$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft File: 4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft (raw, json) Hash identifier: tsE0UWHYgAE5oSBJ1hOyqOhsO9NDSlBmIU54kDoIrc0= Subject key identifier: B7:47:A7:FA:76:22:27:98:36:E3:58:25:D5:2C:36:E0:B7:ED:74:71 Authority key identifier: E0:4F:B2:AA:62:7D:97:B9:89:AE:CF:E8:69:74:E3:C5:F3:03:12:1A Certificate issuer: /CN=A91D1306/serialNumber=E04FB2AA627D97B989AECFE86974E3C5F303121A Certificate serial: 184B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft Manifest number: 1842 Signing time: Sat 18 May 2024 16:55:28 +0000 Manifest this update: Sat 18 May 2024 16:55:28 +0000 Manifest next update: Sat 25 May 2024 16:55:28 +0000 Files and hashes: 1: 4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl (hash: UX9mKBEonMAGuZwEqzvT2ZU8/deNJNR8+mSTqXzSk0U=) 2: 66BEBEDE83CB11E796105342C4F9AE02.roa (hash: dRG694XOg3tDGHXJfdif1k2r6fyu6jwthx5GGOGoq60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6219 (0x184b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1306/serialNumber=E04FB2AA627D97B989AECFE86974E3C5F303121A Validity Not Before: May 18 16:55:28 2024 GMT Not After : May 25 16:55:28 2024 GMT Subject: CN=6648dd80-727e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a0:cf:49:3c:04:fc:c3:66:03:6e:86:ba:b2: d6:fe:94:12:40:25:04:9e:a8:82:6c:de:68:84:6f: e3:88:d9:0c:95:73:3b:4a:b6:1d:fe:0f:56:8c:f0: 0e:9a:59:f2:94:6a:2c:3e:cb:d0:86:53:0a:9f:af: 4c:e4:8c:a7:26:5a:a5:0c:3f:a1:5a:3c:09:3d:be: 45:92:2f:8b:9e:e0:ec:18:64:82:9f:13:37:db:69: d0:84:1f:bc:08:06:6e:49:c0:81:6c:c7:93:07:71: 30:e8:5b:b4:2a:68:40:e3:f9:b3:74:77:51:c8:f6: 62:e6:d6:66:bb:52:4a:17:5a:cd:e6:a3:52:b6:ff: ff:01:fd:03:44:17:18:99:b0:d0:1e:8d:27:3f:83: 81:ce:08:84:f5:16:95:80:98:ce:a2:f9:16:c5:a0: 65:a4:f9:03:f4:b8:d8:4c:6e:f4:28:62:47:bb:e7: ec:95:87:8c:13:a3:8f:fe:cd:1a:a9:23:a1:3a:75: 14:b8:43:ca:7d:5b:61:22:e2:13:69:94:98:64:3b: a6:41:3f:d9:89:3a:df:a1:c5:9e:93:ea:55:21:bf: eb:85:fb:78:9f:af:e9:77:2c:51:7f:70:b4:22:2e: da:ad:a0:c0:f5:25:3f:3d:4e:66:cb:12:1b:59:b3: c2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:47:A7:FA:76:22:27:98:36:E3:58:25:D5:2C:36:E0:B7:ED:74:71 X509v3 Authority Key Identifier: keyid:E0:4F:B2:AA:62:7D:97:B9:89:AE:CF:E8:69:74:E3:C5:F3:03:12:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:c3:bb:87:cf:ee:56:9f:8d:7b:80:58:05:3f:f0:a7:85:c0: