$ rpki-client -vvf rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft File: 4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft (raw, json) Hash identifier: zb19AGeVlzAwlAA3by7NSs6ohNQTCG0odNnaKwOmH0I= Subject key identifier: 9D:FD:DC:98:A1:DD:77:9E:73:13:F5:11:CF:CB:34:03:C3:5F:91:07 Authority key identifier: E0:B4:45:8B:9A:BD:32:03:51:73:53:EC:80:BE:31:0C:36:55:4D:AE Certificate issuer: /CN=A91273A9/serialNumber=E0B4458B9ABD3203517353EC80BE310C36554DAE Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft Manifest number: B8 Signing time: Sun 19 May 2024 06:26:44 +0000 Manifest this update: Sun 19 May 2024 06:26:43 +0000 Manifest next update: Sun 26 May 2024 06:26:43 +0000 Files and hashes: 1: 4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl (hash: 8NO/9PfLxDxDYlNnIauibfeB1i3oD39vUiTTqd4BiGI=) 2: 831C2D12FAD711EDBF5E232DC4F9AE02.roa (hash: 52l9/qJQDdstZQh/FB5Z8joI4zAmjGlZIpR3XA/EVn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91273A9/serialNumber=E0B4458B9ABD3203517353EC80BE310C36554DAE Validity Not Before: May 19 06:26:43 2024 GMT Not After : May 26 06:26:43 2024 GMT Subject: CN=66499ba4-65fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bb:65:1c:12:63:ab:d5:79:8d:58:2d:12:34: f7:91:29:16:74:9d:7d:d5:3e:86:f9:ba:c5:30:80: 7b:a0:98:21:8d:cc:fc:fb:c1:c4:6e:8f:68:b4:3e: d3:1a:c6:0f:05:07:e7:e3:48:31:36:4c:67:3d:e5: 8f:0e:6f:39:51:fc:a2:08:8f:3b:75:42:d8:d9:9a: 80:2a:ff:75:dc:85:40:71:b7:ac:c8:53:a9:56:6a: be:06:eb:b2:ae:8b:2b:f7:e2:46:0a:4a:1e:a6:d8: bd:78:ec:38:3b:83:97:e7:6d:37:06:07:09:6b:05: d2:23:57:e8:c0:12:d4:70:47:e0:f7:60:1f:10:0f: 56:3e:11:28:9c:af:b4:ce:1b:20:bb:fb:fc:36:e0: a5:6a:b6:45:a8:70:f1:30:c8:83:9a:6b:09:89:a5: 68:e6:3d:64:49:9f:8d:3d:17:08:6c:28:a9:f9:bf: 20:90:d8:bb:ff:80:6c:a5:e5:0b:ef:3d:e8:13:02: 31:b6:31:35:4a:38:2a:6c:09:3c:59:01:4f:5e:6d: 6f:85:48:7d:73:b9:3c:67:98:de:92:25:0f:39:8f: 99:a1:21:2a:9d:65:c1:69:97:44:2a:2b:89:af:f9: 40:98:3d:c6:40:ad:38:af:f0:95:d5:40:13:c4:99: 8a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:FD:DC:98:A1:DD:77:9E:73:13:F5:11:CF:CB:34:03:C3:5F:91:07 X509v3 Authority Key Identifier: keyid:E0:B4:45:8B:9A:BD:32:03:51:73:53:EC:80:BE:31:0C:36:55:4D:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:c9:37:72:3b:e7:46:68:d7:27:96:e4:3e:1f:2f:2b:ea:02: 