$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft File: MfN4PHoe14P8H9p0H2p1KdWl5qA.mft (raw, json) Hash identifier: MMg8EjCLsfxn/8nnJAd3tSVkJrQKLksDVZqhlpiARcI= Subject key identifier: 40:3A:47:30:E9:2E:4A:CB:F9:7D:E7:07:A3:F6:CA:92:0C:C0:7E:56 Authority key identifier: 31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0 Certificate issuer: /CN=A9199B24/serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0 Certificate serial: 03C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft Manifest number: 03C0 Signing time: Sun 19 May 2024 02:26:14 +0000 Manifest this update: Sun 19 May 2024 02:26:13 +0000 Manifest next update: Sun 26 May 2024 02:26:13 +0000 Files and hashes: 1: MfN4PHoe14P8H9p0H2p1KdWl5qA.crl (hash: b5x4kzsObYR8Fa1jviQ0po9fc0lJLso2TZS/tJLgyuM=) 2: CF272560413111ECB71E086AC4F9AE02.roa (hash: xZ/5xBHbsPYmy5fKXzWMNz/s+f7VPa3yOiPF6PNDgEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 965 (0x3c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B24/serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0 Validity Not Before: May 19 02:26:13 2024 GMT Not After : May 26 02:26:13 2024 GMT Subject: CN=66496346-0424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:dc:10:a8:e7:28:ba:a9:26:65:a1:3d:6f:17: 20:52:06:d7:e5:1f:45:b0:13:d0:5c:ce:a7:fc:50: b8:f6:6e:ec:b0:b8:0e:bb:f5:fc:54:52:70:73:4b: 74:cd:5d:f2:3f:7f:ef:e9:30:ec:21:08:2b:2f:0c: 4b:7f:5b:0f:95:47:cb:78:7f:03:90:85:e1:c4:ea: 0a:39:25:71:d3:d8:e5:09:2c:e0:8e:96:34:75:f1: d5:65:85:c4:c5:ab:11:34:a9:21:14:c3:fa:1f:a5: 09:97:8a:9b:72:53:ef:90:c6:40:0b:de:f8:37:2a: d3:1e:80:5c:f3:dd:10:41:ec:a1:49:bd:7f:dc:a9: 22:c9:65:fa:6a:c7:cc:1d:a6:1a:61:0d:6b:9a:c6: 4d:12:39:9b:d4:1a:5a:98:68:9e:7e:48:19:fb:5f: f2:e3:ba:92:63:bb:7f:19:38:d0:1f:64:e6:74:02: a0:b3:ae:a1:21:ae:9c:c6:92:e2:7a:d1:f3:7b:78: 2d:ad:ce:73:fe:8a:9f:1d:ee:2a:62:a7:ae:b9:3b: f9:88:22:3c:7c:df:23:de:8b:f7:fe:e6:e0:bf:2b: 67:03:d0:b1:d6:e9:c3:0b:32:b4:c6:cd:ac:e2:ac: 12:ca:e4:fd:5c:27:37:76:a0:71:68:d0:b6:57:11: f9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3A:47:30:E9:2E:4A:CB:F9:7D:E7:07:A3:F6:CA:92:0C:C0:7E:56 X509v3 Authority Key Identifier: keyid:31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:97:cc:93:07:cb:30:b9:de:64:b3:38:4e:d0:4c:61:3a:f2: 7e:fb:06:23:d7:38:5d:61:31:85:84:14:2c:1d:85:e3:f4:f7: