$ rpki-client -vvf rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft File: 4rutOTFYoGdMaUnsO4oLc_hgKaI.mft (raw, json) Hash identifier: P/x90oNHGOs/Rr787bkU0klEOFW3EbAlWJLaKVA1cWM= Subject key identifier: FE:68:24:BE:DD:5C:FE:1F:92:FA:0E:1F:96:62:E5:D4:E9:27:B8:7F Authority key identifier: E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2 Certificate issuer: /CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2 Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft Manifest number: 01A2 Signing time: Sun 19 May 2024 04:38:24 +0000 Manifest this update: Sun 19 May 2024 04:38:23 +0000 Manifest next update: Sun 26 May 2024 04:38:23 +0000 Files and hashes: 1: 4rutOTFYoGdMaUnsO4oLc_hgKaI.crl (hash: vTV+wY3byT18keisg/MPiUlgMcO1JxKicMhKT1dz+Mk=) 2: BBF0DD5216CD11EDBB046C79C4F9AE02.roa (hash: pJ33Fqdsq89lCynqwTIJ7dF7Oc4s7vkCVWgVGXgZQQM=) 3: EC75126616CA11ED8E290A59C4F9AE02.roa (hash: 6XDWQ95VUkI8MnkeUoSMN6HEeM3s71jNlFk6+gKQ8uY=) 4: 4EEAF1DAE96211ED9A14B935C4F9AE02.roa (hash: cng98HucCijGH1pmZUqgjG4O/YHy20x5drkYzn1NIS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2 Validity Not Before: May 19 04:38:23 2024 GMT Not After : May 26 04:38:23 2024 GMT Subject: CN=66498240-a570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:be:fd:65:bb:4f:bb:1d:a4:2a:50:e2:83:d4: e7:9b:56:19:48:19:3d:4a:e3:b9:f7:f2:1d:54:03: 5c:df:c2:cc:76:7d:2e:63:d5:11:e6:d3:17:73:57: 62:16:47:51:ab:2b:a6:4e:37:fb:49:6c:da:35:23: a7:a6:73:8a:f7:ea:ca:6b:2e:12:cb:60:80:8a:ee: e0:8b:33:29:99:4b:e1:5c:1e:1e:1c:e9:72:55:2a: a6:cb:dc:19:6c:46:06:fa:df:e3:33:9a:19:b3:bb: 59:f6:ad:9a:26:66:d1:1d:29:b3:06:d1:d1:7e:95: 31:56:6d:4b:a1:ec:eb:4e:97:bf:fc:42:96:46:84: 7c:de:a6:93:13:c4:80:26:46:02:34:0f:6f:9d:b7: 59:5a:c3:fd:45:6d:66:1e:f0:aa:c3:d6:24:de:82: 7f:c4:7a:8f:ce:f2:61:76:14:a0:eb:4f:c5:7e:8e: 3a:ee:45:f3:38:3a:f7:72:0f:5a:65:c2:17:ac:d3: 4a:cf:38:0c:14:13:59:29:77:71:0f:ca:1d:00:7c: 68:58:a5:9f:67:c4:35:4c:71:d4:91:22:9a:0b:7f: b7:0d:0f:a9:ad:b5:bb:0d:ca:77:fe:87:2e:82:a5: df:a9:06:0f:7d:9a:11:90:e7:b1:07:e2:cd:cb:0d: 70:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:68:24:BE:DD:5C:FE:1F:92:FA:0E:1F:96:62:E5:D4:E9:27:B8:7F X509v3 Authority Key Identifier: keyid:E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:7d:ad:c6:6b:cf:c9:b6:99:de:75:49:0d:64:50:f0:98:0c: