$ rpki-client -vvf rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft File: 4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft (raw, json) Hash identifier: v9mihy1Jkp90NRmaWsOIN5oKUnqBP4Hjt8q7XOxYr6U= Subject key identifier: C8:DB:85:92:BF:18:BB:F0:06:DF:8B:C5:F0:F0:42:C1:35:D4:1B:2D Authority key identifier: E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1 Certificate issuer: /CN=A9139220/serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1 Certificate serial: 068F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft Manifest number: 0687 Signing time: Sat 18 May 2024 23:22:24 +0000 Manifest this update: Sat 18 May 2024 23:22:23 +0000 Manifest next update: Sat 25 May 2024 23:22:23 +0000 Files and hashes: 1: 4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl (hash: Nvvg14dsrtj8wXvxQFp5YPRG+Owc/Qjdlu7Q3B3FqmE=) 2: 7EBB570A296C11EBB7D88147C4F9AE02.roa (hash: Z2l3oGv/nfXDALPGn15LKGvh23XHiWzTGaSb6NfX+J8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1679 (0x68f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139220/serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1 Validity Not Before: May 18 23:22:23 2024 GMT Not After : May 25 23:22:23 2024 GMT Subject: CN=6649382f-0af7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:42:14:3b:43:16:9f:74:47:00:32:f3:59:fd: d2:26:a3:ef:98:d1:9c:41:e7:56:06:ca:aa:b1:79: 70:5a:3a:75:13:99:07:ec:bb:d0:e7:cc:d3:cb:e0: b0:dd:67:83:61:e3:a4:1f:68:e6:8d:ea:ab:9b:8f: bb:0a:4f:fe:75:cc:7d:c6:e2:14:e5:87:bf:59:ac: 01:f0:1f:74:f4:d4:ae:4d:c1:55:09:45:07:00:51: c4:d5:4b:bf:a8:92:77:26:2d:59:22:0f:3e:dc:83: a3:72:31:3a:1e:5e:4d:11:1b:41:3f:e8:0c:c8:9a: 0a:82:31:62:14:52:f2:fc:1f:12:19:e6:81:f4:c6: ac:87:64:4d:94:f2:df:d2:5d:6a:2d:3d:60:7f:ec: 91:74:95:d0:40:2b:0e:fd:dd:51:95:95:dc:9a:7c: 7d:53:80:1a:5e:c8:e7:7e:f5:25:6e:11:a0:85:41: 3c:6b:66:6b:f5:2e:41:e0:d0:fa:6e:73:d6:99:83: ed:51:ba:d4:ab:3d:64:37:4a:d5:19:53:af:38:1e: e2:bf:01:3a:b1:c7:b7:86:e1:c2:ad:62:c0:cd:9f: cb:5f:7e:24:1f:e7:cc:91:48:a3:2a:75:fb:da:cb: 10:d6:81:df:9c:3f:0e:2c:86:98:0c:6d:c2:5c:e0: 13:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:DB:85:92:BF:18:BB:F0:06:DF:8B:C5:F0:F0:42:C1:35:D4:1B:2D X509v3 Authority Key Identifier: keyid:E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:8b:ba:c1:aa:bc:e4:f6:91:bc:ee:2e:60:84:6e:27:03:78: 65:52:71:fe:d5:74:8a:e0:7e:99:d2:9f:85:c1:2e:b8:44:2a: 26:41:96:a5:8d:65:a1:93:15:f3:2f:ff:9c:a5:32:69:43:bf: a4:4e:c8:48:24:4b:b0:c6:84:36:8a:97:d9:89:c0:8f:67:fb: 30:7e:c3:4c:96:d6:3e:e4:68:d8:a5:b3:6a:e1:00:67:58:41: b1:c7:d7:86:86:51:98:c6:51:64:eb:e8:1c:0d:d5:60:d4:d2: db:7b:5f:50:b5:fc:05:bd:1f:49:d5:f0:db:33:4e:b8:65:76: da:27:7c:65:f6:df:a8:99:d1:08:62:a5:9b:49:4e:85:29:ad: 84:54:38:f7:8f:c4:40:35:57:e5:a3:ca:ae:63:7f:cf:c2:c5: c1:70:c7:61:69:ef:c6:2c:9c:7e:bc:1c:be:4f:f9:05:7a:ba: d5:fe:eb:66:cb:e7:37:1e:35:01:bf:92:32:2d:38:ba:32:a0: d6:e2:96:6f:67:7f:07:23:2d:14:cc:d9:c8:0f:2c:db:e0:aa: 04:74:16:28:72:f2:3f:96:ca:43:f6:73:ac:8c:db:eb:fb:d4: 89:82:d2:5d:cf:61:45:9c:dd:b2:aa:d6:00:7c:db:88:d4:6e: f6:9e:39:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkyMjAxMTAvBgNVBAUTKEUyQ0ZDNDJCNkEwODE1MEFFRkVGRTcxODlCRTVBRjJC RTU2OEY4QzEwHhcNMjQwNTE4MjMyMjIzWhcNMjQwNTI1MjMyMjIzWjAYMRYwFAYD VQQDEw02NjQ5MzgyZi0wYWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0IUO0MWn3RHADLzWf3SJqPvmNGcQedWBsqqsXlwWjp1E5kH7LvQ58zTy+Cw 3WeDYeOkH2jmjeqrm4+7Ck/+dcx9xuIU5Ye/WawB8B909NSuTcFVCUUHAFHE1Uu/ qJJ3Ji1ZIg8+3IOjcjE6Hl5NERtBP+gMyJoKgjFiFFLy/B8SGeaB9Mash2RNlPLf 0l1qLT1gf+yRdJXQQCsO/d1RlZXcmnx9U4AaXsjnfvUlbhGghUE8a2Zr9S5B4ND6 bnPWmYPtUbrUqz1kN0rVGVOvOB7ivwE6sce3huHCrWLAzZ/LX34kH+fMkUijKnX7 2ssQ1oHfnD8OLIaYDG3CXOATDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjbhZK/ GLvwBt+LxfDwQsE11BstMB8GA1UdIwQYMBaAFOLPxCtqCBUK7+/nGJvlryvlaPjB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTIyMC8xNUNEMUMyMjI4 QjAxMUVCQjQ0NjlFMUVDNEY5QUUwMi80c19FSzJvSUZRcnY3LWNZbS1XdkstVm8t TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRzX0VLMm9JRlFydjctY1ltLVd2Sy1Wby1NRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTIyMC8xNUNEMUMyMjI4QjAxMUVCQjQ0NjlFMUVDNEY5QUUwMi80c19FSzJvSUZR cnY3LWNZbS1XdkstVm8tTUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXi7rBqrzk9pG87i5ghG4nA3hlUnH+1XSK4H6Z0p+FwS64RComQZal jWWhkxXzL/+cpTJpQ7+kTshIJEuwxoQ2ipfZicCPZ/swfsNMltY+5GjYpbNq4QBn WEGxx9eGhlGYxlFk6+gcDdVg1NLbe19QtfwFvR9J1fDbM064ZXbaJ3xl9t+omdEI YqWbSU6FKa2EVDj3j8RANVflo8quY3/PwsXBcMdhae/GLJx+vBy+T/kFerrV/utm y+c3HjUBv5IyLTi6MqDW4pZvZ38HIy0UzNnIDyzb4KoEdBYocvI/lspD9nOsjNvr +9SJgtJdz2FFnN2yqtYAfNuI1G72njmk -----END CERTIFICATE-----Generated at Sun May 19 00:16:12 2024 by rpki-client on console-fra.rpki-client.org