$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.mft File: 4j5WiDpuN63lIjxBOzs7D3gbySk.mft (raw, json) Hash identifier: nTN3+91Z+P30MvjQOrFU7KWecNLAJ76zBUd+ZJDqyQA= Subject key identifier: 32:7D:A1:87:D0:EA:E5:1A:02:07:A1:8A:81:AA:EA:82:26:A3:A1:72 Authority key identifier: E2:3E:56:88:3A:6E:37:AD:E5:22:3C:41:3B:3B:3B:0F:78:1B:C9:29 Certificate issuer: /CN=A91DF645/serialNumber=E23E56883A6E37ADE5223C413B3B3B0F781BC929 Certificate serial: 10A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4j5WiDpuN63lIjxBOzs7D3gbySk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.mft Manifest number: 109E Signing time: Sat 04 May 2024 18:04:06 +0000 Manifest this update: Sat 04 May 2024 18:04:04 +0000 Manifest next update: Sat 11 May 2024 18:04:04 +0000 Files and hashes: 1: 4j5WiDpuN63lIjxBOzs7D3gbySk.crl (hash: pJdcqj/EchSa2CRVqAhEV4t7S61n48Fwe0d6ZgwWz1g=) 2: C5EA2D4801F711E9B44DC70EC4F9AE02.roa (hash: qeAmMfoPe58Mu2dcre3dWxP4LZgoQwxKfmoeR22NktQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.crl rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4j5WiDpuN63lIjxBOzs7D3gbySk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:04:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4261 (0x10a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF645/serialNumber=E23E56883A6E37ADE5223C413B3B3B0F781BC929 Validity Not Before: May 4 18:04:04 2024 GMT Not After : May 11 18:04:04 2024 GMT Subject: CN=66367895-4646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d6:ac:14:58:80:c7:b5:cc:50:a0:e7:53:4b: 22:69:a5:b8:06:6b:16:f2:9b:6c:d9:6d:d0:68:52: 0e:19:19:8b:a2:5d:d0:11:73:34:d9:a6:78:4b:e2: ee:be:11:75:8b:98:87:e2:d0:70:9d:e2:2d:a6:ce: 4b:72:d1:4b:4e:c1:cf:bf:f6:cf:8d:bd:d7:77:24: 29:10:6d:e8:e0:3d:85:14:7f:32:99:f7:de:77:7d: 05:71:2f:48:65:ee:15:a7:41:99:be:bc:45:e6:81: f9:a8:67:3f:89:71:4b:bb:31:8b:9c:97:24:23:ed: 8e:53:2c:7c:27:03:78:4f:06:6f:29:58:4e:21:b6: 19:b0:9d:96:d7:e7:a9:84:4f:11:55:f8:4d:65:bb: 69:d7:cf:9e:9d:3c:8e:fb:98:e7:6b:dc:fd:dc:bc: 8f:05:69:24:04:5d:17:66:4b:fe:21:7c:ba:58:5a: 45:7d:d0:bd:32:cd:c1:ce:bd:cb:de:27:a9:a2:4b: 04:8f:cd:c0:48:10:96:b3:41:db:59:ed:f7:15:73: c1:9d:d6:36:82:37:f7:96:1f:c9:f5:b6:0d:bb:f5: 66:80:85:ff:ab:99:a8:f3:0d:de:70:e6:52:29:c1: 5f:e0:7d:00:77:8e:f2:44:44:3b:40:cb:d6:fd:66: 65:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7D:A1:87:D0:EA:E5:1A:02:07:A1:8A:81:AA:EA:82:26:A3:A1:72 X509v3 Authority Key Identifier: