$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft File: 4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft (raw, json) Hash identifier: 8jajb3QNfFfzbuWOmHvUTNHm484dcfXl9sxFu1xuzrE= Subject key identifier: 22:70:02:79:80:A3:6D:64:29:45:29:34:79:F3:E0:A7:21:25:97:AC Authority key identifier: E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64 Certificate issuer: /CN=A91F59A6/serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64 Certificate serial: 07B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft Manifest number: 079C Signing time: Sat 18 May 2024 19:00:05 +0000 Manifest this update: Sat 18 May 2024 19:00:05 +0000 Manifest next update: Sat 25 May 2024 19:00:05 +0000 Files and hashes: 1: 4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl (hash: Lw8e63jzFQ4xfuzfJw/Gv3jb4Rbwg/XuqE+yb769eQM=) 2: 18B1B5361CE611EBB543881CC4F9AE02.roa (hash: PGnvpZG9j+8PVGDfoWU78CHdTxQL71RyxM1cORWBi1E=) 3: 19B0BAAE1CE611EBB543881CC4F9AE02.roa (hash: 8XbL0HPru2wM23ZZCoVoS9QMZNPokbBL/zQZk5BXNh8=) 4: D385E420314711EBA579873DC4F9AE02.roa (hash: X0Ak64Imr8iV6J5Ioi78WqjK4EqCXQlaDRqqcAQZcVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1968 (0x7b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59A6/serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64 Validity Not Before: May 18 19:00:05 2024 GMT Not After : May 25 19:00:05 2024 GMT Subject: CN=6648fab5-b1cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:72:89:f2:16:91:b5:5c:d6:c0:b3:b8:f4:7e: 01:5c:15:ca:8e:1f:c9:af:40:b4:0d:43:25:61:d4: 55:5a:cf:e0:75:dc:e8:42:25:87:6f:f6:df:8a:30: 15:75:7f:cf:c4:a9:87:9d:0a:91:a2:15:31:9c:a2: 95:1e:92:11:08:e7:4c:c3:66:ba:a0:25:1b:2d:b6: 3c:1b:68:f8:ba:31:8e:bf:42:e2:72:3b:a6:0c:29: 2c:20:09:66:dd:53:ae:b1:6a:15:34:86:25:24:ae: a3:c3:c1:22:f2:ae:2c:9d:61:f6:6e:b4:30:a3:f6: 1a:32:f4:71:7a:cf:33:05:61:e9:7c:7a:03:00:4d: 9b:ff:0d:0e:d9:b5:c4:b5:83:a1:ad:60:ef:dd:01: ad:92:d5:a2:19:da:d9:a1:bc:b3:b6:a5:ee:5a:24: b5:cf:e4:bc:bb:7e:20:23:e8:fd:5b:11:3f:88:f5: 07:8c:c4:c6:fb:9c:5f:03:3f:64:8f:c9:a1:db:ca: d8:7c:fb:95:4c:56:f5:1d:b4:2b:a3:a5:16:bd:22: a8:14:5b:dd:86:51:f4:08:1c:34:ab:76:d3:f3:a9: c5:f8:22:a3:32:3f:5b:f3:7b:e4:84:4a:d6:d8:80: aa:af:e8:7e:41:64:0f:a6:dc:80:77:28:5c:a4:c7: e8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:70:02:79:80:A3:6D:64:29:45:29:34:79:F3:E0:A7:21:25:97:AC X509v3 Authority Key Identifier: