$ rpki-client -vvf rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft File: 4rutOTFYoGdMaUnsO4oLc_hgKaI.mft (raw, json) Hash identifier: Kkm3Y915OeFOT6tTdq5ikrpx7zUNtdcYtDWDq6qoLPE= Subject key identifier: DD:B2:28:6F:1E:76:13:FC:13:CF:3F:CF:45:DC:C4:38:D9:59:AD:9B Authority key identifier: E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2 Certificate issuer: /CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2 Certificate serial: 01A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft Manifest number: 019B Signing time: Fri 03 May 2024 04:45:59 +0000 Manifest this update: Fri 03 May 2024 04:45:58 +0000 Manifest next update: Fri 10 May 2024 04:45:58 +0000 Files and hashes: 1: 4rutOTFYoGdMaUnsO4oLc_hgKaI.crl (hash: ycAk8RrpJvRryTGBM4MU1eeP629s9Izyw0GdVpS5hGQ=) 2: BBF0DD5216CD11EDBB046C79C4F9AE02.roa (hash: pJ33Fqdsq89lCynqwTIJ7dF7Oc4s7vkCVWgVGXgZQQM=) 3: EC75126616CA11ED8E290A59C4F9AE02.roa (hash: 6XDWQ95VUkI8MnkeUoSMN6HEeM3s71jNlFk6+gKQ8uY=) 4: 4EEAF1DAE96211ED9A14B935C4F9AE02.roa (hash: cng98HucCijGH1pmZUqgjG4O/YHy20x5drkYzn1NIS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2 Validity Not Before: May 3 04:45:58 2024 GMT Not After : May 10 04:45:58 2024 GMT Subject: CN=66346c07-88c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f5:fa:8b:1d:10:c0:67:40:6f:0f:30:17:dd: ee:71:5a:e1:bf:0d:43:4f:d2:cd:3b:24:2f:cc:63: b6:37:96:18:ba:63:96:ae:c0:ef:31:be:7f:99:6f: 6c:0e:d6:33:5b:5d:af:88:a6:27:7e:7e:1f:a1:e9: 60:f2:eb:4e:1c:7a:7d:ba:11:71:e6:f9:5e:b0:c4: c4:d0:0e:74:de:f0:a7:2b:8b:8f:2b:e8:e3:30:71: 22:99:39:39:e3:33:ed:06:d5:0b:b7:96:95:5e:8d: 3b:a5:5f:c6:bf:a4:77:bf:d5:ec:66:d4:2c:a8:78: 21:4c:80:fe:3b:3b:49:85:f8:6c:84:86:c9:81:14: ed:72:9d:04:f6:87:83:1a:1b:43:d3:bc:8e:f4:f1: b1:ed:f4:be:e9:fb:3d:ca:7e:b0:42:3a:dd:dd:8c: 45:36:1b:52:60:7e:1c:98:65:a3:f5:ff:5b:cd:3f: 0c:96:7f:ab:52:28:fb:0f:33:85:cc:df:cd:35:32: 52:8f:72:f8:d7:ea:3d:00:e9:dc:2d:a3:81:59:9e: 88:4c:66:5a:32:00:ea:e8:f4:ff:41:d7:43:f0:59: 0c:d4:85:70:ef:15:d3:63:4a:33:6f:03:5c:75:36: 6a:91:63:09:8c:8a:3b:7e:40:9d:59:4f:72:99:05: 17:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B2:28:6F:1E:76:13:FC:13:CF:3F:CF:45:DC:C4:38:D9:59:AD:9B X509v3 Authority Key Identifier: keyid:E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:4a:d3:57:4c:2c:31:f2:ed:a5:27:90:f8:4c:98:f8:ad:1a: 