$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft File: 4VW4KofSjod2AvmU-P_T50Sq9IA.mft (raw, json) Hash identifier: M9lcr7D9LKF2FGyXzdqwoSlfalmncTRshNxhIoUnu3E= Subject key identifier: 2D:AE:6C:72:1D:31:F0:1B:E6:B3:1B:6B:BE:6F:55:A1:40:DF:67:E4 Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80 Certificate issuer: /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480 Certificate serial: 0721 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft Manifest number: 06E6 Signing time: Wed 24 Apr 2024 23:06:04 +0000 Manifest this update: Wed 24 Apr 2024 23:06:03 +0000 Manifest next update: Wed 01 May 2024 23:06:03 +0000 Files and hashes: 1: 4VW4KofSjod2AvmU-P_T50Sq9IA.crl (hash: 6h5mz2HXSBws1neoSyCkHeIyk+jfqISSoQHlbUyRXU4=) 2: C13E824AC49F11EBAC936D7AC4F9AE02.roa (hash: LhKQo3U+oEScw/Kkz5pzuY8n0wmOWUErN/K9Hepyn74=) 3: 86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa (hash: RvH9liGYtN3pCJtiX2u2KDE0nqgRa0CwWenaE2r1n/4=) 4: AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa (hash: ETA9fsTMXTvs7R5wnnSoRNAPiUdGbww+8O48Wqcn1fE=) 5: 82CA92C4703A11EBB9A2D47AC4F9AE02.roa (hash: oTDftbGKIdkc7TbDX1evZR/fDG6RQDBKvMBylDuZzKY=) 6: 0989F3EE120911EB83107638C4F9AE02.roa (hash: hEd7HFLaHuXdiEK5NPDfl9KI7qALqfHPsjTzHJrWnsk=) 7: 190D1EDC32C411EB98F62F5FC4F9AE02.roa (hash: AP4fYyNrfah1AP8l/VpzoQ3VWxnS3AOViyzVl1GgzI0=) 8: F255E05612DB11EBBE14D853C4F9AE02.roa (hash: Rn2RY2KvZWLWrXubluwgWCKN//O/t5ln1nPe/3YiWc4=) 9: BBBC061A122711EB952CAB3FC4F9AE02.roa (hash: SZMVejSV/qkmCA3U87HUM5KR3riZ9cH0CDAR6HS87ns=) 10: F5D6628C205011EB9EC2AA46C4F9AE02.roa (hash: 832ynpuro+RO0MMQGMpZcyGF5ZzjUvj68zh78iub0dU=) 11: 1BDAA63E12B211EBA631032CC4F9AE02.roa (hash: cX8QUr21/7Yflh3Ngq9ipDGjVl+RdRJBz1vVp6/kfUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 23:06:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1825 (0x721) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480 Validity Not Before: Apr 24 23:06:03 2024 GMT Not After : May 1 23:06:03 2024 GMT Subject: CN=6629905c-da19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:28:0c:bc:5d:8c:e7:32:95:95:96:e6:ba:84: 12:1e:a1:86:0d:2a:b2:d9:6c:e3:3c:97:f6:73:09: 4a:27:58:5e:ab:02:e1:54:1f:ee:17:95:d0:61:f2: 76:89:17:37:f7:52:60:66:4b:cd:26:19:da:5c:b3: 7b:34:91:c0:ed:77:8e:66:50:6f:39:29:9f:d4:7a: 20:56:23:a0:fd:d2:85:73:d5:26:80:9f:97:34:e4: de:e5:56:80:0e:d8:b3:fa:06:20:02:1d:c2:17:3a: 06:51:28:72:6b:a2:73:d5:e5:31:e5:8d:af:96:a9: d7:46:28:d5:fb:ec:a6:59:87:f1:3c:5a:0d:71:94: 1d:f6:14:8f:84:81:c1:52:16:b6:b0:97:bd:42:49: 90:19:4e:a2:8c:fc:e6:de:d5:5c:91:4d:e9:38:97: ec:d6:91:73:eb:19:cc:34:10:55:8b:17:f5:01:e1: 56:0b:1d:d6:93:41:e7:77:d9:82:21:59:48:21:a4: f6:71:3b:87:05:9f:d7:00:f8:93:96:7c:30:c1:47: