$ rpki-client -vvf rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft File: 4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft (raw, json) Hash identifier: O7laNf7k86hFeoxTqPsyC+o8zyctZ5mHBHU+/dVHjN0= Subject key identifier: FF:85:5D:E9:20:B1:4A:95:16:46:42:B3:4C:82:BC:FA:A4:91:A5:BA Authority key identifier: E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07 Certificate issuer: /CN=A914CBF3/serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707 Certificate serial: 0B67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft Manifest number: 0B49 Signing time: Thu 02 May 2024 19:50:57 +0000 Manifest this update: Thu 02 May 2024 19:50:56 +0000 Manifest next update: Thu 09 May 2024 19:50:56 +0000 Files and hashes: 1: 4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl (hash: PmLJIxY1P/CbZyhFXCHij61gDiSbkYuYYqqBiNblgJg=) 2: 183DE570057A11EC822F230EC4F9AE02.roa (hash: T/McJ5En79O5emQR3B04RpPV6mswqcUCGzmxSn4YxJs=) 3: B32668C4D98C11EB905D7281C4F9AE02.roa (hash: CNGsqoztjTbrkhU2KUlENyCvY9hpR0eOtsVpUByDXno=) 4: 140E693613BF11ECA64D821AC4F9AE02.roa (hash: xm/w/oPJ3AzyQi0qyiNFGzq6ZLvojh9/dJGPYUqz8nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 19:50:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2919 (0xb67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CBF3/serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707 Validity Not Before: May 2 19:50:56 2024 GMT Not After : May 9 19:50:56 2024 GMT Subject: CN=6633eea0-04ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:12:ef:8f:61:b7:0a:65:48:e3:25:3c:bd:9b: ec:18:c6:99:c8:0f:14:c1:31:1b:25:ce:6d:ca:1a: 11:e6:7b:ba:6a:05:3f:08:9f:5a:b2:f3:f6:63:db: bf:7a:df:5e:53:70:5e:61:04:11:9a:8a:2e:79:81: fc:d7:5d:36:0a:bf:76:7c:d0:15:fa:20:c2:40:05: 5b:d5:bc:d1:ee:83:0c:f4:cc:c0:49:a1:df:17:0a: 8c:00:36:60:2c:5d:fc:e0:49:db:a1:ab:27:a1:1b: f2:f9:02:ff:da:9f:13:30:05:c4:4f:e0:ab:16:c5: 81:d0:b6:99:dc:6a:21:09:ae:d5:9f:98:e9:0c:f8: ad:fa:92:45:98:5c:0f:3d:dc:da:c0:57:2d:14:81: 2f:6f:32:1a:22:92:fe:e8:ef:9c:74:e2:01:02:b1: 88:5e:8c:5d:d4:8b:54:7d:3b:88:75:1f:eb:2a:29: b7:59:d6:84:d4:b2:95:74:8b:7b:ef:bd:61:b9:63: 3c:98:3f:08:b9:a9:66:6f:4b:20:23:4b:79:ca:32: e1:3a:b4:09:fb:c0:ef:bd:1e:e3:e8:73:61:96:9d: 63:9f:7a:7e:4a:67:8e:93:b9:c1:4f:08:e6:0e:d8: 4a:f9:06:1d:be:2f:c8:7f:0c:91:01:0d:a1:e6:29: 94:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:85:5D:E9:20:B1:4A:95:16:46:42:B3:4C:82:BC:FA:A4:91:A5:BA X509v3 Authority Key