$ rpki-client -vvf rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft File: m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft (raw, json) Hash identifier: rIz1qcPaFuqkJ3MpUFOnG2GJrWG+tGLg11A2VedZpfY= Subject key identifier: BB:E8:DA:59:84:FD:3A:28:16:CC:97:58:65:E3:04:03:09:C2:40:9A Authority key identifier: 9B:82:59:F7:B3:C1:DE:DD:47:19:BC:0A:DC:58:7B:3D:B8:9E:7B:DB Certificate issuer: /CN=A9169DB2/serialNumber=9B8259F7B3C1DEDD4719BC0ADC587B3DB89E7BDB Certificate serial: 07E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft Manifest number: 07E0 Signing time: Sat 04 May 2024 22:07:32 +0000 Manifest this update: Sat 04 May 2024 22:07:32 +0000 Manifest next update: Sat 11 May 2024 22:07:32 +0000 Files and hashes: 1: m4JZ97PB3t1HGbwK3Fh7Pbiee9s.crl (hash: V7jCf5O8e/t5n8BI6C2qdtUMnOegS7/W+k2QjOqPwTU=) 2: CDBA3F66B9BD11EAAE22B109C4F9AE02.roa (hash: TS24Pjw+v6UdpS9dyJX3ZRfYWC+R7C8gFtsdpCM/hpQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.crl rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2022 (0x7e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169DB2/serialNumber=9B8259F7B3C1DEDD4719BC0ADC587B3DB89E7BDB Validity Not Before: May 4 22:07:32 2024 GMT Not After : May 11 22:07:32 2024 GMT Subject: CN=6636b1a4-ffe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:b5:a9:3c:c8:fe:69:5f:c6:71:df:05:b2:c0: f7:76:ea:74:b2:ac:e7:49:6d:e8:ed:f4:2b:07:a1: 45:2e:91:8a:89:27:39:fc:3f:ad:77:fa:59:0a:d0: d8:00:af:bb:20:d2:da:1c:3c:b4:33:7d:dd:3b:c4: 8f:3d:f6:3f:f8:e8:e5:97:8d:da:82:3d:02:0a:4e: 73:ca:d7:ed:c8:a9:fc:ea:b8:d8:68:eb:2a:66:9d: 77:91:28:af:b2:43:40:f8:5a:8c:8c:6e:1b:cb:6b: e2:76:db:aa:91:1b:08:32:f5:db:47:12:51:d4:52: 56:0c:e5:d3:4f:25:c2:47:d2:7d:e1:16:d0:3a:1d: 35:d7:2a:13:85:35:b8:8d:b8:8f:42:4b:06:ff:83: 81:45:8d:28:45:e4:d9:9f:12:f5:87:65:fc:22:4a: 3d:c7:20:7a:cb:64:a1:93:2c:1b:36:68:d1:29:b9: 72:d7:fd:15:90:2b:30:2b:51:21:5f:88:bf:eb:e1: 64:1c:da:5f:0a:61:a2:25:d2:53:4c:f8:fb:f7:7e: d1:b0:03:38:a1:b8:c6:38:dd:b1:3f:37:d5:c1:98: 88:04:e7:cb:8d:1b:81:52:58:09:35:10:9f:19:e2: f9:78:71:03:f4:1b:75:54:f5:cb:20:63:8e:ac:3c: 71:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E8:DA:59:84:FD:3A:28:16:CC:97:58:65:E3:04:03:09:C2:40:9A X509v3 Authority Key Identifier: keyid:9B:82:59:F7:B3:C1:DE:DD:47:19:BC:0A:DC:58:7B:3D:B8:9E:7B:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:de:9e:70:3e:f3:03:38:f4:b3:d9:61:69:f8:cb:8d:3e:37: