$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft File: 4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft (raw, json) Hash identifier: 9/fpbIcQkAUEy57zTPxqV7oJUVhb3iXpN4mva3vE514= Subject key identifier: 07:38:84:FF:06:93:7B:81:A2:DF:21:E1:55:D2:A5:07:2F:CC:80:3F Authority key identifier: E1:5A:36:03:72:DD:AF:1C:5B:21:8E:8C:4C:F6:9F:6F:8B:D7:F5:9A Certificate issuer: /CN=A91B0367/serialNumber=E15A360372DDAF1C5B218E8C4CF69F6F8BD7F59A Certificate serial: 0CD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft Manifest number: 0CD3 Signing time: Sat 18 May 2024 18:46:51 +0000 Manifest this update: Sat 18 May 2024 18:46:51 +0000 Manifest next update: Sat 25 May 2024 18:46:51 +0000 Files and hashes: 1: 4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl (hash: uYtMfQn+YRlyhAM9sFqh4Jw53KY1AVMJamLjJgU5YwI=) 2: 7321413EC22511E99FB7F225C4F9AE02.roa (hash: XLiu0myTVTNkoyEVw4DoOb0tzPht9Oq5Pm0BGjRCZ3E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3288 (0xcd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0367/serialNumber=E15A360372DDAF1C5B218E8C4CF69F6F8BD7F59A Validity Not Before: May 18 18:46:51 2024 GMT Not After : May 25 18:46:51 2024 GMT Subject: CN=6648f79b-d884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:79:db:dc:a9:63:39:7f:a8:c6:c6:1c:42:f3: cc:95:ef:82:4a:34:cf:51:c7:a9:03:5a:50:81:67: b8:d1:a6:ca:6a:6b:c8:50:21:c2:3b:0f:cc:1c:86: 39:c3:9f:d2:c8:ec:1e:d0:1f:5a:d0:94:3d:9d:e1: 4b:c7:8c:8f:1e:0e:3f:2f:14:b2:9b:23:31:bb:2e: 42:85:49:fb:b7:cd:5c:d1:77:29:c6:23:2e:af:8a: 83:8f:79:d3:5f:e9:04:f0:b7:93:e7:07:e6:99:ab: f2:78:4f:17:be:51:70:c7:23:5a:a8:30:62:09:61: 04:a8:6d:e2:3d:79:b1:30:4d:70:0c:86:c0:6a:0d: f6:32:27:d6:1f:cc:2a:f8:96:1c:8b:9e:cf:7a:13: 49:e8:9e:ac:fb:82:d3:44:67:c2:57:e7:53:69:16: 33:8e:b3:f2:a0:2d:0d:e1:5d:20:91:60:14:60:34: 74:15:d1:a9:4b:7f:40:80:1a:b9:e5:ee:9e:e5:57: 52:a5:95:5f:60:ec:02:6c:9b:e2:3b:27:19:11:49: db:90:5c:27:f1:d2:fa:9c:53:35:31:2b:02:fd:2e: 6b:7f:b8:83:b3:ea:d7:b3:be:f1:f9:dc:bb:35:ee: 23:fd:3e:b8:df:64:26:e3:23:9a:56:b2:be:3f:64: 4f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:38:84:FF:06:93:7B:81:A2:DF:21:E1:55:D2:A5:07:2F:CC:80:3F X509v3 Authority Key Identifier: keyid:E1:5A:36:03:72:DD:AF:1C:5B:21:8E:8C:4C:F6:9F:6F:8B:D7:F5:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:4d:05:9f:d6:ec:f9:8e:e9:9f:49:55:9e:dc:8e:24:2f:ea: b2:2b:29:91:55:7d:81:6e:03:36:b0:80:08:ef:0b:1a:5d:62: f2:28:4f:e1:fa:d2:8d:ff:cd:0d:fc:d4:c1:d7:4d:7d:38:69: 94:4b:6e:ce:69:15:d5:45:a3:ec:f5:90:2b:34:f5:0c:c1:58: 31:35:d4:fe:dd:cc:82:57:f0:1f:c6:e0:ef:ff:b5:e0:04:2a: 80:94:22:3f:64:db:33:c2:46:df:66:f9:44:1c:69:e4:0d:bf: 62:68:a1:62:46:9d:2c:69:8e:d3:2f:6c:17:7e:c4:28:93:27: 4c:1e:2a:33:d0:ed:1b:53:6c:0f:7c:d9:f7:8b:60:7f:6a:f6: c1:c6:e2:1f:1f:f7:c9:f7:c1:05:8b:ef:31:1d:58:3b:ef:4c: f9:2a:17:a5:58:c9:c2:b2:1d:01:96:e4:a3:41:07:a7:f5:84: a6:7c:55:e3:59:b7:16:b5:2a:2b:9c:cf:f0:dc:ea:ab:c3:21: 0d:45:57:79:50:70:cd:c9:5c:ca:d5:07:a7:6f:47:5b:1d:3d: e6:50:64:7f:41:96:df:bf:39:f2:78:db:b6:71:bc:22:65:f8: 8f:b5:54:ec:d9:8d:b2:4c:25:49:b6:93:2c:43:1f:e2:94:8a: f0:9e:89:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAzNjcxMTAvBgNVBAUTKEUxNUEzNjAzNzJEREFGMUM1QjIxOEU4QzRDRjY5RjZG OEJEN0Y1OUEwHhcNMjQwNTE4MTg0NjUxWhcNMjQwNTI1MTg0NjUxWjAYMRYwFAYD VQQDEw02NjQ4Zjc5Yi1kODg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwHnb3KljOX+oxsYcQvPMle+CSjTPUcepA1pQgWe40abKamvIUCHCOw/MHIY5 w5/SyOwe0B9a0JQ9neFLx4yPHg4/LxSymyMxuy5ChUn7t81c0XcpxiMur4qDj3nT X+kE8LeT5wfmmavyeE8XvlFwxyNaqDBiCWEEqG3iPXmxME1wDIbAag32MifWH8wq +JYci57PehNJ6J6s+4LTRGfCV+dTaRYzjrPyoC0N4V0gkWAUYDR0FdGpS39AgBq5 5e6e5VdSpZVfYOwCbJviOycZEUnbkFwn8dL6nFM1MSsC/S5rf7iDs+rXs77x+dy7 Ne4j/T6432Qm4yOaVrK+P2RPHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAc4hP8G k3uBot8h4VXSpQcvzIA/MB8GA1UdIwQYMBaAFOFaNgNy3a8cWyGOjEz2n2+L1/Wa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDM2Ny8wOEMzRDI4RUMy MjUxMUU5QTM2N0QzMjVDNEY5QUUwMi80Vm8yQTNMZHJ4eGJJWTZNVFBhZmI0dlg5 Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWbzJBM0xkcnh4YklZNk1UUGFmYjR2WDlaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDM2Ny8wOEMzRDI4RUMyMjUxMUU5QTM2N0QzMjVDNEY5QUUwMi80Vm8yQTNMZHJ4 eGJJWTZNVFBhZmI0dlg5Wm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeTQWf1uz5jumfSVWe3I4kL+qyKymRVX2BbgM2sIAI7wsaXWLyKE/h +tKN/80N/NTB1019OGmUS27OaRXVRaPs9ZArNPUMwVgxNdT+3cyCV/AfxuDv/7Xg BCqAlCI/ZNszwkbfZvlEHGnkDb9iaKFiRp0saY7TL2wXfsQokydMHioz0O0bU2wP fNn3i2B/avbBxuIfH/fJ98EFi+8xHVg770z5KhelWMnCsh0BluSjQQen9YSmfFXj WbcWtSornM/w3OqrwyENRVd5UHDNyVzK1Qenb0dbHT3mUGR/QZbfvznyeNu2cbwi ZfiPtVTs2Y2yTCVJtpMsQx/ilIrwnokd -----END CERTIFICATE-----Generated at Sat May 18 19:21:05 2024 by rpki-client on console-fra.rpki-client.org