78:d5:9c:c8:c5:e4:13:60:ab:df:99:9e:48:0f:47:27:9f:76: 16:b0:fd:a4:05:4e:81:df:09:c1:8f:8e:b9:7b:f5:76:d5:96: b9:64:77:99:fb:76:7d:82:f6:b9:d2:70:d1:08:c1:d3:90:87: 08:58:23:99:38:ba:3a:50:3d:04:6a:ef:08:37:03:de:f9:5b: 23:39:3d:c6:db:da:8d:97:25:d5:74:dd:b4:f5:c6:42:64:e8: 3d:b3:ac:84:bc:87:47:8c:83:f8:79:97:5f:8b:59:24:03:7c: 5a:87:41:83:48:cb:18:b7:ed:ba:14:5b:b8:11:17:e2:48:fc: 46:ad:62:56:a9:01:cd:d4:e7:6a:55:c2:90:cb:4d:39:6e:9f: fb:f1:22:0d:b7:6c:8b:06:43:2b:b2:aa:67:9a:4a:0a:2e:b5: 81:d3:ab:9e:90:e3:6e:df:08:5f:09:1b:f2:91:a5:e7:a4:30: 1d:15:6e:e0:ea:ef:84:16:1f:82:a1:7b:ff:aa:5c:f8:17:21: 9f:e1:fe:8d:6f:fa:4f:0c:d7:f9:46:79:f8:75:ba:c5:b7:d6: 1a:04:46:4f:55:45:ea:b6:05:ec:dd:4f:d5:47:77:db:15:18: 64:04:2d:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3NDAxMTAvBgNVBAUTKEUyQkJBRDM5MzE1OEEwNjc0QzY5NDlFQzNCOEEwQjcz Rjg2MDI5QTIwHhcNMjQwNTAzMDQ0NTU4WhcNMjQwNTEwMDQ0NTU4WjAYMRYwFAYD VQQDEw02NjM0NmMwNy04OGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5PX6ix0QwGdAbw8wF93ucVrhvw1DT9LNOyQvzGO2N5YYumOWrsDvMb5/mW9s DtYzW12viKYnfn4foelg8utOHHp9uhFx5vlesMTE0A503vCnK4uPK+jjMHEimTk5 4zPtBtULt5aVXo07pV/Gv6R3v9XsZtQsqHghTID+OztJhfhshIbJgRTtcp0E9oeD GhtD07yO9PGx7fS+6fs9yn6wQjrd3YxFNhtSYH4cmGWj9f9bzT8Mln+rUij7DzOF zN/NNTJSj3L41+o9AOncLaOBWZ6ITGZaMgDq6PT/QddD8FkM1IVw7xXTY0ozbwNc dTZqkWMJjIo7fkCdWU9ymQUXZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2yKG8e dhP8E88/z0XcxDjZWa2bMB8GA1UdIwQYMBaAFOK7rTkxWKBnTGlJ7DuKC3P4YCmi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njc0MC8zNTI4QjBDQzE2 QzAxMUVEODAwODlBMjFDNEY5QUUwMi80cnV0T1RGWW9HZE1hVW5zTzRvTGNfaGdL YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRydXRPVEZZb0dkTWFVbnNPNG9MY19oZ0thSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njc0MC8zNTI4QjBDQzE2QzAxMUVEODAwODlBMjFDNEY5QUUwMi80cnV0T1RGWW9H ZE1hVW5zTzRvTGNfaGdLYUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVStNXTCwx8u2lJ5D4TJj4rRp41ZzIxeQTYKvfmZ5ID0cnn3YWsP2k BU6B3wnBj465e/V21Za5ZHeZ+3Z9gva50nDRCMHTkIcIWCOZOLo6UD0Eau8INwPe +VsjOT3G29qNlyXVdN209cZCZOg9s6yEvIdHjIP4eZdfi1kkA3xah0GDSMsYt+26 FFu4ERfiSPxGrWJWqQHN1OdqVcKQy005bp/78SINt2yLBkMrsqpnmkoKLrWB06ue kONu3whfCRvykaXnpDAdFW7g6u+EFh+CoXv/qlz4FyGf4f6Nb/pPDNf5Rnn4dbrF t9YaBEZPVUXqtgXs3U/VR3fbFRhkBC35 -----END CERTIFICATE-----Generated at Fri May 3 05:32:33 2024 by rpki-client on console-ams.rpki-client.org