$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft File: 4lNNJseMlwF5CZZDjBFBCCVHdqo.mft (raw, json) Hash identifier: Ox6qmGIdT9e9zPmyVOO11aBt/8TLF6VdGOj2H1pXKTk= Subject key identifier: 44:70:F1:09:43:43:DB:5F:9D:A3:F3:D1:DC:2A:72:58:88:63:69:B0 Authority key identifier: E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA Certificate issuer: /CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft Manifest number: 0116 Signing time: Fri 31 May 2024 06:07:22 +0000 Manifest this update: Fri 31 May 2024 06:07:21 +0000 Manifest next update: Fri 07 Jun 2024 06:07:21 +0000 Files and hashes: 1: 4lNNJseMlwF5CZZDjBFBCCVHdqo.crl (hash: h8h9wk7Kr3bdvfIr++qbsTwvsxoZtjY/Og3vVmadOKU=) 2: 64D427963D8B11EE80D1E96DC4F9AE02.roa (hash: gBIKs4XmMND7w0DU3kH9ZwUeTGqIQhJH8GYnsaSZqCg=) 3: 562B3D3E7A9411ED91BE2586C4F9AE02.roa (hash: k8fSvVdIYZ3BTVwLHSHdazxXSeCJ4c1LTVMkZVzSkoc=) 4: 3AA7BED6ECBA11EE8736F274C4F9AE02.roa (hash: doDbLm33kDqozRbUunYGEw2IDBvQYUrzGkFtMGAu1dQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 06:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA Validity Not Before: May 31 06:07:21 2024 GMT Not After : Jun 7 06:07:21 2024 GMT Subject: CN=66596919-b45c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:90:f8:0a:bd:01:ce:3b:42:08:0e:c6:9c:82: ee:86:fb:1f:49:7b:df:13:3e:fa:8a:18:24:bb:8b: ce:34:6f:c4:2d:0d:6e:87:44:0d:7d:a5:fc:0f:f2: 57:14:12:89:c9:16:3c:46:5e:0e:05:e4:d7:f5:21: 10:d4:c8:f2:2a:44:41:33:da:d8:d3:ca:d1:4b:af: a1:6b:96:40:4f:f6:f7:20:08:2f:35:96:1a:7b:1f: 2c:dc:cd:35:69:e9:8e:a7:a6:78:e6:25:97:66:7c: e4:4f:42:85:22:e0:50:b7:00:37:c8:79:d0:ec:d3: 75:4d:0b:ff:c7:e2:e6:cd:5f:35:f8:69:e3:23:ad: 17:78:a4:49:c8:f4:31:12:2c:a9:4b:1a:26:fc:a3: c1:8a:f8:69:ad:d5:64:c9:83:cf:1d:1f:3a:2e:20: fe:09:41:3b:ba:f3:64:42:0a:fa:f6:a6:97:92:f4: 32:04:9d:39:68:7a:a6:f8:7b:48:b1:fa:21:8f:53: eb:48:78:e1:a9:70:b0:26:65:22:a9:43:98:b9:93: ce:13:84:00:4c:d5:7c:ad:c5:2f:79:c0:37:e0:a2: b1:0e:46:b1:60:dd:33:25:b2:d3:e3:36:2e:4b:86: 75:06:98:06:d8:b2:bf:fa:93:ab:33:e8:ec:02:62: f5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:70:F1:09:43:43:DB:5F:9D:A3:F3:D1:DC:2A:72:58:88:63:69:B0 X509v3 Authority Key Identifier: keyid:E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:ce:df:cc:fe:30:f5:1e:30:6f:14:a5:1f:2d:f7:50:c1:aa: