$ rpki-client -vvf rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.mft File: 4D9YAHuXKQulI0NZeReytqtd0uk.mft (raw, json) Hash identifier: IgZSNM+prJstK+qMIUEIcQFpUmuMUbPpmvEGCLqHQpc= Subject key identifier: 96:FC:FC:A7:94:A6:6A:BB:C0:6B:20:03:65:25:40:58:65:90:06:8D Authority key identifier: E0:3F:58:00:7B:97:29:0B:A5:23:43:59:79:17:B2:B6:AB:5D:D2:E9 Certificate issuer: /CN=A9166646/serialNumber=E03F58007B97290BA52343597917B2B6AB5DD2E9 Certificate serial: 052C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4D9YAHuXKQulI0NZeReytqtd0uk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.mft Manifest number: 0528 Signing time: Sun 19 May 2024 00:59:27 +0000 Manifest this update: Sun 19 May 2024 00:59:26 +0000 Manifest next update: Sun 26 May 2024 00:59:26 +0000 Files and hashes: 1: 4D9YAHuXKQulI0NZeReytqtd0uk.crl (hash: ez2pjg4pST13D4dLZf1Lno0+Ru/nlFtjpf2t9aGlBG4=) 2: 5AA0DC6EB13E11EBA7704F2CC4F9AE02.roa (hash: +9cPsGMhDrv8dxVIm+a/n6r1IhhqEshDAksLCXHoHTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.crl rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4D9YAHuXKQulI0NZeReytqtd0uk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1324 (0x52c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166646/serialNumber=E03F58007B97290BA52343597917B2B6AB5DD2E9 Validity Not Before: May 19 00:59:26 2024 GMT Not After : May 26 00:59:26 2024 GMT Subject: CN=66494eee-5e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c6:2d:0c:fb:5a:d0:88:88:57:fb:61:00:18: 39:3f:2a:95:d5:0f:33:f5:51:f8:a4:50:66:d4:2d: 77:5d:aa:02:0c:98:76:05:41:49:2f:27:ce:61:2c: 64:7a:aa:d0:90:20:0d:ac:78:4d:28:ca:a9:59:de: f3:d4:5c:0c:7d:c4:cb:49:3d:90:4b:40:6e:7c:55: fb:34:2f:5a:79:2c:7e:59:ac:09:1c:89:29:c5:90: 1d:76:59:17:c8:12:d8:f7:c6:77:0f:c4:db:8c:13: 9f:09:77:20:c2:ba:56:81:03:a4:16:8e:1a:07:84: 72:b1:75:9d:14:06:56:44:56:af:7b:bc:79:55:2a: 5b:9a:e7:f3:91:af:6f:96:f4:78:d8:17:3d:5b:7d: 3f:24:5e:c5:05:03:e7:07:e3:6b:57:c3:48:25:11: bf:e1:95:5e:03:07:df:77:f9:33:1c:03:60:f6:03: 0b:de:6f:c0:94:c6:7b:30:de:2d:58:f6:ba:56:58: 61:0e:a9:8c:51:58:f4:01:08:d1:61:44:76:77:f7: b9:65:a4:68:e3:29:1d:40:6b:3a:f0:16:16:9f:e2: 76:b1:b8:11:66:9e:60:90:e7:20:01:f5:2f:27:e5: ad:fe:ab:1d:b6:e0:db:9c:a5:b8:eb:b3:3d:0f:e5: bb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FC:FC:A7:94:A6:6A:BB:C0:6B:20:03:65:25:40:58:65:90:06:8D X509v3 Authority Key Identifier: