$ rpki-client -vvf rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft File: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft (raw, json) Hash identifier: uJ8d7z6Tc702c50QjGlmzKoi94pInZwYhkWkccKolO8= Subject key identifier: 87:7D:A8:4E:4F:66:76:DD:68:84:1F:00:8D:F5:20:80:67:2E:C6:D1 Authority key identifier: E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98 Certificate issuer: /CN=A9149B61/serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft Manifest number: 9B Signing time: Sun 19 May 2024 06:49:27 +0000 Manifest this update: Sun 19 May 2024 06:49:27 +0000 Manifest next update: Sun 26 May 2024 06:49:27 +0000 Files and hashes: 1: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl (hash: OMOI/1P2qV3Z+HmM2PHdmR1W1GzIHr2EyyuuQMAKoLE=) 2: D4FD2A902B8411EEBCDBEF7AC4F9AE02.roa (hash: MKwScHcdF3efQVtQrsj8rNHZkMsFxfaLhg44QOxRPA8=) 3: 10F1A0582B8511EEA7FF697BC4F9AE02.roa (hash: +XAVcE2m3pPvUhZozVhumAYGTk+3qszCrOY4ZKTchy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149B61/serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98 Validity Not Before: May 19 06:49:27 2024 GMT Not After : May 26 06:49:27 2024 GMT Subject: CN=6649a0f7-f3bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:5d:dc:4e:37:ec:20:fd:18:a3:8d:36:f6:cd: a2:8e:4d:fc:9d:14:9b:97:54:2e:61:a8:30:db:4b: 55:11:fb:fe:74:fb:cb:c7:25:ae:49:dc:6b:f6:ab: b2:2c:e6:ce:0f:b6:8b:73:ee:b1:66:f2:1f:dc:3b: 3a:72:07:c4:c2:6d:c4:56:5a:7d:b5:9c:9c:54:cd: d1:9d:c5:3e:80:62:1f:c9:26:57:6d:56:27:cb:44: 93:d6:98:08:4b:8d:05:77:2c:8b:9c:b3:f2:af:4e: 1a:ae:7b:55:10:65:36:0c:cf:5f:80:c3:01:0d:2f: 79:ab:e0:7c:b4:6c:22:e6:02:2a:ac:62:a2:9a:eb: 80:a4:b8:a0:97:15:d7:6d:df:11:23:58:82:58:94: ff:87:d4:5f:d7:8f:7b:7b:57:37:21:39:14:e6:af: 7e:0d:66:97:fc:eb:98:6b:88:6b:08:7e:68:51:8d: bd:f7:5f:bc:b7:b2:ca:29:b3:4d:91:3b:af:e2:7f: 13:6a:8d:f2:38:e6:92:78:cf:f6:94:f1:37:d3:26: d9:4f:a0:08:ce:74:09:05:03:3d:57:18:35:5f:01: 94:4f:9b:3f:d4:bf:d9:12:00:ef:9b:1c:1a:2f:68: 43:6f:ce:a7:cd:a5:72:22:f4:6b:f6:d4:dc:dc:70: 68:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7D:A8:4E:4F:66:76:DD:68:84:1F:00:8D:F5:20:80:67:2E:C6:D1 X509v3 Authority Key Identifier: keyid:E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:01:02:05:a7:fd:ca:ac:65:92:c6:14:fd:44:18:41:c0:ee: 76:96:07:45:dc:74:77:fb:b9:6a:0a:eb:73:2b:9b:97:1f:08: 