$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft File: fHxDqtDIa183jl18MzKgXeRhJ1A.mft (raw, json) Hash identifier: BZgXfn4D5ZLCPUCN4sD2Z6hAgy+/DB+GAe5RRpEgW0c= Subject key identifier: 55:EE:83:0C:0E:4A:5A:5B:62:B7:5D:EC:6E:B9:53:36:44:A0:D5:38 Authority key identifier: 7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50 Certificate issuer: /CN=A912CA50/serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750 Certificate serial: 0721 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft Manifest number: 0706 Signing time: Thu 16 May 2024 22:50:27 +0000 Manifest this update: Thu 16 May 2024 22:50:26 +0000 Manifest next update: Thu 23 May 2024 22:50:26 +0000 Files and hashes: 1: fHxDqtDIa183jl18MzKgXeRhJ1A.crl (hash: ALOqRNq6il4Ap0WusUlf5n/3oIJ3YPIlToxwU7+af+c=) 2: E7EBC9003EE411ED905A3415C4F9AE02.roa (hash: xx+PBcR35lYfvVhYY3jCSIatuhW5Ou+Pfl4qfbk9F1w=) 3: E897EA5A3EE411ED905A3415C4F9AE02.roa (hash: 7gnux3JJVSafwAbp/hh7Sk/FtmSXj3Dz7M19UaND69o=) 4: 5035F194413211EDAAFCC96EC4F9AE02.roa (hash: y+f1klILC9YoygccEz1/DmfBbKOgqYXibSy3/dRFFE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1825 (0x721) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CA50/serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750 Validity Not Before: May 16 22:50:26 2024 GMT Not After : May 23 22:50:26 2024 GMT Subject: CN=66468db2-642a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c7:9c:db:d8:95:6e:6d:38:dc:5c:33:d6:5b: 04:19:3e:d5:48:b3:f6:b1:1d:9d:dc:b8:b7:42:17: a2:54:6f:f1:a0:7c:59:85:60:f1:36:91:70:58:61: 0f:ad:79:71:32:17:44:b6:4a:ad:1e:25:63:77:12: 55:0d:1d:a3:63:4f:db:ce:8b:20:17:dc:a3:da:b8: 1f:f0:90:d4:3b:ad:24:74:f6:2b:ad:cb:42:22:bd: 27:2b:05:ea:4a:c9:0d:47:e8:81:a3:ec:28:3a:19: e7:f3:18:8d:d3:86:45:95:b3:39:27:fa:af:42:60: 2a:a1:ba:05:80:6b:42:6c:18:cd:64:a3:c7:b5:c5: b4:8b:c8:31:50:72:21:22:fd:bc:70:e8:eb:e9:cb: 8a:3a:93:16:4a:ef:6a:15:63:d3:c8:54:a3:ae:28: fa:00:5b:0d:16:c1:a9:14:ad:60:2a:a9:f7:ec:54: 35:92:07:1a:51:78:2f:79:7e:e4:6d:8b:a2:93:6e: da:72:17:63:03:98:ff:85:56:20:95:6f:18:f7:7b: 18:ad:93:a1:99:1c:46:07:4d:e2:53:1d:47:3b:4a: 42:9d:8a:90:46:5b:17:0b:f2:e8:aa:3b:15:77:e8: 22:67:58:90:46:8d:75:9c:37:33:26:66:fb:4d:15: c5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:EE:83:0C:0E:4A:5A:5B:62:B7:5D:EC:6E:B9:53:36:44:A0:D5:38 X509v3 Authority Key Identifier: