$ rpki-client -vvf rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft File: Se4JeG9u2kI1x1dcppbboJnVR8w.mft (raw, json) Hash identifier: RYn8pxZ+o0mnbue34hPvHM3uHBRpEaCCXArpoZ6mDWA= Subject key identifier: 71:93:45:AB:63:B7:19:FB:42:0C:B4:C1:8A:F2:0C:39:9E:C7:E7:C5 Authority key identifier: 49:EE:09:78:6F:6E:DA:42:35:C7:57:5C:A6:96:DB:A0:99:D5:47:CC Certificate issuer: /CN=A9189E7C/serialNumber=49EE09786F6EDA4235C7575CA696DBA099D547CC Certificate serial: 074E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft Manifest number: 0749 Signing time: Sat 18 May 2024 22:21:08 +0000 Manifest this update: Sat 18 May 2024 22:21:08 +0000 Manifest next update: Sat 25 May 2024 22:21:08 +0000 Files and hashes: 1: Se4JeG9u2kI1x1dcppbboJnVR8w.crl (hash: KT8sWAUToLJhUKgWgGFGu8YCMo5yJxVU0m1C6fU6y1Y=) 2: 2EC0C96ADBAB11EABFC1AC7DC4F9AE02.roa (hash: v8aWP509ac7x8DIQSPn3xKAEjUs+f81QtDGkCBfWoBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.crl rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1870 (0x74e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189E7C/serialNumber=49EE09786F6EDA4235C7575CA696DBA099D547CC Validity Not Before: May 18 22:21:08 2024 GMT Not After : May 25 22:21:08 2024 GMT Subject: CN=664929d4-52cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:37:51:63:a6:bc:8b:32:7a:7b:ab:c0:2d:8d: cf:c5:17:ed:00:3a:98:13:65:65:8f:f8:1f:30:21: ba:ff:0f:9b:bb:86:df:02:9a:60:f3:d2:7c:36:eb: 12:ec:2e:16:b7:a7:21:52:7a:18:20:4b:1a:87:c6: 84:36:7b:ba:bf:aa:c5:85:f4:72:32:4a:e2:b6:25: e9:0a:15:55:69:98:87:b3:26:0e:6a:2b:14:17:95: f4:15:03:b1:49:7d:0d:7f:e2:bb:de:e5:fb:81:20: c5:9a:65:07:15:60:b5:72:c4:11:49:3e:f5:d3:46: 09:bb:83:a2:1c:4b:a9:71:5a:05:18:da:e7:e3:46: dc:f4:a7:48:1d:7d:ec:d5:bd:48:d3:ae:9e:3d:91: d6:7d:48:b9:07:b9:66:31:eb:ba:22:5a:5d:7b:c4: 75:ee:29:82:30:3e:76:eb:59:83:77:48:7c:65:91: 12:0b:4d:86:8a:00:06:e8:43:49:4f:ea:7a:57:d5: 7b:45:e6:16:48:bd:3f:5c:68:7c:53:6f:f8:26:54: 13:4b:55:8e:b4:69:5d:b7:7d:7f:1d:e5:1c:cb:17: 8b:18:f0:dc:cd:fe:f9:a1:47:36:26:3c:34:e6:61: 20:61:61:c8:3a:4a:49:7a:69:f0:12:26:43:37:2a: a3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:93:45:AB:63:B7:19:FB:42:0C:B4:C1:8A:F2:0C:39:9E:C7:E7:C5 X509v3 Authority Key Identifier: keyid:49:EE:09:78:6F:6E:DA:42:35:C7:57:5C:A6:96:DB:A0:99:D5:47:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:bd:c3:b1:b2:4a:12:55:f2:5d:ed:c5:89:ad:05:42:ec:2e: 