$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft File: 4VW4KofSjod2AvmU-P_T50Sq9IA.mft (raw, json) Hash identifier: b4Egd3LSrphbNdMhGihvu8JXF5gz4AAvbOgK4YZFJUo= Subject key identifier: 4B:CF:0C:5B:92:14:B1:C1:1E:E4:28:05:36:F1:CF:55:4C:8C:7E:EF Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80 Certificate issuer: /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480 Certificate serial: 0722 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft Manifest number: 06E7 Signing time: Fri 26 Apr 2024 23:04:08 +0000 Manifest this update: Fri 26 Apr 2024 23:04:07 +0000 Manifest next update: Fri 03 May 2024 23:04:07 +0000 Files and hashes: 1: 4VW4KofSjod2AvmU-P_T50Sq9IA.crl (hash: xTj0AU1BFnrLcOWg3Jy7Loyfm3QBfuc9LIz7hLLJ7hY=) 2: C13E824AC49F11EBAC936D7AC4F9AE02.roa (hash: LhKQo3U+oEScw/Kkz5pzuY8n0wmOWUErN/K9Hepyn74=) 3: 86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa (hash: RvH9liGYtN3pCJtiX2u2KDE0nqgRa0CwWenaE2r1n/4=) 4: AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa (hash: ETA9fsTMXTvs7R5wnnSoRNAPiUdGbww+8O48Wqcn1fE=) 5: 82CA92C4703A11EBB9A2D47AC4F9AE02.roa (hash: oTDftbGKIdkc7TbDX1evZR/fDG6RQDBKvMBylDuZzKY=) 6: 0989F3EE120911EB83107638C4F9AE02.roa (hash: hEd7HFLaHuXdiEK5NPDfl9KI7qALqfHPsjTzHJrWnsk=) 7: 190D1EDC32C411EB98F62F5FC4F9AE02.roa (hash: AP4fYyNrfah1AP8l/VpzoQ3VWxnS3AOViyzVl1GgzI0=) 8: F255E05612DB11EBBE14D853C4F9AE02.roa (hash: Rn2RY2KvZWLWrXubluwgWCKN//O/t5ln1nPe/3YiWc4=) 9: BBBC061A122711EB952CAB3FC4F9AE02.roa (hash: SZMVejSV/qkmCA3U87HUM5KR3riZ9cH0CDAR6HS87ns=) 10: F5D6628C205011EB9EC2AA46C4F9AE02.roa (hash: 832ynpuro+RO0MMQGMpZcyGF5ZzjUvj68zh78iub0dU=) 11: 1BDAA63E12B211EBA631032CC4F9AE02.roa (hash: cX8QUr21/7Yflh3Ngq9ipDGjVl+RdRJBz1vVp6/kfUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 23:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1826 (0x722) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480 Validity Not Before: Apr 26 23:04:07 2024 GMT Not After : May 3 23:04:07 2024 GMT Subject: CN=662c32e8-d6de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c1:42:a5:93:25:ba:ef:7e:a2:50:ef:de:a3: 85:8e:90:39:88:af:83:d5:2b:29:e7:8d:5d:2c:a3: ce:63:5b:3c:5c:18:58:72:3c:5d:6b:2e:52:51:98: 54:21:c5:69:a6:f1:e1:b6:23:3f:81:d4:4c:e5:24: 69:c1:93:41:87:a6:96:b8:28:86:53:c4:78:db:76: ca:5c:46:57:e5:2e:ce:61:c7:00:b5:bb:c1:10:34: 83:06:b0:44:c8:56:5a:d3:97:b0:38:65:c1:32:f3: f4:ad:6f:c0:8b:23:8f:fc:20:8c:42:9d:86:14:09: 7d:50:da:d6:b2:10:cb:e1:20:8e:21:00:13:c9:2e: 37:ff:92:f4:1b:f5:3e:5c:31:18:24:ff:42:6e:0b: db:c0:04:d2:8e:1e:e9:3c:3d:67:7f:86:28:9a:a7: e1:b0:1e:16:8f:61:0d:09:74:4b:e3:ec:43:c8:3c: 4a:9c:fc:36:3e:16:4e:52:44:91:82:54:f6:ce:96: 16:f0:b7:88:21:b5:64:0d:95:1d:af:5c:bc:45:d8: 