keyid:E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:29:4c:ca:3c:2c:06:90:4e:67:2e:2b:15:51:8a:7b:65:24: 72:4b:27:f2:88:7b:1e:48:5c:23:6b:86:ed:37:23:d8:90:4b: 4f:40:f8:f8:da:df:91:75:5e:d7:b8:11:5a:41:a7:5a:2f:dc: 6d:14:12:05:d6:cd:72:ec:65:36:c9:49:ea:9c:38:80:e5:a7: 0b:50:9f:76:18:f9:ec:fb:db:b9:7d:85:9e:00:50:5b:07:b4: c4:85:1f:33:eb:49:a7:95:db:7f:52:91:e2:3a:62:1a:62:55: 3c:be:c3:9c:9c:7e:74:19:61:9d:12:6e:b5:0a:df:76:12:59: be:95:92:cf:21:0a:d3:e3:21:8b:a9:9c:2c:65:03:11:fd:7d: 70:f5:f9:0f:2b:65:44:7f:c5:45:f8:d5:22:cd:92:36:6b:dd: 2b:6c:69:a1:e2:87:7f:38:42:46:e3:10:b8:65:fd:6f:24:54: eb:95:1b:7e:10:0e:6e:91:67:cc:79:ab:2e:58:15:8c:f8:1f: 11:52:2a:b3:c8:5b:da:2e:c9:dd:91:b2:68:a3:33:e8:f8:02: ce:f3:03:3d:50:62:7c:b4:df:f3:91:03:cb:0f:97:5c:42:73: a6:04:73:b2:43:99:03:1b:7d:2d:95:82:cb:e6:f8:c4:c1:5b: 7b:bf:9a:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5QTYxMTAvBgNVBAUTKEUyNUZDRDlCNzcyNTg1Mzk0Mjc5MUE2MkQ0NzVFQ0ZF RDdDMDNGNjQwHhcNMjQwNTE4MTkwMDA1WhcNMjQwNTI1MTkwMDA1WjAYMRYwFAYD VQQDEw02NjQ4ZmFiNS1iMWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3KJ8haRtVzWwLO49H4BXBXKjh/Jr0C0DUMlYdRVWs/gddzoQiWHb/bfijAV dX/PxKmHnQqRohUxnKKVHpIRCOdMw2a6oCUbLbY8G2j4ujGOv0LicjumDCksIAlm 3VOusWoVNIYlJK6jw8Ei8q4snWH2brQwo/YaMvRxes8zBWHpfHoDAE2b/w0O2bXE tYOhrWDv3QGtktWiGdrZobyztqXuWiS1z+S8u34gI+j9WxE/iPUHjMTG+5xfAz9k j8mh28rYfPuVTFb1HbQro6UWvSKoFFvdhlH0CBw0q3bT86nF+CKjMj9b83vkhErW 2ICqr+h+QWQPptyAdyhcpMfotwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJwAnmA o21kKUUpNHnz4KchJZesMB8GA1UdIwQYMBaAFOJfzZt3JYU5QnkaYtR17P7XwD9k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlBNi9FNEVEQUMxOENC MUExMUVBODdDRDU1NDRDNEY5QUUwMi80bF9ObTNjbGhUbENlUnBpMUhYc190ZkFQ MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRsX05tM2NsaFRsQ2VScGkxSFhzX3RmQVAyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlBNi9FNEVEQUMxOENCMUExMUVBODdDRDU1NDRDNEY5QUUwMi80bF9ObTNjbGhU bENlUnBpMUhYc190ZkFQMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzKUzKPCwGkE5nLisVUYp7ZSRySyfyiHseSFwja4btNyPYkEtPQPj4 2t+RdV7XuBFaQadaL9xtFBIF1s1y7GU2yUnqnDiA5acLUJ92GPns+9u5fYWeAFBb B7TEhR8z60mnldt/UpHiOmIaYlU8vsOcnH50GWGdEm61Ct92Elm+lZLPIQrT4yGL qZwsZQMR/X1w9fkPK2VEf8VF+NUizZI2a90rbGmh4od/OEJG4xC4Zf1vJFTrlRt+ EA5ukWfMeasuWBWM+B8RUiqzyFvaLsndkbJoozPo+ALO8wM9UGJ8tN/zkQPLD5dc QnOmBHOyQ5kDG30tlYLL5vjEwVt7v5rD -----END CERTIFICATE-----Generated at Sat May 18 20:16:07 2024 by rpki-client on console-ams.rpki-client.org