$ rpki-client -vvf rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft File: fSf9xw_NGLbdWwQmla_djBc1wTA.mft (raw, json) Hash identifier: FnoUT6FQ+Q+dCtzT6+epj0XHH3/Xrpl49URVuruAOu0= Subject key identifier: AF:AC:56:18:DA:52:83:53:3B:EF:62:34:03:6C:42:53:29:8E:B4:6C Authority key identifier: 7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30 Certificate issuer: /CN=A9122041/serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft Manifest number: 25 Signing time: Sun 19 May 2024 08:30:15 +0000 Manifest this update: Sun 19 May 2024 08:30:15 +0000 Manifest next update: Sun 26 May 2024 08:30:15 +0000 Files and hashes: 1: fSf9xw_NGLbdWwQmla_djBc1wTA.crl (hash: D3xI9/Bl9P4gadnaDuOGMUoNeCYcFVgGvDcbd7Q9ScQ=) 2: E46B7DACDC3611EEBE5CDD37C4F9AE02.roa (hash: EUS1TcmCLEChYsSUsTW2xirwCeaCm7aIPgo/Dh+GRoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122041/serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130 Validity Not Before: May 19 08:30:15 2024 GMT Not After : May 26 08:30:15 2024 GMT Subject: CN=6649b897-74d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0d:f6:68:5f:5b:9d:63:a0:69:2f:cd:78:a3: 6a:cb:2d:67:da:ac:9b:e9:11:bf:53:2b:b7:0e:fb: e7:62:5d:99:a3:14:85:2e:2c:44:3f:eb:aa:57:00: 00:2c:8f:20:73:62:37:36:9e:04:b1:cc:ef:b8:1a: db:3e:1c:e4:2b:3e:ea:a3:3b:7a:32:7a:d6:fb:67: 36:ac:c3:ef:d7:bc:3b:30:73:62:62:d8:35:e5:dd: 79:03:3c:d8:d5:46:02:62:3d:4c:b6:f1:e1:a3:3c: 51:6b:31:38:ab:80:58:fa:8a:98:b0:57:e8:17:d1: 5d:fa:a2:9d:57:43:cf:82:51:a4:d2:0a:d4:3d:bd: d7:3d:17:ac:88:40:52:d1:3d:b6:99:5a:a9:27:71: ac:1e:01:5f:d7:4d:4a:8a:ae:4d:d5:2b:77:0f:f6: 37:69:98:10:a6:7b:22:ef:7b:57:ba:cb:15:94:bc: be:c5:82:fc:f1:e9:b1:aa:93:56:23:e1:5a:c8:f4: 63:1f:f4:2f:a9:11:33:61:5e:d7:2d:f6:f5:78:0c: 96:3b:d0:8b:fd:2e:c0:f2:ed:92:a0:ec:0d:41:34: 87:b2:e3:91:60:2e:be:ba:31:23:03:0a:c1:49:84: 95:18:88:90:d1:93:f6:af:a0:57:b5:44:97:32:f5: 73:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:AC:56:18:DA:52:83:53:3B:EF:62:34:03:6C:42:53:29:8E:B4:6C X509v3 Authority Key Identifier: keyid:7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:ee:a7:a6:55:e3:00:96:b2:bf:f0:35:16:8f:ba:ed:5a:0d: 97:2b:48:2f:73:b8:ca:ea:c6:90:2c:2d:a8:c4:90:3e:92:7d: c4:43:f5:d2:70:58:0c:b2:b1:9e:78:c1:b0:61:f7:c8:9b:a7: