$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft File: 4_fO9uelaeRrLZA5MitpdVMcJWY.mft (raw, json) Hash identifier: 9kWpJ70SOPb3HEYU8uJyZyRh8Mc2zpQU7uOpB8Ni8Rs= Subject key identifier: BB:50:58:32:F5:F1:3C:DE:90:4F:1D:8E:3C:F8:EC:AA:CF:87:79:7C Authority key identifier: E3:F7:CE:F6:E7:A5:69:E4:6B:2D:90:39:32:2B:69:75:53:1C:25:66 Certificate issuer: /CN=A91D0077/serialNumber=E3F7CEF6E7A569E46B2D9039322B6975531C2566 Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft Manifest number: 0106 Signing time: Sun 19 May 2024 05:31:19 +0000 Manifest this update: Sun 19 May 2024 05:31:19 +0000 Manifest next update: Sun 26 May 2024 05:31:19 +0000 Files and hashes: 1: 4_fO9uelaeRrLZA5MitpdVMcJWY.crl (hash: b74kHWwUx1Q6aILjzDFdQYgr6pAZwz5e7WG/7O4vxIk=) 2: 24F87CC2810611EDA756F886C4F9AE02.roa (hash: +juOb3c0h68OJE6MDHjhbuuMVKDWcAP65XI5nCkBKwc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.crl rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0077/serialNumber=E3F7CEF6E7A569E46B2D9039322B6975531C2566 Validity Not Before: May 19 05:31:19 2024 GMT Not After : May 26 05:31:19 2024 GMT Subject: CN=66498ea7-1f2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b4:8d:ab:e2:f6:1f:fc:6b:92:7d:c4:e8:49: 4b:eb:c6:06:3d:fd:bb:a2:e6:83:80:13:7b:31:13: ee:ce:5d:c1:2b:f6:9a:6d:66:e5:74:b9:c0:84:f4: 0e:13:44:80:f5:86:b1:18:4a:19:9d:a6:67:8a:65: b7:a0:86:75:d2:68:ca:a5:30:e2:9f:8c:76:0a:2a: 3f:bc:41:fa:f8:4e:c9:93:51:a5:a4:d7:6d:14:b9: 96:e9:77:a7:6b:64:b5:90:52:9d:ad:b7:7f:f0:9a: cc:76:50:e0:61:aa:ce:ff:24:3b:1f:f8:54:ad:d8: 64:e6:54:45:82:50:f2:4a:cc:73:25:9f:17:18:50: ff:bd:31:95:70:0d:fa:7f:7f:af:ad:e0:a6:b3:8f: eb:39:f4:c5:97:8e:94:7c:ee:f3:80:54:a2:4e:b9: 84:31:60:e6:9d:dc:4a:43:6b:a1:fe:5c:56:42:38: 71:63:b7:ab:81:63:8a:37:96:3d:c1:86:42:d4:ee: ad:93:c7:e6:1c:7d:b6:52:23:b4:95:32:70:f4:e6: 41:d7:53:78:50:ea:91:7d:f8:5d:61:e1:59:24:3b: ed:7f:dd:ff:5b:79:e3:b1:b2:bd:f0:e6:dc:ab:c0: ed:4b:c6:04:56:92:76:99:04:6c:34:21:6b:86:7a: c5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:50:58:32:F5:F1:3C:DE:90:4F:1D:8E:3C:F8:EC:AA:CF:87:79:7C X509v3 Authority Key Identifier: keyid:E3:F7:CE:F6:E7:A5:69:E4:6B:2D:90:39:32:2B:69:75:53:1C:25:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:10:b5:ec:2e:b3:c6:77:a0:e9:81:ac:89:f4:4f:51:23:3a: 