3c:4b:42:fd:a8:1c:26:28:ad:ce:d1:a2:ac:6b:20:a9:6e:c3: bd:3d:0e:ba:85:c0:83:bc:f9:e9:61:a1:95:13:3b:3f:d3:a7: 37:c7:e5:0e:3b:8e:f6:cb:d4:cd:7c:6b:84:1c:5a:94:58:03: 31:ac:ff:95:7e:07:02:14:c7:6b:43:09:90:75:ba:cd:37:37: 04:a7:2f:f1:79:ac:8c:00:78:b4:b8:02:87:1a:f0:c6:47:d0: 5e:9c:65:d0:2e:26:e1:38:e3:50:17:58:27:1b:b8:52:fd:ad: 9d:d4:89:32:8a:68:09:78:79:d3:2a:10:cb:cf:09:5d:84:be: f0:6a:1b:93:3f:6c:33:ef:46:b6:4f:ba:1a:f5:c3:50:3e:4a: 7f:2d:c8:44:88:6e:b4:83:0d:22:e5:d7:20:44:54:b0:b9:01: 70:38:6a:18:f4:3c:cf:20:ea:a9:11:c0:76:ec:17:84:88:b7: a6:99:1e:be:94:1c:64:0d:b7:08:fe:38:0c:47:99:3a:d7:05: 6a:43:fd:d8:5a:20:db:58:63:2c:52:c0:eb:52:14:01:47:cd: f2:c0:fe:39:cd:9d:dc:0b:77:cb:fd:c8:4d:91:16:ca:53:78: a2:35:a5:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlFN0MxMTAvBgNVBAUTKDQ5RUUwOTc4NkY2RURBNDIzNUM3NTc1Q0E2OTZEQkEw OTlENTQ3Q0MwHhcNMjQwNTE4MjIyMTA4WhcNMjQwNTI1MjIyMTA4WjAYMRYwFAYD VQQDEw02NjQ5MjlkNC01MmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+DdRY6a8izJ6e6vALY3PxRftADqYE2Vlj/gfMCG6/w+bu4bfAppg89J8NusS 7C4Wt6chUnoYIEsah8aENnu6v6rFhfRyMkritiXpChVVaZiHsyYOaisUF5X0FQOx SX0Nf+K73uX7gSDFmmUHFWC1csQRST7100YJu4OiHEupcVoFGNrn40bc9KdIHX3s 1b1I066ePZHWfUi5B7lmMeu6Ilpde8R17imCMD5261mDd0h8ZZESC02GigAG6ENJ T+p6V9V7ReYWSL0/XGh8U2/4JlQTS1WOtGldt31/HeUcyxeLGPDczf75oUc2Jjw0 5mEgYWHIOkpJemnwEiZDNyqj/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHGTRatj txn7Qgy0wYryDDmex+fFMB8GA1UdIwQYMBaAFEnuCXhvbtpCNcdXXKaW26CZ1UfM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUU3Qy9GQzFFQjcwQ0RC QTkxMUVBOEEwMTcwN0RDNEY5QUUwMi9TZTRKZUc5dTJrSTF4MWRjcHBiYm9KblZS OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NlNEplRzl1MmtJMXgxZGNwcGJib0puVlI4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUU3Qy9GQzFFQjcwQ0RCQTkxMUVBOEEwMTcwN0RDNEY5QUUwMi9TZTRKZUc5dTJr STF4MWRjcHBiYm9KblZSOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0vcOxskoSVfJd7cWJrQVC7C48S0L9qBwmKK3O0aKsayCpbsO9PQ66 hcCDvPnpYaGVEzs/06c3x+UOO472y9TNfGuEHFqUWAMxrP+VfgcCFMdrQwmQdbrN NzcEpy/xeayMAHi0uAKHGvDGR9BenGXQLibhOONQF1gnG7hS/a2d1IkyimgJeHnT KhDLzwldhL7wahuTP2wz70a2T7oa9cNQPkp/LchEiG60gw0i5dcgRFSwuQFwOGoY 9DzPIOqpEcB27BeEiLemmR6+lBxkDbcI/jgMR5k61wVqQ/3YWiDbWGMsUsDrUhQB R83ywP45zZ3cC3fL/chNkRbKU3iiNaVu -----END CERTIFICATE-----Generated at Sun May 19 00:16:16 2024 by rpki-client on console-fra.rpki-client.org