$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft File: l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft (raw, json) Hash identifier: vsi63TKjW5DZlqhewDP2StDg4Nis2W8IocCSNeGTtgY= Subject key identifier: 63:F9:5B:02:4B:75:67:44:EA:FA:E0:D0:50:A6:12:BB:A6:4F:B1:93 Authority key identifier: 97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA Certificate issuer: /CN=A9194AF5/serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft Manifest number: 4D Signing time: Sat 01 Jun 2024 09:23:38 +0000 Manifest this update: Sat 01 Jun 2024 09:23:38 +0000 Manifest next update: Sat 08 Jun 2024 09:23:38 +0000 Files and hashes: 1: l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl (hash: x+cw18huFQyCX0j0keEjqJuzIbWkCcnGunVpNoPgQKQ=) 2: BC87CB52AB5711EEBC6EBB3FC4F9AE02.roa (hash: P/J87XG2tUJ42Y/89cbaFjR+kvi3mKnv0hb1x1rqHAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194AF5/serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA Validity Not Before: Jun 1 09:23:38 2024 GMT Not After : Jun 8 09:23:38 2024 GMT Subject: CN=665ae89a-d0e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:17:df:71:b1:4b:e7:2c:2e:64:fb:9d:02:5a: 72:75:99:fb:7b:87:f4:63:72:99:d8:c1:eb:b5:c4: 12:d3:d7:cb:57:91:f7:59:76:6c:5e:d2:88:d1:a5: 67:a4:35:35:c0:66:43:76:55:9c:28:37:cf:0e:54: 17:ee:4e:e9:0f:86:4e:54:7d:8b:0f:cb:33:04:9e: 19:f9:ec:b6:9d:14:a1:b0:0e:fd:75:27:7a:18:b1: 44:22:10:d8:d1:73:40:c5:18:d1:58:d3:14:3a:c4: c1:c0:20:7d:49:b4:ff:11:69:4b:eb:6e:4d:42:c9: 5b:84:66:d5:97:8d:26:bd:77:c2:10:ae:8e:39:f4: 88:04:3e:e7:c3:09:a2:7d:a8:c3:d0:07:d8:4c:a1: 97:3a:52:cd:69:de:bd:81:9c:0a:97:a5:51:fa:ad: 16:2d:44:11:e6:e8:cd:87:76:d0:4f:2b:91:9b:5b: a8:1b:41:12:78:b1:e3:a9:89:d0:39:12:cf:bc:34: fc:c6:9a:dd:8f:17:ae:09:a6:fb:ab:0f:88:1a:6b: bb:5d:a4:72:8b:b9:fc:19:bd:dc:44:ce:7a:e9:d7: 59:3c:ec:de:35:70:ec:1a:8b:54:70:a2:26:cd:62: 80:b0:0d:a3:40:35:2f:ae:f2:23:ab:65:79:a5:58: 59:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F9:5B:02:4B:75:67:44:EA:FA:E0:D0:50:A6:12:BB:A6:4F:B1:93 X509v3 Authority Key Identifier: keyid:97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:02:2f:47:b3:44:63:0e:bf:d3:0a:df:91:89:c7:b4:77:84: 54:64:9d:00:e9:68:98:39:79:d9:b5:98:9a:6d:25:a9:b9:ff: 72:6f:38:ca:24:e4:cc:ce:18:6b:8d:61:70:d5:44:3d:07:9c: e1:02:56:b1:60:a7:72:c1:e8:ec:92:8e:55:77:e1:ce:dd:55: 89:9e:de:89:db:33:6d:e5:61:c2:a6:0d:25:b6:6b:4b:ea:09: b3:c6:80:da:09:03:9d:57:6f:8d:b3:49:22:f3:80:18:2f:84: 6c:30:17:29:c0:14:4d:c7:cf:18:2b:d8:e7:ec:fe:0a:8b:52: 61:dd:5c:94:86:5a:62:ef:6c:f9:1d:ae:04:8e:0d:3e:e8:05: ec:bc:1b:e2:2a:ed:ac:f2:71:69:c5:c7:54:cc:a2:54:d0:7e: 85:b0:c7:05:be:ab:c3:3e:cf:bc:8c:dc:77:aa:f2:32:41:83: e0:c5:8f:83:66:61:d3:d1:2c:23:80:07:5a:d0:81:53:f0:c2: 9e:de:34:b3:7a:2a:b5:2e:90:e7:01:7f:c2:82:e3:a6:97:45: 37:64:1a:85:fc:7a:81:cd:de:fc:97:71:3d:5f:4e:ea:87:3c: b2:48:2e:86:9b:f5:6d:32:f5:fc:9e:86:ee:a7:0f:f4:34:9b: 9e:22:88:43 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NEFGNTExMC8GA1UEBRMoOTdEMTFBRTIxMkNCMjEzREY5NjUyRjVCQjYyNDhFNDBD RTBDMjlGQTAeFw0yNDA2MDEwOTIzMzhaFw0yNDA2MDgwOTIzMzhaMBgxFjAUBgNV BAMTDTY2NWFlODlhLWQwZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHF99xsUvnLC5k+50CWnJ1mft7h/RjcpnYweu1xBLT18tXkfdZdmxe0ojRpWek NTXAZkN2VZwoN88OVBfuTukPhk5UfYsPyzMEnhn57LadFKGwDv11J3oYsUQiENjR c0DFGNFY0xQ6xMHAIH1JtP8RaUvrbk1CyVuEZtWXjSa9d8IQro459IgEPufDCaJ9 qMPQB9hMoZc6Us1p3r2BnAqXpVH6rRYtRBHm6M2HdtBPK5GbW6gbQRJ4seOpidA5 Es+8NPzGmt2PF64JpvurD4gaa7tdpHKLufwZvdxEznrp11k87N41cOwai1RwoibN YoCwDaNANS+u8iOrZXmlWFldAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUY/lbAkt1 Z0Tq+uDQUKYSu6ZPsZMwHwYDVR0jBBgwFoAUl9Ea4hLLIT35ZS9btiSOQM4MKfow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0QUY1LzFCMUMyNDY2QUI1 NzExRUU4MThBMjgzRUM0RjlBRTAyL2w5RWE0aExMSVQzNVpTOWJ0aVNPUU00TUtm by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbDlFYTRoTExJVDM1WlM5YnRpU09RTTRNS2ZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0 QUY1LzFCMUMyNDY2QUI1NzExRUU4MThBMjgzRUM0RjlBRTAyL2w5RWE0aExMSVQz NVpTOWJ0aVNPUU00TUtmby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAMCL0ezRGMOv9MK35GJx7R3hFRknQDpaJg5edm1mJptJam5/3JvOMok 5MzOGGuNYXDVRD0HnOECVrFgp3LB6OySjlV34c7dVYme3onbM23lYcKmDSW2a0vq CbPGgNoJA51Xb42zSSLzgBgvhGwwFynAFE3Hzxgr2Ofs/gqLUmHdXJSGWmLvbPkd rgSODT7oBey8G+Iq7azycWnFx1TMolTQfoWwxwW+q8M+z7yM3Heq8jJBg+DFj4Nm YdPRLCOAB1rQgVPwwp7eNLN6KrUukOcBf8KC46aXRTdkGoX8eoHN3vyXcT1fTuqH PLJILoab9W0y9fyehu6nD/Q0m54iiEM= -----END CERTIFICATE-----Generated at Sat Jun 1 11:14:29 2024 by rpki-client on console-fra.rpki-client.org