$ rpki-client -vvf rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft File: _fz0IvXEZi3h5GQ6JxwEax4hxK0.mft (raw, json) Hash identifier: GQax8yMB1hpu0Pwx4vClB/gbyzS+8YwETrqCSuyYhug= Subject key identifier: 7F:53:B1:13:BC:4A:3A:8E:28:66:09:7D:AC:D6:BB:0E:73:E4:83:B9 Authority key identifier: FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD Certificate issuer: /CN=A9125A95/serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD Certificate serial: 0371 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft Manifest number: 036E Signing time: Sun 19 May 2024 02:49:15 +0000 Manifest this update: Sun 19 May 2024 02:49:15 +0000 Manifest next update: Sun 26 May 2024 02:49:15 +0000 Files and hashes: 1: _fz0IvXEZi3h5GQ6JxwEax4hxK0.crl (hash: Qa9xftKDp4hygQAy9Bc+xoYfW7Hx1RfhhjNh1aTqQis=) 2: AF506F14630811EC97879243C4F9AE02.roa (hash: ADZe52n7KpNwXGtA9lVaGhND4dnFjDyI/3kJIZzzGgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 881 (0x371) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125A95/serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD Validity Not Before: May 19 02:49:15 2024 GMT Not After : May 26 02:49:15 2024 GMT Subject: CN=664968ab-b8cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8f:bd:fa:f7:4c:12:95:08:97:d9:ce:b2:8c: 7a:f5:2c:2d:e6:eb:5d:52:93:7a:84:e7:5e:60:58: a2:ee:1c:3e:49:de:86:ec:50:20:a2:4c:44:d9:74: 8c:4d:91:96:1c:0f:d1:23:85:b9:45:f1:c5:95:52: f2:87:1a:98:f6:df:e9:ca:90:b2:a8:fb:e7:20:61: 6e:ec:42:d1:be:b7:3d:28:39:21:e8:af:8f:e2:af: bc:a1:21:6a:9b:0b:2e:87:b4:1b:9c:f5:94:6f:a8: 37:db:c5:d5:b4:ba:69:9c:6d:39:63:2a:df:d3:b1: 24:01:5a:7e:ca:26:0d:ac:56:30:4b:7f:73:23:92: 2c:d1:6d:ea:c3:92:2d:7b:0f:b5:31:8e:9c:43:96: cb:ba:8f:82:bb:f7:8a:91:aa:0c:24:57:93:40:3f: dc:32:0f:fa:46:37:a3:7f:8c:6b:dd:78:1b:57:fb: 97:a5:f4:6b:39:33:b5:ae:7e:66:74:2c:ed:aa:20: 33:a5:2d:91:92:c2:53:62:c9:56:74:2e:ad:f3:61: 65:f5:0f:27:f1:39:ad:56:c9:68:fd:06:f8:81:53: 26:16:d8:b2:e2:8a:8c:b6:b6:c4:f5:a5:57:af:89: c7:b4:c3:02:c2:8e:d6:3b:b9:e4:7e:58:00:a5:2c: 29:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:53:B1:13:BC:4A:3A:8E:28:66:09:7D:AC:D6:BB:0E:73:E4:83:B9 X509v3 Authority Key Identifier: keyid:FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e1:e1:84:d6:81:e6:ac:c2:2c:7a:f7:de:08:60:d4:7e:05: 