$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft File: 4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft (raw, json) Hash identifier: VNQZWf/x/PnD8bwh/pN0YoAj692pgISBBi38iymMLz8= Subject key identifier: A8:9A:76:79:B0:AA:CB:7C:B0:3E:C0:55:9A:21:D2:D8:E1:96:DB:43 Authority key identifier: E3:EB:95:4B:44:72:1E:41:1A:AF:09:38:31:0C:C1:03:EA:4C:8B:B4 Certificate issuer: /CN=A9112DEF/serialNumber=E3EB954B44721E411AAF0938310CC103EA4C8BB4 Certificate serial: 02A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft Manifest number: 0297 Signing time: Wed 01 May 2024 03:57:31 +0000 Manifest this update: Wed 01 May 2024 03:57:30 +0000 Manifest next update: Wed 08 May 2024 03:57:30 +0000 Files and hashes: 1: 4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl (hash: H7abdRfxGyQxXsFio4Px8eoQK9z52jxCD0savPg/oOI=) 2: FE37F6E0E71711ECA4C60269C4F9AE02.roa (hash: IIvzz0A/cMs27e+lpxOre2emOQgWpY2xeKIFN2INhWA=) 3: E386F672068711EDA1C2070DC4F9AE02.roa (hash: pgW2HGqxPEc6bhBwtiyxHITeZ/6F8jFtPrUAExwaxN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 672 (0x2a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112DEF/serialNumber=E3EB954B44721E411AAF0938310CC103EA4C8BB4 Validity Not Before: May 1 03:57:30 2024 GMT Not After : May 8 03:57:30 2024 GMT Subject: CN=6631bdaa-38af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:21:23:b8:0e:d7:dc:aa:42:79:ca:26:1f:43: e4:19:ec:0d:fa:41:11:c9:81:69:94:b6:67:ce:a0: fe:e1:79:a8:13:94:f9:c5:fe:2c:07:75:ed:29:17: cb:47:e6:05:49:90:ea:82:d6:ee:3f:8e:d4:2e:5c: 2c:b9:7a:7f:04:e2:33:97:49:2d:0a:aa:45:c8:7f: 98:df:3c:59:14:d5:6f:10:48:b0:81:7b:5b:65:3f: ed:80:be:9f:e5:93:7d:a6:70:88:d6:90:d7:58:99: 7e:8b:f2:88:07:a1:29:55:5f:b0:d1:57:ca:18:d6: 6b:c0:aa:aa:19:e7:77:6d:b5:bf:12:99:d8:7e:f6: e3:2e:ea:62:f7:f5:7a:a5:46:56:9d:28:82:ea:61: 8a:30:a3:e5:27:49:73:70:46:f2:d1:1a:35:9c:24: 37:91:42:33:d2:3a:73:91:98:21:bd:a1:56:1f:3d: f9:50:0a:74:51:22:2d:3e:5d:51:51:02:e4:d9:2f: 70:46:60:9d:08:b5:31:9e:93:7d:5e:42:49:31:b6: 66:07:32:8c:2f:ef:15:7e:d8:71:af:58:34:db:16: d8:18:8b:18:72:a2:3c:7a:12:c3:dd:b0:5e:0b:26: f7:61:13:12:95:51:66:23:ad:40:a7:cc:bd:e1:cb: b0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:9A:76:79:B0:AA:CB:7C:B0:3E:C0:55:9A:21:D2:D8:E1:96:DB:43 X509v3 Authority Key Identifier: keyid:E3:EB:95:4B:44:72:1E:41:1A:AF:09:38:31:0C:C1:03:EA:4C:8B:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:fe:83:65:d9:e5:35:8a:a2:e1:79:7d:87:53:19:e3:d8:ce: 