7e:21:ff:04:01:e3:8e:8e:7a:4c:3e:77:9f:41:16:15:10:2f: fa:71:44:13:00:58:34:df:bd:68:d9:da:2a:46:24:d4:d7:87: b1:84:39:2e:21:21:c0:5e:de:b5:76:46:b5:fb:bc:3d:e2:f9: 85:cd:49:7d:4b:f7:08:68:9c:3d:43:0b:7b:41:8e:b0:34:77: ac:c5:2a:ca:db:2c:b9:7a:c0:09:fb:f9:1f:ec:46:d0:ae:6d: 4b:e3:09:f8:40:c8:53:b2:44:5f:53:95:2e:f6:c7:37:75:c0: ab:4e:9b:a4:cb:70:e9:38:bb:e1:c3:f5:cf:b7:aa:73:78:b8: 7e:1a:37:ad:e1:8a:96:93:75:bb:e1:19:a9:bb:c4:6f:70:60: 2e:f1:00:9e:f0:ba:6f:44:f7:f1:05:f1:e7:bc:77:79:c4:1f: de:16:b9:10:59:3b:be:71:98:63:76:06:75:29:ac:5f:03:0c: 4a:d4:dc:76:d6:40:ed:a8:8a:1a:20:bb:dd:89:16:dd:0e:30: 83:b0:a2:61:53:e8:f1:f6:b2:7e:48:38:dd:82:6c:6b:fb:40: e0:79:0a:2c:e6:9b:ae:ea:be:c5:b1:d7:ee:cc:90:45:f8:64: ca:ff:7a:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAwNzcxMTAvBgNVBAUTKEUzRjdDRUY2RTdBNTY5RTQ2QjJEOTAzOTMyMkI2OTc1 NTMxQzI1NjYwHhcNMjQwNTE5MDUzMTE5WhcNMjQwNTI2MDUzMTE5WjAYMRYwFAYD VQQDEw02NjQ5OGVhNy0xZjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07SNq+L2H/xrkn3E6ElL68YGPf27ouaDgBN7MRPuzl3BK/aabWbldLnAhPQO E0SA9YaxGEoZnaZnimW3oIZ10mjKpTDin4x2Cio/vEH6+E7Jk1GlpNdtFLmW6Xen a2S1kFKdrbd/8JrMdlDgYarO/yQ7H/hUrdhk5lRFglDySsxzJZ8XGFD/vTGVcA36 f3+vreCms4/rOfTFl46UfO7zgFSiTrmEMWDmndxKQ2uh/lxWQjhxY7ergWOKN5Y9 wYZC1O6tk8fmHH22UiO0lTJw9OZB11N4UOqRffhdYeFZJDvtf93/W3njsbK98Obc q8DtS8YEVpJ2mQRsNCFrhnrF0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLtQWDL1 8TzekE8djjz47KrPh3l8MB8GA1UdIwQYMBaAFOP3zvbnpWnkay2QOTIraXVTHCVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDA3Ny81MDZBRTIzMDgx MDMxMUVEQTg0N0NEODVDNEY5QUUwMi80X2ZPOXVlbGFlUnJMWkE1TWl0cGRWTWNK V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRfZk85dWVsYWVSckxaQTVNaXRwZFZNY0pXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDA3Ny81MDZBRTIzMDgxMDMxMUVEQTg0N0NEODVDNEY5QUUwMi80X2ZPOXVlbGFl UnJMWkE1TWl0cGRWTWNKV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZELXsLrPGd6DpgayJ9E9RIzp+If8EAeOOjnpMPnefQRYVEC/6cUQT AFg0371o2doqRiTU14exhDkuISHAXt61dka1+7w94vmFzUl9S/cIaJw9Qwt7QY6w NHesxSrK2yy5esAJ+/kf7EbQrm1L4wn4QMhTskRfU5Uu9sc3dcCrTpuky3DpOLvh w/XPt6pzeLh+Gjet4YqWk3W74Rmpu8RvcGAu8QCe8LpvRPfxBfHnvHd5xB/eFrkQ WTu+cZhjdgZ1KaxfAwxK1Nx21kDtqIoaILvdiRbdDjCDsKJhU+jx9rJ+SDjdgmxr +0DgeQos5puu6r7FsdfuzJBF+GTK/3pN -----END CERTIFICATE-----Generated at Sun May 19 06:14:36 2024 by rpki-client on console-ams.rpki-client.org