$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft File: cp4vnB2HwhRzUHjP0hxjjgcVe10.mft (raw, json) Hash identifier: 7hDLn5RglCYg0jnOsU5JAZD+AZ73evNfvhUkxpuvcDQ= Subject key identifier: 22:83:83:38:1E:77:B7:7A:72:43:F2:EA:30:39:25:55:2F:9A:B3:45 Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D Certificate issuer: /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft Manifest number: 014B Signing time: Fri 17 May 2024 05:04:27 +0000 Manifest this update: Fri 17 May 2024 05:04:27 +0000 Manifest next update: Fri 24 May 2024 05:04:27 +0000 Files and hashes: 1: cp4vnB2HwhRzUHjP0hxjjgcVe10.crl (hash: +jxGpTq+ftdaZYmD1GkuNiCUMItwfCmTfAPSi2o+GEk=) 2: 2E2847223DB311EE9375493EC4F9AE02.roa (hash: fET2nEeTHfp1cyhVju7LyzEHA6BfDMGQdraJxngQge8=) 3: 54AABA183DB011EE9F747386C4F9AE02.roa (hash: JnIAEOecjOWd6OaEryZF64zkUZ8YTLV6MrRGAoQfh60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 05:04:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D Validity Not Before: May 17 05:04:27 2024 GMT Not After : May 24 05:04:27 2024 GMT Subject: CN=6646e55b-0ad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0c:69:a4:f3:07:58:3a:e7:11:fb:1c:ed:7a: 13:5c:53:e5:54:aa:68:69:1d:a1:29:42:bb:12:83: 85:76:76:4e:13:26:02:1c:9a:97:71:bf:ee:60:10: ff:7b:57:81:22:4a:39:da:8f:0f:ee:17:01:03:1f: 24:db:f5:7f:5c:07:9d:8f:da:27:2d:29:cd:00:04: a1:1c:bb:38:72:5a:61:26:8b:cc:30:fc:13:e1:1d: 08:38:69:29:d3:a0:8f:88:d6:a2:4f:bc:f9:c1:a1: ff:38:71:03:ce:8e:1e:f4:87:67:79:26:73:01:06: 41:09:f0:98:b9:37:05:3c:07:52:16:2e:4f:2b:ca: 56:d5:3b:86:af:52:4b:8e:bc:61:df:14:ef:f2:f0: 70:59:23:ee:9e:e6:13:3e:2e:79:8c:2f:b1:1c:ad: 48:e2:2e:ff:da:ce:10:a6:d0:9f:a0:bb:7f:d7:f5: 62:10:c5:06:c0:2f:40:5a:8a:03:fd:46:81:6e:bb: c6:1e:6d:b0:f0:74:0b:fd:fd:3a:24:ac:64:01:bc: 53:78:33:c8:6a:32:0a:b0:ca:db:29:1f:39:82:c3: 43:b3:92:a2:c3:2a:de:e2:e9:9b:ed:ae:ac:67:03: 26:de:fc:4c:80:3a:43:a0:46:7e:b5:cf:88:9f:e9: a1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:83:83:38:1E:77:B7:7A:72:43:F2:EA:30:39:25:55:2F:9A:B3:45 X509v3 Authority Key Identifier: keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:50:47:a3:90:b9:d5:76:74:d1:ed:15:21:1a:2e:a5:f9:bd: f9:c0:b8:2c:42:a9:4d:32:c2:4f:f9:8d:42:49:82:b8:61:d5: b6:45:87:30:ea:1b:22:33:59:75:ad:26:cd:af:2c:4c:6b:b9: 