$ rpki-client -vvf rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft File: 4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft (raw, json) Hash identifier: J6WpxmMSIPrUW96nVxFY146DZiAXPb9X305DfozqJ1A= Subject key identifier: 93:35:F8:7B:C4:6E:6E:F7:4A:7C:AF:8E:0A:17:F9:67:75:B4:5D:EC Authority key identifier: E2:31:D3:09:27:E4:9A:6A:22:D9:F6:AC:D7:06:10:3B:E3:E5:DC:16 Certificate issuer: /CN=A9188CCC/serialNumber=E231D30927E49A6A22D9F6ACD706103BE3E5DC16 Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft Manifest number: 8D Signing time: Sun 19 May 2024 07:03:54 +0000 Manifest this update: Sun 19 May 2024 07:03:53 +0000 Manifest next update: Sun 26 May 2024 07:03:53 +0000 Files and hashes: 1: 4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl (hash: Pz4qTpnUqHP5ap8mDTkcxJbzcd/AycQm0yV3ur3FEtk=) 2: 7D60D10A454811EEB97A0F46C4F9AE02.roa (hash: d5hv1IQLIOQ84kKr+HaWg9/KD2onjp9c3jsVzTncAnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188CCC/serialNumber=E231D30927E49A6A22D9F6ACD706103BE3E5DC16 Validity Not Before: May 19 07:03:53 2024 GMT Not After : May 26 07:03:53 2024 GMT Subject: CN=6649a45a-25d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:55:b7:f8:4b:ae:77:4c:c6:81:25:e2:16:e3: c9:a8:fe:b2:c8:25:d3:be:ae:57:45:ba:f3:f5:4c: c6:d0:31:91:48:be:25:6d:90:06:23:0e:a4:4d:44: 22:c2:e1:ea:e2:bc:21:20:75:36:d7:3e:70:7b:e5: 85:cf:19:04:cf:22:f7:72:26:63:d0:52:17:db:65: a9:d1:55:28:c7:91:82:13:98:68:7a:c0:78:1e:6f: 2d:51:84:e3:fd:8f:8b:6a:15:10:a1:4b:0b:87:43: 39:59:f6:72:9a:28:f1:d2:f3:d7:27:37:bb:05:a9: 92:09:6e:92:f5:6c:82:5a:df:eb:66:a0:ac:1c:22: 96:22:8f:70:f9:d5:77:db:dc:ef:7b:49:4b:c6:8a: 35:d0:31:f4:8b:d9:1a:67:58:7d:bb:ab:30:0d:10: 05:5d:de:56:c5:35:98:35:a1:32:47:64:00:6f:98: 84:3a:8f:31:85:ec:ea:82:0d:85:f9:40:c7:ef:31: ac:39:6b:e4:ad:1b:9c:1f:d5:6a:a0:9b:bd:f8:88: d2:dd:8d:b9:8c:d0:8d:41:88:ac:19:e8:88:69:ba: a6:74:bb:1f:57:2a:d8:39:53:20:28:26:e1:b9:c6: 51:4c:de:09:30:73:05:8a:10:eb:74:b0:61:56:d5: 41:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:35:F8:7B:C4:6E:6E:F7:4A:7C:AF:8E:0A:17:F9:67:75:B4:5D:EC X509v3 Authority Key Identifier: keyid:E2:31:D3:09:27:E4:9A:6A:22:D9:F6:AC:D7:06:10:3B:E3:E5:DC:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:56:34:61:63:73:c9:3e:23:7a:a9:88:ea:3a:60:5a:10:bf: