$ rpki-client -vvf rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft File: u4lwRaiPyB_M_jjl92FYT9y6zoU.mft (raw, json) Hash identifier: ft/B/3lhEzhxYIlrBWw4Zem6JFQk0taNlONshYFJUwQ= Subject key identifier: 7B:0B:AF:E5:C3:1F:AA:43:72:DE:4E:1A:DA:C6:09:0A:53:4C:A4:7D Authority key identifier: BB:89:70:45:A8:8F:C8:1F:CC:FE:38:E5:F7:61:58:4F:DC:BA:CE:85 Certificate issuer: /CN=A9128553/serialNumber=BB897045A88FC81FCCFE38E5F761584FDCBACE85 Certificate serial: 0207 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft Manifest number: 0205 Signing time: Wed 01 May 2024 04:27:22 +0000 Manifest this update: Wed 01 May 2024 04:27:21 +0000 Manifest next update: Wed 08 May 2024 04:27:21 +0000 Files and hashes: 1: u4lwRaiPyB_M_jjl92FYT9y6zoU.crl (hash: KMFlpg8BAb97YBA+SaFtKTsuBnIAx8Vdb1RbshvyOns=) 2: 6C113EF8EB1211ECB34A394DC4F9AE02.roa (hash: u8Nz/v/ipse4KJChySVWySMTq5KoxXKYbGIrIWhbCMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.crl rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 519 (0x207) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128553/serialNumber=BB897045A88FC81FCCFE38E5F761584FDCBACE85 Validity Not Before: May 1 04:27:21 2024 GMT Not After : May 8 04:27:21 2024 GMT Subject: CN=6631c4a9-e57e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:54:b8:83:7d:35:fb:d9:60:44:5e:6d:3b:6c: d5:46:e1:5c:14:ad:bd:96:02:cf:67:6c:6d:b1:97: e1:77:4c:55:48:1c:61:2b:dd:57:ee:f9:7d:9d:c2: 1a:9c:7f:b8:e0:b9:ba:37:80:cc:4c:28:08:2d:2f: e8:7f:7b:a9:3e:bc:dc:9e:6c:e8:00:c2:ab:43:26: 65:ab:7c:02:b1:a6:ba:45:05:b9:73:ec:05:4b:63: aa:14:7d:98:89:38:4b:e0:f2:12:01:3a:76:77:ff: 1a:62:73:d4:17:cf:e1:eb:cc:fb:51:0d:d4:c5:a4: 80:fd:0e:47:c3:05:25:db:5f:37:c7:af:ec:86:bf: 3d:7b:57:c9:2c:2d:48:0a:c8:8f:d1:38:83:8f:28: ac:61:70:84:e7:97:e9:c7:78:80:bc:e8:f6:8b:fe: e6:79:39:92:f6:92:48:28:9f:45:39:2d:83:04:47: 2f:5e:2f:be:e9:0a:b2:e9:99:2a:56:ae:81:20:be: 85:79:10:22:ea:e0:4b:a8:2e:d2:f7:f4:9f:27:77: d8:22:1e:ef:7e:ac:17:0b:b6:10:51:6e:87:a9:36: 06:5d:fa:22:9b:03:b4:b5:bf:08:b4:d0:fd:dc:c1: 64:a3:74:77:37:fe:ad:06:79:84:37:4d:f6:b0:1e: 67:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:0B:AF:E5:C3:1F:AA:43:72:DE:4E:1A:DA:C6:09:0A:53:4C:A4:7D X509v3 Authority Key Identifier: keyid:BB:89:70:45:A8:8F:C8:1F:CC:FE:38:E5:F7:61:58:4F:DC:BA:CE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:59:ed:08:18:09:b4:b0:c0:fa:0d:45:ea:0b:9e:82:ab:d1: 