$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft File: FH6XVkOdnbcVYTSsePkcIzuTkqc.mft (raw, json) Hash identifier: LwVJPnTbGc8MgfB6hPYcfcAJ51xlkZIfK25Hv5WqSkQ= Subject key identifier: F6:6B:15:02:9B:EB:31:EB:C8:BE:A8:6F:30:AB:32:C0:92:7E:44:F4 Authority key identifier: 14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7 Certificate issuer: /CN=A912CB2A/serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7 Certificate serial: 05AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft Manifest number: 0598 Signing time: Sun 19 May 2024 00:36:12 +0000 Manifest this update: Sun 19 May 2024 00:36:12 +0000 Manifest next update: Sun 26 May 2024 00:36:12 +0000 Files and hashes: 1: FH6XVkOdnbcVYTSsePkcIzuTkqc.crl (hash: fALZyZZd3n9jKjmalf4VdOjcEFjBMn4uxuS99rQ/28U=) 2: D4FD4D5237DE11EEA2885B71C4F9AE02.roa (hash: LrWBV4QYdGPDtdI6VNtzsrHnDIjjs6dEu3xrmBEvUZE=) 3: 8A0E66D647FC11EE838F6160C4F9AE02.roa (hash: ySXxkDc51kEpYhdFRVWLwuVywdIahS4srP0fSYYLjiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1454 (0x5ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CB2A/serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7 Validity Not Before: May 19 00:36:12 2024 GMT Not After : May 26 00:36:12 2024 GMT Subject: CN=6649497c-7cea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a6:49:e2:c2:2e:b0:95:90:aa:1e:8d:bc:fe: 66:8f:9f:06:ba:af:f2:e3:3a:1e:54:11:87:b6:0b: 64:7d:1d:99:5d:f6:db:ce:3f:a7:9a:e9:06:bf:5a: 80:50:fa:a7:c8:e3:c4:03:65:a6:c8:72:3c:f3:7e: 2f:84:27:c1:8e:f5:81:44:b2:f5:cc:50:30:9c:07: ec:88:dc:77:e0:28:6d:8b:59:9e:9d:bc:65:2f:56: a2:13:b9:2d:02:1c:6d:5d:4d:72:f1:98:1d:17:77: 52:af:6d:99:7d:e4:1d:49:f1:42:61:89:0d:21:6d: d3:71:5a:ca:47:5e:c0:89:87:61:7b:e5:dd:d8:7f: a3:89:f0:65:7a:a7:d0:80:3d:e9:0a:59:05:f7:eb: 11:81:8a:3d:fd:0c:92:f2:59:eb:15:f7:99:00:b9: 74:fd:f6:0f:d6:47:31:f0:73:2b:16:fa:f5:af:ae: 6a:c0:34:d5:16:4a:2a:f8:e7:15:73:79:44:27:83: 71:4e:f4:af:ef:14:8e:31:d9:2c:cb:cc:3c:4c:c5: 7c:1d:52:ee:42:4e:c6:e0:2b:68:7e:d7:b7:d5:e6: 7b:fd:c5:ea:db:ce:63:13:45:ba:fd:40:ef:84:81: 50:bc:e7:f0:4f:06:3b:05:62:04:c0:13:d0:37:6c: 6e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:6B:15:02:9B:EB:31:EB:C8:BE:A8:6F:30:AB:32:C0:92:7E:44:F4 X509v3 Authority Key Identifier: keyid:14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:46:74:59:75:ae:0a:e8:ad:65:29:e9:c1:b2:99:2a:2e:2d: 