$ rpki-client -vvf rpki.apnic.net/member_repository/A916A1E1/9FBEA4A6EC3511ECB07E987CC4F9AE02/j4I4DlgkXscVMN6F0qxrnyCUdvM.mft File: j4I4DlgkXscVMN6F0qxrnyCUdvM.mft (raw, json) Hash identifier: HBN7trwJKGY8Pq8rNXAe+KZi1YphX6OvKgn5h27FMu4= Subject key identifier: C1:6D:C9:71:B7:6B:5F:5C:64:73:D7:61:F9:14:74:0B:45:DE:DF:31 Authority key identifier: 8F:82:38:0E:58:24:5E:C7:15:30:DE:85:D2:AC:6B:9F:20:94:76:F3 Certificate issuer: /CN=A916A1E1/serialNumber=8F82380E58245EC71530DE85D2AC6B9F209476F3 Certificate serial: 0210 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4I4DlgkXscVMN6F0qxrnyCUdvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A1E1/9FBEA4A6EC3511ECB07E987CC4F9AE02/j4I4DlgkXscVMN6F0qxrnyCUdvM.mft Manifest number: 020C Signing time: Sun 19 May 2024 04:07:46 +0000 Manifest this update: Sun 19 May 2024 04:07:45 +0000 Manifest next update: Sun 26 May 2024 04:07:45 +0000 Files and hashes: 1: j4I4DlgkXscVMN6F0qxrnyCUdvM.crl (hash: Gaf2/bLPF9uJV+BtUsAdILUSS4/yW4OwhY0gvI8ynxs=) 2: 94312504EC3B11ECB0BAF26DC4F9AE02.roa (hash: brR7+MbJjiLeFV3oW2GqMVgYyQgAb79dzY68Vvl+c1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A1E1/9FBEA4A6EC3511ECB07E987CC4F9AE02/j4I4DlgkXscVMN6F0qxrnyCUdvM.crl rsync://rpki.apnic.net/member_repository/A916A1E1/9FBEA4A6EC3511ECB07E987CC4F9AE02/j4I4DlgkXscVMN6F0qxrnyCUdvM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4I4DlgkXscVMN6F0qxrnyCUdvM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 528 (0x210) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A1E1/serialNumber=8F82380E58245EC71530DE85D2AC6B9F209476F3 Validity Not Before: May 19 04:07:45 2024 GMT Not After : May 26 04:07:45 2024 GMT Subject: CN=66497b12-3cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:17:25:65:6d:dd:e7:e7:2f:2a:9d:6a:00:ce: 35:ff:08:4b:e4:20:27:9f:7f:90:f6:52:47:ed:ce: 26:65:19:5c:23:0d:11:80:59:c2:d2:a8:cc:f0:d1: bb:9a:ba:6f:6a:b6:84:62:f7:2c:73:05:9e:46:53: 02:ec:82:94:ed:91:0f:0f:14:42:6f:b5:d7:85:a5: e3:f8:36:7f:15:a2:47:6f:53:7f:d4:0f:b0:98:a4: f9:27:0d:1c:30:70:04:93:72:93:f8:63:98:fc:df: 6a:34:12:03:39:06:37:d1:a9:90:7a:17:c7:76:60: a9:48:4f:d5:cd:91:43:5b:5e:de:c0:63:3e:33:f3: e9:1e:f1:59:d7:cf:3a:9f:c6:55:b1:ed:67:88:db: c0:ea:51:f3:16:ef:a5:ac:a5:6f:29:c9:1d:1b:d7: 98:fe:c1:90:76:66:26:a8:49:d3:a5:a9:66:cb:63: b4:55:e5:39:c8:e1:79:1d:dd:06:fb:b0:48:65:c3: 00:ca:d9:76:1b:c5:d8:da:1e:da:56:e1:37:b3:51: 4a:40:45:94:57:4e:08:c2:d7:14:c8:40:d1:2c:83: 19:04:02:93:06:f9:70:38:b9:92:55:f9:f4:f2:91: fc:0c:6d:95:ea:3b:0a:9e:ec:70:bc:06:13:f4:f2: da:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6D:C9:71:B7:6B:5F:5C:64:73:D7:61:F9:14:74:0B:45:DE:DF:31 X509v3 Authority Key Identifier: