$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft File: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft (raw, json) Hash identifier: yM0aFhAGXtP3mProPnK8NarM78qKwVFnolgf6l+rexI= Subject key identifier: 4F:09:84:BD:63:89:FA:30:37:FD:96:0C:05:BB:70:0F:16:54:04:76 Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E Certificate issuer: /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E Certificate serial: 06C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft Manifest number: 06BF Signing time: Tue 30 Apr 2024 23:21:56 +0000 Manifest this update: Tue 30 Apr 2024 23:21:56 +0000 Manifest next update: Tue 07 May 2024 23:21:56 +0000 Files and hashes: 1: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl (hash: TXZHpxTC+s1UXc3ezyPFM08ttyNpeOtnemeol1oEjJM=) 2: E1C6B9720DCC11EBAB25BC31C4F9AE02.roa (hash: xPnEnJeGzLeOXDrkpck5isOdzEyahQAWsF3Idu1uvuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 23:21:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1731 (0x6c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E Validity Not Before: Apr 30 23:21:56 2024 GMT Not After : May 7 23:21:56 2024 GMT Subject: CN=66317d14-d8ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:06:74:34:ed:73:75:89:a2:1f:2c:8e:3b:63: 64:2a:fb:0e:a1:bb:72:7a:c7:30:75:1b:33:44:cc: 0f:8e:64:86:4f:71:ea:1d:82:26:ff:23:08:07:37: e5:c1:49:c9:41:97:7e:c2:5b:ac:05:be:b2:e8:ae: c9:9f:bb:cd:82:d8:1b:8e:24:b1:5b:d4:b2:6b:3c: 1b:47:3e:4e:f4:7f:ff:60:79:43:6f:24:8a:92:80: 20:ec:f8:87:8a:c2:d0:31:12:74:f9:03:b3:72:a5: 7d:3a:a7:fa:37:1f:c0:d7:5e:ea:0d:23:ce:9f:8f: cb:3f:b5:4f:98:d2:69:1e:12:ff:10:16:61:5f:6d: ca:92:05:59:7b:ee:08:a1:bc:6f:cc:2b:6a:90:4b: 7d:eb:88:a8:ed:26:e9:4e:60:5e:e4:35:5c:26:d8: 5b:dd:42:e0:46:03:5a:3f:ec:76:a9:28:a6:4b:18: cd:b8:27:15:8c:12:48:94:42:27:1a:c9:39:f6:a7: 56:61:71:a9:3d:ce:5d:f0:04:49:1b:95:fc:41:c2: 92:7f:50:31:f7:2c:62:4c:21:db:df:99:0e:ca:d9: 5f:60:9f:54:99:d4:30:08:5a:8e:61:6f:84:01:cc: ec:53:e1:01:f1:e1:1d:fc:ac:86:49:3e:86:eb:de: 9b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:09:84:BD:63:89:FA:30:37:FD:96:0C:05:BB:70:0F:16:54:04:76 X509v3 Authority Key Identifier: keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:89:fe:6d:32:1f:4c:73:c1:c1:b8:09:2c:8f:91:79:71:1a: c7:93:a8:f0:96:79:a7:3e:80:85:c8:fe:0f:da:22:0b:80:35: 07:0e:6a:28:6a:d6:02:05:54:4d:09:45:af:4e:47:b7:cf:a6: cf:44:97:69:ac:b2:c1:5a:69:79:87:9d:f1:af:db:cd:4a:41: 96:66:ec:3e:14:53:80:49:58:ef:82:f1:38:c9:65:b5:7d:15: b2:78:e2:21:01:ac:4e:cb:7a:3a:60:31:0e:5d:4b:15:83:64: c9:b1:b4:cf:6f:70:12:5b:61:01:42:23:13:dd:3e:5a:df:33: 62:77:58:04:d3:e9:bd:c7:21:80:9d:5c:3d:7b:aa:6f:f4:6c: cb:56:0e:8d:56:19:97:14:4c:b8:b2:73:b9:cb:24:4e:bd:7b: f1:87:18:a4:0e:01:46:21:c4:d8:26:70:cc:3e:84:f4:62:cf: 4c:47:f9:47:f0:e3:74:f3:94:c2:f0:fa:12:c2:5d:5d:de:7d: d9:43:58:87:7c:8a:47:9c:ed:10:51:aa:2c:cc:6f:b6:b2:69: 39:76:de:74:fb:62:28:df:ef:e9:e7:fd:1a:37:f8:81:55:52: b6:eb:52:e9:38:35:ce:5b:ec:15:55:35:7c:bf:17:cb:98:04: 5f:34:d2:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGQ0MxMTAvBgNVBAUTKEUwMTAwMkIzN0MyNkI5NzA5OTE1MjY3NjY2RjQ0OTAw QzAxMzFFMkUwHhcNMjQwNDMwMjMyMTU2WhcNMjQwNTA3MjMyMTU2WjAYMRYwFAYD VQQDEw02NjMxN2QxNC1kOGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7AZ0NO1zdYmiHyyOO2NkKvsOobtyescwdRszRMwPjmSGT3HqHYIm/yMIBzfl wUnJQZd+wlusBb6y6K7Jn7vNgtgbjiSxW9SyazwbRz5O9H//YHlDbySKkoAg7PiH isLQMRJ0+QOzcqV9Oqf6Nx/A117qDSPOn4/LP7VPmNJpHhL/EBZhX23KkgVZe+4I obxvzCtqkEt964io7SbpTmBe5DVcJthb3ULgRgNaP+x2qSimSxjNuCcVjBJIlEIn Gsk59qdWYXGpPc5d8ARJG5X8QcKSf1Ax9yxiTCHb35kOytlfYJ9UmdQwCFqOYW+E AczsU+EB8eEd/KyGST6G696b8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8JhL1j ifowN/2WDAW7cA8WVAR2MB8GA1UdIwQYMBaAFOAQArN8JrlwmRUmdmb0SQDAEx4u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUZDQy8yMkNENzlERTBE Q0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVYQ1pGU1oyWnZSSkFNQVRI aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCQUNzM3dtdVhDWkZTWjJadlJKQU1BVEhpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUZDQy8yMkNENzlERTBEQ0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVY Q1pGU1oyWnZSSkFNQVRIaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArif5tMh9Mc8HBuAksj5F5cRrHk6jwlnmnPoCFyP4P2iILgDUHDmoo atYCBVRNCUWvTke3z6bPRJdprLLBWml5h53xr9vNSkGWZuw+FFOASVjvgvE4yWW1 fRWyeOIhAaxOy3o6YDEOXUsVg2TJsbTPb3ASW2EBQiMT3T5a3zNid1gE0+m9xyGA nVw9e6pv9GzLVg6NVhmXFEy4snO5yyROvXvxhxikDgFGIcTYJnDMPoT0Ys9MR/lH 8ON085TC8PoSwl1d3n3ZQ1iHfIpHnO0QUaoszG+2smk5dt50+2Io3+/p5/0aN/iB VVK261LpODXOW+wVVTV8vxfLmARfNNKT -----END CERTIFICATE-----Generated at Wed May 1 00:24:04 2024 by rpki-client on console-fra.rpki-client.org