$ rpki-client -vvf rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft File: 489F-AUQY7vbMX_dFREyqUAE_Vs.mft (raw, json) Hash identifier: IawQzT8qXJ/EBERAGhwHIlYM5ozUj7JrTcZTXtHbTHw= Subject key identifier: FB:FC:A5:EB:75:43:75:1F:88:86:90:6C:66:44:9A:69:19:86:30:58 Authority key identifier: E3:CF:45:F8:05:10:63:BB:DB:31:7F:DD:15:11:32:A9:40:04:FD:5B Certificate issuer: /CN=A9197202/serialNumber=E3CF45F8051063BBDB317FDD151132A94004FD5B Certificate serial: 021D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft Manifest number: 0207 Signing time: Sun 19 May 2024 04:13:49 +0000 Manifest this update: Sun 19 May 2024 04:13:49 +0000 Manifest next update: Sun 26 May 2024 04:13:49 +0000 Files and hashes: 1: 489F-AUQY7vbMX_dFREyqUAE_Vs.crl (hash: LEjNIupkhtHQMDTJIf/mM/EtfRYXPnu4nWLDxt6U/nY=) 2: 920E981CCAAA11ED8371524CC4F9AE02.roa (hash: XUM4zyewzp+dSX8qEqQi2V3V08D5i4DwBZ7GbcwoUPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.crl rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197202/serialNumber=E3CF45F8051063BBDB317FDD151132A94004FD5B Validity Not Before: May 19 04:13:49 2024 GMT Not After : May 26 04:13:49 2024 GMT Subject: CN=66497c7d-b8d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:15:bb:ee:a7:f5:98:7b:ae:98:e9:bb:47:91: 3a:49:1a:71:0a:85:63:2f:f1:62:4a:42:f3:61:1d: 40:e6:3e:a1:21:75:c8:31:85:3d:17:cb:8c:eb:2a: 25:6a:2d:d1:b9:9a:d7:20:24:88:e6:c5:21:7d:13: 42:0a:ec:b2:70:83:6f:24:da:fd:8e:10:14:5f:2c: 0b:db:6f:7b:4b:fb:0c:4a:ec:f4:c2:59:81:df:2f: 6e:37:8b:a6:0a:08:8b:b8:47:c4:0b:9c:c5:aa:88: c4:e1:68:ea:05:3e:36:5e:b2:25:3e:60:ac:a1:b0: 9d:fa:24:4f:8d:11:ba:f8:20:85:50:30:86:3a:2c: a7:5f:4b:0c:9a:60:a4:bc:e3:be:7d:51:63:61:ac: 27:1d:d4:07:93:c3:13:e2:76:ec:d9:eb:c7:aa:47: f2:53:86:2d:a7:42:20:02:a1:b6:5d:99:62:75:11: c9:87:ad:5b:9f:d4:d1:65:1a:1f:bf:06:1f:42:21: 3b:b9:29:fa:f1:cd:91:b7:e2:41:f4:06:23:24:78: 02:92:54:f1:1f:7e:ed:9e:9e:cc:2e:6a:ae:db:f9: 49:0b:e8:6e:68:82:95:8e:73:6b:49:c5:df:e0:d5: e9:4d:f9:5a:b3:79:43:42:29:6a:76:f7:67:1d:95: f2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:FC:A5:EB:75:43:75:1F:88:86:90:6C:66:44:9A:69:19:86:30:58 X509v3 Authority Key Identifier: keyid:E3:CF:45:F8:05:10:63:BB:DB:31:7F:DD:15:11:32:A9:40:04:FD:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:83:cc:2e:17:be:26:96:8e:3c:c4:59:82:86:73:37:05:db: 