$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft File: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft (raw, json) Hash identifier: RyX+xHoi+GsAvP9Rdrt2LonogbPaaCSBxKqESp3DH1k= Subject key identifier: EE:83:0A:DA:83:2E:06:C5:0B:CA:EE:35:B6:7B:E0:B2:2D:8F:B4:5C Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5 Certificate issuer: /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5 Certificate serial: 2624 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft Manifest number: 25F8 Signing time: Sat 04 May 2024 16:01:54 +0000 Manifest this update: Sat 04 May 2024 16:01:54 +0000 Manifest next update: Sat 11 May 2024 16:01:54 +0000 Files and hashes: 1: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl (hash: 2ispkepHpmaxpHrjWzlATU9af96EiQ96i8JAA/spBnU=) 2: 253C821A388611ECBE8F7725C4F9AE02.roa (hash: h0WayUQjkIc+1k3KSDTUW0WJMm7/vM6nH4tLae6DlNo=) 3: A9756862B14111E5A3B46B15C4F9AE02.roa (hash: CErq+7tyfSQ9nseDr2Xs6iqpDm0v2q33o94Rq8g9lLM=) 4: 54F4ED62A4D511EA863BC00AC4F9AE02.roa (hash: rxGK9ShGMruxcWfCnGcDXjtTVQToBCiiwGyhhjyHhAQ=) 5: BCAE5314F75C11EB95BE8C87C4F9AE02.roa (hash: 0j4qXjmpQjaICT1LO2qciryz+Oskgntzqwfwnl8SXbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9764 (0x2624) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5 Validity Not Before: May 4 16:01:54 2024 GMT Not After : May 11 16:01:54 2024 GMT Subject: CN=66365bf2-3bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5b:15:6c:3f:47:e6:bb:15:33:10:df:a5:3e: f4:be:0f:83:fa:69:50:d7:a0:81:d3:b0:28:2c:aa: 8d:8d:ac:e3:e5:7b:95:9b:0d:a5:94:46:40:01:68: 83:5b:11:59:fc:28:a8:23:b0:d5:9a:a3:2e:7a:62: 52:5b:dd:e5:cc:e1:7a:c8:ba:19:f1:fe:6f:ec:c2: 18:02:83:76:e4:db:69:d4:61:32:b4:4d:0c:0a:36: c4:8b:34:ec:7e:43:c4:e5:f2:14:a6:a0:0c:a7:fb: 52:43:a8:c0:31:36:65:96:a7:7f:9a:9c:81:9f:68: 37:26:2a:63:3c:eb:79:1a:30:7f:96:f6:48:11:20: 8f:62:72:22:91:71:0e:6f:3f:f7:b8:5f:67:36:52: 9a:21:a8:14:66:84:d0:44:1e:76:81:5e:3e:08:43: 8a:66:2a:80:a5:00:d6:73:06:06:6a:c4:a1:ee:46: 5f:e7:24:49:50:d8:18:a8:7b:90:83:5b:e2:6d:6d: cb:05:18:f3:36:bf:19:f6:3b:0f:23:c9:8f:fd:2c: 3a:09:7e:7d:fe:e0:8b:77:7a:77:3e:52:e3:62:58: a6:78:3c:da:2e:a7:fd:76:f1:8a:6a:c2:e7:d8:cf: b2:d4:b9:36:73:f1:39:06:6b:64:27:4c:ca:51:f1: d7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:83:0A:DA:83:2E:06:C5:0B:CA:EE:35:B6:7B:E0:B2:2D:8F:B4:5C X509v3 Authority Key Identifier: keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:de:25:9e:c6:59:86:94:99:f3:3c:89:41:31:8d:2d:8b:66: 98:6e:da:79:fc:d9:e3:2b:fd:f4:4f:74:8c:48:8c:73:5a:a3: 70:c9:d3:68:ea:e4:10:3c:56:87:71:18:40:1a:7f:fe:53:00: a3:32:94:50:e0:99:7c:e0:fb:c7:64:66:3c:8d:3c:6e:ff:e2: 9a:80:6f:76:f2:4e:59:d2:6a:33:35:90:d9:3e:4e:84:58:d2: 32:98:f2:61:ef:fa:48:0c:e1:13:c3:94:b1:84:f7:15:86:37: c7:51:d7:5e:53:a1:8b:30:ef:dc:55:d7:40:6e:27:6d:93:07: fa:0e:28:9f:44:84:c6:0c:c9:37:17:a0:85:bc:32:ff:4a:06: 99:18:80:f6:9d:fd:d0:10:d4:32:ca:f9:34:89:81:1e:79:a9: 09:2c:9d:ff:26:b5:f6:61:61:6c:6c:7d:eb:d5:b8:88:9f:21: 83:57:2c:08:8c:75:a2:90:b4:a8:e8:fe:0f:6b:55:34:a4:b1: 7f:c8:81:04:6f:c8:72:ef:1b:06:35:8e:5d:3f:a0:71:6b:0f: 20:70:05:41:aa:33:57:70:e9:5c:c7:91:12:6b:57:61:8d:aa: ec:6b:fb:bd:90:d1:fc:7d:00:f1:c7:d2:68:82:f6:76:96:e6: 26:00:12:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYyMkYxMTAvBgNVBAUTKEUwOEFDNTUwMEUxRkYxOEZENUQ1MkI3OTdDNTA5N0RE MEFCOTRCRTUwHhcNMjQwNTA0MTYwMTU0WhcNMjQwNTExMTYwMTU0WjAYMRYwFAYD VQQDEw02NjM2NWJmMi0zYmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFsVbD9H5rsVMxDfpT70vg+D+mlQ16CB07AoLKqNjazj5XuVmw2llEZAAWiD WxFZ/CioI7DVmqMuemJSW93lzOF6yLoZ8f5v7MIYAoN25Ntp1GEytE0MCjbEizTs fkPE5fIUpqAMp/tSQ6jAMTZllqd/mpyBn2g3JipjPOt5GjB/lvZIESCPYnIikXEO bz/3uF9nNlKaIagUZoTQRB52gV4+CEOKZiqApQDWcwYGasSh7kZf5yRJUNgYqHuQ g1vibW3LBRjzNr8Z9jsPI8mP/Sw6CX59/uCLd3p3PlLjYlimeDzaLqf9dvGKasLn 2M+y1Lk2c/E5BmtkJ0zKUfHXcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO6DCtqD LgbFC8ruNbZ74LItj7RcMB8GA1UdIwQYMBaAFOCKxVAOH/GP1dUreXxQl90KuUvl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjIyRi82OTc1NDhDOERB Q0MxMUU0QTgxQUJFNTBDNEY5QUUwMi80SXJGVUE0ZjhZX1YxU3Q1ZkZDWDNRcTVT LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRJckZVQTRmOFlfVjFTdDVmRkNYM1FxNVMtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjIyRi82OTc1NDhDOERBQ0MxMUU0QTgxQUJFNTBDNEY5QUUwMi80SXJGVUE0ZjhZ X1YxU3Q1ZkZDWDNRcTVTLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBG3iWexlmGlJnzPIlBMY0ti2aYbtp5/NnjK/30T3SMSIxzWqNwydNo 6uQQPFaHcRhAGn/+UwCjMpRQ4Jl84PvHZGY8jTxu/+KagG928k5Z0mozNZDZPk6E WNIymPJh7/pIDOETw5SxhPcVhjfHUddeU6GLMO/cVddAbidtkwf6DiifRITGDMk3 F6CFvDL/SgaZGID2nf3QENQyyvk0iYEeeakJLJ3/JrX2YWFsbH3r1biInyGDVywI jHWikLSo6P4Pa1U0pLF/yIEEb8hy7xsGNY5dP6Bxaw8gcAVBqjNXcOlcx5ESa1dh jarsa/u9kNH8fQDxx9JogvZ2luYmABLo -----END CERTIFICATE-----Generated at Sat May 4 16:34:31 2024 by rpki-client on console-fra.rpki-client.org