$ rpki-client -vvf rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft File: 4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft (raw, json) Hash identifier: 77fmLD3bBbrz+TjR9JWGgI08mWQvdAcfkLLFEjY1xRw= Subject key identifier: 48:F2:4A:2D:4A:D1:DF:02:E1:CE:26:C8:EB:04:11:9C:F6:7F:21:BC Authority key identifier: E2:31:D3:09:27:E4:9A:6A:22:D9:F6:AC:D7:06:10:3B:E3:E5:DC:16 Certificate issuer: /CN=A9188CCC/serialNumber=E231D30927E49A6A22D9F6ACD706103BE3E5DC16 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft Manifest number: 8C Signing time: Fri 17 May 2024 07:10:35 +0000 Manifest this update: Fri 17 May 2024 07:10:35 +0000 Manifest next update: Fri 24 May 2024 07:10:35 +0000 Files and hashes: 1: 4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl (hash: vWWIdZPmKdvwETsL6SEVSJHirxjhnQOy2OZi2SeM04o=) 2: 7D60D10A454811EEB97A0F46C4F9AE02.roa (hash: d5hv1IQLIOQ84kKr+HaWg9/KD2onjp9c3jsVzTncAnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:10:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188CCC/serialNumber=E231D30927E49A6A22D9F6ACD706103BE3E5DC16 Validity Not Before: May 17 07:10:35 2024 GMT Not After : May 24 07:10:35 2024 GMT Subject: CN=664702eb-559e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:11:66:d0:b2:08:f8:d4:13:23:7e:44:14:53: 51:17:09:b1:a0:42:bb:66:8f:b7:da:03:c1:e4:e6: f5:23:9b:c5:2a:50:ec:8c:3f:17:9f:8b:6b:0f:8d: da:3c:4e:86:ad:e5:b0:76:05:b0:96:bc:05:6f:2d: 9a:0a:4b:9f:dd:8d:4a:8d:ba:d0:b1:48:97:44:08: 2e:1f:73:7d:31:66:46:b3:2d:41:80:4b:18:c8:f2: 74:51:5f:4d:dc:c2:5f:ca:9a:00:2d:75:e2:09:16: 32:33:d2:e3:6b:88:8c:5a:17:cd:a6:37:a8:4a:b2: c1:36:a6:c3:f6:fc:5f:5a:1f:3b:8e:6c:99:42:f8: 39:ef:20:25:bc:18:57:73:72:12:7b:4c:b2:29:3a: bf:8b:01:8b:95:26:06:20:ec:f7:7d:70:b3:7e:7b: 74:78:4c:ec:97:59:27:16:4a:7a:9a:d0:fd:9e:34: d8:cd:54:c5:38:63:ac:ae:f9:76:13:80:97:87:56: 62:27:ec:57:fd:e7:be:53:42:47:c3:5c:3e:1d:33: 77:54:0c:42:82:ce:89:fa:b7:77:72:37:cd:5a:e2: ed:4a:83:04:a3:9d:a2:83:04:bf:9f:de:eb:c3:8c: ff:cc:3e:5c:b4:a2:18:e8:51:b1:97:15:5f:7e:4d: 8b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F2:4A:2D:4A:D1:DF:02:E1:CE:26:C8:EB:04:11:9C:F6:7F:21:BC X509v3 Authority Key Identifier: keyid:E2:31:D3:09:27:E4:9A:6A:22:D9:F6:AC:D7:06:10:3B:E3:E5:DC:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:59:7a:d1:b3:33:14:a7:6c:f6:2a:7c:c4:77:4f:a4:2e:e6: 