7a:2e:01:c8:0c:df:49:1f:a9:ac:9f:1f:46:53:f5:cd:37:56: 5b:b1:d2:c5:1f:13:6d:a9:21:8c:d9:f0:e9:ae:70:e3:d6:60: 3e:ba:af:e6:0f:aa:9d:f8:84:9b:7c:5d:14:90:b5:56:aa:13: 13:33:a7:06:db:d5:ba:68:f7:23:26:7e:3c:e4:dc:1b:e8:6a: 22:8c:6b:6c:05:9b:e2:cc:76:9b:11:97:d2:72:1c:bc:cc:e2: 25:e9:f1:7f:76:9f:d2:04:3e:1b:fa:3b:0f:cb:73:77:2c:0d: 60:81:63:76:6d:f8:93:3c:80:0b:05:fd:d1:9a:6d:47:92:25: 82:b9:07:78:b8:b9:5c:8a:8c:20:2d:96:4e:b7:d1:c1:f9:36: 2a:bb:47:d9:af:1c:be:92:68:65:2c:c6:8d:3e:cb:11:27:21: 01:5a:15:2c:a7:cd:d4:87:71:f9:b2:1c:f7:bc:fd:61:4d:a8: e5:cd:ea:6d:71:fe:4e:21:6f:b6:b0:f5:69:f0:73:11:ea:1d: e6:0f:9f:e8:7b:6e:51:21:2c:17:73:ee:c2:61:88:93:ad:92: 01:b3:cf:42:35:34:0d:38:fd:41:01:be:b5:07:3f:f0:0d:2c: 09:24:b7:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJERUYxMTAvBgNVBAUTKEUzRUI5NTRCNDQ3MjFFNDExQUFGMDkzODMxMENDMTAz RUE0QzhCQjQwHhcNMjQwNTAxMDM1NzMwWhcNMjQwNTA4MDM1NzMwWjAYMRYwFAYD VQQDEw02NjMxYmRhYS0zOGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3SEjuA7X3KpCecomH0PkGewN+kERyYFplLZnzqD+4XmoE5T5xf4sB3XtKRfL R+YFSZDqgtbuP47ULlwsuXp/BOIzl0ktCqpFyH+Y3zxZFNVvEEiwgXtbZT/tgL6f 5ZN9pnCI1pDXWJl+i/KIB6EpVV+w0VfKGNZrwKqqGed3bbW/EpnYfvbjLupi9/V6 pUZWnSiC6mGKMKPlJ0lzcEby0Ro1nCQ3kUIz0jpzkZghvaFWHz35UAp0USItPl1R UQLk2S9wRmCdCLUxnpN9XkJJMbZmBzKML+8Vfthxr1g02xbYGIsYcqI8ehLD3bBe Cyb3YRMSlVFmI61Ap8y94cuwMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKiadnmw qst8sD7AVZoh0tjhlttDMB8GA1UdIwQYMBaAFOPrlUtEch5BGq8JODEMwQPqTIu0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkRFRi8xOEY2OTg3Q0Iz RDUxMUVDQjNBMEE4ODJDNEY5QUUwMi80LXVWUzBSeUhrRWFyd2s0TVF6QkEtcE1p N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtdVZTMFJ5SGtFYXJ3azRNUXpCQS1wTWk3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkRFRi8xOEY2OTg3Q0IzRDUxMUVDQjNBMEE4ODJDNEY5QUUwMi80LXVWUzBSeUhr RWFyd2s0TVF6QkEtcE1pN1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa/oNl2eU1iqLheX2HUxnj2M56LgHIDN9JH6msnx9GU/XNN1ZbsdLF HxNtqSGM2fDprnDj1mA+uq/mD6qd+ISbfF0UkLVWqhMTM6cG29W6aPcjJn485Nwb 6GoijGtsBZvizHabEZfSchy8zOIl6fF/dp/SBD4b+jsPy3N3LA1ggWN2bfiTPIAL Bf3Rmm1HkiWCuQd4uLlciowgLZZOt9HB+TYqu0fZrxy+kmhlLMaNPssRJyEBWhUs p83Uh3H5shz3vP1hTajlzeptcf5OIW+2sPVp8HMR6h3mD5/oe25RISwXc+7CYYiT rZIBs89CNTQNOP1BAb61Bz/wDSwJJLdR -----END CERTIFICATE-----Generated at Wed May 1 04:49:19 2024 by rpki-client on console-ams.rpki-client.org