$ rpki-client -vvf rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft File: 4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft (raw, json) Hash identifier: OGFFajknAwWNj/4eYiH4dtOGxCzoysZ3b8twmRSjqbU= Subject key identifier: 96:73:C4:9B:17:F4:4C:28:2D:F7:48:C4:6A:D5:FA:93:14:49:A6:1D Authority key identifier: E0:CA:AD:17:C0:68:D8:60:2B:CC:EB:46:7B:45:55:10:BC:52:39:0E Certificate issuer: /CN=A9118799/serialNumber=E0CAAD17C068D8602BCCEB467B455510BC52390E Certificate serial: 1864 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft Manifest number: 1856 Signing time: Fri 26 Apr 2024 16:55:39 +0000 Manifest this update: Fri 26 Apr 2024 16:55:39 +0000 Manifest next update: Fri 03 May 2024 16:55:39 +0000 Files and hashes: 1: 4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl (hash: sx6aQcud1whdUIlc9Kv6XzGNG5bHRgHOY+mForFIwOc=) 2: 99AB821E859C11E7A1FEC80AC4F9AE02.roa (hash: uCxWQpPYYwBOaQTgVdDXhazWZE/2wYLeVKs+vSiii6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 16:55:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6244 (0x1864) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118799/serialNumber=E0CAAD17C068D8602BCCEB467B455510BC52390E Validity Not Before: Apr 26 16:55:39 2024 GMT Not After : May 3 16:55:39 2024 GMT Subject: CN=662bdc8b-c0bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3c:ed:cc:54:43:27:7d:ac:b1:71:71:36:a6: 1f:c4:cf:4e:5d:b2:09:9c:88:1f:21:d5:52:ed:5b: 79:16:de:3d:23:1d:d4:dc:45:4c:f7:5d:ff:b2:e3: 51:2a:4a:26:82:ef:4e:b4:21:ff:83:cb:40:68:0e: b8:69:12:4b:b5:1e:fb:ab:11:e6:b0:ab:57:50:c6: 64:7c:92:ba:17:92:d4:c1:b2:02:45:08:e3:5b:81: 8c:28:47:cf:7a:83:3b:33:28:f8:a4:90:c8:79:fe: cb:2b:61:76:37:9c:4e:de:02:66:ff:07:3d:f8:4e: 16:2f:3c:57:43:08:7b:fd:65:51:fb:91:31:51:09: 70:54:c0:a1:1f:92:04:f2:31:b4:6b:dc:e0:0e:22: 20:50:7c:5c:45:90:68:ef:85:65:0e:d8:e7:89:46: 88:92:85:ec:81:b4:60:f9:9b:1e:9d:14:04:79:97: e3:88:ea:3c:94:f8:c1:16:ee:fc:33:a8:88:c2:91: 7b:81:3f:91:c5:1e:68:29:1a:e8:ae:27:fa:38:79: 5f:18:1f:4a:48:51:c4:a9:40:5c:3b:01:db:09:a6: d2:12:f4:3e:e5:25:2e:b3:1f:02:b0:58:85:89:fe: fa:fb:c2:25:7e:c9:fa:d5:9c:ec:4e:4e:a4:00:48: d7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:73:C4:9B:17:F4:4C:28:2D:F7:48:C4:6A:D5:FA:93:14:49:A6:1D X509v3 Authority Key Identifier: keyid:E0:CA:AD:17:C0:68:D8:60:2B:CC:EB:46:7B:45:55:10:BC:52:39:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:67:72:fa:10:19:30:fb:c5:b2:69:38:97:7a:b4:b7:74:c7: 