c9:dc:ae:78:9e:9f:4d:fa:d2:59:ec:9c:7f:59:df:cb:e8:3e: e9:58:c5:bf:0d:61:10:79:75:23:bc:a7:05:14:a4:d3:16:3e: ac:ab:9e:b8:32:36:4d:ff:3c:2e:58:b4:8f:56:a6:7b:7a:b2: 33:46:60:ee:2d:9a:be:d9:eb:d1:36:44:2c:10:be:b8:56:01: cc:e5:b1:f9:ee:54:93:44:08:a0:15:c1:a3:dd:b3:8b:35:27: a5:98:7d:ec:f2:c5:fe:89:a9:59:76:84:b5:59:a4:5e:f7:b8: 42:31:a4:59:4d:24:28:1a:2b:72:ab:39:d9:1f:71:13:1e:2a: 59:1b:2b:6e:2e:94:e2:9e:b4:4c:0c:0a:2a:d2:aa:4d:bc:2e: 64:f8:33:0d:96:fe:09:62:f3:5a:2f:36:30:0b:3d:f7:9e:4d: 92:ad:f2:8a:bc:c5:b1:1c:05:8c:20:f5:6f:16:cb:56:31:10: c6:bd:50:41:dc:71:93:af:95:f1:b0:bd:e8:62:3f:64:94:2e: 60:ab:21:7d:a4:17:a5:69:b1:0b:40:c6:f3:db:73:e4:c2:db: 82:01:3d:75:db:74:9a:b2:b9:4d:e8:ef:ee:e4:84:c7:a6:6e: 34:b1:3d:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdFOTkxMTAvBgNVBAUTKEUyNTM0RDI2Qzc4Qzk3MDE3OTA5OTY0MzhDMTE0MTA4 MjU0Nzc2QUEwHhcNMjQwNTMxMDYwNzIxWhcNMjQwNjA3MDYwNzIxWjAYMRYwFAYD VQQDEw02NjU5NjkxOS1iNDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJD4Cr0BzjtCCA7GnILuhvsfSXvfEz76ihgku4vONG/ELQ1uh0QNfaX8D/JX FBKJyRY8Rl4OBeTX9SEQ1MjyKkRBM9rY08rRS6+ha5ZAT/b3IAgvNZYaex8s3M01 aemOp6Z45iWXZnzkT0KFIuBQtwA3yHnQ7NN1TQv/x+LmzV81+GnjI60XeKRJyPQx EiypSxom/KPBivhprdVkyYPPHR86LiD+CUE7uvNkQgr69qaXkvQyBJ05aHqm+HtI sfohj1PrSHjhqXCwJmUiqUOYuZPOE4QATNV8rcUvecA34KKxDkaxYN0zJbLT4zYu S4Z1BpgG2LK/+pOrM+jsAmL1WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFERw8QlD Q9tfnaPz0dwqcliIY2mwMB8GA1UdIwQYMBaAFOJTTSbHjJcBeQmWQ4wRQQglR3aq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0U5OS8wQUNFMTlCMDdB ODUxMUVEQUQ2OTI4ODdDNEY5QUUwMi80bE5OSnNlTWx3RjVDWlpEakJGQkNDVkhk cW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRsTk5Kc2VNbHdGNUNaWkRqQkZCQ0NWSGRxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0U5OS8wQUNFMTlCMDdBODUxMUVEQUQ2OTI4ODdDNEY5QUUwMi80bE5OSnNlTWx3 RjVDWlpEakJGQkNDVkhkcW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXzt/M/jD1HjBvFKUfLfdQwarJ3K54np9N+tJZ7Jx/Wd/L6D7pWMW/ DWEQeXUjvKcFFKTTFj6sq564MjZN/zwuWLSPVqZ7erIzRmDuLZq+2evRNkQsEL64 VgHM5bH57lSTRAigFcGj3bOLNSelmH3s8sX+ialZdoS1WaRe97hCMaRZTSQoGity qznZH3ETHipZGytuLpTinrRMDAoq0qpNvC5k+DMNlv4JYvNaLzYwCz33nk2SrfKK vMWxHAWMIPVvFstWMRDGvVBB3HGTr5XxsL3oYj9klC5gqyF9pBelabELQMbz23Pk wtuCAT1123SasrlN6O/u5ITHpm40sT05 -----END CERTIFICATE-----Generated at Fri May 31 06:33:57 2024 by rpki-client on console-fra.rpki-client.org