keyid:7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:51:e0:af:b2:7a:b6:5e:2f:92:20:5e:80:21:06:10:9d:7b: 7b:1b:d9:e7:33:5b:d4:35:77:60:92:5e:8d:07:69:f6:94:5d: 80:5b:42:ec:75:ae:33:b5:e7:5a:44:25:01:15:da:2a:87:dc: 35:b4:ac:7a:e1:da:0c:32:93:6e:58:e5:4f:c8:5f:79:de:4b: 38:46:03:53:fe:32:4d:4a:00:a1:2c:ff:e3:09:21:cb:a9:d7: aa:8f:19:fc:02:96:ef:f6:64:7d:0d:19:59:da:79:c1:54:b8: d7:91:88:4e:af:aa:f1:18:61:fa:a7:20:dd:94:2c:5d:c2:01: 5a:b4:5e:d5:cb:c4:b4:41:b3:40:40:e6:9b:32:63:bf:10:c6: f1:0b:4c:4c:e6:a3:7b:ad:f9:57:df:4d:5c:f0:9d:20:ea:82: 6d:2c:45:da:7b:dc:15:a0:82:70:1e:c8:64:17:b8:f5:b5:a8: 44:a2:07:c9:a5:ba:50:8d:06:5f:c1:2c:dc:68:09:d6:e4:01: 28:92:00:46:1e:27:c3:9f:3c:2e:4a:ac:1c:fc:39:af:89:48: 86:3d:0c:77:bc:d7:06:78:42:a3:66:ed:41:b9:9d:c7:f5:01: 07:07:c6:8a:09:00:17:69:c9:43:58:3b:12:e0:4c:ed:3d:4b: 75:13:5f:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNBNTAxMTAvBgNVBAUTKDdDN0M0M0FBRDBDODZCNUYzNzhFNUQ3QzMzMzJBMDVE RTQ2MTI3NTAwHhcNMjQwNTE2MjI1MDI2WhcNMjQwNTIzMjI1MDI2WjAYMRYwFAYD VQQDEw02NjQ2OGRiMi02NDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Mec29iVbm043Fwz1lsEGT7VSLP2sR2d3Li3QheiVG/xoHxZhWDxNpFwWGEP rXlxMhdEtkqtHiVjdxJVDR2jY0/bzosgF9yj2rgf8JDUO60kdPYrrctCIr0nKwXq SskNR+iBo+woOhnn8xiN04ZFlbM5J/qvQmAqoboFgGtCbBjNZKPHtcW0i8gxUHIh Iv28cOjr6cuKOpMWSu9qFWPTyFSjrij6AFsNFsGpFK1gKqn37FQ1kgcaUXgveX7k bYuik27achdjA5j/hVYglW8Y93sYrZOhmRxGB03iUx1HO0pCnYqQRlsXC/LoqjsV d+giZ1iQRo11nDczJmb7TRXFgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFXugwwO SlpbYrdd7G65UzZEoNU4MB8GA1UdIwQYMBaAFHx8Q6rQyGtfN45dfDMyoF3kYSdQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0E1MC8zODFDMTcxNkZC QTUxMUVBQkJBRUIzNjNDNEY5QUUwMi9mSHhEcXRESWExODNqbDE4TXpLZ1hlUmhK MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZIeERxdERJYTE4M2psMThNektnWGVSaEoxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0E1MC8zODFDMTcxNkZCQTUxMUVBQkJBRUIzNjNDNEY5QUUwMi9mSHhEcXRESWEx ODNqbDE4TXpLZ1hlUmhKMUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPUeCvsnq2Xi+SIF6AIQYQnXt7G9nnM1vUNXdgkl6NB2n2lF2AW0Ls da4ztedaRCUBFdoqh9w1tKx64doMMpNuWOVPyF953ks4RgNT/jJNSgChLP/jCSHL qdeqjxn8Apbv9mR9DRlZ2nnBVLjXkYhOr6rxGGH6pyDdlCxdwgFatF7Vy8S0QbNA QOabMmO/EMbxC0xM5qN7rflX301c8J0g6oJtLEXae9wVoIJwHshkF7j1tahEogfJ pbpQjQZfwSzcaAnW5AEokgBGHifDnzwuSqwc/DmviUiGPQx3vNcGeEKjZu1BuZ3H 9QEHB8aKCQAXaclDWDsS4EztPUt1E19q -----END CERTIFICATE-----Generated at Thu May 16 23:39:13 2024 by rpki-client on console-ams.rpki-client.org