$ rpki-client -vvf rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft File: 4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft (raw, json) Hash identifier: gnf8hsqcomaBmSorPtnoU0FvDCXd/h/5ImpPsozrrqE= Subject key identifier: 8D:31:FA:FE:A1:A9:B8:54:4C:EE:F5:C5:6A:02:B8:4E:70:38:EB:35 Authority key identifier: E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A Certificate issuer: /CN=A91493FC/serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft Manifest number: F0 Signing time: Fri 03 May 2024 05:51:10 +0000 Manifest this update: Fri 03 May 2024 05:51:09 +0000 Manifest next update: Fri 10 May 2024 05:51:09 +0000 Files and hashes: 1: 4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl (hash: RCQcq+XaIQ15ppa9fbWRSZmoBBn2rKoGOX3VZzSOrAA=) 2: 38702E769AF611ED8D41985BC4F9AE02.roa (hash: LG8a48g5o1pmYxvFXbXmY8lQLc9P00JNOSTLbClKTJc=) 3: D076B1A49F2911ED937CF05AC4F9AE02.roa (hash: l65hEDKPHMRhVHGhKuDX5Avsz2LGJAcFkP01tH8Nq2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91493FC/serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A Validity Not Before: May 3 05:51:09 2024 GMT Not After : May 10 05:51:09 2024 GMT Subject: CN=66347b4e-bc3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:72:85:09:ca:4a:86:7b:4a:3d:38:10:86:2d: d9:07:fb:5b:54:47:ba:d5:da:ce:ac:5c:f8:d6:0f: 16:b4:d8:82:13:64:43:ae:f3:fe:a1:37:6a:19:d4: c5:5d:15:17:21:f4:4f:5a:33:9b:6f:9e:f7:05:ce: da:c2:16:a7:30:a9:b1:04:ac:76:de:fa:35:d6:19: ef:ae:d8:d2:be:ce:e4:e6:35:e5:d2:32:66:a8:f3: ba:af:77:34:41:66:cb:29:d7:06:49:85:cb:0d:99: 12:2b:14:ab:3e:fe:81:72:7c:0d:2d:e0:d4:77:e5: 78:ad:8c:ac:99:f6:9a:53:fa:a1:cf:9d:c5:f5:51: 62:0d:f8:ad:9f:a7:d7:bb:87:ba:27:c5:dc:85:6e: 7d:02:6e:0e:e5:eb:0a:64:aa:19:31:42:b6:8a:0b: 0c:3a:c9:ff:35:77:8f:c7:ce:78:4a:97:41:66:11: a0:f3:2b:ad:ff:92:0f:31:34:10:fa:da:54:96:57: de:35:17:82:7e:be:e9:e1:1a:34:55:63:7e:d8:e5: 08:3b:c3:e9:f2:80:e2:9b:6b:1b:a4:9a:13:12:6d: f7:64:b1:ec:a9:58:b7:20:96:23:11:ab:12:c4:9e: 7c:17:44:a6:1d:bb:dc:35:f7:3b:75:dc:92:69:e9: 35:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:31:FA:FE:A1:A9:B8:54:4C:EE:F5:C5:6A:02:B8:4E:70:38:EB:35 X509v3 Authority Key Identifier: keyid:E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:9a:91:23:5e:56:81:b8:43:66:f6:12:3d:21:37:1d:9a:f1: 32:e9:77:87:d6:7d:28:ca:34:26:62:0c:3a:7f:9e:41:d1:e0: 6a:da:fd:7b:c5:f2:11:a3:2a:94:a2:24:c6:95:7b:d1:89:f5: 74:3a:f0:74:e6:10:72:e8:10:f6:27:0a:72:51:40:84:30:f6: 10:c0:49:f7:a4:0c:f8:16:40:12:d3:b4:31:aa:54:83:16:0e: e6:33:c2:8d:c9:ba:a2:fa:64:52:67:38:52:fa:4c:f5:5c:c2: 9b:48:44:1d:e5:3d:dd:8a:7e:fd:08:01:4b:40:88:ed:b2:ba: 63:ec:bd:46:19:03:5e:6a:51:f3:2b:8a:41:ba:55:23:b6:02: eb:b2:e4:6a:d0:da:81:73:9b:72:94:7f:76:57:7a:a1:bf:68: 4b:f8:af:5e:21:12:2c:da:e6:bc:9d:0d:ca:a6:86:0d:1f:e6: 70:e3:d4:06:47:ff:74:2f:37:e5:3c:9e:e3:5e:4b:36:ed:71: 8e:57:5a:ff:77:cd:c1:1f:99:36:d3:1f:a3:9a:4c:67:fa:3e: 5e:2f:bf:c8:0b:25:df:75:7c:f1:8d:86:00:53:45:48:66:4a: 7d:05:96:8c:96:19:db:d4:e5:0e:28:1c:da:40:9b:4b:a5:a4: 95:fe:cd:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkzRkMxMTAvBgNVBAUTKEUxQzFDNzJCNjc5M0E5MDNCQTNERTAzMTAyNzUxOUI0 MzAyMTc1NkEwHhcNMjQwNTAzMDU1MTA5WhcNMjQwNTEwMDU1MTA5WjAYMRYwFAYD VQQDEw02NjM0N2I0ZS1iYzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXKFCcpKhntKPTgQhi3ZB/tbVEe61drOrFz41g8WtNiCE2RDrvP+oTdqGdTF XRUXIfRPWjObb573Bc7awhanMKmxBKx23vo11hnvrtjSvs7k5jXl0jJmqPO6r3c0 QWbLKdcGSYXLDZkSKxSrPv6BcnwNLeDUd+V4rYysmfaaU/qhz53F9VFiDfitn6fX u4e6J8XchW59Am4O5esKZKoZMUK2igsMOsn/NXePx854SpdBZhGg8yut/5IPMTQQ +tpUllfeNReCfr7p4Ro0VWN+2OUIO8Pp8oDim2sbpJoTEm33ZLHsqVi3IJYjEasS xJ58F0SmHbvcNfc7ddySaek1NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0x+v6h qbhUTO71xWoCuE5wOOs1MB8GA1UdIwQYMBaAFOHBxytnk6kDuj3gMQJ1GbQwIXVq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTNGQy9BOTZGNEI3ODlB RjMxMUVEOTAxQUU0NUFDNEY5QUUwMi80Y0hISzJlVHFRTzZQZUF4QW5VWnREQWhk V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRjSEhLMmVUcVFPNlBlQXhBblVadERBaGRXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTNGQy9BOTZGNEI3ODlBRjMxMUVEOTAxQUU0NUFDNEY5QUUwMi80Y0hISzJlVHFR TzZQZUF4QW5VWnREQWhkV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZmpEjXlaBuENm9hI9ITcdmvEy6XeH1n0oyjQmYgw6f55B0eBq2v17 xfIRoyqUoiTGlXvRifV0OvB05hBy6BD2JwpyUUCEMPYQwEn3pAz4FkAS07QxqlSD Fg7mM8KNybqi+mRSZzhS+kz1XMKbSEQd5T3din79CAFLQIjtsrpj7L1GGQNealHz K4pBulUjtgLrsuRq0NqBc5tylH92V3qhv2hL+K9eIRIs2ua8nQ3KpoYNH+Zw49QG R/90LzflPJ7jXks27XGOV1r/d83BH5k20x+jmkxn+j5eL7/ICyXfdXzxjYYAU0VI Zkp9BZaMlhnb1OUOKBzaQJtLpaSV/s3/ -----END CERTIFICATE-----Generated at Fri May 3 06:28:38 2024 by rpki-client on console-fra.rpki-client.org