$ rpki-client -vvf rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft File: Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft (raw, json) Hash identifier: EbuxoES49FVf31OWfA7xv79BL95mtEQC+XmkmbcElTA= Subject key identifier: 4A:22:97:7A:72:74:2F:2E:09:CE:28:CF:39:27:E3:08:79:01:44:56 Authority key identifier: 22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A Certificate issuer: /CN=A9121995/serialNumber=229E064ACF432F64DAA7017A66BE8B61A96B185A Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft Manifest number: 89 Signing time: Fri 17 May 2024 07:14:48 +0000 Manifest this update: Fri 17 May 2024 07:14:47 +0000 Manifest next update: Fri 24 May 2024 07:14:47 +0000 Files and hashes: 1: Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl (hash: VzS1oFiKVPYpuYLFLm9OwvFiSOd+b1hAzbBO8KqpwHs=) 2: 4D7FE224E87B11EEAF04B71AC4F9AE02.roa (hash: DTVzyVlIC4Xnn8MhWolDkQ/ai3Ox2+GFKwtJI1Lej3g=) 3: 5559811AC52311EEAEEC2E3BC4F9AE02.roa (hash: LMuqBxcXA6omeZYWuSKDoznB0WMuX1/EBiBUPiUz0aY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:14:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121995/serialNumber=229E064ACF432F64DAA7017A66BE8B61A96B185A Validity Not Before: May 17 07:14:47 2024 GMT Not After : May 24 07:14:47 2024 GMT Subject: CN=664703e7-b01b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:04:d9:f5:61:d0:e0:e9:65:1d:bc:8c:0d:63: 0b:ce:cf:02:32:60:63:7f:de:2f:86:79:cf:46:ad: 6b:47:d6:ef:52:99:72:31:6a:d0:87:81:47:9f:48: cf:dc:76:53:24:2c:c5:54:a9:81:b0:c4:78:87:4c: ce:a8:5b:af:5b:3f:8c:9f:a8:e8:02:79:da:5d:07: 38:11:52:6a:aa:26:fe:de:ea:7f:75:89:d6:fe:2c: a5:87:3a:42:e2:07:75:e7:6a:8e:86:e1:cf:68:8a: 68:4f:87:3f:c5:be:25:f3:3b:c6:43:07:e2:08:d3: 40:41:be:d8:70:9a:d8:f3:d8:73:22:4c:26:61:3d: b7:42:bc:51:da:80:77:b0:7b:55:9c:8b:1d:54:2b: 05:35:95:80:9b:4c:f3:bf:f9:fe:62:ba:f5:c9:73: 43:9e:c7:4b:a5:4b:83:ab:89:6b:c7:2f:84:4b:ed: 6a:3a:6b:a6:d2:a9:79:35:45:e3:0b:12:02:fe:35: 3d:30:be:9e:c1:9f:ed:17:86:ca:b7:bf:68:da:25: 24:be:28:84:ab:6e:6e:30:70:f4:bd:1f:c5:94:54: 60:0f:fa:1c:8f:c9:12:2f:ed:a5:59:a7:5a:22:77: 44:9d:05:1e:61:3e:36:20:b6:c8:81:fd:c4:7e:73: 63:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:22:97:7A:72:74:2F:2E:09:CE:28:CF:39:27:E3:08:79:01:44:56 X509v3 Authority Key Identifier: keyid:22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:94:c7:ef:a8:bc:72:37:0d:49:34:f1:10:52:35:c9:19:0d: 