17:c4:29:76:e6:f3:fc:73:10:89:d4:31:7c:a4:47:9a:2f:37: 2c:e4:35:88:5f:a4:9a:94:60:b1:eb:b7:03:f1:a6:09:64:10: 22:6c:5d:7b:2a:38:b5:ce:a6:aa:a5:c7:e7:f0:e3:05:a1:69: ee:2f:69:0b:20:b2:08:f0:28:2c:18:ba:37:25:f7:97:b9:7e: c6:59:c1:93:1d:7f:3c:56:6f:32:80:31:27:79:c3:0b:8f:b7: d8:ee:6c:b0:1c:4c:fd:38:0a:f9:13:c7:cd:1c:d5:4f:04:5d: 49:c3:bb:22:df:00:3f:d3:fd:1b:c9:d9:bb:b7:86:a5:b6:70: 88:f7:0f:98:98:91:86:5f:a8:40:00:ee:1c:1c:fd:a9:54:31: 1d:66:48:39:b4:a6:86:34:23:70:b8:d3:1e:e9:f5:e2:e9:f7: 41:6c:df:92:15:5c:0c:87:79:35:69:db:5f:7c:e6:13:b1:79: 8c:57:6e:e6:26:ce:a4:79:ce:0e:c8:3d:35:23:06:34:d8:3c: ce:6e:ba:00:f9:dd:a7:a7:01:6f:da:23:03:95:61:e6:48:80: 05:d2:e7:06:ba:cc:3e:9e:16:5a:74:46:1d:ba:44:35:7f:df: be:46:8d:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhDQ0MxMTAvBgNVBAUTKEUyMzFEMzA5MjdFNDlBNkEyMkQ5RjZBQ0Q3MDYxMDNC RTNFNURDMTYwHhcNMjQwNTE3MDcxMDM1WhcNMjQwNTI0MDcxMDM1WjAYMRYwFAYD VQQDEw02NjQ3MDJlYi01NTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9BFm0LII+NQTI35EFFNRFwmxoEK7Zo+32gPB5Ob1I5vFKlDsjD8Xn4trD43a PE6GreWwdgWwlrwFby2aCkuf3Y1KjbrQsUiXRAguH3N9MWZGsy1BgEsYyPJ0UV9N 3MJfypoALXXiCRYyM9Lja4iMWhfNpjeoSrLBNqbD9vxfWh87jmyZQvg57yAlvBhX c3ISe0yyKTq/iwGLlSYGIOz3fXCzfnt0eEzsl1knFkp6mtD9njTYzVTFOGOsrvl2 E4CXh1ZiJ+xX/ee+U0JHw1w+HTN3VAxCgs6J+rd3cjfNWuLtSoMEo52igwS/n97r w4z/zD5ctKIY6FGxlxVffk2LxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEjySi1K 0d8C4c4myOsEEZz2fyG8MB8GA1UdIwQYMBaAFOIx0wkn5JpqItn2rNcGEDvj5dwW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OENDQy83RTZFMDAxNDQ1 NDcxMUVFQUNEMzVGNDFDNEY5QUUwMi80akhUQ1Nma21tb2kyZmFzMXdZUU8tUGwz QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRqSFRDU2ZrbW1vaTJmYXMxd1lRTy1QbDNCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OENDQy83RTZFMDAxNDQ1NDcxMUVFQUNEMzVGNDFDNEY5QUUwMi80akhUQ1Nma21t b2kyZmFzMXdZUU8tUGwzQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5WXrRszMUp2z2KnzEd0+kLuYXxCl25vP8cxCJ1DF8pEeaLzcs5DWI X6SalGCx67cD8aYJZBAibF17Kji1zqaqpcfn8OMFoWnuL2kLILII8CgsGLo3JfeX uX7GWcGTHX88Vm8ygDEnecMLj7fY7mywHEz9OAr5E8fNHNVPBF1Jw7si3wA/0/0b ydm7t4altnCI9w+YmJGGX6hAAO4cHP2pVDEdZkg5tKaGNCNwuNMe6fXi6fdBbN+S FVwMh3k1adtffOYTsXmMV27mJs6kec4OyD01IwY02DzObroA+d2npwFv2iMDlWHm SIAF0ucGusw+nhZadEYdukQ1f9++Ro2E -----END CERTIFICATE-----Generated at Fri May 17 08:13:51 2024 by rpki-client on console-fra.rpki-client.org