59:04:be:10:9b:d5:2b:33:a3:31:74:6d:38:e9:5b:b9:78:66: 3e:31:67:9f:75:f1:40:b6:fb:f4:c4:98:c4:39:14:d0:db:a2: 67:6a:85:3e:99:63:b1:20:8a:a4:a3:e1:b0:af:e6:bf:15:36: 76:0d:4a:c7:3c:e8:0e:eb:c7:0b:e6:e0:be:d4:8a:95:14:1d: fd:fc:44:3e:a2:d7:51:f8:26:ae:ba:21:a8:b9:ad:a7:49:0a: 7c:3c:ac:10:84:ed:ca:5a:1f:82:b1:4a:94:c8:49:ea:3f:4c: 71:87:3f:c9:79:db:c5:ff:8b:62:92:a2:8d:42:6b:43:1c:d9: 56:70:fa:05:a5:cf:c9:9f:51:18:4b:2d:24:dc:77:5a:78:22: e7:55:4e:aa:34:66:46:04:6a:10:ef:a7:bf:68:30:fe:e6:c9: d3:14:d8:43:b3:8c:75:8e:a4:94:11:cc:f8:63:42:11:29:ea: 02:f3:11:d9:9e:16:7d:be:dd:b4:7c:4e:b4:96:3c:46:b8:94: 92:96:73:f2:8f:a2:13:15:ed:fc:04:f9:f1:56:57:32:8d:26: 73:50:72:22:8c:82:ab:b9:24:bd:9f:74:c3:1e:29:5b:64:9d: 3c:3d:72:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg1NTMxMTAvBgNVBAUTKEJCODk3MDQ1QTg4RkM4MUZDQ0ZFMzhFNUY3NjE1ODRG RENCQUNFODUwHhcNMjQwNTAxMDQyNzIxWhcNMjQwNTA4MDQyNzIxWjAYMRYwFAYD VQQDEw02NjMxYzRhOS1lNTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2VS4g301+9lgRF5tO2zVRuFcFK29lgLPZ2xtsZfhd0xVSBxhK91X7vl9ncIa nH+44Lm6N4DMTCgILS/of3upPrzcnmzoAMKrQyZlq3wCsaa6RQW5c+wFS2OqFH2Y iThL4PISATp2d/8aYnPUF8/h68z7UQ3UxaSA/Q5HwwUl2183x6/shr89e1fJLC1I CsiP0TiDjyisYXCE55fpx3iAvOj2i/7meTmS9pJIKJ9FOS2DBEcvXi++6Qqy6Zkq Vq6BIL6FeRAi6uBLqC7S9/SfJ3fYIh7vfqwXC7YQUW6HqTYGXfoimwO0tb8ItND9 3MFko3R3N/6tBnmEN032sB5nqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHsLr+XD H6pDct5OGtrGCQpTTKR9MB8GA1UdIwQYMBaAFLuJcEWoj8gfzP445fdhWE/cus6F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODU1My8xNjRBQkVDNEVC MEIxMUVDODVFM0RCMkNDNEY5QUUwMi91NGx3UmFpUHlCX01fampsOTJGWVQ5eTZ6 b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U0bHdSYWlQeUJfTV9qamw5MkZZVDl5NnpvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODU1My8xNjRBQkVDNEVCMEIxMUVDODVFM0RCMkNDNEY5QUUwMi91NGx3UmFpUHlC X01fampsOTJGWVQ5eTZ6b1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCWe0IGAm0sMD6DUXqC56Cq9FZBL4Qm9UrM6MxdG046Vu5eGY+MWef dfFAtvv0xJjEORTQ26JnaoU+mWOxIIqko+Gwr+a/FTZ2DUrHPOgO68cL5uC+1IqV FB39/EQ+otdR+CauuiGoua2nSQp8PKwQhO3KWh+CsUqUyEnqP0xxhz/JedvF/4ti kqKNQmtDHNlWcPoFpc/Jn1EYSy0k3HdaeCLnVU6qNGZGBGoQ76e/aDD+5snTFNhD s4x1jqSUEcz4Y0IRKeoC8xHZnhZ9vt20fE60ljxGuJSSlnPyj6ITFe38BPnxVlcy jSZzUHIijIKruSS9n3TDHilbZJ08PXIb -----END CERTIFICATE-----Generated at Wed May 1 05:58:57 2024 by rpki-client on console-fra.rpki-client.org