$ rpki-client -vvf rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft File: Ql8CIk3cYp0viP9mPH9K32zWRT4.mft (raw, json) Hash identifier: wP5QInZG6P76BsnjPrSvhJqgt7QtIQ3MDwiTsPpeT4A= Subject key identifier: 04:50:F2:8B:A4:26:C8:B6:AD:FC:42:6C:1E:96:82:86:80:81:FB:4D Authority key identifier: 42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E Certificate issuer: /CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft Manifest number: 01AA Signing time: Fri 03 May 2024 04:40:54 +0000 Manifest this update: Fri 03 May 2024 04:40:54 +0000 Manifest next update: Fri 10 May 2024 04:40:54 +0000 Files and hashes: 1: Ql8CIk3cYp0viP9mPH9K32zWRT4.crl (hash: t97BrO7ozNKm/78LgH3vAIkFXrju4QjQSiLWmNE9I4k=) 2: 55C580C2108411EDB5AE6333C4F9AE02.roa (hash: 9NKplmN+iiuv6c+kMy1FA50u91JuPs1rSgUrzKrPqRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Validity Not Before: May 3 04:40:54 2024 GMT Not After : May 10 04:40:54 2024 GMT Subject: CN=66346ad6-1459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:95:cf:6c:49:3c:de:3f:a1:69:86:34:69:87: 87:1b:4e:ed:f3:86:99:84:7b:f2:1d:04:cc:88:73: 43:5c:14:a8:30:85:87:c2:49:c1:93:a3:7f:a2:5e: 1f:3e:c0:59:55:c9:5a:65:b3:bf:8f:d9:61:10:3b: d2:84:78:76:c7:62:49:4d:b7:a0:2d:2b:0e:17:49: c1:65:42:d0:e5:56:45:66:36:03:56:c5:de:c8:ca: e3:a0:94:4d:e2:c3:0a:20:6e:6d:7c:94:83:9c:e1: be:48:83:1f:58:13:a6:7f:f1:6d:5f:5f:ec:21:d5: 59:0a:9b:49:2e:1d:ca:a9:8a:36:57:d5:d5:d5:82: 6e:ff:5a:bb:0b:3c:04:e4:9a:29:16:2d:be:08:98: fa:57:9e:c8:ee:2d:ec:e2:84:38:45:2d:1d:ec:27: 51:ca:9c:fc:57:e0:22:28:52:c8:5e:da:64:ca:01: 22:b5:2a:de:5d:2c:04:e1:2b:3c:e8:bd:53:67:3e: 9d:0a:6b:4b:96:a2:1b:ff:4f:01:8a:18:ce:38:e6: b4:fc:d0:d6:fb:a5:ba:b4:50:ae:36:8b:03:3e:3a: 09:da:76:1c:73:eb:3e:d3:c3:27:87:ca:90:3e:98: a4:c7:32:4b:20:70:f1:2f:a0:1d:f5:1f:ca:9f:f8: dd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:50:F2:8B:A4:26:C8:B6:AD:FC:42:6C:1E:96:82:86:80:81:FB:4D X509v3 Authority Key Identifier: keyid:42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:85:be:bc:0f:85:d9:4b:db:fd:a6:19:4b:5c:1c:29:95:d7: 28:37:d9:cd:7f:de:f8:d2:24:29:bd:8d:75:b2:0e:75:55:7d: 78:41:94:a4:5b:d2:f6:26:3d:92:1e:62:8d:39:d8:2d:3d:c5: 09:54:c3:fc:de:7c:9d:36:6c:3c:27:5b:10:7c:e5:95:73:b0: 8d:cd:49:26:3d:b9:6a:bc:3c:a9:b6:b5:41:93:bf:33:f9:e3: 44:0c:3b:7a:c9:32:81:46:5c:16:2e:22:7b:68:5f:9b:e6:0b: 83:a3:b0:b4:27:6b:0e:70:9a:16:3d:85:bc:9e:c6:a1:38:de: 49:04:99:a1:b6:89:32:54:e8:fe:6f:f7:fa:99:da:9c:42:51: 58:87:fa:c5:61:cd:5c:8d:54:55:54:61:73:ad:86:b9:22:26: 1a:84:6a:00:dc:20:ba:be:bc:70:71:90:cc:e3:a9:99:c3:1b: 8e:21:04:90:09:5e:42:f1:3d:fe:e5:a8:b7:e6:1c:eb:74:89: ac:53:4e:bd:46:2f:16:20:df:61:25:30:43:1b:ca:cd:b9:e4: a0:e9:65:93:5f:de:62:eb:c7:0a:50:08:b9:1c:9f:d3:1b:29: ce:d3:cb:30:26:fe:ca:79:dd:8b:c8:2e:1a:75:45:bf:61:b3: da:a3:0a:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzMEExMTAvBgNVBAUTKDQyNUYwMjIyNEREQzYyOUQyRjg4RkY2NjNDN0Y0QURG NkNENjQ1M0UwHhcNMjQwNTAzMDQ0MDU0WhcNMjQwNTEwMDQ0MDU0WjAYMRYwFAYD VQQDEw02NjM0NmFkNi0xNDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ZXPbEk83j+haYY0aYeHG07t84aZhHvyHQTMiHNDXBSoMIWHwknBk6N/ol4f PsBZVclaZbO/j9lhEDvShHh2x2JJTbegLSsOF0nBZULQ5VZFZjYDVsXeyMrjoJRN 4sMKIG5tfJSDnOG+SIMfWBOmf/FtX1/sIdVZCptJLh3KqYo2V9XV1YJu/1q7CzwE 5JopFi2+CJj6V57I7i3s4oQ4RS0d7CdRypz8V+AiKFLIXtpkygEitSreXSwE4Ss8 6L1TZz6dCmtLlqIb/08BihjOOOa0/NDW+6W6tFCuNosDPjoJ2nYcc+s+08Mnh8qQ PpikxzJLIHDxL6Ad9R/Kn/jdCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARQ8ouk Jsi2rfxCbB6WgoaAgftNMB8GA1UdIwQYMBaAFEJfAiJN3GKdL4j/Zjx/St9s1kU+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDMwQS83RUJGN0NDMjBG RjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lwMHZpUDltUEg5SzMyeldS VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FsOENJazNjWXAwdmlQOW1QSDlLMzJ6V1JUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDMwQS83RUJGN0NDMjBGRjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lw MHZpUDltUEg5SzMyeldSVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkhb68D4XZS9v9phlLXBwpldcoN9nNf9740iQpvY11sg51VX14QZSk W9L2Jj2SHmKNOdgtPcUJVMP83nydNmw8J1sQfOWVc7CNzUkmPblqvDyptrVBk78z +eNEDDt6yTKBRlwWLiJ7aF+b5guDo7C0J2sOcJoWPYW8nsahON5JBJmhtokyVOj+ b/f6mdqcQlFYh/rFYc1cjVRVVGFzrYa5IiYahGoA3CC6vrxwcZDM46mZwxuOIQSQ CV5C8T3+5ai35hzrdImsU069Ri8WIN9hJTBDG8rNueSg6WWTX95i68cKUAi5HJ/T GynO08swJv7Ked2LyC4adUW/YbPaowqT -----END CERTIFICATE-----Generated at Fri May 3 06:28:39 2024 by rpki-client on console-fra.rpki-client.org