ab:96:61:29:ba:7b:02:73:9d:52:df:c6:d2:4a:23:83:2e:58: bf:64:a6:e9:4a:40:96:c7:a4:8c:e6:dc:64:6d:09:95:8d:4f: cb:8b:d5:5b:1a:dd:cc:3d:bf:34:5f:ae:72:64:60:9b:6e:b5: 1e:96:52:a1:8b:7a:71:ea:03:be:ce:5b:77:79:b6:01:70:ed: 9b:aa:0f:3f:1d:7e:c8:e2:e0:68:bb:c4:a8:c0:22:7f:8f:90: 54:f9:b9:73:89:99:32:f8:95:30:f0:5e:5a:33:d0:fa:ce:b6: ea:df:bd:59:59:de:7a:8d:28:1e:b9:49:d4:81:9a:83:ea:7f: be:cc:8f:a5:18:67:30:c0:14:3a:73:96:6d:13:d1:01:75:c8: 96:95:02:de:e8:bf:ec:1d:6d:7a:0d:a3:81:66:6a:bb:cd:b1: 7f:3a:fe:8a:e6:40:bb:f9:a1:08:31:8a:fa:9d:f8:60:2b:a3: e2:00:32:52:57:78:c0:6a:34:52:c2:bd:e8:f5:c1:11:42:e5: db:ac:db:fa:46:3e:b8:f1:9c:c8:26:6e:a0:e9:70:5c:13:2f: 3a:98:55:46:aa:fc:65:21:66:bc:ec:ac:a8:b3:49:37:58:2d: 2b:e6:63:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlEQjIxMTAvBgNVBAUTKDlCODI1OUY3QjNDMURFREQ0NzE5QkMwQURDNTg3QjNE Qjg5RTdCREIwHhcNMjQwNTA0MjIwNzMyWhcNMjQwNTExMjIwNzMyWjAYMRYwFAYD VQQDEw02NjM2YjFhNC1mZmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+rWpPMj+aV/Gcd8FssD3dup0sqznSW3o7fQrB6FFLpGKiSc5/D+td/pZCtDY AK+7INLaHDy0M33dO8SPPfY/+Ojll43agj0CCk5zytftyKn86rjYaOsqZp13kSiv skNA+FqMjG4by2vidtuqkRsIMvXbRxJR1FJWDOXTTyXCR9J94RbQOh011yoThTW4 jbiPQksG/4OBRY0oReTZnxL1h2X8Iko9xyB6y2ShkywbNmjRKbly1/0VkCswK1Eh X4i/6+FkHNpfCmGiJdJTTPj7937RsAM4objGON2xPzfVwZiIBOfLjRuBUlgJNRCf GeL5eHED9Bt1VPXLIGOOrDxxNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvo2lmE /TooFsyXWGXjBAMJwkCaMB8GA1UdIwQYMBaAFJuCWfezwd7dRxm8CtxYez24nnvb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OURCMi9BOUNDNDlCNkI5 QkIxMUVBQkREMEZEODRDNEY5QUUwMi9tNEpaOTdQQjN0MUhHYndLM0ZoN1BiaWVl OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL200Slo5N1BCM3QxSEdid0szRmg3UGJpZWU5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OURCMi9BOUNDNDlCNkI5QkIxMUVBQkREMEZEODRDNEY5QUUwMi9tNEpaOTdQQjN0 MUhHYndLM0ZoN1BiaWVlOXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB13p5wPvMDOPSz2WFp+MuNPjerlmEpunsCc51S38bSSiODLli/ZKbp SkCWx6SM5txkbQmVjU/Li9VbGt3MPb80X65yZGCbbrUellKhi3px6gO+zlt3ebYB cO2bqg8/HX7I4uBou8SowCJ/j5BU+blziZky+JUw8F5aM9D6zrbq371ZWd56jSge uUnUgZqD6n++zI+lGGcwwBQ6c5ZtE9EBdciWlQLe6L/sHW16DaOBZmq7zbF/Ov6K 5kC7+aEIMYr6nfhgK6PiADJSV3jAajRSwr3o9cERQuXbrNv6Rj648ZzIJm6g6XBc Ey86mFVGqvxlIWa87Kyos0k3WC0r5mMz -----END CERTIFICATE-----Generated at Sun May 5 00:12:23 2024 by rpki-client on console-fra.rpki-client.org