$ rpki-client -vvf rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft File: 0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft (raw, json) Hash identifier: SVjGjYFiK+ZII4xVwPH8eRu9QjKqjSsihKUV5f6zLLs= Subject key identifier: 39:2A:F5:CE:9C:1C:E6:5B:8E:C6:59:38:38:19:E9:28:EF:3C:68:ED Authority key identifier: D0:5A:C9:0A:20:7F:60:87:CE:02:ED:C2:31:88:E3:2A:AA:1B:1B:44 Certificate issuer: /CN=A918C212/serialNumber=D05AC90A207F6087CE02EDC23188E32AAA1B1B44 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft Manifest number: 4B Signing time: Sun 19 May 2024 07:59:00 +0000 Manifest this update: Sun 19 May 2024 07:58:59 +0000 Manifest next update: Sun 26 May 2024 07:58:59 +0000 Files and hashes: 1: 0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl (hash: qih/hK33ECku3VNYJbJb1hBuYJWWdwdsXWRRlrPc2Jc=) 2: BCBA699CA2D111EE89C12A4EC4F9AE02.roa (hash: Xh+MGu12tgl7voXzFMI2DGlIzd0kNkkJcIaIlHXdZcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C212/serialNumber=D05AC90A207F6087CE02EDC23188E32AAA1B1B44 Validity Not Before: May 19 07:58:59 2024 GMT Not After : May 26 07:58:59 2024 GMT Subject: CN=6649b144-323c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:94:a9:e7:e6:af:3a:8d:0d:f2:bf:f9:02:11: 51:56:79:0d:10:27:ab:b8:38:28:fd:41:6a:c1:89: d1:99:05:84:c9:b0:1b:c0:64:73:fe:0a:df:ef:dc: 81:ff:0e:3a:14:34:eb:75:26:0f:d2:58:fe:fc:59: c1:c0:aa:ae:59:58:36:57:e7:31:b7:56:c2:02:00: 6b:6a:cf:30:71:fc:2f:6c:4c:ac:e1:2d:59:a1:ff: d3:48:39:ad:91:2c:44:6d:58:a4:17:a8:ce:6c:f7: db:1d:28:f3:ea:64:ba:e3:e6:61:b1:92:5d:78:65: 8e:92:aa:33:8a:b8:27:da:8d:b9:7e:8a:fa:55:6e: d2:6b:1c:3b:91:93:e1:ec:c8:22:92:dc:d5:78:58: 4d:1e:e8:e0:69:ac:ce:ef:1b:52:b2:d6:24:a5:f0: c0:1c:82:70:6e:9c:e2:75:c2:cc:2a:ad:4f:49:b3: ae:ca:ac:72:0b:3b:6d:63:6d:86:25:2a:ad:b9:12: d3:e2:ad:f0:d4:28:0f:be:eb:37:cc:03:34:63:8f: 0d:8e:87:63:60:9e:8d:bf:17:14:0f:42:5c:40:ee: 53:43:2f:30:09:5f:66:78:21:d4:5f:ca:60:6f:10: b9:79:18:3e:1c:72:cc:f5:1c:83:8e:48:4b:e6:9d: 6b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:2A:F5:CE:9C:1C:E6:5B:8E:C6:59:38:38:19:E9:28:EF:3C:68:ED X509v3 Authority Key Identifier: keyid:D0:5A:C9:0A:20:7F:60:87:CE:02:ED:C2:31:88:E3:2A:AA:1B:1B:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:b5:f0:ab:7a:b3:47:68:f2:e4:50:d3:be:57:1b:95:19:dc: