$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft File: 4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft (raw, json) Hash identifier: YKTcU1urM/xuj59bchSFMn6RSowyGoQ8zWwB8sZkhdw= Subject key identifier: 98:60:F4:37:40:DF:B3:58:44:53:A3:18:FD:C1:C3:94:AE:DA:8A:0A Authority key identifier: E1:D9:5A:3C:BD:D9:20:29:AE:BE:1E:13:08:09:9E:62:49:CD:36:24 Certificate issuer: /CN=A91E0CA1/serialNumber=E1D95A3CBDD92029AEBE1E1308099E6249CD3624 Certificate serial: 09F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft Manifest number: 09ED Signing time: Mon 06 May 2024 20:48:09 +0000 Manifest this update: Mon 06 May 2024 20:48:08 +0000 Manifest next update: Mon 13 May 2024 20:48:08 +0000 Files and hashes: 1: 4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl (hash: JxgWZ8CMJr1ejk103Bbo1/1HEb6sxfPsVAFN+THjPDk=) 2: 29B9D5B8524111EABEF0A119C4F9AE02.roa (hash: jsRUiHxqEVSR6l1UCBND45Gu5bO5xI0ELEp0w+R91N8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2546 (0x9f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CA1/serialNumber=E1D95A3CBDD92029AEBE1E1308099E6249CD3624 Validity Not Before: May 6 20:48:08 2024 GMT Not After : May 13 20:48:08 2024 GMT Subject: CN=66394208-7f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ae:f9:3f:59:37:bf:bf:f9:3e:34:91:3c:7d: 3c:bd:61:50:a5:be:48:36:6c:85:a3:94:0c:3d:b0: 76:ca:82:84:6a:07:ad:fb:c7:70:55:cf:fe:ba:3e: d5:b3:30:d5:f2:1c:12:91:57:d0:e8:60:80:2d:fc: 42:97:94:ea:18:03:17:9d:50:73:77:6b:36:d9:61: b7:a5:21:d1:b1:d1:8d:f9:16:7f:8b:c5:ef:ee:08: d4:ae:a4:7a:7c:b0:df:22:3f:3d:e1:17:84:4d:c3: 6e:e3:5b:05:52:13:e4:84:0c:47:c2:db:05:f2:60: 9b:bd:3d:f9:3d:a3:fe:3e:89:01:c6:21:78:ef:58: 5b:7c:e9:26:b0:e2:7b:d2:9a:c9:38:f2:ab:d4:a6: 93:7f:d6:6c:cb:3b:11:c5:67:75:32:ae:6d:b9:05: f6:50:a6:71:a8:17:6a:cd:85:6d:2f:1b:f1:fc:24: 25:58:8a:bc:b7:13:c1:ec:6a:24:13:7a:11:d5:47: cf:94:4d:44:87:45:42:8d:6f:21:b0:63:bd:79:36: 4e:0c:46:70:90:ef:22:57:80:a5:f3:34:c5:37:bd: 37:85:e1:ae:7a:ae:9f:b9:f5:c7:10:e4:24:20:f1: bb:cb:f4:05:e9:48:a2:63:82:0d:dd:04:6c:09:15: 5c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:60:F4:37:40:DF:B3:58:44:53:A3:18:FD:C1:C3:94:AE:DA:8A:0A X509v3 Authority Key Identifier: keyid:E1:D9:5A:3C:BD:D9:20:29:AE:BE:1E:13:08:09:9E:62:49:CD:36:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:69:56:37:f9:e1:4d:67:f8:8a:d8:94:4c:71:6c:11:be:79: