$ rpki-client -vvf rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft File: 4JlhFVCKOtWZFdurzLaW26C0zHI.mft (raw, json) Hash identifier: ccQq/e1hN0FID12so7xj6pXsJ8ouwnLWBuyWRtpb1xE= Subject key identifier: 6B:3E:5C:3A:FB:5A:FD:98:C3:45:CF:4C:B0:49:B1:38:88:C7:2A:3B Authority key identifier: E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72 Certificate issuer: /CN=A9153CE9/serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72 Certificate serial: 04A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft Manifest number: 048E Signing time: Sun 19 May 2024 01:40:38 +0000 Manifest this update: Sun 19 May 2024 01:40:38 +0000 Manifest next update: Sun 26 May 2024 01:40:38 +0000 Files and hashes: 1: 4JlhFVCKOtWZFdurzLaW26C0zHI.crl (hash: 3lpBZF9JyA9BVbQ2YHvPSrbYgd7sD1SIP4TgXmrRBng=) 2: 03C7AA80F01111ED9C345840C4F9AE02.roa (hash: u79Hnx6TKughx759y7oB0XTzh+SXCGts+3SmY7J4BHA=) 3: 04E8D402F01111ED9C345840C4F9AE02.roa (hash: CjdsXTUy+isb7EE/vMnKhUnuE4GByGKOizEWWpwP7V4=) 4: CB6ED7B2645011EE9EAE117BC4F9AE02.roa (hash: KhBxtsrwI7mwIGHdAYV+BbQ+uvV0n4p4eR3lvYMPW+c=) 5: F650791EF01411ED9210D060C4F9AE02.roa (hash: uGEX/6sdmRDn3m6JrmG5MWev3SeBdI1njDXZ5dmhNaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.crl rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1191 (0x4a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153CE9/serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72 Validity Not Before: May 19 01:40:38 2024 GMT Not After : May 26 01:40:38 2024 GMT Subject: CN=66495896-c10e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e8:01:26:61:f2:ff:7c:c8:95:df:cc:86:78: 78:11:5d:fc:dd:ac:3c:e0:0f:ec:8e:bb:56:25:f9: ce:6b:36:93:cb:de:ec:4c:27:56:00:42:53:fb:68: 84:4d:e4:0f:0c:e8:06:4c:ce:d7:95:e6:7d:62:59: 58:c3:d1:30:a2:12:ec:7c:03:90:e1:88:a9:c1:0f: 1a:1c:d0:a9:a3:5f:43:0a:0d:93:02:a5:fc:b7:81: fc:80:c3:41:27:35:79:25:b4:92:67:61:66:c7:de: b7:15:51:06:87:db:a6:db:e8:e8:0c:f4:06:ff:7a: ae:58:66:be:8e:2b:22:b6:81:6f:e3:54:1b:2c:05: 79:18:88:03:ce:dd:21:94:18:95:a9:13:dd:02:0d: cb:a4:30:c6:28:91:31:aa:0e:c4:e6:98:a3:ea:fa: 63:d5:24:79:5a:d3:a7:02:28:9a:b2:ed:96:34:cb: bc:d4:bf:64:b2:c0:46:e9:36:87:fa:25:2c:89:b5: ec:5f:07:2f:32:99:f4:46:4e:d1:17:01:9f:80:9f: f6:1c:9c:d8:80:22:c0:68:0c:64:92:d9:7f:7b:57: 9d:36:4b:e4:7f:9d:d3:26:68:bb:ae:7e:01:c7:65: 3b:44:22:d7:7d:47:17:ee:51:aa:e4:c6:5c:6a:35: 9b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:3E:5C:3A:FB:5A:FD:98:C3:45:CF:4C:B0:49:B1:38:88:C7:2A:3B