bb:9f:39:79:70:0f:c8:48:cb:b8:aa:3d:3c:a3:4f:9f:2c:93: da:ca:dc:36:ab:94:21:40:5e:a7:e0:81:ba:31:d0:84:ab:aa: ee:c2:24:75:ab:1e:44:35:40:9a:91:83:fd:3f:52:36:a3:f1: df:9d:b8:f3:0b:28:04:d8:a6:33:cf:3a:36:33:6d:80:db:32: da:4c:f5:67:2c:dd:c3:b7:15:a1:6a:db:ec:3d:aa:a8:33:d3: 55:1f:fb:4f:1b:e0:08:a4:2d:57:65:22:b4:71:82:e4:15:b4: fe:30:f6:a0:bd:80:7b:c1:3c:6c:55:a2:1b:f6:c1:e5:1e:05: 12:14:54:ce:72:83:ed:e2:5d:d3:aa:a4:57:f3:89:50:03:18: 27:6a:ab:d2:a8:26:1a:37:9e:57:f6:74:98:ae:86:f4:4e:fe: 3f:8c:58:25:24:de:14:6d:da:c2:5d:d4:6f:52:23:7c:42:20: d2:ee:4c:b6:f6:a8:fe:fd:8a:f2:18:f8:12:45:81:da:4f:cf: 6d:63:0b:61:b1:37:e6:06:87:1b:9a:dd:cb:79:dd:63:d8:9a: 83:fe:6b:07:f2:17:eb:05:28:28:7f:6a:ca:3f:14:e8:8e:a2: fc:69:8a:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3NDAxMTAvBgNVBAUTKEUyQkJBRDM5MzE1OEEwNjc0QzY5NDlFQzNCOEEwQjcz Rjg2MDI5QTIwHhcNMjQwNTE5MDQzODIzWhcNMjQwNTI2MDQzODIzWjAYMRYwFAYD VQQDEw02NjQ5ODI0MC1hNTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw779ZbtPux2kKlDig9Tnm1YZSBk9SuO59/IdVANc38LMdn0uY9UR5tMXc1di FkdRqyumTjf7SWzaNSOnpnOK9+rKay4Sy2CAiu7gizMpmUvhXB4eHOlyVSqmy9wZ bEYG+t/jM5oZs7tZ9q2aJmbRHSmzBtHRfpUxVm1LoezrTpe//EKWRoR83qaTE8SA JkYCNA9vnbdZWsP9RW1mHvCqw9Yk3oJ/xHqPzvJhdhSg60/Ffo467kXzODr3cg9a ZcIXrNNKzzgMFBNZKXdxD8odAHxoWKWfZ8Q1THHUkSKaC3+3DQ+prbW7Dcp3/ocu gqXfqQYPfZoRkOexB+LNyw1w2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP5oJL7d XP4fkvoOH5Zi5dTpJ7h/MB8GA1UdIwQYMBaAFOK7rTkxWKBnTGlJ7DuKC3P4YCmi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njc0MC8zNTI4QjBDQzE2 QzAxMUVEODAwODlBMjFDNEY5QUUwMi80cnV0T1RGWW9HZE1hVW5zTzRvTGNfaGdL YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRydXRPVEZZb0dkTWFVbnNPNG9MY19oZ0thSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njc0MC8zNTI4QjBDQzE2QzAxMUVEODAwODlBMjFDNEY5QUUwMi80cnV0T1RGWW9H ZE1hVW5zTzRvTGNfaGdLYUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdfa3Ga8/JtpnedUkNZFDwmAy7nzl5cA/ISMu4qj08o0+fLJPaytw2 q5QhQF6n4IG6MdCEq6ruwiR1qx5ENUCakYP9P1I2o/HfnbjzCygE2KYzzzo2M22A 2zLaTPVnLN3DtxWhatvsPaqoM9NVH/tPG+AIpC1XZSK0cYLkFbT+MPagvYB7wTxs VaIb9sHlHgUSFFTOcoPt4l3TqqRX84lQAxgnaqvSqCYaN55X9nSYrob0Tv4/jFgl JN4UbdrCXdRvUiN8QiDS7ky29qj+/YryGPgSRYHaT89tYwthsTfmBocbmt3Led1j 2JqD/msH8hfrBSgof2rKPxTojqL8aYrk -----END CERTIFICATE-----Generated at Sun May 19 05:48:50 2024 by rpki-client on console-fra.rpki-client.org