$ rpki-client -vvf rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft File: 4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft (raw, json) Hash identifier: 196WUXZitiei5OSfk2wZIgzPf1nDXP8bB55zCcJJPmo= Subject key identifier: A5:A5:62:26:21:CD:61:9B:AC:47:9B:F6:54:65:A1:14:6A:7B:58:81 Authority key identifier: E2:4D:09:54:10:62:C6:08:BE:36:3F:F6:19:CC:B8:44:4D:DC:3C:2F Certificate issuer: /CN=A91471DA/serialNumber=E24D09541062C608BE363FF619CCB8444DDC3C2F Certificate serial: 0432 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft Manifest number: 0430 Signing time: Wed 01 May 2024 02:17:49 +0000 Manifest this update: Wed 01 May 2024 02:17:48 +0000 Manifest next update: Wed 08 May 2024 02:17:48 +0000 Files and hashes: 1: 4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl (hash: bmlCIIKBgBoyoIDooUkQEJTURFu7tT5Pj+VSCBdQ5hM=) 2: 914E7A440FE611EC8DD2020EC4F9AE02.roa (hash: mjyt1YwDNmlbVB+s1ceKNJUb36Gp/fdDhWoek/UDCZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 02:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1074 (0x432) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91471DA/serialNumber=E24D09541062C608BE363FF619CCB8444DDC3C2F Validity Not Before: May 1 02:17:48 2024 GMT Not After : May 8 02:17:48 2024 GMT Subject: CN=6631a64d-5931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:52:19:a6:89:a3:61:91:b0:7f:e3:a5:40:fe: af:7e:de:29:48:11:94:dc:79:d5:0b:f2:e8:86:25: a1:48:1d:6c:b6:69:66:94:32:49:78:02:7b:46:03: d4:f3:ee:dc:0e:ba:ab:02:d6:32:f2:27:8a:4a:c6: 18:ee:0d:ae:09:d0:28:43:e2:44:8c:36:9e:aa:fd: 06:f8:25:25:5a:b7:0e:18:df:d3:76:2f:d0:5c:6a: 2c:48:63:77:2a:a4:c6:91:e8:fc:f4:b6:1a:33:77: 9b:c8:b8:45:07:37:04:17:6a:71:2f:2c:7d:a4:38: 37:fd:5b:6c:10:dd:92:a6:11:84:42:79:4f:c9:1e: 41:9b:d8:43:00:42:af:08:7d:fe:27:c7:55:43:52: 86:4f:0b:f6:4b:bc:8b:b1:aa:08:8a:57:0a:7c:b8: 09:78:69:b0:d2:ee:c3:e4:a6:75:41:da:93:e3:33: 38:3e:4e:b5:5b:08:e0:3a:06:14:8a:59:77:67:c3: 91:5b:ed:4e:7c:05:e0:11:da:0b:e8:01:d7:9e:51: ba:79:cf:61:b8:73:cb:2b:cb:4d:15:94:78:9f:8f: 75:d0:ef:69:81:0b:4e:85:09:78:1d:7d:ec:c1:c9: 21:2d:08:be:8e:bb:a4:0a:6b:9b:17:43:9e:e9:c6: 71:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A5:62:26:21:CD:61:9B:AC:47:9B:F6:54:65:A1:14:6A:7B:58:81 X509v3 Authority Key Identifier: keyid:E2:4D:09:54:10:62:C6:08:BE:36:3F:F6:19:CC:B8:44:4D:DC:3C:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:98:aa:1b:c8:50:f4:39:43:fe:5a:2e:c2:81:fa:27:99:80: 