dc:5b:98:39:e4:e6:2d:74:94:d5:51:f7:10:13:8f:e2:b3:e4: b1:f9:2b:56:2a:8f:ec:7e:fa:0c:fe:61:54:e4:09:f8:50:68: cd:d6:fc:82:3b:e2:8b:28:ff:8e:04:d1:d6:f7:31:f5:d0:bd: c8:2e:43:4c:a4:ed:a9:f4:e0:9d:cb:42:4e:4a:75:9c:a3:84: 5c:05:fe:f9:30:80:a3:fb:7f:ad:49:4f:a7:39:64:a9:6c:31: 0c:e6:8f:26:9d:34:ce:8e:f8:57:bf:4c:9a:66:d1:e2:d2:95: 25:c7:25:ca:64:62:ac:71:26:f8:13:e1:c9:c4:4a:c7:b3:c6: 0a:47:98:64:5c:9f:c2:58:e6:59:2a:7f:6c:a3:a5:e5:69:a1: 5d:64:8a:e8:c5:ae:54:b7:c7:d1:a9:6f:20:16:08:7c:45:74: f0:63:86:e1:7d:9c:d7:a9:1a:41:c7:bf:e3:1d:57:a2:44:77: 8a:a0:a6:9e:97:2a:5b:ce:f8:af:29:19:71:0e:1a:38:48:05: 66:e3:af:e4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MjA0MTExMC8GA1UEBRMoN0QyN0ZEQzcwRkNEMThCNkRENUIwNDI2OTVBRkREOEMx NzM1QzEzMDAeFw0yNDA1MTkwODMwMTVaFw0yNDA1MjYwODMwMTVaMBgxFjAUBgNV BAMTDTY2NDliODk3LTc0ZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkDfZoX1udY6BpL814o2rLLWfarJvpEb9TK7cO++diXZmjFIUuLEQ/66pXAAAs jyBzYjc2ngSxzO+4Gts+HOQrPuqjO3oyetb7Zzasw+/XvDswc2Ji2DXl3XkDPNjV RgJiPUy28eGjPFFrMTirgFj6ipiwV+gX0V36op1XQ8+CUaTSCtQ9vdc9F6yIQFLR PbaZWqkncaweAV/XTUqKrk3VK3cP9jdpmBCmeyLve1e6yxWUvL7Fgvzx6bGqk1Yj 4VrI9GMf9C+pETNhXtct9vV4DJY70Iv9LsDy7ZKg7A1BNIey45FgLr66MSMDCsFJ hJUYiJDRk/avoFe1RJcy9XP7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUr6xWGNpS g1M772I0A2xCUymOtGwwHwYDVR0jBBgwFoAUfSf9xw/NGLbdWwQmla/djBc1wTAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyMDQxLzJFNzJFMEFFREMz NTExRUU4RkYxQTQzM0M0RjlBRTAyL2ZTZjl4d19OR0xiZFd3UW1sYV9kakJjMXdU QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZlNmOXh3X05HTGJkV3dRbWxhX2RqQmMxd1RBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIy MDQxLzJFNzJFMEFFREMzNTExRUU4RkYxQTQzM0M0RjlBRTAyL2ZTZjl4d19OR0xi ZFd3UW1sYV9kakJjMXdUQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGTup6ZV4wCWsr/wNRaPuu1aDZcrSC9zuMrqxpAsLajEkD6SfcRD9dJw WAyysZ54wbBh98ibp9xbmDnk5i10lNVR9xATj+Kz5LH5K1Yqj+x++gz+YVTkCfhQ aM3W/II74oso/44E0db3MfXQvcguQ0yk7an04J3LQk5KdZyjhFwF/vkwgKP7f61J T6c5ZKlsMQzmjyadNM6O+Fe/TJpm0eLSlSXHJcpkYqxxJvgT4cnESsezxgpHmGRc n8JY5lkqf2yjpeVpoV1kiujFrlS3x9GpbyAWCHxFdPBjhuF9nNepGkHHv+MdV6JE d4qgpp6XKlvO+K8pGXEOGjhIBWbjr+Q= -----END CERTIFICATE-----Generated at Sun May 19 09:04:12 2024 by rpki-client on console-fra.rpki-client.org