$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft File: 4V0TCwuymA4b8RwBvMt1O0loSoA.mft (raw, json) Hash identifier: jTOqSSjLIBQAl4/MojdYAKK/++ICHhPfoDO68gq/6TU= Subject key identifier: F3:47:9C:6F:0A:1E:7A:67:D9:CE:65:91:C5:F8:21:15:70:BC:35:DF Authority key identifier: E1:5D:13:0B:0B:B2:98:0E:1B:F1:1C:01:BC:CB:75:3B:49:68:4A:80 Certificate issuer: /CN=A91CE7BD/serialNumber=E15D130B0BB2980E1BF11C01BCCB753B49684A80 Certificate serial: 054B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft Manifest number: 0548 Signing time: Sun 19 May 2024 00:53:17 +0000 Manifest this update: Sun 19 May 2024 00:53:16 +0000 Manifest next update: Sun 26 May 2024 00:53:16 +0000 Files and hashes: 1: 4V0TCwuymA4b8RwBvMt1O0loSoA.crl (hash: h7ZXeJRC1aW98DMx5inkj51+X4i2jw76mHE67LuFYOI=) 2: 6AE1616AA3F711EBBA757063C4F9AE02.roa (hash: H+XBxFsqbKw4oiakCUT+cg5TG+mWNLxR1KAVmu59djA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.crl rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1355 (0x54b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE7BD/serialNumber=E15D130B0BB2980E1BF11C01BCCB753B49684A80 Validity Not Before: May 19 00:53:16 2024 GMT Not After : May 26 00:53:16 2024 GMT Subject: CN=66494d7c-2559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d4:35:29:b6:33:da:98:31:9b:11:ba:0f:7c: 67:21:e6:e4:d1:28:0e:50:46:c6:c6:89:b8:d9:a9: d1:ff:83:70:c8:05:08:90:d7:04:d4:83:7d:53:fc: 43:3f:7c:12:38:bb:5e:16:21:0f:d6:db:a3:62:12: 7b:d5:13:63:55:44:0e:a0:8a:52:1c:f1:66:0f:62: 8c:65:83:82:96:e2:50:4c:f9:11:77:46:bd:43:97: b8:e1:dc:ee:25:90:4a:b8:29:a7:e2:11:6b:73:e0: 85:fa:3d:0b:89:cb:dd:b0:46:b6:73:1f:e1:26:ea: 9b:e7:2b:a3:06:de:17:4e:b5:08:96:25:fc:de:4a: 9c:b9:46:d9:92:79:a9:2c:e1:55:79:a8:92:fc:2e: 44:6c:82:fd:36:c1:04:f3:e4:1a:98:8d:2f:28:c9: 1b:65:05:7f:71:43:5a:74:9a:6f:eb:ad:43:f2:d0: ed:9b:2c:3b:45:a8:38:12:d3:80:c4:37:d0:2a:4a: e0:c0:20:c6:b7:21:32:09:0c:37:24:a4:07:8b:49: de:cc:10:47:6a:00:fa:e5:69:a0:1a:b8:b6:7a:4a: 50:2f:f8:5f:53:64:43:af:f8:3b:34:a1:57:61:0c: 36:7c:ce:99:c7:37:eb:df:22:33:ec:cc:90:c7:83: c1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:47:9C:6F:0A:1E:7A:67:D9:CE:65:91:C5:F8:21:15:70:BC:35:DF X509v3 Authority Key Identifier: keyid:E1:5D:13:0B:0B:B2:98:0E:1B:F1:1C:01:BC:CB:75:3B:49:68:4A:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:e7:83:4c:9b:87:e9:c1:b3:b9:31:ac:30:1e:38:f0:a0:46: 