$ rpki-client -vvf rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft File: 4bseYl2967MiD_kjzWoRos4kUZY.mft (raw, json) Hash identifier: gzHOf+vl8NZnGpJc/qclAbRkb435Qmgo5zdaVTEFAsU= Subject key identifier: 28:4B:65:86:2F:60:C2:35:3B:11:56:A9:AD:26:A2:86:7B:45:DA:1E Authority key identifier: E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96 Certificate issuer: /CN=A916A31E/serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196 Certificate serial: 1732 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft Manifest number: 16FB Signing time: Thu 02 May 2024 17:09:53 +0000 Manifest this update: Thu 02 May 2024 17:09:52 +0000 Manifest next update: Thu 09 May 2024 17:09:52 +0000 Files and hashes: 1: 4bseYl2967MiD_kjzWoRos4kUZY.crl (hash: OSZPc5FwrwpT5xFfGwVLPaAENPNidT0b+hRSXUxWJOk=) 2: FA2CCDCCDE6111E88BFD7810C4F9AE02.roa (hash: EtDaxhToMUaXQqBpB7YShd7GhOWDJATl5CFZ4kv+tSc=) 3: 2B04CC143D9F11EEACFF646FC4F9AE02.roa (hash: 7zvymsgGXJY5ymUoKW6Gj6uo9AlN5EXma2tXWDebJaM=) 4: 2A3161763D9F11EEACFF646FC4F9AE02.roa (hash: MHD+Vqr34LxIYPoPmX4LlFwonzJL0QSfCHfJusXHZes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5938 (0x1732) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A31E/serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196 Validity Not Before: May 2 17:09:52 2024 GMT Not After : May 9 17:09:52 2024 GMT Subject: CN=6633c8e1-0af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b3:9b:77:b1:5b:7c:ff:61:8f:fc:23:c7:a4: 3e:0d:44:0b:cc:cd:a7:e7:60:1a:4f:74:83:93:45: 22:08:db:53:71:4e:71:a2:41:a5:be:3b:40:8c:cc: 32:2a:82:2c:2f:e3:0d:50:1e:d3:3a:90:19:1c:dc: 5d:4d:28:f3:c4:b2:df:5f:93:6f:7e:a6:aa:ee:7d: 7a:d9:f6:43:a4:47:84:a7:33:06:3e:7f:87:0a:e9: a6:c7:5b:5c:2b:a4:4d:1a:df:43:b5:30:2a:e2:ec: dc:6e:01:a1:67:52:7a:49:bf:32:e5:ff:1f:d0:32: c0:55:cd:d8:77:b9:90:35:12:99:00:de:21:9c:97: 55:e6:c1:73:66:1e:d4:21:45:7e:04:8a:a4:b1:23: 52:f8:43:69:8f:61:d3:fd:10:00:fa:3c:1d:64:73: a1:00:42:46:ed:dc:91:60:31:7a:44:f6:51:55:c2: 3b:a0:ab:7a:68:c2:c5:d9:14:39:0a:41:d6:b3:90: 15:e5:f5:5b:2a:84:7b:bd:4e:8c:28:ef:2f:59:39: ae:08:32:72:1e:ba:f6:32:c7:a9:40:da:fd:81:ca: ae:94:ee:a2:5a:33:ea:c1:31:83:66:45:23:b5:17: 53:57:9b:21:8a:cf:81:9b:fe:ef:b3:81:79:35:73: fe:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:4B:65:86:2F:60:C2:35:3B:11:56:A9:AD:26:A2:86:7B:45:DA:1E X509v3 Authority Key Identifier: keyid:E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:6c:05:07:7b:62:25:0b:14:da:aa:7c:bd:bd:58:05:19:2b: ba:45:f3:4d:58:8a:ee:79:c2:0d:d8:f4:f1:a6:48:65:13:82: 8c:a1:da:94:fd:51:2b:23:e2:fb:6a:1d:78:ad:23:c8:3a:31: 7e:e6:17:04:3c:df:a3:dd:ee:09:ea:b6:31:d7:48:03:b3:4f: 64:ac:7e:52:30:ab:7d:52:c0:c0:5c:0f:b2:3b:2f:86:32:14: db:7b:58:73:37:c6:41:18:50:0c:6b:c5:eb:15:ce:01:1d:2c: 31:ba:45:3f:d4:0a:b2:41:a0:17:95:e6:00:80:b0:7d:ae:97: fc:cd:03:b8:09:66:c4:de:e0:ca:4f:4f:ac:e8:5b:f8:8a:eb: 26:57:45:ed:71:03:32:55:3d:80:46:a1:07:c9:70:6b:c0:7d: be:2e:b5:45:0a:0f:78:c9:da:27:42:d7:c4:6a:5b:5d:85:59: d4:c7:5a:59:7a:b9:73:e3:f3:bc:5f:d9:a9:9a:81:97:b4:36: 77:48:26:75:df:98:eb:bf:3e:b4:df:e8:91:cf:a8:b7:75:34: b3:9d:d4:9b:d9:98:aa:8a:79:f6:bf:69:12:9c:75:6a:ab:8f: 2b:ee:c3:a2:bb:a9:2c:b6:f6:ac:01:db:92:27:51:91:32:87: 0f:e2:35:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzMUUxMTAvBgNVBAUTKEUxQkIxRTYyNURCREVCQjMyMjBGRjkyM0NENkExMUEy Q0UyNDUxOTYwHhcNMjQwNTAyMTcwOTUyWhcNMjQwNTA5MTcwOTUyWjAYMRYwFAYD VQQDEw02NjMzYzhlMS0wYWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLObd7FbfP9hj/wjx6Q+DUQLzM2n52AaT3SDk0UiCNtTcU5xokGlvjtAjMwy KoIsL+MNUB7TOpAZHNxdTSjzxLLfX5Nvfqaq7n162fZDpEeEpzMGPn+HCummx1tc K6RNGt9DtTAq4uzcbgGhZ1J6Sb8y5f8f0DLAVc3Yd7mQNRKZAN4hnJdV5sFzZh7U IUV+BIqksSNS+ENpj2HT/RAA+jwdZHOhAEJG7dyRYDF6RPZRVcI7oKt6aMLF2RQ5 CkHWs5AV5fVbKoR7vU6MKO8vWTmuCDJyHrr2MsepQNr9gcqulO6iWjPqwTGDZkUj tRdTV5shis+Bm/7vs4F5NXP+MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChLZYYv YMI1OxFWqa0mooZ7RdoeMB8GA1UdIwQYMBaAFOG7HmJdveuzIg/5I81qEaLOJFGW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTMxRS9DMUZBMDgyQ0M4 Q0IxMUU3OTBBODgxMzhDNEY5QUUwMi80YnNlWWwyOTY3TWlEX2tqeldvUm9zNGtV WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRic2VZbDI5NjdNaURfa2p6V29Sb3M0a1VaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTMxRS9DMUZBMDgyQ0M4Q0IxMUU3OTBBODgxMzhDNEY5QUUwMi80YnNlWWwyOTY3 TWlEX2tqeldvUm9zNGtVWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLbAUHe2IlCxTaqny9vVgFGSu6RfNNWIruecIN2PTxpkhlE4KModqU /VErI+L7ah14rSPIOjF+5hcEPN+j3e4J6rYx10gDs09krH5SMKt9UsDAXA+yOy+G MhTbe1hzN8ZBGFAMa8XrFc4BHSwxukU/1AqyQaAXleYAgLB9rpf8zQO4CWbE3uDK T0+s6Fv4iusmV0XtcQMyVT2ARqEHyXBrwH2+LrVFCg94ydonQtfEaltdhVnUx1pZ erlz4/O8X9mpmoGXtDZ3SCZ135jrvz603+iRz6i3dTSzndSb2Ziqinn2v2kSnHVq q48r7sOiu6kstvasAduSJ1GRMocP4jWj -----END CERTIFICATE-----Generated at Thu May 2 17:43:09 2024 by rpki-client on console-fra.rpki-client.org