cc:c6:f6:ad:00:e1:28:c9:41:bf:d6:a3:c3:2a:72: 26:c6:54:20:44:a8:d2:7b:47:ef:89:40:5e:59:37: d5:06:25:68:1f:95:d1:f8:03:82:d8:a4:24:3b:4c: a3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:AE:6C:72:1D:31:F0:1B:E6:B3:1B:6B:BE:6F:55:A1:40:DF:67:E4 X509v3 Authority Key Identifier: keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:11:d9:69:78:0d:20:06:c3:ed:68:59:36:11:1d:41:45:3c: 90:58:0d:17:61:fc:fb:34:7d:5a:5d:ad:76:14:b6:06:f0:0d: 2d:4a:f3:10:68:7b:ab:b5:e1:47:0f:6a:69:ad:92:76:af:f3: 15:b2:cb:2b:95:f5:fb:50:1c:56:cd:3a:77:99:87:84:ff:8a: 36:c7:85:7b:86:f9:ef:ce:79:f6:47:04:52:e1:d7:fc:73:a1: e3:7c:e0:51:ca:c4:05:84:85:06:19:88:ab:4c:8a:7b:c2:0b: 51:c3:67:f9:7f:34:db:b9:00:63:f3:04:44:37:6a:cb:4f:6a: 76:ee:25:7c:e6:ed:07:0f:5f:f0:96:6e:c3:df:40:ab:05:94: e3:06:f6:3c:53:bf:f0:4a:bd:b7:ae:95:af:39:e9:6f:20:03: eb:fd:b6:34:2e:aa:5e:0d:55:e2:dd:1c:6d:09:ce:b6:40:fd: 77:c1:90:58:65:28:23:4d:1b:7d:4e:98:c8:16:92:f5:6d:e9: 8c:4f:2c:40:0b:bb:33:4c:31:af:27:1b:55:45:c9:a6:08:81: 44:b4:29:f3:99:04:0c:86:07:8a:d7:82:ef:1e:ce:d2:0c:5a: bb:c6:5a:ce:c7:7e:65:07:0c:20:43:75:95:77:fa:aa:c6:68: f9:c2:f4:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyNUYxMTAvBgNVBAUTKEUxNTVCODJBODdEMjhFODc3NjAyRjk5NEY4RkZEM0U3 NDRBQUY0ODAwHhcNMjQwNDI0MjMwNjAzWhcNMjQwNTAxMjMwNjAzWjAYMRYwFAYD VQQDEw02NjI5OTA1Yy1kYTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4igMvF2M5zKVlZbmuoQSHqGGDSqy2WzjPJf2cwlKJ1heqwLhVB/uF5XQYfJ2 iRc391JgZkvNJhnaXLN7NJHA7XeOZlBvOSmf1HogViOg/dKFc9UmgJ+XNOTe5VaA Dtiz+gYgAh3CFzoGUShya6Jz1eUx5Y2vlqnXRijV++ymWYfxPFoNcZQd9hSPhIHB Uha2sJe9QkmQGU6ijPzm3tVckU3pOJfs1pFz6xnMNBBVixf1AeFWCx3Wk0Hnd9mC IVlIIaT2cTuHBZ/XAPiTlnwwwUfMxvatAOEoyUG/1qPDKnImxlQgRKjSe0fviUBe WTfVBiVoH5XR+AOC2KQkO0yjlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2ubHId MfAb5rMba75vVaFA32fkMB8GA1UdIwQYMBaAFOFVuCqH0o6HdgL5lPj/0+dEqvSA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI1Ri8yMkQ5MUY3MjEx Q0UxMUVCOEFEMDVBMkJDNEY5QUUwMi80Vlc0S29mU2pvZDJBdm1VLVBfVDUwU3E5 SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWVzRLb2ZTam9kMkF2bVUtUF9UNTBTcTlJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjI1Ri8yMkQ5MUY3MjExQ0UxMUVCOEFEMDVBMkJDNEY5QUUwMi80Vlc0S29mU2pv ZDJBdm1VLVBfVDUwU3E5SUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5EdlpeA0gBsPtaFk2ER1BRTyQWA0XYfz7NH1aXa12FLYG8A0tSvMQ aHurteFHD2pprZJ2r/MVsssrlfX7UBxWzTp3mYeE/4o2x4V7hvnvznn2RwRS4df8 c6HjfOBRysQFhIUGGYirTIp7wgtRw2f5fzTbuQBj8wREN2rLT2p27iV85u0HD1/w lm7D30CrBZTjBvY8U7/wSr23rpWvOelvIAPr/bY0LqpeDVXi3RxtCc62QP13wZBY ZSgjTRt9TpjIFpL1bemMTyxAC7szTDGvJxtVRcmmCIFEtCnzmQQMhgeK14LvHs7S DFq7xlrOx35lBwwgQ3WVd/qqxmj5wvTR -----END CERTIFICATE-----Generated at Thu Apr 25 02:01:31 2024 by rpki-client on console-ams.rpki-client.org