98:ed:35:c0:34:9d:fe:f0:79:27:18:58:28:06:83:24:01:b3: 1b:8c:f5:af:02:da:44:81:6c:90:69:46:b3:73:09:b8:5f:37: d2:31:a2:c2:0d:25:cb:ae:30:02:ee:e0:1d:e7:e6:21:9c:2c: e2:24:97:26:c5:0e:6b:06:76:cb:3b:e3:96:4b:da:cf:3f:d1: b0:6b:3f:43:0b:10:61:85:6c:4a:91:7b:dc:ad:97:3b:26:b5: f2:59:44:4b:b9:8c:23:42:a9:08:18:93:9c:bc:59:60:92:2b: 04:3b:dc:e0:9e:81:d5:a6:e7:91:35:86:6c:d2:89:5e:99:db: 19:d2:c0:2d:a9:13:7e:20:37:83:cf:0c:a5:72:4a:78:8a:de: 7b:4a:1f:a4:5b:2a:23:0c:f1:96:de:ea:88:df:34:a7:29:11: f4:9d:87:28:01:ee:e9:f8:cd:19:ba:35:23:af:e6:cb:89:59: b2:55:03:f4:dc:42:80:06:55:79:97:9f:a9:47:e6:e1:0a:eb: d1:7d:0b:e8:52:bc:0f:80:b1:1b:90:34:80:b7:1c:50:97:31: 62:dd:14:37:7b:cb:0b:d8:12:da:4b:ba:c0:db:83:5f:ee:49: d8:54:16:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U3QkQxMTAvBgNVBAUTKEUxNUQxMzBCMEJCMjk4MEUxQkYxMUMwMUJDQ0I3NTNC NDk2ODRBODAwHhcNMjQwNTE5MDA1MzE2WhcNMjQwNTI2MDA1MzE2WjAYMRYwFAYD VQQDEw02NjQ5NGQ3Yy0yNTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7tQ1KbYz2pgxmxG6D3xnIebk0SgOUEbGxom42anR/4NwyAUIkNcE1IN9U/xD P3wSOLteFiEP1tujYhJ71RNjVUQOoIpSHPFmD2KMZYOCluJQTPkRd0a9Q5e44dzu JZBKuCmn4hFrc+CF+j0LicvdsEa2cx/hJuqb5yujBt4XTrUIliX83kqcuUbZknmp LOFVeaiS/C5EbIL9NsEE8+QamI0vKMkbZQV/cUNadJpv661D8tDtmyw7Rag4EtOA xDfQKkrgwCDGtyEyCQw3JKQHi0nezBBHagD65WmgGri2ekpQL/hfU2RDr/g7NKFX YQw2fM6Zxzfr3yIz7MyQx4PBpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNHnG8K Hnpn2c5lkcX4IRVwvDXfMB8GA1UdIwQYMBaAFOFdEwsLspgOG/EcAbzLdTtJaEqA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTdCRC9EMzAyNjAzNEEz RjUxMUVCOTJGOUM1NjFDNEY5QUUwMi80VjBUQ3d1eW1BNGI4UndCdk10MU8wbG9T b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWMFRDd3V5bUE0YjhSd0J2TXQxTzBsb1NvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTdCRC9EMzAyNjAzNEEzRjUxMUVCOTJGOUM1NjFDNEY5QUUwMi80VjBUQ3d1eW1B NGI4UndCdk10MU8wbG9Tb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD54NMm4fpwbO5MawwHjjwoEaY7TXANJ3+8HknGFgoBoMkAbMbjPWv AtpEgWyQaUazcwm4XzfSMaLCDSXLrjAC7uAd5+YhnCziJJcmxQ5rBnbLO+OWS9rP P9Gwaz9DCxBhhWxKkXvcrZc7JrXyWURLuYwjQqkIGJOcvFlgkisEO9zgnoHVpueR NYZs0olemdsZ0sAtqRN+IDeDzwylckp4it57Sh+kWyojDPGW3uqI3zSnKRH0nYco Ae7p+M0ZujUjr+bLiVmyVQP03EKABlV5l5+pR+bhCuvRfQvoUrwPgLEbkDSAtxxQ lzFi3RQ3e8sL2BLaS7rA24Nf7knYVBah -----END CERTIFICATE-----Generated at Sun May 19 01:47:16 2024 by rpki-client on console-ams.rpki-client.org