6e:19:b6:38:8a:85:1b:24:61:36:70:3a:78:2f:11:2c:d1:c2: 13:54:b1:43:96:65:f7:2d:55:c5:34:ff:f4:c2:52:28:22:24: 24:9c:4f:28:6c:4b:79:44:bc:ba:d1:e1:b2:d5:85:02:31:af: f2:56:87:ef:bc:f4:16:3f:72:fb:8c:b6:f6:c6:10:b7:e6:ee: 26:4e:26:28:88:d3:21:71:cc:b6:03:3e:2d:e3:e4:08:d2:1c: 5f:23:19:70:65:8d:cd:48:42:a4:ae:d1:2d:25:67:12:7d:7d: 09:d0:1a:5c:9a:a0:4a:6d:8a:5f:9e:6b:da:b5:9a:7d:6e:ca: 84:c9:73:42:5c:57:99:c8:33:0a:0e:e2:f1:16:76:5f:fa:ab: 83:bc:4c:ad:f2:65:fb:19:ed:5f:27:cf:99:80:4b:3a:0b:a1: 41:ed:96:ea:36:59:9e:de:68:9f:15:7d:36:29:30:60:6f:24: 7b:f5:78:4a:55:1b:05:a6:06:2b:85:75:13:ae:01:34:cf:2d: d4:07:76:25:bb:00:7e:8e:ca:c5:23:dc:2f:61:81:44:03:c6: d4:68:3b:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlCNjExMTAvBgNVBAUTKEUzRTEwMEY4MDQwMTNBMDVGOTIyRUUxMUNCNEUwQUJF QTZDMjJCOTgwHhcNMjQwNTE5MDY0OTI3WhcNMjQwNTI2MDY0OTI3WjAYMRYwFAYD VQQDEw02NjQ5YTBmNy1mM2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+l3cTjfsIP0Yo4029s2ijk38nRSbl1QuYagw20tVEfv+dPvLxyWuSdxr9quy LObOD7aLc+6xZvIf3Ds6cgfEwm3EVlp9tZycVM3RncU+gGIfySZXbVYny0ST1pgI S40FdyyLnLPyr04arntVEGU2DM9fgMMBDS95q+B8tGwi5gIqrGKimuuApLiglxXX bd8RI1iCWJT/h9Rf1497e1c3ITkU5q9+DWaX/OuYa4hrCH5oUY2991+8t7LKKbNN kTuv4n8Tao3yOOaSeM/2lPE30ybZT6AIznQJBQM9Vxg1XwGUT5s/1L/ZEgDvmxwa L2hDb86nzaVyIvRr9tTc3HBoxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFId9qE5P ZnbdaIQfAI31IIBnLsbRMB8GA1UdIwQYMBaAFOPhAPgEAToF+SLuEctOCr6mwiuY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUI2MS83NjE2RDRGQzJB Q0QxMUVFQjcyMjJDM0NDNEY5QUUwMi80LUVBLUFRQk9nWDVJdTRSeTA0S3ZxYkNL NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtRUEtQVFCT2dYNUl1NFJ5MDRLdnFiQ0s1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUI2MS83NjE2RDRGQzJBQ0QxMUVFQjcyMjJDM0NDNEY5QUUwMi80LUVBLUFRQk9n WDVJdTRSeTA0S3ZxYkNLNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOAQIFp/3KrGWSxhT9RBhBwO52lgdF3HR3+7lqCutzK5uXHwhuGbY4 ioUbJGE2cDp4LxEs0cITVLFDlmX3LVXFNP/0wlIoIiQknE8obEt5RLy60eGy1YUC Ma/yVofvvPQWP3L7jLb2xhC35u4mTiYoiNMhccy2Az4t4+QI0hxfIxlwZY3NSEKk rtEtJWcSfX0J0BpcmqBKbYpfnmvatZp9bsqEyXNCXFeZyDMKDuLxFnZf+quDvEyt 8mX7Ge1fJ8+ZgEs6C6FB7ZbqNlme3mifFX02KTBgbyR79XhKVRsFpgYrhXUTrgE0 zy3UB3YluwB+jsrFI9wvYYFEA8bUaDtj -----END CERTIFICATE-----Generated at Sun May 19 08:25:00 2024 by rpki-client on console-ams.rpki-client.org