keyid:8F:82:38:0E:58:24:5E:C7:15:30:DE:85:D2:AC:6B:9F:20:94:76:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A1E1/9FBEA4A6EC3511ECB07E987CC4F9AE02/j4I4DlgkXscVMN6F0qxrnyCUdvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4I4DlgkXscVMN6F0qxrnyCUdvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A1E1/9FBEA4A6EC3511ECB07E987CC4F9AE02/j4I4DlgkXscVMN6F0qxrnyCUdvM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:42:b3:b3:cf:29:9a:dd:a2:c9:73:6c:4c:10:c9:d0:5c:65: c5:6b:c2:5e:46:76:32:69:df:fe:a6:85:ec:c7:89:7a:ee:7b: 78:be:e0:a4:b6:bc:d0:46:54:74:97:8b:22:b5:6e:75:53:49: 4a:9a:28:ce:47:21:76:c4:63:e1:34:aa:1a:34:ae:4b:67:bf: c5:bf:70:12:ff:81:68:8e:6d:d6:b2:26:b2:91:af:09:2b:b9: bc:86:81:ad:79:5b:20:2d:9f:94:60:7f:31:89:7c:56:6b:dd: a5:9d:b6:eb:89:84:cf:dc:77:9f:ea:5d:02:cd:ff:00:70:ef: 7e:c8:1e:55:47:26:06:ba:72:96:b8:2b:54:55:1d:c5:ad:77: b3:8d:f8:30:5f:64:a1:83:db:88:6e:61:b7:26:0b:b2:01:ea: 23:52:5f:aa:03:51:bc:05:81:00:61:14:80:66:81:29:41:20: 68:c7:df:0a:15:bc:e8:3c:4f:1a:d8:e6:aa:f1:a1:fe:2b:e8: 59:e9:df:38:9b:e6:dc:71:21:4e:35:4f:04:e8:6b:6c:29:21: 93:46:92:ec:24:43:59:44:4b:da:a9:07:b5:b8:81:47:cf:20: 62:b9:78:93:6a:8d:75:c1:d3:c7:34:78:49:31:eb:8a:32:b9: e0:9b:ea:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkExRTExMTAvBgNVBAUTKDhGODIzODBFNTgyNDVFQzcxNTMwREU4NUQyQUM2QjlG MjA5NDc2RjMwHhcNMjQwNTE5MDQwNzQ1WhcNMjQwNTI2MDQwNzQ1WjAYMRYwFAYD VQQDEw02NjQ5N2IxMi0zY2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBclZW3d5+cvKp1qAM41/whL5CAnn3+Q9lJH7c4mZRlcIw0RgFnC0qjM8NG7 mrpvaraEYvcscwWeRlMC7IKU7ZEPDxRCb7XXhaXj+DZ/FaJHb1N/1A+wmKT5Jw0c MHAEk3KT+GOY/N9qNBIDOQY30amQehfHdmCpSE/VzZFDW17ewGM+M/PpHvFZ1886 n8ZVse1niNvA6lHzFu+lrKVvKckdG9eY/sGQdmYmqEnTpalmy2O0VeU5yOF5Hd0G +7BIZcMAytl2G8XY2h7aVuE3s1FKQEWUV04IwtcUyEDRLIMZBAKTBvlwOLmSVfn0 8pH8DG2V6jsKnuxwvAYT9PLaMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFtyXG3 a19cZHPXYfkUdAtF3t8xMB8GA1UdIwQYMBaAFI+COA5YJF7HFTDehdKsa58glHbz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTFFMS85RkJFQTRBNkVD MzUxMUVDQjA3RTk4N0NDNEY5QUUwMi9qNEk0RGxna1hzY1ZNTjZGMHF4cm55Q1Vk dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o0STREbGdrWHNjVk1ONkYwcXhybnlDVWR2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTFFMS85RkJFQTRBNkVDMzUxMUVDQjA3RTk4N0NDNEY5QUUwMi9qNEk0RGxna1hz Y1ZNTjZGMHF4cm55Q1Vkdk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkQrOzzyma3aLJc2xMEMnQXGXFa8JeRnYyad/+poXsx4l67nt4vuCk trzQRlR0l4sitW51U0lKmijORyF2xGPhNKoaNK5LZ7/Fv3AS/4Fojm3Wsiayka8J K7m8hoGteVsgLZ+UYH8xiXxWa92lnbbriYTP3Hef6l0Czf8AcO9+yB5VRyYGunKW uCtUVR3FrXezjfgwX2Shg9uIbmG3JguyAeojUl+qA1G8BYEAYRSAZoEpQSBox98K FbzoPE8a2Oaq8aH+K+hZ6d84m+bccSFONU8E6GtsKSGTRpLsJENZREvaqQe1uIFH zyBiuXiTao11wdPHNHhJMeuKMrngm+op -----END CERTIFICATE-----Generated at Sun May 19 05:08:04 2024 by rpki-client on console-ams.rpki-client.org