keyid:E2:3E:56:88:3A:6E:37:AD:E5:22:3C:41:3B:3B:3B:0F:78:1B:C9:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4j5WiDpuN63lIjxBOzs7D3gbySk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:79:3b:66:6b:b6:d2:f2:8d:72:3d:cf:d8:f3:11:c3:e5:19: fc:de:61:8b:22:eb:e2:96:2d:3a:ea:fd:f4:fd:e6:b9:9c:94: a7:5d:56:d8:4c:87:d4:bf:67:5f:41:b6:72:e3:d6:ef:a9:00: 40:ae:9c:a9:cb:de:2e:65:c6:38:09:22:50:93:ac:73:b7:f7: 92:2e:f7:d6:aa:46:4b:2f:b8:8f:90:10:06:66:3a:d0:00:4c: db:85:dc:a6:3e:47:60:51:1c:3e:63:9c:cb:da:80:a5:8e:84: c6:50:47:8e:44:9b:1e:53:5a:b6:d8:67:80:04:e9:2b:e8:73: f3:81:19:fa:d3:27:8a:26:85:00:72:1b:11:ce:2f:73:e1:83: 51:80:ac:55:86:dd:43:96:20:92:3f:2b:cc:e0:a8:80:48:f9: d3:aa:ee:77:58:55:43:b6:6e:84:c9:d5:e7:4d:35:3a:3f:01: 2d:02:3a:d3:dc:e3:31:0a:c8:a1:3d:14:99:e9:7c:0f:18:14: 62:69:e9:e2:30:58:8a:8f:fb:24:2b:2d:0f:54:27:40:5c:6c: 2f:be:99:43:f3:7d:e6:0c:1d:6a:11:b9:81:e4:8d:f4:c3:54: 16:8a:29:77:bd:e0:58:2d:00:4e:53:6a:08:c6:74:cb:86:45: f2:fd:3d:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY2NDUxMTAvBgNVBAUTKEUyM0U1Njg4M0E2RTM3QURFNTIyM0M0MTNCM0IzQjBG NzgxQkM5MjkwHhcNMjQwNTA0MTgwNDA0WhcNMjQwNTExMTgwNDA0WjAYMRYwFAYD VQQDEw02NjM2Nzg5NS00NjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9asFFiAx7XMUKDnU0siaaW4BmsW8pts2W3QaFIOGRmLol3QEXM02aZ4S+Lu vhF1i5iH4tBwneItps5LctFLTsHPv/bPjb3XdyQpEG3o4D2FFH8ymffed30FcS9I Ze4Vp0GZvrxF5oH5qGc/iXFLuzGLnJckI+2OUyx8JwN4TwZvKVhOIbYZsJ2W1+ep hE8RVfhNZbtp18+enTyO+5jna9z93LyPBWkkBF0XZkv+IXy6WFpFfdC9Ms3Bzr3L 3iepoksEj83ASBCWs0HbWe33FXPBndY2gjf3lh/J9bYNu/VmgIX/q5mo8w3ecOZS KcFf4H0Ad47yREQ7QMvW/WZlIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJ9oYfQ 6uUaAgehioGq6oImo6FyMB8GA1UdIwQYMBaAFOI+Vog6bjet5SI8QTs7Ow94G8kp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjY0NS9BQjE2RTU1MjAx RjYxMUU5QUJCODg3MERDNEY5QUUwMi80ajVXaURwdU42M2xJanhCT3pzN0QzZ2J5 U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRqNVdpRHB1TjYzbElqeEJPenM3RDNnYnlTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjY0NS9BQjE2RTU1MjAxRjYxMUU5QUJCODg3MERDNEY5QUUwMi80ajVXaURwdU42 M2xJanhCT3pzN0QzZ2J5U2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZeTtma7bS8o1yPc/Y8xHD5Rn83mGLIuvili066v30/ea5nJSnXVbY TIfUv2dfQbZy49bvqQBArpypy94uZcY4CSJQk6xzt/eSLvfWqkZLL7iPkBAGZjrQ AEzbhdymPkdgURw+Y5zL2oCljoTGUEeORJseU1q22GeABOkr6HPzgRn60yeKJoUA chsRzi9z4YNRgKxVht1DliCSPyvM4KiASPnTqu53WFVDtm6EydXnTTU6PwEtAjrT 3OMxCsihPRSZ6XwPGBRiaeniMFiKj/skKy0PVCdAXGwvvplD833mDB1qEbmB5I30 w1QWiil3veBYLQBOU2oIxnTLhkXy/T0H -----END CERTIFICATE-----Generated at Sat May 4 19:58:44 2024 by rpki-client on console-ams.rpki-client.org