f2:46:a6:61:1d:6e:20:aa:2b:98:52:ad:e7:69:0c:4d:c9:4e: 84:2e:7e:7a:76:0d:78:5a:bd:ca:0d:eb:e5:0a:7e:05:83:a6: 76:50:8f:a3:41:30:e6:65:18:14:2d:90:40:59:2a:f7:3e:c3: ef:7f:61:70:3f:1c:12:e5:ed:b2:9e:5f:82:5a:33:c4:20:e4: 56:37:7e:0a:59:fe:0e:a1:ab:8d:30:1a:31:92:0f:0a:96:f9: e9:3e:e0:ad:5f:b3:ba:bf:81:22:bb:6d:27:22:24:55:37:6f: 88:fd:d0:ad:33:af:d4:e1:6b:81:66:f5:8f:61:19:4e:fc:b1: 21:87:d5:8f:d9:ee:19:b9:ca:b4:01:16:73:20:4d:7c:1d:ba: 0a:5f:c0:2e:2f:a6:b7:cd:97:ee:69:7f:79:61:36:04:16:89: 71:a8:14:34:3d:87:29:5e:d6:55:af:6e:72:11:7e:ac:c0:86: 24:d9:5d:94:80:39:2d:84:23:74:98:a0:2c:24:60:57:78:52: e2:5f:61:72:5f:9f:d9:d2:87:58:b1:2a:d4:47:0b:98:88:40: 0e:b5:e4:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCMjQxMTAvBgNVBAUTKDMxRjM3ODNDN0ExRUQ3ODNGQzFGREE3NDFGNkE3NTI5 RDVBNUU2QTAwHhcNMjQwNTE5MDIyNjEzWhcNMjQwNTI2MDIyNjEzWjAYMRYwFAYD VQQDEw02NjQ5NjM0Ni0wNDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5NwQqOcouqkmZaE9bxcgUgbX5R9FsBPQXM6n/FC49m7ssLgOu/X8VFJwc0t0 zV3yP3/v6TDsIQgrLwxLf1sPlUfLeH8DkIXhxOoKOSVx09jlCSzgjpY0dfHVZYXE xasRNKkhFMP6H6UJl4qbclPvkMZAC974NyrTHoBc890QQeyhSb1/3KkiyWX6asfM HaYaYQ1rmsZNEjmb1BpamGiefkgZ+1/y47qSY7t/GTjQH2TmdAKgs66hIa6cxpLi etHze3gtrc5z/oqfHe4qYqeuuTv5iCI8fN8j3ov3/ubgvytnA9Cx1unDCzK0xs2s 4qwSyuT9XCc3dqBxaNC2VxH52wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEA6RzDp LkrL+X3nB6P2ypIMwH5WMB8GA1UdIwQYMBaAFDHzeDx6HteD/B/adB9qdSnVpeag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUIyNC81RkZDOUVGNjQx MjUxMUVDQjdERjQ3N0VDNEY5QUUwMi9NZk40UEhvZTE0UDhIOXAwSDJwMUtkV2w1 cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01mTjRQSG9lMTRQOEg5cDBIMnAxS2RXbDVxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUIyNC81RkZDOUVGNjQxMjUxMUVDQjdERjQ3N0VDNEY5QUUwMi9NZk40UEhvZTE0 UDhIOXAwSDJwMUtkV2w1cUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZl8yTB8swud5kszhO0ExhOvJ++wYj1zhdYTGFhBQsHYXj9PfyRqZh HW4gqiuYUq3naQxNyU6ELn56dg14Wr3KDevlCn4Fg6Z2UI+jQTDmZRgULZBAWSr3 PsPvf2FwPxwS5e2ynl+CWjPEIORWN34KWf4OoauNMBoxkg8KlvnpPuCtX7O6v4Ei u20nIiRVN2+I/dCtM6/U4WuBZvWPYRlO/LEhh9WP2e4Zucq0ARZzIE18HboKX8Au L6a3zZfuaX95YTYEFolxqBQ0PYcpXtZVr25yEX6swIYk2V2UgDkthCN0mKAsJGBX eFLiX2FyX5/Z0odYsSrURwuYiEAOteSM -----END CERTIFICATE-----Generated at Sun May 19 03:14:49 2024 by rpki-client on console-fra.rpki-client.org