ff:83:0f:cf:c0:3c:57:dd:db:a9:8a:15:b1:75:79:5c:ba:3e: 18:f4:52:83:18:24:4e:39:ad:c6:73:cb:4b:fc:03:27:09:11: db:c2:33:cd:4d:09:fc:c0:ff:d0:7f:4f:20:7d:79:d0:ef:4f: c6:be:cf:94:00:7a:63:7d:6b:33:f8:90:83:07:cf:30:2f:4e: 45:ec:26:ac:d1:51:21:c3:9b:e4:9e:ae:a9:45:d7:d9:1c:75: 10:fd:d2:05:1a:4f:f4:29:52:aa:25:7f:be:81:ea:0e:2e:c2: 8f:a7:3d:88:b5:21:93:c9:3f:98:63:9c:24:39:f0:17:2a:28: d9:dc:75:43:5e:6c:72:34:48:48:4f:48:1b:59:4f:02:3d:e3: b1:fe:b6:6e:67:a7:41:fd:e3:1f:93:46:73:f5:73:65:d7:73: 42:1b:41:fb:db:32:ac:ef:af:7f:b1:de:19:95:7d:53:93:3b: ac:90:67:b0:f5:29:30:fd:24:a0:65:5a:a6:a6:49:f1:78:e9: dc:45:60:f4:b0:7a:a5:d0:52:76:d1:40:d1:87:09:8c:72:25: e0:e7:10:af:ef:2c:25:e3:40:0e:7d:0e:d3:df:ee:18:81:a0: bc:1d:6e:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDQTExMTAvBgNVBAUTKEUxRDk1QTNDQkREOTIwMjlBRUJFMUUxMzA4MDk5RTYy NDlDRDM2MjQwHhcNMjQwNTA2MjA0ODA4WhcNMjQwNTEzMjA0ODA4WjAYMRYwFAYD VQQDEw02NjM5NDIwOC03ZjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy675P1k3v7/5PjSRPH08vWFQpb5INmyFo5QMPbB2yoKEaget+8dwVc/+uj7V szDV8hwSkVfQ6GCALfxCl5TqGAMXnVBzd2s22WG3pSHRsdGN+RZ/i8Xv7gjUrqR6 fLDfIj894ReETcNu41sFUhPkhAxHwtsF8mCbvT35PaP+PokBxiF471hbfOkmsOJ7 0prJOPKr1KaTf9ZsyzsRxWd1Mq5tuQX2UKZxqBdqzYVtLxvx/CQlWIq8txPB7Gok E3oR1UfPlE1Eh0VCjW8hsGO9eTZODEZwkO8iV4Cl8zTFN703heGueq6fufXHEOQk IPG7y/QF6UiiY4IN3QRsCRVcWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhg9DdA 37NYRFOjGP3Bw5Su2ooKMB8GA1UdIwQYMBaAFOHZWjy92SAprr4eEwgJnmJJzTYk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENBMS83MDYzRTQyNDUy M0YxMUVBOEM5Q0YwMTZDNEY5QUUwMi80ZGxhUEwzWklDbXV2aDRUQ0FtZVlrbk5O aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRkbGFQTDNaSUNtdXZoNFRDQW1lWWtuTk5pUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MENBMS83MDYzRTQyNDUyM0YxMUVBOEM5Q0YwMTZDNEY5QUUwMi80ZGxhUEwzWklD bXV2aDRUQ0FtZVlrbk5OaVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUaVY3+eFNZ/iK2JRMcWwRvnn/gw/PwDxX3dupihWxdXlcuj4Y9FKD GCROOa3Gc8tL/AMnCRHbwjPNTQn8wP/Qf08gfXnQ70/Gvs+UAHpjfWsz+JCDB88w L05F7Cas0VEhw5vknq6pRdfZHHUQ/dIFGk/0KVKqJX++geoOLsKPpz2ItSGTyT+Y Y5wkOfAXKijZ3HVDXmxyNEhIT0gbWU8CPeOx/rZuZ6dB/eMfk0Zz9XNl13NCG0H7 2zKs769/sd4ZlX1TkzuskGew9Skw/SSgZVqmpknxeOncRWD0sHql0FJ20UDRhwmM ciXg5xCv7ywl40AOfQ7T3+4YgaC8HW7p -----END CERTIFICATE-----Generated at Mon May 6 22:41:04 2024 by rpki-client on console-ams.rpki-client.org