4vvSDpBiuHAMSMIGG70zXskZuU.crl (hash: u7WlcHrpZNSbxJCK2fMZNScvKwPcveCB6sow9azZnzc=) 2: 117300B62CDB11EDB2E1DD0DC4F9AE02.roa (hash: G2dWBNxI+TwAzB7Q925KO0EBuCO5Q3vn2232Y9oRj5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.crl rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 364 (0x16c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125758/serialNumber=2F8BEF483A418AE1C0312308186EF4CD7B2466E5 Validity Not Before: May 19 04:49:30 2024 GMT Not After : May 26 04:49:30 2024 GMT Subject: CN=664984da-467d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b3:b9:b4:56:ec:70:c8:2a:85:47:14:4f:bf: 48:0e:18:28:53:77:8b:c2:42:1f:b6:53:cf:46:70: af:bb:d5:49:2d:80:f7:be:b6:39:24:f0:e3:55:d1: 75:e5:72:c2:38:26:9d:56:1f:80:45:27:57:6b:78: 41:ad:4b:f0:58:14:5d:54:11:43:73:a4:bf:04:fe: 28:28:d3:bb:49:2f:02:60:f2:1d:3f:90:1f:f4:ae: c1:a8:18:f6:67:fe:2b:dd:5b:d7:0f:7f:b4:ad:35: 0d:0e:b1:fd:93:dc:d9:59:61:1a:56:15:94:5e:b2: 57:2f:22:b6:a2:6a:03:43:ff:ae:56:b5:39:90:ca: bb:4e:df:82:63:5f:01:47:40:84:90:69:a2:e9:6b: dd:67:8c:18:8e:7c:f0:28:fe:30:fd:bf:b7:48:6e: d0:9e:3e:53:80:09:dc:d5:f0:85:c0:75:64:ff:30: 89:df:91:be:c7:b9:76:0b:91:1a:cf:94:66:69:ea: 97:37:96:1d:e4:f5:3c:f4:1f:d7:c6:73:f6:81:12: b9:68:66:e9:8a:a5:be:61:09:55:0d:c8:fe:93:7c: a0:65:8d:e0:9e:dd:c7:32:53:02:73:97:3a:51:ca: d7:95:24:32:0b:51:19:c1:f8:04:8e:f8:6a:94:c5: 0d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:9D:71:76:A0:EA:DD:9E:A3:E1:B2:91:3C:E0:6D:2E:39:EB:A4:37 X509v3 Authority Key Identifier: keyid:2F:8B:EF:48:3A:41:8A:E1:C0:31:23:08:18:6E:F4:CD:7B:24:66:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:54:bd:5e:e6:d4:73:a2:db:57:d7:5e:c0:b7:15:07:8b:ba: 06:40:57:d7:db:7a:65:0e:30:eb:94:5e:b3:af:74:db:ec:84: 3c:56:f5:4c:35:48:59:63:a2:b3:e4:e1:ef:78:b6:ed:f0:68: cb:3b:88:e6:44:31:71:a1:04:fe:cb:54:32:a1:ed:66:6f:01: ce:73:90:8c:73:4d:f1:2d:71:1b:0b:ee:2e:24:21:70:b3:44: 13:94:8f:83:88:06:70:38:2d:99:9f:a9:7b:99:f6:26:aa:da: f1:3b:c7:eb:0b:d9:9c:dd:f9:c8:ff:88:4b:76:5f:2c:4f:c2: eb:cb:73:b2:33:e4:65:51:72:0f:09:cb:0c:df:64:c9:55:45: 6e:83:9b:f0:44:04:3f:59:1b:6f:fb:a8:bc:b6:b0:0c:fc:d1: 4a:7f:67:42:38:1e:1a:c3:0e:70:37:06:9f:15:2e:83:4d:69: a3:66:5d:f1:72:2f:68:98:d8:3f:08:82:da:94:0f:61:1e:98: f4:f4:0c:c4:70:aa:a0:9e:d8:6f:94:3a:2d:fb:a8:19:b9:ca: 35:51:75:71:06:e7:e4:78:00:4a:8c:e4:ba:e8:b3:5f:15:c1: c1:fb:ff:68:d3:39:37:ec:00:3d:0f:9a:b0:f6:fb:a0:f3:ca: fb:5f:1f:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU3NTgxMTAvBgNVBAUTKDJGOEJFRjQ4M0E0MThBRTFDMDMxMjMwODE4NkVGNENE N0IyNDY2RTUwHhcNMjQwNTE5MDQ0OTMwWhcNMjQwNTI2MDQ0OTMwWjAYMRYwFAYD VQQDEw02NjQ5ODRkYS00NjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmrO5tFbscMgqhUcUT79IDhgoU3eLwkIftlPPRnCvu9VJLYD3vrY5JPDjVdF1 5XLCOCadVh+ARSdXa3hBrUvwWBRdVBFDc6S/BP4oKNO7SS8CYPIdP5Af9K7BqBj2 Z/4r3VvXD3+0rTUNDrH9k9zZWWEaVhWUXrJXLyK2omoDQ/+uVrU5kMq7Tt+CY18B R0CEkGmi6WvdZ4wYjnzwKP4w/b+3SG7Qnj5TgAnc1fCFwHVk/zCJ35G+x7l2C5Ea z5RmaeqXN5Yd5PU89B/XxnP2gRK5aGbpiqW+YQlVDcj+k3ygZY3gnt3HMlMCc5c6 UcrXlSQyC1EZwfgEjvhqlMUNLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGdcXag 6t2eo+GykTzgbS4566Q3MB8GA1UdIwQYMBaAFC+L70g6QYrhwDEjCBhu9M17JGbl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTc1OC83MUVCRTdDMjJD RDcxMUVEQjAyQjFEMTlDNEY5QUUwMi9MNHZ2U0RwQml1SEFNU01JR0c3MHpYc2ta dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w0dnZTRHBCaXVIQU1TTUlHRzcwelhza1p1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTc1OC83MUVCRTdDMjJDRDcxMUVEQjAyQjFEMTlDNEY5QUUwMi9MNHZ2U0RwQml1 SEFNU01JR0c3MHpYc2tadVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQVL1e5tRzottX117AtxUHi7oGQFfX23plDjDrlF6zr3Tb7IQ8VvVM NUhZY6Kz5OHveLbt8GjLO4jmRDFxoQT+y1Qyoe1mbwHOc5CMc03xLXEbC+4uJCFw s0QTlI+DiAZwOC2Zn6l7mfYmqtrxO8frC9mc3fnI/4hLdl8sT8Lry3OyM+RlUXIP CcsM32TJVUVug5vwRAQ/WRtv+6i8trAM/NFKf2dCOB4aww5wNwafFS6DTWmjZl3x ci9omNg/CILalA9hHpj09AzEcKqgnthvlDot+6gZuco1UXVxBufkeABKjOS66LNf FcHB+/9o0zk37AA9D5qw9vug88r7Xx+Z -----END CERTIFICATE-----Generated at Sun May 19 06:14:33 2024 by rpki-client on console-ams.rpki-client.org