$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft File: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft (raw, json) Hash identifier: tSH7W5mrMSAZNvZUev7a8baeXp/mwyORwhC1v9cMVGo= Subject key identifier: 50:CB:C3:3B:CE:AB:AB:9D:21:79:E3:27:17:24:1A:82:58:66:97:03 Authority key identifier: 15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4 Certificate issuer: /CN=A9189BB3/serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4 Certificate serial: 04D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft Manifest number: 04C4 Signing time: Sun 19 May 2024 01:30:36 +0000 Manifest this update: Sun 19 May 2024 01:30:35 +0000 Manifest next update: Sun 26 May 2024 01:30:35 +0000 Files and hashes: 1: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl (hash: Om95nHsv0VVq7puSZer12/7MRs037Zj/GvilpMidg+s=) 2: AB532852B38911ED825BDC70C4F9AE02.roa (hash: lI89gGOdI2wC7bAgpTLQT93m/SNfGU9hrbeNWg8jfRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1232 (0x4d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189BB3/serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4 Validity Not Before: May 19 01:30:35 2024 GMT Not After : May 26 01:30:35 2024 GMT Subject: CN=6649563c-388c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:18:3c:95:0a:c5:b2:c9:51:d3:4c:84:49:bf: 7f:25:1d:23:4f:3f:8a:c2:e6:49:b6:d4:bd:40:54: 3d:0f:01:c5:e7:6f:35:e4:58:01:a5:70:22:f7:97: e2:20:91:f2:33:63:1e:47:a9:5f:49:9d:5b:0d:62: ce:ec:07:e1:05:02:61:bd:29:89:a5:ef:99:fa:44: e1:89:d4:6b:7f:2f:bd:50:4b:be:91:bb:a8:2e:47: e2:f8:94:53:28:91:dc:69:c0:5c:53:a0:87:a8:bf: 49:fd:8f:95:26:75:fe:be:43:af:46:1d:40:f6:ff: bf:9d:74:a2:5a:59:a7:e3:a5:4a:ab:9c:2b:dd:12: e9:3b:22:59:d5:b9:4a:ae:8b:14:a9:7f:db:6c:b9: e8:0a:82:2f:50:27:46:b8:28:43:3b:81:bb:e7:86: 09:3e:c1:fe:da:b6:a0:5b:7b:9e:ed:d6:8b:c6:99: 55:ac:b1:6c:cb:d9:b5:54:b3:b4:73:bf:69:5a:58: a9:d7:14:e1:32:c0:61:eb:de:d6:06:a6:43:5c:df: 63:51:99:7b:85:9a:7d:9f:4a:67:8d:59:46:f6:e8: 87:b4:d6:14:6d:0d:1b:ca:33:dc:15:81:db:8c:f4: 47:ba:0b:74:fb:d4:5b:c9:87:3d:33:1c:eb:20:38: aa:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:CB:C3:3B:CE:AB:AB:9D:21:79:E3:27:17:24:1A:82:58:66:97:03 X509v3 Authority Key Identifier: keyid:15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:a3:b9:6a:07:bc:e0:03:02:50:13:6e:35:65:b5:2a:06:e9: 8d:68:1c:12:f3:cd:50:22:66:97:26:f8:75:9b:f6:c1:c4:b7: 25:a9:2c:04:87:11:85:d7:5e:d7:34:a0:54:c9:66:df:6f:ec: c9:bd:9c:81:9e:db:8c:14:ec:a7:c9:d9:c6:ae:75:b8:a2:e0: 3d:a0:11:f8:6f:8e:33:e9:d4:f2:4d:d1:5f:e5:ff:58:fb:51: b4:ca:5b:57:e1:13:c0:9e:e1:81:8d:0a:25:c2:cc:d3:b6:6e: 93:0e:5d:12:9e:02:61:39:9a:48:db:bb:2d:3b:c6:44:48:ec: 3b:c9:c4:fb:0a:0d:9c:be:69:11:08:1e:5c:cb:05:22:aa:51: a3:32:e6:1d:54:52:1e:f4:54:09:dd:c4:5d:db:30:4e:39:71: 93:c1:e0:4e:46:fc:fc:f9:ad:07:64:87:4e:e7:e1:01:6f:a2: 72:5f:e9:f4:e3:68:43:8b:1c:16:ff:68:63:52:d2:ea:9b:ef: f1:82:5c:e8:87:4e:1c:1e:d7:c6:81:39:a7:72:ea:bf:9a:f0: 70:ff:4d:51:e4:a0:de:16:e2:88:85:a5:66:7e:25:a4:2e:17: 45:e2:26:b4:d6:8b:b9:6d:60:3e:0b:a3:3f:9d:14:64:d1:42: 05:5f:43:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCQjMxMTAvBgNVBAUTKDE1MjhGNjNEMjhGM0UxMzY2OTAyQzZCNjRBRjU4NjZD Q0JBOERBQzQwHhcNMjQwNTE5MDEzMDM1WhcNMjQwNTI2MDEzMDM1WjAYMRYwFAYD VQQDEw02NjQ5NTYzYy0zODhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Bg8lQrFsslR00yESb9/JR0jTz+KwuZJttS9QFQ9DwHF52815FgBpXAi95fi IJHyM2MeR6lfSZ1bDWLO7AfhBQJhvSmJpe+Z+kThidRrfy+9UEu+kbuoLkfi+JRT KJHcacBcU6CHqL9J/Y+VJnX+vkOvRh1A9v+/nXSiWlmn46VKq5wr3RLpOyJZ1blK rosUqX/bbLnoCoIvUCdGuChDO4G754YJPsH+2ragW3ue7daLxplVrLFsy9m1VLO0 c79pWlip1xThMsBh697WBqZDXN9jUZl7hZp9n0pnjVlG9uiHtNYUbQ0byjPcFYHb jPRHugt0+9RbyYc9MxzrIDiqQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDLwzvO q6udIXnjJxckGoJYZpcDMB8GA1UdIwQYMBaAFBUo9j0o8+E2aQLGtkr1hmzLqNrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUJCMy9BNDQ3ODY3NERG Q0UxMUVCOTU5QjUwMUZDNEY5QUUwMi9GU2oyUFNqejRUWnBBc2EyU3ZXR2JNdW8y c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTajJQU2p6NFRacEFzYTJTdldHYk11bzJzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUJCMy9BNDQ3ODY3NERGQ0UxMUVCOTU5QjUwMUZDNEY5QUUwMi9GU2oyUFNqejRU WnBBc2EyU3ZXR2JNdW8yc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjo7lqB7zgAwJQE241ZbUqBumNaBwS881QImaXJvh1m/bBxLclqSwE hxGF117XNKBUyWbfb+zJvZyBntuMFOynydnGrnW4ouA9oBH4b44z6dTyTdFf5f9Y +1G0yltX4RPAnuGBjQolwszTtm6TDl0SngJhOZpI27stO8ZESOw7ycT7Cg2cvmkR CB5cywUiqlGjMuYdVFIe9FQJ3cRd2zBOOXGTweBORvz8+a0HZIdO5+EBb6JyX+n0 42hDixwW/2hjUtLqm+/xglzoh04cHtfGgTmncuq/mvBw/01R5KDeFuKIhaVmfiWk LhdF4ia01ou5bWA+C6M/nRRk0UIFX0Py -----END CERTIFICATE-----Generated at Sun May 19 02:59:08 2024 by rpki-client on console-ams.rpki-client.org