$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.mft File: 44SqQCWhBrVHp8CJsd3-7mzLoi8.mft (raw, json) Hash identifier: U0enXliVj1BiwONIW1kC+PTB1/3T8YeE6XiAUVIcRZE= Subject key identifier: 8E:83:4C:9D:53:44:7E:A9:5F:F0:CD:8E:00:1F:47:88:70:B0:ED:DB Authority key identifier: E3:84:AA:40:25:A1:06:B5:47:A7:C0:89:B1:DD:FE:EE:6C:CB:A2:2F Certificate issuer: /CN=A9161B4C/serialNumber=E384AA4025A106B547A7C089B1DDFEEE6CCBA22F Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/44SqQCWhBrVHp8CJsd3-7mzLoi8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.mft Manifest number: BA Signing time: Sun 19 May 2024 06:30:44 +0000 Manifest this update: Sun 19 May 2024 06:30:43 +0000 Manifest next update: Sun 26 May 2024 06:30:43 +0000 Files and hashes: 1: 44SqQCWhBrVHp8CJsd3-7mzLoi8.crl (hash: ECnrdhLffLZx1V8iExX5KEBKdLsIiJuxk7MoKVN4B6g=) 2: 0F807DF8043811EE81290815C4F9AE02.roa (hash: WbSSTUGmAcwBwI0OcCXAkgy6fDD4c0GJzkoNkzFRf/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.crl rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/44SqQCWhBrVHp8CJsd3-7mzLoi8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B4C/serialNumber=E384AA4025A106B547A7C089B1DDFEEE6CCBA22F Validity Not Before: May 19 06:30:43 2024 GMT Not After : May 26 06:30:43 2024 GMT Subject: CN=66499c93-c3d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1e:f2:8f:83:93:7c:cd:26:84:b5:ab:8a:a7: 4b:de:1e:f9:59:ec:79:41:b6:42:cd:da:d5:c4:d0: b7:a3:3c:6b:3b:b6:e3:e6:7d:93:f6:3c:a2:b9:f9: cb:0c:f6:1f:fd:e8:12:df:59:8e:f9:4d:dd:3b:bc: b5:5e:8f:3f:e0:94:9a:27:ef:07:d6:37:68:27:90: 1f:1a:08:77:d7:90:f6:fe:a6:f7:44:02:5b:0d:20: 14:e2:4b:e1:88:1e:a3:2f:8e:1a:7d:56:38:17:f8: f6:c2:b5:9e:b2:f3:72:4f:15:45:bf:c0:3c:39:32: d9:82:f0:67:0e:7c:49:5d:e2:40:f2:96:25:3b:25: 7e:b9:a8:7a:2e:9d:f7:bb:f8:e6:be:9c:82:12:ab: 4f:41:92:0b:b0:16:d8:77:28:de:61:81:b3:ab:c4: 72:3a:d3:c4:fc:dc:30:6d:bc:57:bb:6c:87:c4:8f: db:78:52:95:f2:3e:6f:dc:26:3e:8d:c7:23:73:79: 03:e1:74:05:c7:1a:0e:48:79:53:6c:9c:ff:61:33: b5:34:05:f8:15:a2:e4:c4:df:15:2a:43:2e:26:8c: 18:32:63:9c:8b:f1:f6:ec:05:34:e6:ca:a2:76:56: b2:cb:f8:11:a5:65:cd:40:a3:d9:e6:92:43:b9:65: ce:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:83:4C:9D:53:44:7E:A9:5F:F0:CD:8E:00:1F:47:88:70:B0:ED:DB X509v3 Authority Key Identifier: keyid:E3:84:AA:40:25:A1:06:B5:47:A7:C0:89:B1:DD:FE:EE:6C:CB:A2:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/44SqQCWhBrVHp8CJsd3-7mzLoi8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:a2:16:6c:2a:3f:1f:86:f0:2f:2d:11:48:46:11:f9:72:a3: 