49:22:33:30:ed:70:4e:41:da:7b:36:88:60:d1:28:3f:da:51: 28:bb:f9:35:96:79:67:a6:5a:7b:82:7a:b0:6e:75:27:47:99: 07:b4:dd:20:e3:8c:c0:44:21:9c:73:0d:ec:f9:70:b1:7a:6f: f1:6c:70:35:39:e4:27:42:5c:5d:c9:26:7a:ef:b2:22:f0:63: 33:3d:fd:f9:e8:63:b4:f4:cf:25:94:9a:94:12:13:bf:3a:1f: fa:4f:39:1f:0e:7a:7d:ae:ce:c4:d0:98:f2:9f:98:93:3f:18: 28:f6:ae:a2:6e:7e:20:05:6e:c3:00:f9:9f:9f:46:22:ad:76: 39:c4:df:9d:05:57:13:43:f0:c5:17:00:ac:0c:05:c0:e2:2e: e2:aa:5b:16:61:ac:b0:8b:ed:2c:d0:f0:43:50:fc:6d:21:82: 92:d5:af:6d:b6:ff:33:ac:3c:b0:03:1d:a1:ea:21:a2:61:c6: 45:df:5c:62:03:78:22:69:5f:8f:28:26:81:a0:83:0d:81:45: e9:66:fd:85:04:f1:49:22:50:eb:49:9e:ff:ac:d7:0d:a2:12: 99:a5:f3:f9:7c:0f:3b:62:72:67:06:ac:be:98:0e:d6:0f:f2: d9:3a:cf:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczQTkxMTAvBgNVBAUTKEUwQjQ0NThCOUFCRDMyMDM1MTczNTNFQzgwQkUzMTBD MzY1NTREQUUwHhcNMjQwNTE5MDYyNjQzWhcNMjQwNTI2MDYyNjQzWjAYMRYwFAYD VQQDEw02NjQ5OWJhNC02NWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrtlHBJjq9V5jVgtEjT3kSkWdJ191T6G+brFMIB7oJghjcz8+8HEbo9otD7T GsYPBQfn40gxNkxnPeWPDm85UfyiCI87dULY2ZqAKv913IVAcbesyFOpVmq+Buuy rosr9+JGCkoepti9eOw4O4OX5203BgcJawXSI1fowBLUcEfg92AfEA9WPhEonK+0 zhsgu/v8NuClarZFqHDxMMiDmmsJiaVo5j1kSZ+NPRcIbCip+b8gkNi7/4BspeUL 7z3oEwIxtjE1SjgqbAk8WQFPXm1vhUh9c7k8Z5jekiUPOY+ZoSEqnWXBaZdEKiuJ r/lAmD3GQK04r/CV1UATxJmKgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ393Jih 3XeecxP1Ec/LNAPDX5EHMB8GA1UdIwQYMBaAFOC0RYuavTIDUXNT7IC+MQw2VU2u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNBOS9EOEVGMTNDMkZB Q0MxMUVEQjU1QUJFODdDNEY5QUUwMi80TFJGaTVxOU1nTlJjMVBzZ0w0eEREWlZU YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRMUkZpNXE5TWdOUmMxUHNnTDR4RERaVlRhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzNBOS9EOEVGMTNDMkZBQ0MxMUVEQjU1QUJFODdDNEY5QUUwMi80TFJGaTVxOU1n TlJjMVBzZ0w0eEREWlZUYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDcyTdyO+dGaNcnluQ+Hy8r6gJJIjMw7XBOQdp7Nohg0Sg/2lEou/k1 lnlnplp7gnqwbnUnR5kHtN0g44zARCGccw3s+XCxem/xbHA1OeQnQlxdySZ677Ii 8GMzPf356GO09M8llJqUEhO/Oh/6TzkfDnp9rs7E0Jjyn5iTPxgo9q6ibn4gBW7D APmfn0YirXY5xN+dBVcTQ/DFFwCsDAXA4i7iqlsWYaywi+0s0PBDUPxtIYKS1a9t tv8zrDywAx2h6iGiYcZF31xiA3giaV+PKCaBoIMNgUXpZv2FBPFJIlDrSZ7/rNcN ohKZpfP5fA87YnJnBqy+mA7WD/LZOs+r -----END CERTIFICATE-----Generated at Sun May 19 07:40:37 2024 by rpki-client on console-fra.rpki-client.org