0f:d9:49:e2:74:61:92:d3:20:64:9b:a8:0f:ab:e2:8b:f6:b8: 73:64:05:16:88:0d:99:78:e5:41:0d:8f:25:1b:08:87:58:90: aa:05:07:e8:0b:bd:e2:8b:6a:f9:80:25:6a:0c:65:30:1e:e7: 5e:5a:ca:90:74:bc:b6:0c:d8:e7:58:29:62:7d:fe:d3:bc:02: 57:e4:26:59:c1:06:60:44:4e:f3:a4:44:e9:5f:84:3d:7d:50: 2d:24:e3:71:f8:34:79:58:d2:ca:ac:83:5c:f8:b0:68:76:a8: 32:60:83:71:d8:db:41:d0:a4:1b:8b:4f:b3:17:40:f2:9b:e0: fd:67:18:60:f2:58:77:e5:4e:e6:21:9f:00:f5:36:50:35:5e: 25:83:4d:ec:08:ac:9d:e4:a7:10:4f:54:aa:f8:4a:c1:ae:49: d1:70:b9:f2:3a:45:7f:8c:84:be:92:f2:ca:03:84:0c:f4:8c: 97:fe:ca:fc:a7:e2:bf:e6:5c:3c:5a:4c:2b:07:a6:9d:61:68: 83:0f:fe:6d:c1:3a:0a:74:a0:46:ce:fd:77:5f:02:fe:84:38: ec:e6:3a:ff:89:99:af:05:e6:4a:ac:85:78:83:7f:42:6e:3f: 73:02:3b:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg3OTkxMTAvBgNVBAUTKEUwQ0FBRDE3QzA2OEQ4NjAyQkNDRUI0NjdCNDU1NTEw QkM1MjM5MEUwHhcNMjQwNDI2MTY1NTM5WhcNMjQwNTAzMTY1NTM5WjAYMRYwFAYD VQQDEw02NjJiZGM4Yi1jMGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjztzFRDJ32ssXFxNqYfxM9OXbIJnIgfIdVS7Vt5Ft49Ix3U3EVM913/suNR Kkomgu9OtCH/g8tAaA64aRJLtR77qxHmsKtXUMZkfJK6F5LUwbICRQjjW4GMKEfP eoM7Myj4pJDIef7LK2F2N5xO3gJm/wc9+E4WLzxXQwh7/WVR+5ExUQlwVMChH5IE 8jG0a9zgDiIgUHxcRZBo74VlDtjniUaIkoXsgbRg+ZsenRQEeZfjiOo8lPjBFu78 M6iIwpF7gT+RxR5oKRrorif6OHlfGB9KSFHEqUBcOwHbCabSEvQ+5SUusx8CsFiF if76+8Ilfsn61ZzsTk6kAEjXzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZzxJsX 9EwoLfdIxGrV+pMUSaYdMB8GA1UdIwQYMBaAFODKrRfAaNhgK8zrRntFVRC8UjkO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODc5OS8zMjg3QkZBMjdF QzcxMUU3ODgzRTJFNThDNEY5QUUwMi80TXF0RjhCbzJHQXJ6T3RHZTBWVkVMeFNP UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRNcXRGOEJvMkdBcnpPdEdlMFZWRUx4U09RNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODc5OS8zMjg3QkZBMjdFQzcxMUU3ODgzRTJFNThDNEY5QUUwMi80TXF0RjhCbzJH QXJ6T3RHZTBWVkVMeFNPUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsZ3L6EBkw+8WyaTiXerS3dMcP2UnidGGS0yBkm6gPq+KL9rhzZAUW iA2ZeOVBDY8lGwiHWJCqBQfoC73ii2r5gCVqDGUwHudeWsqQdLy2DNjnWCliff7T vAJX5CZZwQZgRE7zpETpX4Q9fVAtJONx+DR5WNLKrINc+LBodqgyYINx2NtB0KQb i0+zF0Dym+D9Zxhg8lh35U7mIZ8A9TZQNV4lg03sCKyd5KcQT1Sq+ErBrknRcLny OkV/jIS+kvLKA4QM9IyX/sr8p+K/5lw8WkwrB6adYWiDD/5twToKdKBGzv13XwL+ hDjs5jr/iZmvBeZKrIV4g39Cbj9zAjsS -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:26 2024 by rpki-client on console-ams.rpki-client.org