6d:23:27:8a:54:81:0f:5b:44:36:c8:c7:37:89:81:8a:41:55: 34:9a:46:9c:c5:e8:24:72:1c:8b:2e:99:9a:d8:44:c3:95:0f: 80:e3:c3:eb:23:35:5b:ac:cb:8b:3d:25:0b:f6:15:c5:ad:94: e8:a1:ac:68:8f:eb:f7:76:1c:e7:47:b3:a3:08:ba:2f:6a:55: de:e5:73:aa:80:b8:f3:07:03:ce:cd:59:0e:20:cd:a9:f6:81: 18:60:96:72:0e:ba:59:5f:da:d2:fb:92:62:86:4d:fd:1b:9e: 63:5b:aa:ce:5f:06:c0:df:ad:15:51:5d:4d:3a:ce:97:7e:2f: 63:9e:46:7b:24:4a:98:1b:b2:8c:9a:2f:8e:d8:50:66:af:29: 49:22:53:28:3e:35:39:6f:5d:e4:90:a8:b4:9e:df:b5:12:94: 1a:01:dd:4d:37:cc:60:3e:00:1c:ac:7f:71:4f:d7:4a:f7:3b: a3:18:b5:42:d9:5b:ae:8b:7d:8a:d3:24:24:94:ca:99:89:4b: a8:18:b4:7b:67:51:02:90:9e:05:2d:45:85:77:08:5d:e1:9f: c0:c3:24:7d:21:20:88:ea:c7:ac:c7:70:14:1f:01:1d:e7:b1: d1:9a:0b:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE5OTUxMTAvBgNVBAUTKDIyOUUwNjRBQ0Y0MzJGNjREQUE3MDE3QTY2QkU4QjYx QTk2QjE4NUEwHhcNMjQwNTE3MDcxNDQ3WhcNMjQwNTI0MDcxNDQ3WjAYMRYwFAYD VQQDEw02NjQ3MDNlNy1iMDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ATZ9WHQ4OllHbyMDWMLzs8CMmBjf94vhnnPRq1rR9bvUplyMWrQh4FHn0jP 3HZTJCzFVKmBsMR4h0zOqFuvWz+Mn6joAnnaXQc4EVJqqib+3up/dYnW/iylhzpC 4gd152qOhuHPaIpoT4c/xb4l8zvGQwfiCNNAQb7YcJrY89hzIkwmYT23QrxR2oB3 sHtVnIsdVCsFNZWAm0zzv/n+Yrr1yXNDnsdLpUuDq4lrxy+ES+1qOmum0ql5NUXj CxIC/jU9ML6ewZ/tF4bKt79o2iUkviiEq25uMHD0vR/FlFRgD/ocj8kSL+2lWada IndEnQUeYT42ILbIgf3EfnNjcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEoil3py dC8uCc4ozzkn4wh5AURWMB8GA1UdIwQYMBaAFCKeBkrPQy9k2qcBema+i2Gpaxha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTk5NS85RTM2QkZBNDRD MTcxMUVFQUFCRjAzMkJDNEY5QUUwMi9JcDRHU3M5REwyVGFwd0Y2WnI2TFlhbHJH Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lwNEdTczlETDJUYXB3RjZacjZMWWFsckdGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTk5NS85RTM2QkZBNDRDMTcxMUVFQUFCRjAzMkJDNEY5QUUwMi9JcDRHU3M5REwy VGFwd0Y2WnI2TFlhbHJHRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4lMfvqLxyNw1JNPEQUjXJGQ1tIyeKVIEPW0Q2yMc3iYGKQVU0mkac xegkchyLLpma2ETDlQ+A48PrIzVbrMuLPSUL9hXFrZTooaxoj+v3dhznR7OjCLov alXe5XOqgLjzBwPOzVkOIM2p9oEYYJZyDrpZX9rS+5Jihk39G55jW6rOXwbA360V UV1NOs6Xfi9jnkZ7JEqYG7KMmi+O2FBmrylJIlMoPjU5b13kkKi0nt+1EpQaAd1N N8xgPgAcrH9xT9dK9zujGLVC2Vuui32K0yQklMqZiUuoGLR7Z1ECkJ4FLUWFdwhd 4Z/AwyR9ISCI6sesx3AUHwEd57HRmgsA -----END CERTIFICATE-----Generated at Fri May 17 08:52:45 2024 by rpki-client on console-ams.rpki-client.org