keyid:E0:3F:58:00:7B:97:29:0B:A5:23:43:59:79:17:B2:B6:AB:5D:D2:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4D9YAHuXKQulI0NZeReytqtd0uk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:00:e4:b7:8e:61:c4:3c:36:e2:81:eb:d2:a0:05:76:1e:e0: c5:e5:bc:95:29:b8:74:4d:d4:28:23:8a:9e:bc:c6:29:d4:6f: cb:64:1a:80:e8:de:a7:10:3d:13:ee:a5:24:6a:5b:37:35:c4: 00:79:2b:2a:32:93:ff:91:90:f7:e4:3e:4d:d5:6a:a5:66:ac: 8a:69:8c:20:31:43:15:37:93:4d:10:f5:a4:59:fc:6a:78:8d: f4:fe:8f:ba:c4:5e:fe:06:7d:de:d8:12:3d:15:12:ce:cb:03: d1:c1:0b:54:a5:e8:05:1f:8f:7f:14:c1:69:67:19:74:bf:f2: 7e:a6:af:c1:d7:68:bc:ba:7a:a4:a8:98:10:9a:bf:bc:ed:35: 59:2c:a9:dd:82:99:75:1d:26:68:2f:62:f7:2a:ef:95:ae:f2: 1c:80:d9:fa:2b:b3:41:0d:d4:d5:ef:6b:3d:cd:5c:61:a8:2a: 45:f1:ae:a3:6d:12:dd:14:01:ab:cc:1a:84:a3:71:ee:71:fc: 08:24:87:d4:80:f7:2f:0e:47:c2:78:fc:f4:5e:3f:1b:89:e7: 3b:20:bf:55:e8:db:5f:e1:7d:70:8f:a9:c9:87:44:d7:dc:56: c8:cd:32:7e:da:a3:3c:84:6a:99:c0:48:9b:a2:da:26:ed:1f: 9c:37:78:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY2NDYxMTAvBgNVBAUTKEUwM0Y1ODAwN0I5NzI5MEJBNTIzNDM1OTc5MTdCMkI2 QUI1REQyRTkwHhcNMjQwNTE5MDA1OTI2WhcNMjQwNTI2MDA1OTI2WjAYMRYwFAYD VQQDEw02NjQ5NGVlZS01ZTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7MYtDPta0IiIV/thABg5PyqV1Q8z9VH4pFBm1C13XaoCDJh2BUFJLyfOYSxk eqrQkCANrHhNKMqpWd7z1FwMfcTLST2QS0BufFX7NC9aeSx+WawJHIkpxZAddlkX yBLY98Z3D8TbjBOfCXcgwrpWgQOkFo4aB4RysXWdFAZWRFave7x5VSpbmufzka9v lvR42Bc9W30/JF7FBQPnB+NrV8NIJRG/4ZVeAwffd/kzHANg9gML3m/AlMZ7MN4t WPa6VlhhDqmMUVj0AQjRYUR2d/e5ZaRo4ykdQGs68BYWn+J2sbgRZp5gkOcgAfUv J+Wt/qsdtuDbnKW467M9D+W7BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJb8/KeU pmq7wGsgA2UlQFhlkAaNMB8GA1UdIwQYMBaAFOA/WAB7lykLpSNDWXkXsrarXdLp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjY0Ni83QjE2QUMyOEIx M0MxMUVCODE3OUZBMjlDNEY5QUUwMi80RDlZQUh1WEtRdWxJME5aZVJleXRxdGQw dWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzREOVlBSHVYS1F1bEkwTlplUmV5dHF0ZDB1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjY0Ni83QjE2QUMyOEIxM0MxMUVCODE3OUZBMjlDNEY5QUUwMi80RDlZQUh1WEtR dWxJME5aZVJleXRxdGQwdWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATAOS3jmHEPDbigevSoAV2HuDF5byVKbh0TdQoI4qevMYp1G/LZBqA 6N6nED0T7qUkals3NcQAeSsqMpP/kZD35D5N1WqlZqyKaYwgMUMVN5NNEPWkWfxq eI30/o+6xF7+Bn3e2BI9FRLOywPRwQtUpegFH49/FMFpZxl0v/J+pq/B12i8unqk qJgQmr+87TVZLKndgpl1HSZoL2L3Ku+VrvIcgNn6K7NBDdTV72s9zVxhqCpF8a6j bRLdFAGrzBqEo3HucfwIJIfUgPcvDkfCePz0Xj8biec7IL9V6Ntf4X1wj6nJh0TX 3FbIzTJ+2qM8hGqZwEibotom7R+cN3iK -----END CERTIFICATE-----Generated at Sun May 19 01:47:13 2024 by rpki-client on console-fra.rpki-client.org