$ rpki-client -vvf rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft File: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft (raw, json) Hash identifier: 3G1zPSDhtLxv2MfjmFVvhqYtV4N9fyfgdm/e+8M8FFU= Subject key identifier: 7D:9B:69:5C:32:73:83:84:0E:6D:BF:FC:F2:BC:EA:15:61:B0:B5:32 Authority key identifier: E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11 Certificate issuer: /CN=A9174FD4/serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311 Certificate serial: 0865 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft Manifest number: 0865 Signing time: Sat 18 May 2024 21:37:16 +0000 Manifest this update: Sat 18 May 2024 21:37:15 +0000 Manifest next update: Sat 25 May 2024 21:37:15 +0000 Files and hashes: 1: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl (hash: fQMMgCVR+0Ib+e6n/Uxb3u08s33fwopqJmCF1hLr6Sk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2149 (0x865) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174FD4/serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311 Validity Not Before: May 18 21:37:15 2024 GMT Not After : May 25 21:37:15 2024 GMT Subject: CN=66491f8b-6b80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3c:a7:a9:bb:f5:f7:c9:db:07:35:7b:c8:6b: 51:08:91:26:08:b6:33:23:6f:2a:8b:1d:5f:7e:4e: 6e:ea:23:b4:de:5b:63:c9:25:8f:76:74:fe:d5:fc: 3e:ed:21:a4:5c:08:e1:e8:15:9a:74:f7:ce:7d:9a: e7:8a:a7:46:bd:a9:62:60:53:1b:f8:9b:7a:f7:c7: 1c:12:1a:59:37:52:f2:bb:ac:8f:c8:bf:ab:29:30: f6:3b:74:88:3e:6e:66:2a:1c:23:21:7d:d2:ab:20: 1c:c5:b9:60:0c:f3:33:6f:86:52:d4:c7:c2:d8:d4: 39:23:d9:f6:d4:d0:b9:ec:eb:0c:a1:0e:9a:14:3b: c0:3c:ad:83:28:e5:b3:b5:2d:cd:79:15:63:5a:e2: 5f:02:8a:8c:b7:d3:b1:73:94:91:f2:49:23:29:4d: f0:a1:0b:78:5d:cc:b0:3e:43:d9:26:ce:00:e9:93: e2:6d:88:23:3d:f3:99:74:f3:33:43:43:5b:8a:da: ff:34:41:fd:96:c8:df:9f:0c:89:b8:ec:b8:87:c3: 39:f1:b0:a3:fb:77:82:ab:94:cf:9a:fa:c5:c7:60: 42:92:3f:d9:98:24:40:ab:b5:ba:3d:f5:4a:d7:4f: 0c:0c:9f:5d:db:90:9c:88:76:9e:2e:42:e7:64:7f: c9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9B:69:5C:32:73:83:84:0E:6D:BF:FC:F2:BC:EA:15:61:B0:B5:32 X509v3 Authority Key Identifier: keyid:E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:3f:f7:46:77:88:b9:6b:96:f4:63:1a:e4:84:43:d1:33:a5: d5:7e:fd:12:5e:be:e0:39:8e:5d:15:1a:75:f6:b2:45:53:34: 13:f7:af:8d:d2:9a:5a:58:90:4b:51:b2:44:35:ca:e8:fd:e8: e8:9b:49:6b:49:99:01:cb:9f:80:65:98:fe:78:45:fd:32:9c: 9a:63:48:e7:a8:e9:3b:d0:8e:4b:96:ca:9f:09:6f:89:ba:74: b3:25:99:b8:f1:2e:53:aa:ab:65:27:ad:f1:c1:e4:af:d1:6e: 7f:eb:e8:82:e5:a3:b2:f5:a7:ec:1a:e7:fd:b2:41:5f:c0:47: b4:0e:bb:da:d6:43:54:0f:d2:fb:ac:27:76:42:59:65:5c:a1: 8b:c1:bc:69:ad:ff:fb:53:ba:42:58:dc:b0:a1:ca:31:e6:cd: dd:7a:42:19:79:ac:7d:44:f9:8c:bb:96:af:a6:0e:0a:cb:77: 40:29:35:dc:72:24:29:0a:7c:59:c9:01:17:5c:fd:c8:9a:1b: 3c:65:28:71:42:d1:6a:d6:2f:09:eb:9b:71:d5:ea:86:6b:e6: 2f:26:86:cc:83:70:08:b1:04:cc:b6:00:20:2e:f0:ae:49:64: dd:d3:5d:6e:5b:71:2f:99:82:0b:7b:b8:69:ed:af:06:3a:37: 1f:a1:2e:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRGRDQxMTAvBgNVBAUTKEUxQzgyN0MzNDg5NzQ1RTM1NkU5MEU4QjYxQTNGNDQ3 RDFEMTUzMTEwHhcNMjQwNTE4MjEzNzE1WhcNMjQwNTI1MjEzNzE1WjAYMRYwFAYD VQQDEw02NjQ5MWY4Yi02YjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDynqbv198nbBzV7yGtRCJEmCLYzI28qix1ffk5u6iO03ltjySWPdnT+1fw+ 7SGkXAjh6BWadPfOfZrniqdGvaliYFMb+Jt698ccEhpZN1Lyu6yPyL+rKTD2O3SI Pm5mKhwjIX3SqyAcxblgDPMzb4ZS1MfC2NQ5I9n21NC57OsMoQ6aFDvAPK2DKOWz tS3NeRVjWuJfAoqMt9Oxc5SR8kkjKU3woQt4XcywPkPZJs4A6ZPibYgjPfOZdPMz Q0Nbitr/NEH9lsjfnwyJuOy4h8M58bCj+3eCq5TPmvrFx2BCkj/ZmCRAq7W6PfVK 108MDJ9d25CciHaeLkLnZH/JOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2baVwy c4OEDm2//PK86hVhsLUyMB8GA1UdIwQYMBaAFOHIJ8NIl0XjVukOi2Gj9EfR0VMR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEZENC80MEMwMTNGODlG MTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJlTlc2UTZMWWFQMFI5SFJV eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRjZ253MGlYUmVOVzZRNkxZYVAwUjlIUlV4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEZENC80MEMwMTNGODlGMTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJl Tlc2UTZMWWFQMFI5SFJVeEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHP/dGd4i5a5b0YxrkhEPRM6XVfv0SXr7gOY5dFRp19rJFUzQT96+N 0ppaWJBLUbJENcro/ejom0lrSZkBy5+AZZj+eEX9MpyaY0jnqOk70I5LlsqfCW+J unSzJZm48S5TqqtlJ63xweSv0W5/6+iC5aOy9afsGuf9skFfwEe0Drva1kNUD9L7 rCd2QlllXKGLwbxprf/7U7pCWNywocox5s3dekIZeax9RPmMu5avpg4Ky3dAKTXc ciQpCnxZyQEXXP3Imhs8ZShxQtFq1i8J65tx1eqGa+YvJobMg3AIsQTMtgAgLvCu SWTd011uW3EvmYILe7hp7a8GOjcfoS7y -----END CERTIFICATE-----Generated at Sun May 19 00:16:15 2024 by rpki-client on console-fra.rpki-client.org