9b:e0:c7:d4:2b:78:fa:56:c0:e0:83:b3:18:4e:ad: c6:c9:6d:2d:99:9a:56:b8:55:e0:70:0e:66:81:2f: 16:9e:65:4e:aa:5b:16:a9:0e:1f:01:b0:31:e2:67: f6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:CF:0C:5B:92:14:B1:C1:1E:E4:28:05:36:F1:CF:55:4C:8C:7E:EF X509v3 Authority Key Identifier: keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:25:bc:6e:89:98:47:34:17:74:60:45:8c:8c:1c:01:13:34: d4:cc:62:e8:c2:e8:83:cf:a8:c8:97:3f:23:fe:b7:0f:37:c4: f7:0f:85:44:22:68:08:69:fd:b4:27:26:4f:df:bf:f3:f2:70: fa:cb:c9:07:64:88:85:4a:a5:23:af:4d:6d:92:3f:c7:ef:c5: 28:0a:34:f6:72:c7:5e:b6:b4:4f:d2:cd:b3:8c:59:1e:28:52: 33:d0:b0:82:b5:ed:e2:6f:74:29:a8:68:43:92:08:3e:6b:4e: 3a:9b:50:eb:7e:39:05:85:c2:47:69:87:cf:12:87:d3:a1:91: 90:6b:9f:a5:a5:cc:5e:ba:b1:37:6c:6c:27:6c:76:cb:2a:95: 77:37:ec:7d:cd:8f:79:e4:2d:f3:0d:72:c9:95:1c:e2:f2:5a: 91:58:59:ad:f5:29:61:ec:c6:9a:be:40:c6:9a:86:06:1b:63: 7e:17:3c:83:63:08:f5:dd:9a:7b:80:1f:a4:e9:c0:e7:f1:52: 1a:06:e1:53:dc:b0:02:ce:18:af:03:84:d0:30:91:fa:69:b7: 63:89:0a:5a:5e:8b:c6:4a:2d:e5:98:61:20:f6:71:27:47:c9: 93:c4:23:c6:c9:97:01:06:9f:ce:56:b2:9b:93:4b:43:7b:5d: 1e:d1:b4:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyNUYxMTAvBgNVBAUTKEUxNTVCODJBODdEMjhFODc3NjAyRjk5NEY4RkZEM0U3 NDRBQUY0ODAwHhcNMjQwNDI2MjMwNDA3WhcNMjQwNTAzMjMwNDA3WjAYMRYwFAYD VQQDEw02NjJjMzJlOC1kNmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo8FCpZMluu9+olDv3qOFjpA5iK+D1Ssp541dLKPOY1s8XBhYcjxday5SUZhU IcVppvHhtiM/gdRM5SRpwZNBh6aWuCiGU8R423bKXEZX5S7OYccAtbvBEDSDBrBE yFZa05ewOGXBMvP0rW/AiyOP/CCMQp2GFAl9UNrWshDL4SCOIQATyS43/5L0G/U+ XDEYJP9CbgvbwATSjh7pPD1nf4YomqfhsB4Wj2ENCXRL4+xDyDxKnPw2PhZOUkSR glT2zpYW8LeIIbVkDZUdr1y8Rdib4MfUK3j6VsDgg7MYTq3GyW0tmZpWuFXgcA5m gS8WnmVOqlsWqQ4fAbAx4mf2NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEvPDFuS FLHBHuQoBTbxz1VMjH7vMB8GA1UdIwQYMBaAFOFVuCqH0o6HdgL5lPj/0+dEqvSA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI1Ri8yMkQ5MUY3MjEx Q0UxMUVCOEFEMDVBMkJDNEY5QUUwMi80Vlc0S29mU2pvZDJBdm1VLVBfVDUwU3E5 SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWVzRLb2ZTam9kMkF2bVUtUF9UNTBTcTlJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjI1Ri8yMkQ5MUY3MjExQ0UxMUVCOEFEMDVBMkJDNEY5QUUwMi80Vlc0S29mU2pv ZDJBdm1VLVBfVDUwU3E5SUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATJbxuiZhHNBd0YEWMjBwBEzTUzGLowuiDz6jIlz8j/rcPN8T3D4VE ImgIaf20JyZP37/z8nD6y8kHZIiFSqUjr01tkj/H78UoCjT2csdetrRP0s2zjFke KFIz0LCCte3ib3QpqGhDkgg+a046m1DrfjkFhcJHaYfPEofToZGQa5+lpcxeurE3 bGwnbHbLKpV3N+x9zY955C3zDXLJlRzi8lqRWFmt9Slh7MaavkDGmoYGG2N+FzyD Ywj13Zp7gB+k6cDn8VIaBuFT3LACzhivA4TQMJH6abdjiQpaXovGSi3lmGEg9nEn R8mTxCPGyZcBBp/OVrKbk0tDe10e0bRd -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:19 2024 by rpki-client on console-ams.rpki-client.org