Identifier: keyid:E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:7a:3b:11:10:a0:3b:87:13:78:b6:9e:1d:94:d5:75:73:fc: 33:27:3f:8f:83:aa:ca:2f:c9:23:63:b7:2e:58:93:59:5d:d0: 01:43:a9:3b:28:1c:eb:42:c2:f7:13:a3:63:d2:64:50:a6:b0: e1:3f:4f:3f:85:23:c9:7e:a8:48:b0:46:b6:0b:73:9c:ea:9f: 8e:fd:4b:81:0a:4b:96:96:f6:fa:a9:37:1b:2e:96:c6:ed:c6: 54:ed:16:96:3e:9d:f9:eb:53:21:75:21:69:2e:09:98:f7:0f: 93:4b:06:f6:5f:49:07:79:7e:88:82:f1:87:33:1d:e9:40:14: 98:8c:03:54:b6:1c:a4:58:c1:5f:02:63:21:a1:0c:b8:64:f3: 48:4d:80:09:c8:5b:da:41:b2:7d:74:d8:9f:14:f8:c3:d3:0d: 98:4e:a0:49:2b:92:c1:e6:6a:a0:94:e1:9e:ad:8e:f9:78:0f: 8f:30:89:70:7f:0e:52:b2:b6:7d:05:4a:ba:46:5c:c6:e4:04: 29:18:3f:20:1f:9e:a2:04:6b:bf:33:e9:7a:87:f1:2b:59:ca: 9e:a4:7e:25:aa:96:19:19:1b:f1:18:83:e0:36:f6:32:dc:3f: 8a:12:39:7d:8d:07:3f:60:f8:a4:37:67:a4:df:33:ff:b9:14: 54:06:a0:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCRjMxMTAvBgNVBAUTKEUyNDQ5RTMxMjIyMDEzMUUyRTc2QzQyQzdDQ0M2REQx OTM1MTA3MDcwHhcNMjQwNTAyMTk1MDU2WhcNMjQwNTA5MTk1MDU2WjAYMRYwFAYD VQQDEw02NjMzZWVhMC0wNGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxLvj2G3CmVI4yU8vZvsGMaZyA8UwTEbJc5tyhoR5nu6agU/CJ9asvP2Y9u/ et9eU3BeYQQRmooueYH81102Cr92fNAV+iDCQAVb1bzR7oMM9MzASaHfFwqMADZg LF384EnboasnoRvy+QL/2p8TMAXET+CrFsWB0LaZ3GohCa7Vn5jpDPit+pJFmFwP PdzawFctFIEvbzIaIpL+6O+cdOIBArGIXoxd1ItUfTuIdR/rKim3WdaE1LKVdIt7 771huWM8mD8Iualmb0sgI0t5yjLhOrQJ+8DvvR7j6HNhlp1jn3p+SmeOk7nBTwjm DthK+QYdvi/IfwyRAQ2h5imUAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+FXekg sUqVFkZCs0yCvPqkkaW6MB8GA1UdIwQYMBaAFOJEnjEiIBMeLnbELHzMbdGTUQcH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0JGMy8xQkM2RUIyMDEx RTcxMUVBQjkwM0FBNzlDNEY5QUUwMi80a1NlTVNJZ0V4NHVkc1FzZk14dDBaTlJC d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRrU2VNU0lnRXg0dWRzUXNmTXh0MFpOUkJ3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0JGMy8xQkM2RUIyMDExRTcxMUVBQjkwM0FBNzlDNEY5QUUwMi80a1NlTVNJZ0V4 NHVkc1FzZk14dDBaTlJCd2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdejsREKA7hxN4tp4dlNV1c/wzJz+Pg6rKL8kjY7cuWJNZXdABQ6k7 KBzrQsL3E6Nj0mRQprDhP08/hSPJfqhIsEa2C3Oc6p+O/UuBCkuWlvb6qTcbLpbG 7cZU7RaWPp3561MhdSFpLgmY9w+TSwb2X0kHeX6IgvGHMx3pQBSYjANUthykWMFf AmMhoQy4ZPNITYAJyFvaQbJ9dNifFPjD0w2YTqBJK5LB5mqglOGerY75eA+PMIlw fw5SsrZ9BUq6RlzG5AQpGD8gH56iBGu/M+l6h/ErWcqepH4lqpYZGRvxGIPgNvYy 3D+KEjl9jQc/YPikN2ek3zP/uRRUBqCK -----END CERTIFICATE-----Generated at Thu May 2 22:28:50 2024 by rpki-client on console-ams.rpki-client.org