ab:42:e2:5f:2f:95:be:09:16:b8:2c:1a:9e:80:87:84:31:e5: e0:d7:66:03:8f:77:50:84:07:26:13:dc:3c:c8:77:76:03:2e: 1e:16:9f:3f:af:e5:91:ba:3f:68:05:5b:8b:fe:d5:db:44:f3: ad:34:c0:69:27:4a:0b:10:4a:5c:8f:22:d4:cc:44:30:ca:97: 09:fc:53:4d:53:4c:a7:1f:b5:9c:63:2f:d6:62:b6:a1:e5:15: 6c:d8:58:0e:65:63:90:93:0a:26:d3:47:bb:82:7b:7c:88:73: 8e:9e:7f:ce:d3:01:b4:57:8e:35:ae:ab:89:44:2a:a3:61:e6: 22:b8:10:72:ae:b4:18:d3:6b:f0:59:13:54:82:69:cd:25:82: f8:38:ec:3c:39:58:35:d6:14:9a:e9:85:2b:eb:ae:ae:de:57: 43:2e:09:e2:13:13:77:18:cc:ca:29:fc:8b:ee:5a:f8:70:11: d1:e0:56:1f:84:f9:12:03:1f:16:9c:d0:3c:75:0e:2e:5d:6b: 97:2e:a2:99:75:f6:62:6b:6d:e6:c2:39:67:e1:9d:a8:54:06: 58:66:e4:b1:e2:23:2b:8a:36:4a:10:35:d1:72:af:da:6d:74: 95:1f:cb:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEzMDYxMTAvBgNVBAUTKEUwNEZCMkFBNjI3RDk3Qjk4OUFFQ0ZFODY5NzRFM0M1 RjMwMzEyMUEwHhcNMjQwNTE4MTY1NTI4WhcNMjQwNTI1MTY1NTI4WjAYMRYwFAYD VQQDEw02NjQ4ZGQ4MC03MjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6qDPSTwE/MNmA26GurLW/pQSQCUEnqiCbN5ohG/jiNkMlXM7SrYd/g9WjPAO mlnylGosPsvQhlMKn69M5IynJlqlDD+hWjwJPb5Fki+LnuDsGGSCnxM322nQhB+8 CAZuScCBbMeTB3Ew6Fu0KmhA4/mzdHdRyPZi5tZmu1JKF1rN5qNStv//Af0DRBcY mbDQHo0nP4OBzgiE9RaVgJjOovkWxaBlpPkD9LjYTG70KGJHu+fslYeME6OP/s0a qSOhOnUUuEPKfVthIuITaZSYZDumQT/ZiTrfocWek+pVIb/rhft4n6/pdyxRf3C0 Ii7araDA9SU/PU5myxIbWbPCiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdHp/p2 IieYNuNYJdUsNuC37XRxMB8GA1UdIwQYMBaAFOBPsqpifZe5ia7P6Gl048XzAxIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTMwNi9GRTQ5NzQ5ODgz Q0ExMUU3QjgyNDBBNDJDNEY5QUUwMi80RS15cW1KOWw3bUpyc19vYVhUanhmTURF aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRFLXlxbUo5bDdtSnJzX29hWFRqeGZNREVoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTMwNi9GRTQ5NzQ5ODgzQ0ExMUU3QjgyNDBBNDJDNEY5QUUwMi80RS15cW1KOWw3 bUpyc19vYVhUanhmTURFaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvw7uHz+5Wn417gFgFP/CnhcCrQuJfL5W+CRa4LBqegIeEMeXg12YD j3dQhAcmE9w8yHd2Ay4eFp8/r+WRuj9oBVuL/tXbRPOtNMBpJ0oLEEpcjyLUzEQw ypcJ/FNNU0ynH7WcYy/WYrah5RVs2FgOZWOQkwom00e7gnt8iHOOnn/O0wG0V441 rquJRCqjYeYiuBByrrQY02vwWRNUgmnNJYL4OOw8OVg11hSa6YUr666u3ldDLgni ExN3GMzKKfyL7lr4cBHR4FYfhPkSAx8WnNA8dQ4uXWuXLqKZdfZia23mwjln4Z2o VAZYZuSx4iMrijZKEDXRcq/abXSVH8tq -----END CERTIFICATE-----Generated at Sat May 18 17:37:33 2024 by rpki-client on console-fra.rpki-client.org