ed:7e:8d:56:bd:e2:eb:c0:ba:b9:1b:e2:ee:be:db:0d:8d:18: b7:66:ed:a0:99:52:9c:fc:a0:c6:82:ec:b0:87:e9:29:59:79: 02:34:94:a3:ed:8b:b6:5b:3e:68:da:e7:6a:85:59:06:f6:d2: c2:3a:7a:fc:02:7c:60:9e:bc:62:3c:cc:36:47:c1:66:d6:90: d7:c5:35:c1:c1:02:1b:58:dc:04:4d:ac:90:3d:11:83:9b:7b: 40:44:f9:8e:af:b2:bd:e4:92:c9:d3:89:34:d7:f2:b2:81:4d: f4:62:b9:78:67:d8:73:06:59:aa:2c:7d:da:2b:f7:3b:e8:c9: db:0b:49:9a:1e:20:a2:b4:90:62:6b:6c:87:4c:26:44:21:3a: d8:58:fd:3c:4f:42:f2:c9:df:91:f2:ba:80:fd:6a:6a:0b:f3: 85:0f:3a:95:af:e4:53:f9:c0:2e:e9:45:0c:ce:d3:94:b9:92: a9:46:ec:52:5f:a3:81:37:cf:aa:d8:64:21:f5:54:f2:b6:c5: 53:09:e5:de:0e:f6:fb:b6:af:bc:8c:65:e8:7b:5f:55:03:f4: 90:6b:d0:a0:3a:7e:0a:7b:fb:10:c7:91:4b:fa:72:f5:cb:ea: f5:18:21:72 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QzIxMjExMC8GA1UEBRMoRDA1QUM5MEEyMDdGNjA4N0NFMDJFREMyMzE4OEUzMkFB QTFCMUI0NDAeFw0yNDA1MTkwNzU4NTlaFw0yNDA1MjYwNzU4NTlaMBgxFjAUBgNV BAMTDTY2NDliMTQ0LTMyM2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7lKnn5q86jQ3yv/kCEVFWeQ0QJ6u4OCj9QWrBidGZBYTJsBvAZHP+Ct/v3IH/ DjoUNOt1Jg/SWP78WcHAqq5ZWDZX5zG3VsICAGtqzzBx/C9sTKzhLVmh/9NIOa2R LERtWKQXqM5s99sdKPPqZLrj5mGxkl14ZY6SqjOKuCfajbl+ivpVbtJrHDuRk+Hs yCKS3NV4WE0e6OBprM7vG1Ky1iSl8MAcgnBunOJ1wswqrU9Js67KrHILO21jbYYl Kq25EtPirfDUKA++6zfMAzRjjw2Oh2Ngno2/FxQPQlxA7lNDLzAJX2Z4IdRfymBv ELl5GD4ccsz1HIOOSEvmnWvvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOSr1zpwc 5luOxlk4OBnpKO88aO0wHwYDVR0jBBgwFoAU0FrJCiB/YIfOAu3CMYjjKqobG0Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDMjEyLzRCMjMzRUVBQTJE MDExRUU5M0E4OEYzREM0RjlBRTAyLzBGckpDaUJfWUlmT0F1M0NNWWpqS3FvYkcw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMEZySkNpQl9ZSWZPQXUzQ01ZampLcW9iRzBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThD MjEyLzRCMjMzRUVBQTJEMDExRUU5M0E4OEYzREM0RjlBRTAyLzBGckpDaUJfWUlm T0F1M0NNWWpqS3FvYkcwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJC18Kt6s0do8uRQ075XG5UZ3O1+jVa94uvAurkb4u6+2w2NGLdm7aCZ Upz8oMaC7LCH6SlZeQI0lKPti7ZbPmja52qFWQb20sI6evwCfGCevGI8zDZHwWbW kNfFNcHBAhtY3ARNrJA9EYObe0BE+Y6vsr3kksnTiTTX8rKBTfRiuXhn2HMGWaos fdor9zvoydsLSZoeIKK0kGJrbIdMJkQhOthY/TxPQvLJ35HyuoD9amoL84UPOpWv 5FP5wC7pRQzO05S5kqlG7FJfo4E3z6rYZCH1VPK2xVMJ5d4O9vu2r7yMZeh7X1UD 9JBr0KA6fgp7+xDHkUv6cvXL6vUYIXI= -----END CERTIFICATE-----Generated at Sun May 19 08:26:43 2024 by rpki-client on console-fra.rpki-client.org