fc:0e:c9:6c:24:e8:3e:52:97:f1:12:77:51:25:90:96:09:d7: c4:33:83:d9:eb:79:85:ad:3c:c1:10:48:70:a8:fa:d7:ae:ac: a1:c6:ac:c8:3d:91:21:47:93:25:d5:8f:d4:c1:d6:f3:74:ec: 34:e4:57:24:39:a8:4d:35:d1:57:a0:dc:83:06:0e:d3:8d:57: dd:2a:89:f1:8d:42:9d:a6:84:f5:81:5e:51:55:a6:2b:ec:5e: 61:12:b0:60:f5:ae:52:77:5f:7f:35:76:52:19:d8:56:72:e9: 77:e5:b2:2c:e9:48:02:e4:0b:60:47:c0:1c:eb:87:6a:f3:85: d9:4f:ea:68:e0:54:7b:71:a0:2b:bb:84:df:73:b8:7a:09:34: 4d:cf:f8:af:d9:e1:52:39:f0:a2:8e:b7:d3:45:22:54:ef:8b: b5:96:91:25:2c:49:7c:f9:42:0c:35:d7:9b:58:f9:3b:62:7b: 7a:c0:76:9e:56:06:4d:02:26:49:87:2a:27:f6:ad:f6:57:be: 7e:db:47:46:ac:f4:d0:1f:38:cc:d6:76:65:c6:1a:bc:28:c4: 5f:14:f5:64:05:33:52:50:7e:f9:41:02:f9:c8:4b:8c:64:d8: 51:ea:a7:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhDQ0MxMTAvBgNVBAUTKEUyMzFEMzA5MjdFNDlBNkEyMkQ5RjZBQ0Q3MDYxMDNC RTNFNURDMTYwHhcNMjQwNTE5MDcwMzUzWhcNMjQwNTI2MDcwMzUzWjAYMRYwFAYD VQQDEw02NjQ5YTQ1YS0yNWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlW3+Euud0zGgSXiFuPJqP6yyCXTvq5XRbrz9UzG0DGRSL4lbZAGIw6kTUQi wuHq4rwhIHU21z5we+WFzxkEzyL3ciZj0FIX22Wp0VUox5GCE5hoesB4Hm8tUYTj /Y+LahUQoUsLh0M5WfZymijx0vPXJze7BamSCW6S9WyCWt/rZqCsHCKWIo9w+dV3 29zve0lLxoo10DH0i9kaZ1h9u6swDRAFXd5WxTWYNaEyR2QAb5iEOo8xhezqgg2F +UDH7zGsOWvkrRucH9VqoJu9+IjS3Y25jNCNQYisGeiIabqmdLsfVyrYOVMgKCbh ucZRTN4JMHMFihDrdLBhVtVBMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJM1+HvE bm73SnyvjgoX+Wd1tF3sMB8GA1UdIwQYMBaAFOIx0wkn5JpqItn2rNcGEDvj5dwW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OENDQy83RTZFMDAxNDQ1 NDcxMUVFQUNEMzVGNDFDNEY5QUUwMi80akhUQ1Nma21tb2kyZmFzMXdZUU8tUGwz QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRqSFRDU2ZrbW1vaTJmYXMxd1lRTy1QbDNCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OENDQy83RTZFMDAxNDQ1NDcxMUVFQUNEMzVGNDFDNEY5QUUwMi80akhUQ1Nma21t b2kyZmFzMXdZUU8tUGwzQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcVjRhY3PJPiN6qYjqOmBaEL/8DslsJOg+UpfxEndRJZCWCdfEM4PZ 63mFrTzBEEhwqPrXrqyhxqzIPZEhR5Ml1Y/UwdbzdOw05FckOahNNdFXoNyDBg7T jVfdKonxjUKdpoT1gV5RVaYr7F5hErBg9a5Sd19/NXZSGdhWcul35bIs6UgC5Atg R8Ac64dq84XZT+po4FR7caAru4Tfc7h6CTRNz/iv2eFSOfCijrfTRSJU74u1lpEl LEl8+UIMNdebWPk7Ynt6wHaeVgZNAiZJhyon9q32V75+20dGrPTQHzjM1nZlxhq8 KMRfFPVkBTNSUH75QQL5yEuMZNhR6qfP -----END CERTIFICATE-----Generated at Sun May 19 08:25:03 2024 by rpki-client on console-ams.rpki-client.org