4a:e0:6f:14:11:e0:df:84:97:66:5a:23:85:ee:fd:82:4b:4f: 38:d4:c9:82:eb:d9:3c:f0:8d:b0:3b:2e:b9:2a:e4:b8:f2:17: 25:04:0b:6f:e8:e4:27:af:8d:cf:f1:b8:3e:24:6f:40:fe:82: 13:5b:24:20:49:86:3b:26:c6:ab:a8:49:bf:bd:e1:ab:cf:62: b5:fe:f0:a7:54:24:a0:4b:0f:e5:22:45:7c:db:26:a8:cc:ef: 5c:d1:0a:b1:63:43:38:e4:5b:bb:e4:00:0b:e5:7f:83:d0:c5: 39:91:3b:88:5a:26:af:4b:b9:98:c3:07:6e:fc:5f:00:93:68: 25:1f:42:fa:1b:5b:ab:c6:ba:a7:ce:93:26:71:86:c0:e2:79: 60:78:2d:a9:c5:dd:df:1f:67:57:b9:2c:da:f1:80:95:27:1b: 39:9d:c3:08:52:94:ba:aa:fe:bc:e6:7e:8c:6b:14:a6:7b:aa: 21:b7:66:eb:d4:1b:b6:0e:31:97:3c:74:0a:3b:b8:3f:c8:82: 21:45:9d:60:ce:10:d1:0a:47:89:32:3d:2a:ca:f3:06:52:89: 29:c9:95:c6:24:55:aa:6b:43:40:bb:32:84:93:c8:aa:c9:30: ae:9d:7e:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNCMkExMTAvBgNVBAUTKDE0N0U5NzU2NDM5RDlEQjcxNTYxMzRBQzc4RjkxQzIz M0I5MzkyQTcwHhcNMjQwNTE5MDAzNjEyWhcNMjQwNTI2MDAzNjEyWjAYMRYwFAYD VQQDEw02NjQ5NDk3Yy03Y2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsaZJ4sIusJWQqh6NvP5mj58Guq/y4zoeVBGHtgtkfR2ZXfbbzj+nmukGv1qA UPqnyOPEA2WmyHI8834vhCfBjvWBRLL1zFAwnAfsiNx34Chti1menbxlL1aiE7kt AhxtXU1y8ZgdF3dSr22ZfeQdSfFCYYkNIW3TcVrKR17AiYdhe+Xd2H+jifBleqfQ gD3pClkF9+sRgYo9/QyS8lnrFfeZALl0/fYP1kcx8HMrFvr1r65qwDTVFkoq+OcV c3lEJ4NxTvSv7xSOMdksy8w8TMV8HVLuQk7G4Ctofte31eZ7/cXq285jE0W6/UDv hIFQvOfwTwY7BWIEwBPQN2xu/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZrFQKb 6zHryL6obzCrMsCSfkT0MB8GA1UdIwQYMBaAFBR+l1ZDnZ23FWE0rHj5HCM7k5Kn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0IyQS9FMDFDN0E4NDkw RTAxMUVCQTEwNTg3MUZDNEY5QUUwMi9GSDZYVmtPZG5iY1ZZVFNzZVBrY0l6dVRr cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZINlhWa09kbmJjVllUU3NlUGtjSXp1VGtxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0IyQS9FMDFDN0E4NDkwRTAxMUVCQTEwNTg3MUZDNEY5QUUwMi9GSDZYVmtPZG5i Y1ZZVFNzZVBrY0l6dVRrcWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXRnRZda4K6K1lKenBspkqLi1K4G8UEeDfhJdmWiOF7v2CS0841MmC 69k88I2wOy65KuS48hclBAtv6OQnr43P8bg+JG9A/oITWyQgSYY7JsarqEm/veGr z2K1/vCnVCSgSw/lIkV82yaozO9c0QqxY0M45Fu75AAL5X+D0MU5kTuIWiavS7mY wwdu/F8Ak2glH0L6G1urxrqnzpMmcYbA4nlgeC2pxd3fH2dXuSza8YCVJxs5ncMI UpS6qv685n6MaxSme6oht2br1Bu2DjGXPHQKO7g/yIIhRZ1gzhDRCkeJMj0qyvMG UokpyZXGJFWqa0NAuzKEk8iqyTCunX5T -----END CERTIFICATE-----Generated at Sun May 19 01:47:08 2024 by rpki-client on console-ams.rpki-client.org