X509v3 Authority Key Identifier: keyid:E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:8c:f2:f7:4a:e8:4a:26:80:76:ec:ef:6a:2f:6e:9c:4b:69: 7b:bf:a9:c8:90:3a:be:1f:47:db:37:04:f4:29:12:50:2d:ca: ef:5c:e2:bb:22:ea:60:f8:52:da:c0:ed:e7:66:6f:66:b7:06: 55:fa:a3:58:bc:6a:15:ce:84:ec:6c:46:1d:30:6a:2b:4d:4c: cd:2a:1a:e5:4c:27:57:54:b6:78:56:85:9e:71:c9:e3:f3:04: 11:f6:af:48:db:b3:aa:49:f3:01:17:17:2d:03:8e:c6:6f:68: 09:7f:6a:5f:b4:e2:05:5f:f3:ec:7d:7c:73:83:35:00:3e:44: bc:e4:ac:63:d5:fb:2b:dd:10:2b:27:09:6b:2e:3c:98:8d:23: 9d:7e:44:af:67:9f:1b:15:15:f1:0c:7d:ad:46:68:f8:76:f4: 45:34:fe:0b:e5:43:1b:86:c0:be:28:45:10:12:12:73:0d:b6: 93:1c:af:25:ac:60:57:b4:e4:59:80:4f:ef:c6:0c:38:2c:48: 5d:76:66:86:d1:39:24:62:73:42:b3:b3:82:c8:1f:5b:db:cb: 0f:69:80:aa:a0:34:8a:4b:df:07:43:a8:18:1c:62:51:91:bd: 9d:6d:8f:df:43:85:a1:ae:02:93:db:e2:8d:bd:cf:3c:43:45: da:44:db:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNDRTkxMTAvBgNVBAUTKEUwOTk2MTE1NTA4QTNBRDU5OTE1REJBQkNDQjY5NkRC QTBCNENDNzIwHhcNMjQwNTE5MDE0MDM4WhcNMjQwNTI2MDE0MDM4WjAYMRYwFAYD VQQDEw02NjQ5NTg5Ni1jMTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp+gBJmHy/3zIld/Mhnh4EV383aw84A/sjrtWJfnOazaTy97sTCdWAEJT+2iE TeQPDOgGTM7XleZ9YllYw9EwohLsfAOQ4YipwQ8aHNCpo19DCg2TAqX8t4H8gMNB JzV5JbSSZ2Fmx963FVEGh9um2+joDPQG/3quWGa+jisitoFv41QbLAV5GIgDzt0h lBiVqRPdAg3LpDDGKJExqg7E5pij6vpj1SR5WtOnAiiasu2WNMu81L9kssBG6TaH +iUsibXsXwcvMpn0Rk7RFwGfgJ/2HJzYgCLAaAxkktl/e1edNkvkf53TJmi7rn4B x2U7RCLXfUcX7lGq5MZcajWbPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGs+XDr7 Wv2Yw0XPTLBJsTiIxyo7MB8GA1UdIwQYMBaAFOCZYRVQijrVmRXbq8y2ltugtMxy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0NFOS8wQUIxRDM5NkY1 MTUxMUVCOUVGRTA3NTBDNEY5QUUwMi80SmxoRlZDS090V1pGZHVyekxhVzI2QzB6 SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRKbGhGVkNLT3RXWkZkdXJ6TGFXMjZDMHpISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0NFOS8wQUIxRDM5NkY1MTUxMUVCOUVGRTA3NTBDNEY5QUUwMi80SmxoRlZDS090 V1pGZHVyekxhVzI2QzB6SEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGjPL3SuhKJoB27O9qL26cS2l7v6nIkDq+H0fbNwT0KRJQLcrvXOK7 Iupg+FLawO3nZm9mtwZV+qNYvGoVzoTsbEYdMGorTUzNKhrlTCdXVLZ4VoWeccnj 8wQR9q9I27OqSfMBFxctA47Gb2gJf2pftOIFX/PsfXxzgzUAPkS85Kxj1fsr3RAr JwlrLjyYjSOdfkSvZ58bFRXxDH2tRmj4dvRFNP4L5UMbhsC+KEUQEhJzDbaTHK8l rGBXtORZgE/vxgw4LEhddmaG0TkkYnNCs7OCyB9b28sPaYCqoDSKS98HQ6gYHGJR kb2dbY/fQ4WhrgKT2+KNvc88Q0XaRNv1 -----END CERTIFICATE-----Generated at Sun May 19 02:39:36 2024 by rpki-client on console-fra.rpki-client.org