9d:8f:f2:76:4c:3c:49:0b:ca:90:60:35:d5:b8:ce:cd:e6:9b: fd:1e:c1:1a:a3:f3:a1:e9:a0:25:e1:63:dd:3e:b8:a5:37:1b: a7:be:19:a4:be:3f:c8:0b:c5:60:16:e6:e0:91:24:a1:2f:a2: 1a:ba:66:dd:08:8a:5c:18:07:95:8e:9c:cb:05:66:1c:9a:d1: f0:a9:4d:c1:a0:b4:5e:53:74:4c:45:49:7a:41:4c:f2:6b:99: b4:43:d6:07:52:49:38:c6:98:e4:59:14:87:69:ae:8b:f2:43: d1:f2:2e:df:d9:68:76:0f:13:1e:51:17:f5:95:41:3e:e3:3e: 30:ab:91:27:ff:fb:65:89:a1:fc:5f:8e:50:c6:5f:c8:81:d0: d5:f4:4c:4c:b6:9c:f1:e1:fa:56:b5:8d:b1:9d:a7:3c:c6:fb: 3f:74:1f:76:09:f5:e4:48:57:db:6b:57:d2:4f:7d:9c:3e:f5: 1d:c2:c8:e6:8d:8d:db:eb:d3:0d:35:17:45:9f:74:8e:c4:b6: 6d:8c:a4:08:63:fb:8b:17:f2:5c:4b:be:6b:5e:51:d7:7f:e1: 79:b7:b9:d1:43:e1:0b:2c:f5:53:c2:07:1b:ed:10:b0:1d:e9: 7e:b1:32:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcxREExMTAvBgNVBAUTKEUyNEQwOTU0MTA2MkM2MDhCRTM2M0ZGNjE5Q0NCODQ0 NEREQzNDMkYwHhcNMjQwNTAxMDIxNzQ4WhcNMjQwNTA4MDIxNzQ4WjAYMRYwFAYD VQQDEw02NjMxYTY0ZC01OTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9VIZpomjYZGwf+OlQP6vft4pSBGU3HnVC/LohiWhSB1stmlmlDJJeAJ7RgPU 8+7cDrqrAtYy8ieKSsYY7g2uCdAoQ+JEjDaeqv0G+CUlWrcOGN/Tdi/QXGosSGN3 KqTGkej89LYaM3ebyLhFBzcEF2pxLyx9pDg3/VtsEN2SphGEQnlPyR5Bm9hDAEKv CH3+J8dVQ1KGTwv2S7yLsaoIilcKfLgJeGmw0u7D5KZ1QdqT4zM4Pk61WwjgOgYU ill3Z8ORW+1OfAXgEdoL6AHXnlG6ec9huHPLK8tNFZR4n4910O9pgQtOhQl4HX3s wckhLQi+jrukCmubF0Oe6cZxHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWlYiYh zWGbrEeb9lRloRRqe1iBMB8GA1UdIwQYMBaAFOJNCVQQYsYIvjY/9hnMuERN3Dwv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzFEQS81MUQ1Nzk0ODBG RTIxMUVDQTREREM5MDlDNEY5QUUwMi80azBKVkJCaXhnaS1Oal8yR2N5NFJFM2NQ QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRrMEpWQkJpeGdpLU5qXzJHY3k0UkUzY1BDOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzFEQS81MUQ1Nzk0ODBGRTIxMUVDQTREREM5MDlDNEY5QUUwMi80azBKVkJCaXhn aS1Oal8yR2N5NFJFM2NQQzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzmKobyFD0OUP+Wi7CgfonmYCdj/J2TDxJC8qQYDXVuM7N5pv9HsEa o/Oh6aAl4WPdPrilNxunvhmkvj/IC8VgFubgkSShL6IaumbdCIpcGAeVjpzLBWYc mtHwqU3BoLReU3RMRUl6QUzya5m0Q9YHUkk4xpjkWRSHaa6L8kPR8i7f2Wh2DxMe URf1lUE+4z4wq5En//tliaH8X45Qxl/IgdDV9ExMtpzx4fpWtY2xnac8xvs/dB92 CfXkSFfba1fST32cPvUdwsjmjY3b69MNNRdFn3SOxLZtjKQIY/uLF/JcS75rXlHX f+F5t7nRQ+ELLPVTwgcb7RCwHel+sTK6 -----END CERTIFICATE-----Generated at Wed May 1 03:20:31 2024 by rpki-client on console-fra.rpki-client.org