$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft File: 4USmzKVqqTEokShNJidwYk784uw.mft (raw, json) Hash identifier: mwlq8MPcrwK00u/vg/r4ZXv57vcfVxcvWdjCO+y/++k= Subject key identifier: E1:B8:53:7B:10:A5:61:A7:EE:CA:A9:B6:61:8E:F1:F6:6E:9F:A9:22 Authority key identifier: E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC Certificate issuer: /CN=A91E3493/serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC Certificate serial: 03DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft Manifest number: 03DB Signing time: Sun 19 May 2024 02:19:45 +0000 Manifest this update: Sun 19 May 2024 02:19:44 +0000 Manifest next update: Sun 26 May 2024 02:19:44 +0000 Files and hashes: 1: 4USmzKVqqTEokShNJidwYk784uw.crl (hash: EFYNen+EMWlz2Qdcp+UuB7NI2AfZW8RqL61zMUiDYv8=) 2: E7BC076E368A11EC9109BC30C4F9AE02.roa (hash: kbW09UJFsKnL4dHOYrdUOjMo0coDZTCOAj09v2MTtJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 990 (0x3de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3493/serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC Validity Not Before: May 19 02:19:44 2024 GMT Not After : May 26 02:19:44 2024 GMT Subject: CN=664961c0-0ea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:42:fb:6e:9a:c4:ce:65:2d:fa:a6:48:56:4c: 7f:25:e7:b3:da:4b:74:db:93:9c:51:7b:bd:e5:37: 5f:b9:ae:f9:05:4b:33:aa:e6:7b:72:0d:85:96:a1: 1d:28:fc:48:12:27:0f:ce:11:04:7c:38:3b:36:d7: e0:ee:f7:ee:e6:68:43:19:bc:77:81:89:9c:2d:76: 9e:dc:bc:b0:f9:60:8d:27:83:91:8b:10:1e:19:70: 75:6d:7e:6c:a8:eb:f7:ca:bf:38:f6:24:3d:ac:12: de:e0:ac:70:e2:32:dd:02:0f:54:bb:46:7f:5e:8b: 79:95:2a:e0:92:01:69:45:34:5b:6e:81:01:a0:d2: af:40:a7:f0:61:2f:53:55:32:da:eb:0e:db:8b:83: 23:8e:3f:7d:30:85:2c:52:3e:ea:3e:78:75:dd:f0: 17:7c:e2:c8:5d:f5:1f:c8:d1:28:ae:1e:73:0e:86: 9d:b8:fd:fb:e4:b8:2c:da:64:f8:a2:6f:25:3e:a8: 49:50:30:6e:f8:8a:67:05:b7:40:81:34:a9:9e:58: d8:f9:26:9c:ce:7d:61:0e:d5:c6:6a:44:1b:ff:60: a7:fc:01:4f:dc:78:63:d8:0e:59:6d:19:df:c6:cc: 7f:4a:5a:bb:cb:ff:e3:d5:26:ec:66:fd:b7:21:c4: 92:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B8:53:7B:10:A5:61:A7:EE:CA:A9:B6:61:8E:F1:F6:6E:9F:A9:22 X509v3 Authority Key Identifier: keyid:E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:b0:32:40:82:05:52:b8:3f:49:28:c5:f1:80:31:b0:ab:33: 58:3a:cd:a7:c8:65:b5:db:e1:0c:13:d8:61:a2:2e:6f:cb:c2: e8:e0:ef:e6:96:f4:c0:a0:12:aa:a8:31:10:2d:4a:f6:ea:35: d2:6c:bb:a2:e9:30:bb:35:ed:bc:22:14:58:12:f2:b1:c5:5c: 4f:6f:af:43:b3:77:1b:c7:31:67:68:6d:e2:c1:66:ec:c3:ee: af:eb:9a:c0:e0:d3:0d:23:6b:79:e1:9f:65:04:ae:29:cf:72: 6f:d4:9a:4b:dd:59:b3:15:3d:49:2b:c8:fa:9e:53:e2:40:a1: 37:d0:4a:65:76:97:33:c5:05:9a:1e:2d:93:d8:87:03:28:1e: 76:ac:5f:9f:de:b6:9e:cc:c6:cc:b1:df:c9:13:f4:c9:b3:0d: 47:8d:16:c7:db:03:39:70:4f:e4:dd:55:04:21:66:9e:1e:b4: e6:8b:72:2a:e1:e8:48:b0:ae:4a:22:8b:22:f1:6f:d8:36:20: e1:6d:79:f6:0d:3b:35:e8:7b:c8:22:5f:0f:8c:88:32:4d:45: 6d:93:89:68:7e:c5:a6:41:ee:75:21:3a:28:1b:78:4c:a7:14: 2d:9f:93:a0:20:26:3c:76:1f:2f:75:c4:87:69:ef:bf:d4:d9: ca:98:89:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM0OTMxMTAvBgNVBAUTKEUxNDRBNkNDQTU2QUE5MzEyODkxMjg0RDI2Mjc3MDYy NEVGQ0UyRUMwHhcNMjQwNTE5MDIxOTQ0WhcNMjQwNTI2MDIxOTQ0WjAYMRYwFAYD VQQDEw02NjQ5NjFjMC0wZWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkL7bprEzmUt+qZIVkx/Jeez2kt025OcUXu95Tdfua75BUszquZ7cg2FlqEd KPxIEicPzhEEfDg7Ntfg7vfu5mhDGbx3gYmcLXae3Lyw+WCNJ4ORixAeGXB1bX5s qOv3yr849iQ9rBLe4Kxw4jLdAg9Uu0Z/Xot5lSrgkgFpRTRbboEBoNKvQKfwYS9T VTLa6w7bi4Mjjj99MIUsUj7qPnh13fAXfOLIXfUfyNEorh5zDoaduP375Lgs2mT4 om8lPqhJUDBu+IpnBbdAgTSpnljY+Saczn1hDtXGakQb/2Cn/AFP3Hhj2A5ZbRnf xsx/Slq7y//j1SbsZv23IcSSFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOG4U3sQ pWGn7sqptmGO8fZun6kiMB8GA1UdIwQYMBaAFOFEpsylaqkxKJEoTSYncGJO/OLs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzQ5My80OUEyRUU2QzM2 ODUxMUVDODBGNTIwMzVDNEY5QUUwMi80VVNtektWcXFURW9rU2hOSmlkd1lrNzg0 dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRVU216S1ZxcVRFb2tTaE5KaWR3WWs3ODR1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzQ5My80OUEyRUU2QzM2ODUxMUVDODBGNTIwMzVDNEY5QUUwMi80VVNtektWcXFU RW9rU2hOSmlkd1lrNzg0dXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAysDJAggVSuD9JKMXxgDGwqzNYOs2nyGW12+EME9hhoi5vy8Lo4O/m lvTAoBKqqDEQLUr26jXSbLui6TC7Ne28IhRYEvKxxVxPb69Ds3cbxzFnaG3iwWbs w+6v65rA4NMNI2t54Z9lBK4pz3Jv1JpL3VmzFT1JK8j6nlPiQKE30EpldpczxQWa Hi2T2IcDKB52rF+f3raezMbMsd/JE/TJsw1HjRbH2wM5cE/k3VUEIWaeHrTmi3Iq 4ehIsK5KIosi8W/YNiDhbXn2DTs16HvIIl8PjIgyTUVtk4lofsWmQe51ITooG3hM pxQtn5OgICY8dh8vdcSHae+/1NnKmIlC -----END CERTIFICATE-----Generated at Sun May 19 02:59:16 2024 by rpki-client on console-ams.rpki-client.org