6d:9a:3d:a7:7e:75:c2:61:a8:93:a0:ea:d6:d5:ff:f4:e4:d7: 05:af:30:4a:99:f2:8e:8e:ed:ea:7e:80:9a:53:ac:0d:3f:78: 38:83:ff:3e:bb:ce:fa:2b:21:de:2d:4b:ef:da:18:46:91:6b: f7:6e:90:b0:6e:f7:db:c6:78:39:d2:87:c6:f5:ee:02:ca:96: ae:1b:ab:e5:19:1a:f2:9c:54:f0:31:08:ff:8c:69:f7:ba:41: 95:fb:86:4f:0e:76:ab:3d:cb:53:f2:16:79:2f:4f:97:fd:f9: 90:6d:2a:4b:dd:13:17:3a:50:b0:f2:4c:65:d9:9e:84:60:73: f6:9f:a3:f5:eb:43:da:0a:e9:54:c3:71:c8:06:db:0e:55:ee: 59:a3:59:55:3c:af:79:e6:05:a0:13:fb:3c:50:eb:8e:78:5a: dd:6b:4f:a6:0c:b4:a1:22:0d:92:5c:48:4b:6d:6b:bf:99:74: 75:e1:71:31:fe:83:0a:8e:26:e5:03:d8:4b:40:29:d7:4b:c0: e0:a3:ae:6b:7d:d1:d4:52:8c:3d:4b:b7:97:47:2d:77:5d:5b: b3:1c:88:67:66:37:c0:1a:dc:27:c9:7c:26:f0:72:b6:b6:7e: bc:26:93:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVBOTUxMTAvBgNVBAUTKEZERkNGNDIyRjVDNDY2MkRFMUU0NjQzQTI3MUMwNDZC MUUyMUM0QUQwHhcNMjQwNTE5MDI0OTE1WhcNMjQwNTI2MDI0OTE1WjAYMRYwFAYD VQQDEw02NjQ5NjhhYi1iOGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxI+9+vdMEpUIl9nOsox69Swt5utdUpN6hOdeYFii7hw+Sd6G7FAgokxE2XSM TZGWHA/RI4W5RfHFlVLyhxqY9t/pypCyqPvnIGFu7ELRvrc9KDkh6K+P4q+8oSFq mwsuh7QbnPWUb6g328XVtLppnG05Yyrf07EkAVp+yiYNrFYwS39zI5Is0W3qw5It ew+1MY6cQ5bLuo+Cu/eKkaoMJFeTQD/cMg/6Rjejf4xr3XgbV/uXpfRrOTO1rn5m dCztqiAzpS2RksJTYslWdC6t82Fl9Q8n8TmtVslo/Qb4gVMmFtiy4oqMtrbE9aVX r4nHtMMCwo7WO7nkflgApSwpFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9TsRO8 SjqOKGYJfazWuw5z5IO5MB8GA1UdIwQYMBaAFP389CL1xGYt4eRkOiccBGseIcSt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUE5NS9BQTYwQzhFQzYx NzIxMUVDQTMxNzIwODZDNEY5QUUwMi9fZnowSXZYRVppM2g1R1E2Snh3RWF4NGh4 SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19mejBJdlhFWmkzaDVHUTZKeHdFYXg0aHhLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUE5NS9BQTYwQzhFQzYxNzIxMUVDQTMxNzIwODZDNEY5QUUwMi9fZnowSXZYRVpp M2g1R1E2Snh3RWF4NGh4SzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa4eGE1oHmrMIsevfeCGDUfgVtmj2nfnXCYaiToOrW1f/05NcFrzBK mfKOju3qfoCaU6wNP3g4g/8+u876KyHeLUvv2hhGkWv3bpCwbvfbxng50ofG9e4C ypauG6vlGRrynFTwMQj/jGn3ukGV+4ZPDnarPctT8hZ5L0+X/fmQbSpL3RMXOlCw 8kxl2Z6EYHP2n6P160PaCulUw3HIBtsOVe5Zo1lVPK955gWgE/s8UOuOeFrda0+m DLShIg2SXEhLbWu/mXR14XEx/oMKjiblA9hLQCnXS8Dgo65rfdHUUow9S7eXRy13 XVuzHIhnZjfAGtwnyXwm8HK2tn68JpPI -----END CERTIFICATE-----Generated at Sun May 19 03:14:48 2024 by rpki-client on console-fra.rpki-client.org