$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft File: 4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft (raw, json) Hash identifier: sFQ+FWvEp2LeTjpL3JZCV4OsvR0qZn6p/4SF5Cva9dQ= Subject key identifier: A8:99:E1:DB:24:D6:EA:1A:19:BE:5F:DC:DB:54:FF:A9:A6:21:80:D2 Authority key identifier: E1:D9:5A:3C:BD:D9:20:29:AE:BE:1E:13:08:09:9E:62:49:CD:36:24 Certificate issuer: /CN=A91E0CA1/serialNumber=E1D95A3CBDD92029AEBE1E1308099E6249CD3624 Certificate serial: 09F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft Manifest number: 09F2 Signing time: Sat 18 May 2024 20:40:40 +0000 Manifest this update: Sat 18 May 2024 20:40:40 +0000 Manifest next update: Sat 25 May 2024 20:40:39 +0000 Files and hashes: 1: 4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl (hash: lvnc1RF1+zGlg8NXOlEOyJmgyy6wcRLvK11f9l1VXXo=) 2: 29B9D5B8524111EABEF0A119C4F9AE02.roa (hash: jsRUiHxqEVSR6l1UCBND45Gu5bO5xI0ELEp0w+R91N8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2551 (0x9f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CA1/serialNumber=E1D95A3CBDD92029AEBE1E1308099E6249CD3624 Validity Not Before: May 18 20:40:40 2024 GMT Not After : May 25 20:40:39 2024 GMT Subject: CN=66491248-cd74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:39:e7:0e:aa:76:5a:a3:36:eb:d0:92:0f:13: 76:d6:6e:9e:0d:f6:4c:1e:e7:cf:a8:0a:01:06:a1: a9:58:96:7a:fc:9d:50:12:70:95:5d:0a:31:81:35: 1e:36:00:31:cf:5a:d6:5c:a1:b9:8b:e3:fc:96:3b: cf:90:66:5e:a5:af:66:f6:bd:22:3a:38:1e:be:3b: 3a:19:4d:cd:6f:ba:aa:59:53:54:a6:b4:d1:a7:2b: 6d:48:df:28:72:e7:66:26:3c:5e:8f:5a:a5:5b:9c: d8:fe:f0:7a:ba:41:bc:22:bd:64:bd:c4:45:22:11: ed:2b:e8:1f:d3:a5:0c:49:c1:1c:ef:be:fa:8f:00: eb:6e:b6:5b:ce:1a:58:ba:29:fb:d7:50:ad:97:c5: 76:0a:55:00:8a:59:45:4b:49:8a:1e:f8:7b:bf:a0: 81:b8:e4:d0:2e:bf:3f:03:ea:f0:77:04:25:1d:9e: 6a:10:21:a0:5c:16:f0:fa:ed:c3:c4:13:91:cc:11: 77:79:32:7b:f4:2f:51:db:9d:2f:6f:5c:7e:6e:22: 2d:df:c6:80:75:03:7b:32:b6:59:ed:0e:bd:73:4d: e2:8e:a6:37:cb:1a:df:67:4e:14:9e:d0:08:93:0d: 71:32:f4:e4:81:71:9d:73:67:96:d5:52:d8:c1:1f: 4e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:99:E1:DB:24:D6:EA:1A:19:BE:5F:DC:DB:54:FF:A9:A6:21:80:D2 X509v3 Authority Key Identifier: keyid:E1:D9:5A:3C:BD:D9:20:29:AE:BE:1E:13:08:09:9E:62:49:CD:36:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:dc:b5:70:9a:60:89:0f:78:79:6e:56:b0:a5:e0:80:9e:ca: b4:96:71:dc:06:32:5f:4e:b3:63:a4:94:4c:42:f8:b2:7f:8d: 21:75:fd:f7:14:59:1d:3c:72:69:5d:bc:6c:44:c1:74:87:47: 94:d2:c6:30:81:fa:ee:05:77:7a:7c:9d:79:59:31:3a:85:6c: 57:b6:d3:9a:d0:93:f1:e0:30:d8:78:d3:31:3e:c3:f9:60:e2: 0e:a7:e0:06:83:1a:fb:bc:d1:7e:ba:91:6d:54:fb:2b:0e:3e: 23:1a:a1:61:89:c3:be:14:46:01:d7:dc:e7:27:5c:e3:d9:22: f8:69:37:fa:d3:fd:71:f4:4e:7d:a2:fc:ed:52:da:4c:1d:a8: 8b:5d:88:57:50:cd:54:c2:c8:48:be:bb:7a:2d:5e:99:03:e0: 27:54:85:a1:2f:f7:fb:c9:1c:6b:5b:46:f4:92:8f:37:7a:13: d5:1d:24:87:53:38:0b:29:e6:ff:9b:54:67:e7:9c:72:f4:42: b7:95:a9:a1:12:0f:81:59:46:e6:cb:b5:01:43:e5:b8:47:32: 3c:7d:5f:c5:19:35:0f:65:68:47:14:0e:fc:de:a6:df:6c:ee: 0f:50:7b:78:95:a9:90:f5:a8:19:b2:26:b3:3b:ca:62:76:fb: 91:0d:68:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDQTExMTAvBgNVBAUTKEUxRDk1QTNDQkREOTIwMjlBRUJFMUUxMzA4MDk5RTYy NDlDRDM2MjQwHhcNMjQwNTE4MjA0MDQwWhcNMjQwNTI1MjA0MDM5WjAYMRYwFAYD VQQDEw02NjQ5MTI0OC1jZDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6TnnDqp2WqM269CSDxN21m6eDfZMHufPqAoBBqGpWJZ6/J1QEnCVXQoxgTUe NgAxz1rWXKG5i+P8ljvPkGZepa9m9r0iOjgevjs6GU3Nb7qqWVNUprTRpyttSN8o cudmJjxej1qlW5zY/vB6ukG8Ir1kvcRFIhHtK+gf06UMScEc7776jwDrbrZbzhpY uin711Ctl8V2ClUAillFS0mKHvh7v6CBuOTQLr8/A+rwdwQlHZ5qECGgXBbw+u3D xBORzBF3eTJ79C9R250vb1x+biIt38aAdQN7MrZZ7Q69c03ijqY3yxrfZ04UntAI kw1xMvTkgXGdc2eW1VLYwR9ODwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKiZ4dsk 1uoaGb5f3NtU/6mmIYDSMB8GA1UdIwQYMBaAFOHZWjy92SAprr4eEwgJnmJJzTYk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENBMS83MDYzRTQyNDUy M0YxMUVBOEM5Q0YwMTZDNEY5QUUwMi80ZGxhUEwzWklDbXV2aDRUQ0FtZVlrbk5O aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRkbGFQTDNaSUNtdXZoNFRDQW1lWWtuTk5pUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MENBMS83MDYzRTQyNDUyM0YxMUVBOEM5Q0YwMTZDNEY5QUUwMi80ZGxhUEwzWklD bXV2aDRUQ0FtZVlrbk5OaVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe3LVwmmCJD3h5blawpeCAnsq0lnHcBjJfTrNjpJRMQviyf40hdf33 FFkdPHJpXbxsRMF0h0eU0sYwgfruBXd6fJ15WTE6hWxXttOa0JPx4DDYeNMxPsP5 YOIOp+AGgxr7vNF+upFtVPsrDj4jGqFhicO+FEYB19znJ1zj2SL4aTf60/1x9E59 ovztUtpMHaiLXYhXUM1UwshIvrt6LV6ZA+AnVIWhL/f7yRxrW0b0ko83ehPVHSSH UzgLKeb/m1Rn55xy9EK3lamhEg+BWUbmy7UBQ+W4RzI8fV/FGTUPZWhHFA783qbf bO4PUHt4lamQ9agZsiazO8pidvuRDWiQ -----END CERTIFICATE-----Generated at Sat May 18 21:24:23 2024 by rpki-client on console-fra.rpki-client.org