$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft File: 4UieBUVuksrXFYRyAOSnXWw-Q84.mft (raw, json) Hash identifier: 6OuGYylN/LnKB1zNsm7tozPTRTwdRdLuQ+aUECmXeko= Subject key identifier: 5D:D7:30:6D:64:C7:27:61:23:BB:53:05:50:FC:3E:06:11:93:D2:3D Authority key identifier: E1:48:9E:05:45:6E:92:CA:D7:15:84:72:00:E4:A7:5D:6C:3E:43:CE Certificate issuer: /CN=A91F6AE0/serialNumber=E1489E05456E92CAD715847200E4A75D6C3E43CE Certificate serial: 0205 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft Manifest number: 0201 Signing time: Sun 19 May 2024 04:11:54 +0000 Manifest this update: Sun 19 May 2024 04:11:54 +0000 Manifest next update: Sun 26 May 2024 04:11:54 +0000 Files and hashes: 1: 4UieBUVuksrXFYRyAOSnXWw-Q84.crl (hash: Ii0yNleASx5xkx0Z00rrTD5VET6W0dZbK0CzQNK887Y=) 2: E2DF828CF20211ECBCC9B986C4F9AE02.roa (hash: zYNwfSTLxxDuy8isKqJ7XOuhPSc7RcdJ6OAUOyFxCM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.crl rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 517 (0x205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6AE0/serialNumber=E1489E05456E92CAD715847200E4A75D6C3E43CE Validity Not Before: May 19 04:11:54 2024 GMT Not After : May 26 04:11:54 2024 GMT Subject: CN=66497c0a-8e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b0:e5:5c:b6:bd:0b:99:05:1e:21:2d:29:15: 52:b8:24:73:c4:06:44:e1:99:a9:66:c4:1e:33:3a: 23:1e:04:93:5a:00:e6:3a:f1:72:83:8c:bd:ee:bf: 86:91:e8:fa:9c:79:46:b0:70:75:fa:80:d9:c9:0d: f8:a0:b9:eb:15:8a:c4:21:8f:4a:68:39:d9:70:d4: ec:da:83:c2:1d:cf:f0:90:a2:2f:b7:fc:f5:a0:52: ca:83:c4:79:8a:7a:e9:7f:d5:7e:a4:b9:e2:93:08: f7:be:c7:a0:c1:3e:6a:df:73:59:58:4b:86:03:c0: b3:d3:a0:0f:18:b7:ae:25:bb:3b:3c:f4:9a:48:fa: 8a:f5:41:60:3b:be:8c:72:e4:ee:8c:d0:c2:cc:67: 91:5d:e6:1f:62:8e:5f:d1:5b:58:ac:ad:62:3a:36: f9:93:dd:02:14:13:03:de:7e:48:7b:80:90:28:24: 9b:21:7c:87:93:d5:8b:61:c1:09:22:05:16:0c:e9: 24:13:af:77:61:98:88:df:dc:72:94:33:dd:af:94: e1:8a:69:f2:96:ef:5f:78:a2:eb:96:89:08:d4:c7: 71:ae:10:9a:0a:28:a4:91:34:78:aa:59:c2:3c:ff: 3a:5d:91:c6:2a:f5:11:72:07:a7:5d:ae:52:12:79: bb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D7:30:6D:64:C7:27:61:23:BB:53:05:50:FC:3E:06:11:93:D2:3D X509v3 Authority Key Identifier: keyid:E1:48:9E:05:45:6E:92:CA:D7:15:84:72:00:E4:A7:5D:6C:3E:43:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:c7:61:d1:c0:2d:97:3d:d8:59:ae:df:66:80:68:71:49:b1: ff:9f:8c:6a:a7:0a:80:f0:01:23:a2:fa:26:5a:af:f0:db:25: 81:e0:f5:61:4c:a2:40:87:ce:5b:ed:8a:27:6a:f6:aa:92:83: 1b:ca:a5:8d:53:55:f8:ef:57:02:a9:d2:59:b2:48:37:97:dd: be:7b:b8:bf:ed:96:fe:64:60:ce:ea:db:0f:d4:28:72:32:94: 87:bb:c1:80:f7:3e:31:96:20:7c:6e:14:ee:9a:d1:09:81:5e: f2:63:a7:1d:e5:65:77:1c:e0:71:a5:45:38:83:ca:bf:ac:42: df:d8:95:90:8f:ed:b4:9d:fb:82:50:9c:0d:cf:25:98:4d:c2: 04:c3:72:af:58:34:9a:52:c6:b9:ff:0f:4d:fc:a8:88:12:af: a5:c3:4d:33:4e:cc:8e:ac:5e:a8:b5:ed:e3:e7:83:06:72:8d: d5:19:59:e6:bc:77:78:83:92:0b:9d:30:19:cb:9b:be:d0:2b: dd:3e:3e:1b:88:bd:ad:23:f7:11:e3:69:86:a2:7c:bd:37:99: 79:96:7a:e3:d3:c2:9a:45:fc:64:cf:07:6a:9c:93:01:63:f4: c3:2e:d4:58:09:7c:79:cd:8b:b9:3d:87:1b:57:9a:31:84:8d: ff:d8:9d:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZBRTAxMTAvBgNVBAUTKEUxNDg5RTA1NDU2RTkyQ0FENzE1ODQ3MjAwRTRBNzVE NkMzRTQzQ0UwHhcNMjQwNTE5MDQxMTU0WhcNMjQwNTI2MDQxMTU0WjAYMRYwFAYD VQQDEw02NjQ5N2MwYS04ZTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm7DlXLa9C5kFHiEtKRVSuCRzxAZE4ZmpZsQeMzojHgSTWgDmOvFyg4y97r+G kej6nHlGsHB1+oDZyQ34oLnrFYrEIY9KaDnZcNTs2oPCHc/wkKIvt/z1oFLKg8R5 inrpf9V+pLnikwj3vsegwT5q33NZWEuGA8Cz06APGLeuJbs7PPSaSPqK9UFgO76M cuTujNDCzGeRXeYfYo5f0VtYrK1iOjb5k90CFBMD3n5Ie4CQKCSbIXyHk9WLYcEJ IgUWDOkkE693YZiI39xylDPdr5Thimnylu9feKLrlokI1MdxrhCaCiikkTR4qlnC PP86XZHGKvURcgenXa5SEnm75QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3XMG1k xydhI7tTBVD8PgYRk9I9MB8GA1UdIwQYMBaAFOFIngVFbpLK1xWEcgDkp11sPkPO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkFFMC9GQTA0N0Y1NEYx RkMxMUVDOTlCMkNCNkJDNEY5QUUwMi80VWllQlVWdWtzclhGWVJ5QU9TblhXdy1R ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRVaWVCVVZ1a3NyWEZZUnlBT1NuWFd3LVE4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkFFMC9GQTA0N0Y1NEYxRkMxMUVDOTlCMkNCNkJDNEY5QUUwMi80VWllQlVWdWtz clhGWVJ5QU9TblhXdy1RODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSx2HRwC2XPdhZrt9mgGhxSbH/n4xqpwqA8AEjovomWq/w2yWB4PVh TKJAh85b7YonavaqkoMbyqWNU1X471cCqdJZskg3l92+e7i/7Zb+ZGDO6tsP1Chy MpSHu8GA9z4xliB8bhTumtEJgV7yY6cd5WV3HOBxpUU4g8q/rELf2JWQj+20nfuC UJwNzyWYTcIEw3KvWDSaUsa5/w9N/KiIEq+lw00zTsyOrF6ote3j54MGco3VGVnm vHd4g5ILnTAZy5u+0CvdPj4biL2tI/cR42mGony9N5l5lnrj08KaRfxkzwdqnJMB Y/TDLtRYCXx5zYu5PYcbV5oxhI3/2J3l -----END CERTIFICATE-----Generated at Sun May 19 05:08:06 2024 by rpki-client on console-ams.rpki-client.org