6d:85:5e:38:fa:07:7c:bc:83:f3:ea:ba:db:11:4e:c5:64:62: 87:a4:b1:53:26:2f:f7:c7:ab:8a:9b:6e:3d:5b:b7:18:c9:a0: 04:67:51:25:65:0a:5f:75:19:34:d3:bb:89:ef:11:b3:b6:5b: cb:fd:6b:a6:6c:0e:46:4a:29:ef:57:d7:c5:bb:77:f9:73:a1: 2d:ec:df:6d:ca:41:dc:45:1e:55:c8:2f:46:4b:94:94:32:04: 9a:c1:21:70:ac:0e:b5:03:80:46:c5:5d:d3:70:8f:ee:dc:a4: 3d:ec:74:c0:32:ac:dc:41:26:80:26:b3:37:ad:5e:1f:93:82: 48:ca:e7:b7:f7:1d:72:ae:72:86:29:bb:ea:6a:2e:53:80:4f: 47:40:93:35:47:2c:69:f2:83:31:08:12:83:41:8c:7a:0f:72: 60:bb:54:a8:17:52:1e:fa:6d:93:e1:ae:af:f0:40:e9:1b:8b: 79:ab:13:5b:a7:2d:ce:cb:73:e8:2b:22:65:68:11:2d:cc:dc: e0:1b:95:a7:7f:4e:bb:e2:3a:81:de:02:7e:58:9f:a8:57:4f: 5c:d4:cb:79:0e:58:a9:27:ac:af:a7:26:28:39:10:45:52:56: 62:cb:e9:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFCNEMxMTAvBgNVBAUTKEUzODRBQTQwMjVBMTA2QjU0N0E3QzA4OUIxRERGRUVF NkNDQkEyMkYwHhcNMjQwNTE5MDYzMDQzWhcNMjQwNTI2MDYzMDQzWjAYMRYwFAYD VQQDEw02NjQ5OWM5My1jM2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxB7yj4OTfM0mhLWriqdL3h75Wex5QbZCzdrVxNC3ozxrO7bj5n2T9jyiufnL DPYf/egS31mO+U3dO7y1Xo8/4JSaJ+8H1jdoJ5AfGgh315D2/qb3RAJbDSAU4kvh iB6jL44afVY4F/j2wrWesvNyTxVFv8A8OTLZgvBnDnxJXeJA8pYlOyV+uah6Lp33 u/jmvpyCEqtPQZILsBbYdyjeYYGzq8RyOtPE/NwwbbxXu2yHxI/beFKV8j5v3CY+ jccjc3kD4XQFxxoOSHlTbJz/YTO1NAX4FaLkxN8VKkMuJowYMmOci/H27AU05sqi dlayy/gRpWXNQKPZ5pJDuWXOowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6DTJ1T RH6pX/DNjgAfR4hwsO3bMB8GA1UdIwQYMBaAFOOEqkAloQa1R6fAibHd/u5sy6Iv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUI0Qy8yOTc5OTE1MjA0 MzAxMUVFQjM3MzJDNUJDNEY5QUUwMi80NFNxUUNXaEJyVkhwOENKc2QzLTdtekxv aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ0U3FRQ1doQnJWSHA4Q0pzZDMtN216TG9pOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUI0Qy8yOTc5OTE1MjA0MzAxMUVFQjM3MzJDNUJDNEY5QUUwMi80NFNxUUNXaEJy VkhwOENKc2QzLTdtekxvaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMohZsKj8fhvAvLRFIRhH5cqNthV44+gd8vIPz6rrbEU7FZGKHpLFT Ji/3x6uKm249W7cYyaAEZ1ElZQpfdRk007uJ7xGztlvL/WumbA5GSinvV9fFu3f5 c6Et7N9tykHcRR5VyC9GS5SUMgSawSFwrA61A4BGxV3TcI/u3KQ97HTAMqzcQSaA JrM3rV4fk4JIyue39x1yrnKGKbvqai5TgE9HQJM1Ryxp8oMxCBKDQYx6D3Jgu1So F1Ie+m2T4a6v8EDpG4t5qxNbpy3Oy3PoKyJlaBEtzNzgG5Wnf0674jqB3gJ+WJ+o V09c1Mt5DlipJ6yvpyYoORBFUlZiy+lS -----END CERTIFICATE-----Generated at Sun May 19 07:40:39 2024 by rpki-client on console-fra.rpki-client.org