$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft File: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft (raw, json) Hash identifier: V1qB2iIFEpRoBocNlRKmy/arNWEUBC/XYVVn8ZBnzv0= Subject key identifier: 39:C0:DD:43:52:59:8D:B2:24:68:71:75:AD:C5:B5:10:FB:5A:FC:C8 Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5 Certificate issuer: /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5 Certificate serial: 262B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft Manifest number: 25FF Signing time: Sat 18 May 2024 15:59:11 +0000 Manifest this update: Sat 18 May 2024 15:59:10 +0000 Manifest next update: Sat 25 May 2024 15:59:10 +0000 Files and hashes: 1: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl (hash: 5J7s1oEciY+lpa0bcPi3gIsOcpAjUYthQJUxUjZZInc=) 2: 253C821A388611ECBE8F7725C4F9AE02.roa (hash: h0WayUQjkIc+1k3KSDTUW0WJMm7/vM6nH4tLae6DlNo=) 3: A9756862B14111E5A3B46B15C4F9AE02.roa (hash: CErq+7tyfSQ9nseDr2Xs6iqpDm0v2q33o94Rq8g9lLM=) 4: 54F4ED62A4D511EA863BC00AC4F9AE02.roa (hash: rxGK9ShGMruxcWfCnGcDXjtTVQToBCiiwGyhhjyHhAQ=) 5: BCAE5314F75C11EB95BE8C87C4F9AE02.roa (hash: 0j4qXjmpQjaICT1LO2qciryz+Oskgntzqwfwnl8SXbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9771 (0x262b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5 Validity Not Before: May 18 15:59:10 2024 GMT Not After : May 25 15:59:10 2024 GMT Subject: CN=6648d04e-f0fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:17:dc:2c:06:13:d1:24:2c:5e:37:e3:e9:fa: ab:37:92:34:30:25:6b:e9:d2:8c:ca:e1:0c:13:2d: c1:88:5a:a5:33:78:b1:cd:61:a7:77:55:62:c5:a8: 72:3c:b8:5a:23:49:c5:53:cb:59:a2:f1:31:15:52: 47:97:c7:88:42:6a:42:be:dd:a1:86:50:72:20:76: d6:81:27:92:c7:d1:af:d2:1a:66:7c:d7:dd:e1:1f: 60:ce:bf:47:82:33:cf:d0:98:dd:91:33:9f:c5:1e: 09:84:9c:81:a5:01:b8:35:fa:76:5d:68:57:18:a4: cd:8f:8c:39:21:e7:c1:b0:47:b3:50:e3:1e:70:fd: 09:27:1d:af:9f:88:09:92:6f:f1:17:d7:59:87:da: 76:f0:aa:92:ee:83:f5:2a:7f:64:b9:6b:78:f1:6b: 37:b8:69:38:26:ca:31:fd:6f:7d:87:f0:a8:ee:8c: 21:11:ac:76:13:0a:de:fb:81:8a:11:61:38:78:61: b7:34:20:6b:13:91:21:53:74:db:6f:74:e1:fc:5f: 67:3e:ff:ad:4d:2e:8e:28:51:c5:df:8c:7d:41:27: 4a:cc:fb:a4:9b:44:19:a4:0e:07:c5:f4:68:80:ff: c2:1a:34:da:6c:4b:24:9b:41:20:bc:3a:22:56:b2: bf:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C0:DD:43:52:59:8D:B2:24:68:71:75:AD:C5:B5:10:FB:5A:FC:C8 X509v3 Authority Key Identifier: keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:43:d0:64:88:c6:3d:8f:d7:07:ef:53:c5:a8:cf:7b:bf:80: 98:17:9e:24:ae:5f:24:99:4e:4a:01:1b:90:06:da:68:c7:55: fd:f2:69:66:65:ca:47:11:a2:ee:54:6e:45:a6:f4:08:78:d1: 9e:db:f1:a1:e0:e9:0a:7f:f7:68:e2:ed:5c:ef:85:f5:9b:bb: 7b:df:6a:77:4b:74:2b:6a:8e:64:69:9a:38:d3:4b:bc:a7:f3: e3:a1:33:7b:34:10:96:0d:a0:e9:93:43:b5:13:2b:b2:f8:53: 74:52:0c:bc:da:6b:23:d1:5a:6a:d0:21:fd:a5:1f:4c:1f:77: 32:24:71:e2:19:28:64:d8:19:a6:d4:d6:07:46:49:f1:75:42: 31:8c:04:a1:46:fa:69:cb:fe:ad:44:13:5f:37:bd:0d:5f:7c: 39:3b:1b:c8:57:b7:3e:87:ea:5c:c6:8e:5f:10:5c:14:bf:18: c2:bd:93:55:41:00:d3:34:ff:97:96:7b:f8:85:c6:0e:3d:0e: b4:1e:dc:d8:e7:4a:f5:6f:8e:69:7c:5a:81:b7:3b:27:24:ac: a2:29:6c:4b:cb:99:ab:9e:d4:0e:88:b1:f5:84:ff:74:00:33: e1:5f:67:a0:eb:d2:e8:a1:05:22:bf:56:a2:ce:48:6e:b1:8e: 48:f5:91:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYyMkYxMTAvBgNVBAUTKEUwOEFDNTUwMEUxRkYxOEZENUQ1MkI3OTdDNTA5N0RE MEFCOTRCRTUwHhcNMjQwNTE4MTU1OTEwWhcNMjQwNTI1MTU1OTEwWjAYMRYwFAYD VQQDEw02NjQ4ZDA0ZS1mMGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBfcLAYT0SQsXjfj6fqrN5I0MCVr6dKMyuEMEy3BiFqlM3ixzWGnd1Vixahy PLhaI0nFU8tZovExFVJHl8eIQmpCvt2hhlByIHbWgSeSx9Gv0hpmfNfd4R9gzr9H gjPP0JjdkTOfxR4JhJyBpQG4Nfp2XWhXGKTNj4w5IefBsEezUOMecP0JJx2vn4gJ km/xF9dZh9p28KqS7oP1Kn9kuWt48Ws3uGk4Jsox/W99h/Co7owhEax2Ewre+4GK EWE4eGG3NCBrE5EhU3Tbb3Th/F9nPv+tTS6OKFHF34x9QSdKzPukm0QZpA4HxfRo gP/CGjTabEskm0EgvDoiVrK/0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnA3UNS WY2yJGhxda3FtRD7WvzIMB8GA1UdIwQYMBaAFOCKxVAOH/GP1dUreXxQl90KuUvl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjIyRi82OTc1NDhDOERB Q0MxMUU0QTgxQUJFNTBDNEY5QUUwMi80SXJGVUE0ZjhZX1YxU3Q1ZkZDWDNRcTVT LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRJckZVQTRmOFlfVjFTdDVmRkNYM1FxNVMtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjIyRi82OTc1NDhDOERBQ0MxMUU0QTgxQUJFNTBDNEY5QUUwMi80SXJGVUE0ZjhZ X1YxU3Q1ZkZDWDNRcTVTLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtQ9BkiMY9j9cH71PFqM97v4CYF54krl8kmU5KARuQBtpox1X98mlm ZcpHEaLuVG5FpvQIeNGe2/Gh4OkKf/do4u1c74X1m7t732p3S3Qrao5kaZo400u8 p/PjoTN7NBCWDaDpk0O1Eyuy+FN0Ugy82msj0Vpq0CH9pR9MH3cyJHHiGShk2Bmm 1NYHRknxdUIxjAShRvppy/6tRBNfN70NX3w5OxvIV7c+h+pcxo5fEFwUvxjCvZNV QQDTNP+Xlnv4hcYOPQ60HtzY50r1b45pfFqBtzsnJKyiKWxLy5mrntQOiLH1hP90 ADPhX2eg69LooQUiv1aizkhusY5I9ZH5 -----END CERTIFICATE-----Generated at Sat May 18 16:57:54 2024 by rpki-client on console-fra.rpki-client.org