$ rpki-client -vvf rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft File: 4VLg53x5W1Qih9ZcHk4L8obU1eA.mft (raw, json) Hash identifier: jg4TGetdrKY0oNucfQaMKzMUqZxzEIwrjf+7onv4Lf0= Subject key identifier: 29:DF:B1:FE:5C:7C:6E:4F:85:41:FD:09:62:6C:3E:BB:B2:1D:39:24 Authority key identifier: E1:52:E0:E7:7C:79:5B:54:22:87:D6:5C:1E:4E:0B:F2:86:D4:D5:E0 Certificate issuer: /CN=A912763C/serialNumber=E152E0E77C795B542287D65C1E4E0BF286D4D5E0 Certificate serial: 071C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VLg53x5W1Qih9ZcHk4L8obU1eA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft Manifest number: 0716 Signing time: Mon 06 May 2024 22:37:48 +0000 Manifest this update: Mon 06 May 2024 22:37:47 +0000 Manifest next update: Mon 13 May 2024 22:37:47 +0000 Files and hashes: 1: 4VLg53x5W1Qih9ZcHk4L8obU1eA.crl (hash: m0fb3BM5iq0MfFqslUxbp2zmmJlQP+8jCDof7o0Pwbc=) 2: 22329D14EE6511EAA50E8052C4F9AE02.roa (hash: 1BuomuYOjyAemcsoXwlPHOu6bk8zZy2uLp90VOf9/iU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.crl rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VLg53x5W1Qih9ZcHk4L8obU1eA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 22:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1820 (0x71c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912763C/serialNumber=E152E0E77C795B542287D65C1E4E0BF286D4D5E0 Validity Not Before: May 6 22:37:47 2024 GMT Not After : May 13 22:37:47 2024 GMT Subject: CN=66395bbc-ae43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:04:90:7b:b9:ae:98:67:a0:5e:ee:3d:63:c1: a2:4c:e2:b0:25:32:9c:31:8a:cc:cf:41:6e:22:3f: 79:52:f2:d3:91:54:2c:7d:ac:9a:1d:cf:7d:fe:03: 1e:42:3e:a1:89:6b:23:e2:b9:1a:5f:6e:8d:a1:41: a5:2b:41:1f:fa:aa:fb:f4:c4:56:d6:3e:36:a8:44: e1:81:4a:60:af:18:b4:ce:2c:e4:99:b0:96:0f:c9: 5f:f8:4c:80:dd:95:5f:8e:42:e0:53:b0:70:00:2d: c9:00:d6:3b:9c:d6:6f:68:2e:a3:95:9a:2f:1d:e0: f4:a6:d7:00:49:63:cd:1e:7f:b9:fb:d4:9f:a3:b1: 9e:84:f1:cc:b2:8b:70:08:c7:88:b8:5e:d8:c9:ce: 4b:01:08:2b:16:e8:a6:89:ed:d0:80:ab:e9:00:15: 3e:f1:f6:7b:d2:66:58:82:62:5e:b0:7d:56:10:6b: 2c:1a:7f:65:27:54:8b:66:61:07:f0:00:90:eb:c9: f4:5d:f8:39:f3:7e:a9:81:66:74:4f:80:f2:a6:f7: ab:c5:f3:35:c6:59:6d:7a:f3:5a:b8:71:25:82:4f: 27:0c:2e:ea:e1:c4:37:38:22:58:9d:53:f3:06:72: df:d4:9f:29:18:45:a5:67:cb:d4:44:04:29:d2:99: ba:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:DF:B1:FE:5C:7C:6E:4F:85:41:FD:09:62:6C:3E:BB:B2:1D:39:24 X509v3 Authority Key Identifier: keyid:E1:52:E0:E7:7C:79:5B:54:22:87:D6:5C:1E:4E:0B:F2:86:D4:D5:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VLg53x5W1Qih9ZcHk4L8obU1eA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912763C/F20AB31CEE6211EAA766644EC4F9AE02/4VLg53x5W1Qih9ZcHk4L8obU1eA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:db:da:74:92:a6:1a:c2:4f:3f:2b:92:dc:d7:94:75:6c:94: 35:58:51:81:64:3d:0d:c3:58:47:ae:a0:36:2d:45:fa:71:5b: bd:45:d5:fe:e2:ff:41:51:a8:48:bb:54:c3:f9:31:e8:ac:08: 8d:65:40:c7:09:cb:da:d5:21:a3:21:fc:3f:d7:88:30:fe:69: 7a:14:e5:96:50:ad:29:d3:e7:3a:55:10:43:50:4d:a0:a3:97: 9a:92:40:fc:55:7f:16:a9:b3:61:ab:a8:a1:c0:e8:5f:d6:57: 90:c8:34:7c:bb:ed:1e:32:bc:23:10:9a:e5:97:e9:4e:7b:7a: 16:c5:0c:32:c4:9c:75:1c:72:d7:64:3c:7b:3b:72:27:cc:fb: 9d:15:5b:92:5b:0b:7b:09:60:8a:a9:89:c4:24:eb:a2:68:88: 5e:5b:d3:bb:d9:a2:73:9b:4f:57:8d:9c:52:e2:58:f1:1f:c8: 03:47:89:a4:0a:7c:85:86:46:df:90:0e:68:f9:5e:7d:83:c1: 21:e4:6f:ee:fc:77:5e:56:51:0c:02:73:b0:b7:9a:54:5e:2c: 90:a0:40:4c:dd:98:c7:47:60:11:b4:0b:1b:bb:1c:e4:22:0a: 19:a0:80:d8:2e:33:7e:3d:7d:02:8f:17:7c:75:f2:ea:f8:aa: 3a:36:5d:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2M0MxMTAvBgNVBAUTKEUxNTJFMEU3N0M3OTVCNTQyMjg3RDY1QzFFNEUwQkYy ODZENEQ1RTAwHhcNMjQwNTA2MjIzNzQ3WhcNMjQwNTEzMjIzNzQ3WjAYMRYwFAYD VQQDEw02NjM5NWJiYy1hZTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgSQe7mumGegXu49Y8GiTOKwJTKcMYrMz0FuIj95UvLTkVQsfayaHc99/gMe Qj6hiWsj4rkaX26NoUGlK0Ef+qr79MRW1j42qEThgUpgrxi0zizkmbCWD8lf+EyA 3ZVfjkLgU7BwAC3JANY7nNZvaC6jlZovHeD0ptcASWPNHn+5+9Sfo7GehPHMsotw CMeIuF7Yyc5LAQgrFuimie3QgKvpABU+8fZ70mZYgmJesH1WEGssGn9lJ1SLZmEH 8ACQ68n0Xfg5836pgWZ0T4DypverxfM1xlltevNauHElgk8nDC7q4cQ3OCJYnVPz BnLf1J8pGEWlZ8vURAQp0pm6sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnfsf5c fG5PhUH9CWJsPruyHTkkMB8GA1UdIwQYMBaAFOFS4Od8eVtUIofWXB5OC/KG1NXg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzYzQy9GMjBBQjMxQ0VF NjIxMUVBQTc2NjY0NEVDNEY5QUUwMi80VkxnNTN4NVcxUWloOVpjSGs0TDhvYlUx ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWTGc1M3g1VzFRaWg5WmNIazRMOG9iVTFlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzYzQy9GMjBBQjMxQ0VFNjIxMUVBQTc2NjY0NEVDNEY5QUUwMi80VkxnNTN4NVcx UWloOVpjSGs0TDhvYlUxZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAi29p0kqYawk8/K5Lc15R1bJQ1WFGBZD0Nw1hHrqA2LUX6cVu9RdX+ 4v9BUahIu1TD+THorAiNZUDHCcva1SGjIfw/14gw/ml6FOWWUK0p0+c6VRBDUE2g o5eakkD8VX8WqbNhq6ihwOhf1leQyDR8u+0eMrwjEJrll+lOe3oWxQwyxJx1HHLX ZDx7O3InzPudFVuSWwt7CWCKqYnEJOuiaIheW9O72aJzm09XjZxS4ljxH8gDR4mk CnyFhkbfkA5o+V59g8Eh5G/u/HdeVlEMAnOwt5pUXiyQoEBM3ZjHR2ARtAsbuxzk IgoZoIDYLjN+PX0Cjxd8dfLq+Ko6Nl34 -----END CERTIFICATE-----Generated at Tue May 7 00:53:15 2024 by rpki-client on console-ams.rpki-client.org