6c:2e:75:65:e5:86:f2:db:44:36:3d:15:7a:65:bc:7d:39:ed: 5f:81:ef:b6:d2:21:61:cc:18:c4:2e:b2:68:bd:0b:a8:fb:e8: b5:ba:c7:c2:79:e3:08:a2:85:82:d5:17:6c:8c:c0:91:e9:ff: fe:24:1f:77:01:d5:ad:84:f3:5e:11:f1:06:de:3d:5f:dd:85: 7e:6b:01:52:e0:a0:a7:8a:d4:1f:8f:80:de:c0:8b:89:e1:2b: 0d:40:b7:d4:3d:b4:5f:04:d8:64:30:66:59:47:8d:b4:eb:e7: ec:e5:d9:27:e7:b6:a2:27:fd:f1:fd:73:d5:7d:70:ab:fc:1d: 6c:12:61:1f:b0:ac:f0:0e:a9:30:ee:b6:98:1c:59:47:0e:42: 16:91:ea:e4:8d:ff:67:35:1a:50:a5:98:4e:a6:16:71:0c:27: 55:5f:16:bb:f3:14:50:57:c0:0f:43:d2:f1:31:32:04:40:4a: 29:b2:98:d3:8b:4a:5c:d6:10:2a:d1:4c:75:d0:c7:0b:71:1c: cd:8c:30:c2:5b:fc:c7:2b:ae:00:4f:e0:0d:f6:1b:35:e0:13: 7a:a6:3a:69:b9:4e:c0:fc:79:4f:11:86:1e:c5:97:2f:9b:2f: 39:a6:6c:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyMDIxMTAvBgNVBAUTKEUzQ0Y0NUY4MDUxMDYzQkJEQjMxN0ZERDE1MTEzMkE5 NDAwNEZENUIwHhcNMjQwNTE5MDQxMzQ5WhcNMjQwNTI2MDQxMzQ5WjAYMRYwFAYD VQQDEw02NjQ5N2M3ZC1iOGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxW77qf1mHuumOm7R5E6SRpxCoVjL/FiSkLzYR1A5j6hIXXIMYU9F8uM6yol ai3RuZrXICSI5sUhfRNCCuyycINvJNr9jhAUXywL2297S/sMSuz0wlmB3y9uN4um CgiLuEfEC5zFqojE4WjqBT42XrIlPmCsobCd+iRPjRG6+CCFUDCGOiynX0sMmmCk vOO+fVFjYawnHdQHk8MT4nbs2evHqkfyU4Ytp0IgAqG2XZlidRHJh61bn9TRZRof vwYfQiE7uSn68c2Rt+JB9AYjJHgCklTxH37tnp7MLmqu2/lJC+huaIKVjnNrScXf 4NXpTflas3lDQilqdvdnHZXyVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPv8pet1 Q3UfiIaQbGZEmmkZhjBYMB8GA1UdIwQYMBaAFOPPRfgFEGO72zF/3RURMqlABP1b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzIwMi8wQUZFQ0E3MEY3 MDgxMUVDOTg0OUYzNUVDNEY5QUUwMi80ODlGLUFVUVk3dmJNWF9kRlJFeXFVQUVf VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ4OUYtQVVRWTd2Yk1YX2RGUkV5cVVBRV9Wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzIwMi8wQUZFQ0E3MEY3MDgxMUVDOTg0OUYzNUVDNEY5QUUwMi80ODlGLUFVUVk3 dmJNWF9kRlJFeXFVQUVfVnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCg8wuF74mlo48xFmChnM3BdtsLnVl5Yby20Q2PRV6Zbx9Oe1fge+2 0iFhzBjELrJovQuo++i1usfCeeMIooWC1RdsjMCR6f/+JB93AdWthPNeEfEG3j1f 3YV+awFS4KCnitQfj4DewIuJ4SsNQLfUPbRfBNhkMGZZR4206+fs5dkn57aiJ/3x /XPVfXCr/B1sEmEfsKzwDqkw7raYHFlHDkIWkerkjf9nNRpQpZhOphZxDCdVXxa7 8xRQV8APQ9LxMTIEQEopspjTi0pc1hAq0Ux10McLcRzNjDDCW/zHK64AT+AN9hs1 4BN6pjppuU7A/HlPEYYexZcvmy85pmyo -----END CERTIFICATE-----Generated at Sun May 19 05:08:05 2024 by rpki-client on console-ams.rpki-client.org