80:b9:32:f5:2a:c4:f7:72:01:26:39:03:97:43:80:10:1a:e2: fb:c8:06:48:7d:d4:3e:38:0c:e3:15:3f:2f:22:1c:c2:30:c9: 4b:b3:e5:e8:d8:5f:e8:e9:47:7b:26:de:bd:de:cb:e7:a7:db: 0a:cd:e7:9e:2f:cd:f3:39:38:63:76:78:2f:cc:78:8b:ec:a5: 2d:61:af:9e:cb:00:43:ad:5e:0c:e0:0f:bc:a7:72:71:66:30: 96:f7:f8:71:08:d6:9c:dd:93:f9:b9:91:d2:a4:07:c4:8f:10: f4:a5:5a:f5:8e:35:78:0d:60:82:54:4f:d0:bc:51:28:31:08: 70:70:dc:6e:30:0a:94:06:67:d5:34:19:94:4c:df:b7:a3:e4: 39:e3:0c:10:c6:1b:51:e7:df:ee:42:f0:ad:a3:57:97:79:f3: b8:05:50:50:2d:91:15:45:20:aa:e1:87:61:f9:97:3d:89:24: f7:74:55:76:8f:da:18:ab:61:87:52:ea:c9:8e:9b:1f:a1:5d: b5:1d:e4:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgwN0ExMTAvBgNVBAUTKDcyOUUyRjlDMUQ4N0MyMTQ3MzUwNzhDRkQyMUM2MzhF MDcxNTdCNUQwHhcNMjQwNTE3MDUwNDI3WhcNMjQwNTI0MDUwNDI3WjAYMRYwFAYD VQQDEw02NjQ2ZTU1Yi0wYWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvAxppPMHWDrnEfsc7XoTXFPlVKpoaR2hKUK7EoOFdnZOEyYCHJqXcb/uYBD/ e1eBIko52o8P7hcBAx8k2/V/XAedj9onLSnNAAShHLs4clphJovMMPwT4R0IOGkp 06CPiNaiT7z5waH/OHEDzo4e9IdneSZzAQZBCfCYuTcFPAdSFi5PK8pW1TuGr1JL jrxh3xTv8vBwWSPunuYTPi55jC+xHK1I4i7/2s4QptCfoLt/1/ViEMUGwC9AWooD /UaBbrvGHm2w8HQL/f06JKxkAbxTeDPIajIKsMrbKR85gsNDs5Kiwyre4umb7a6s ZwMm3vxMgDpDoEZ+tc+In+mhvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKDgzge d7d6ckPy6jA5JVUvmrNFMB8GA1UdIwQYMBaAFHKeL5wdh8IUc1B4z9IcY44HFXtd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODA3QS8wMjYzQUI0ODNF ODgxMUVEQTYxQTlCMkFDNEY5QUUwMi9jcDR2bkIySHdoUnpVSGpQMGh4ampnY1Zl MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NwNHZuQjJId2hSelVIalAwaHhqamdjVmUxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODA3QS8wMjYzQUI0ODNFODgxMUVEQTYxQTlCMkFDNEY5QUUwMi9jcDR2bkIySHdo UnpVSGpQMGh4ampnY1ZlMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOUEejkLnVdnTR7RUhGi6l+b35wLgsQqlNMsJP+Y1CSYK4YdW2RYcw 6hsiM1l1rSbNryxMa7mAuTL1KsT3cgEmOQOXQ4AQGuL7yAZIfdQ+OAzjFT8vIhzC MMlLs+Xo2F/o6Ud7Jt693svnp9sKzeeeL83zOThjdngvzHiL7KUtYa+eywBDrV4M 4A+8p3JxZjCW9/hxCNac3ZP5uZHSpAfEjxD0pVr1jjV4DWCCVE/QvFEoMQhwcNxu MAqUBmfVNBmUTN+3o+Q54wwQxhtR59/uQvCto1eXefO4BVBQLZEVRSCq4Ydh+Zc9 iST3dFV2j9oYq2GHUurJjpsfoV21HeQ1 -----END CERTIFICATE-----Generated at Fri May 17 06:18:06 2024 by rpki-client on console-fra.rpki-client.org