$ rpki-client -vvf rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft File: fF1W_s9Nolmhwq4euK8HmiqpB7g.mft (raw, json) Hash identifier: +v+O9AWE+pDFFGvbGRZbk4ZeaVD+W10eWoTwv0kTRIA= Subject key identifier: E8:B5:EC:67:73:82:F4:80:A8:BD:DE:48:6D:6B:E5:C4:08:F4:F4:60 Authority key identifier: 7C:5D:56:FE:CF:4D:A2:59:A1:C2:AE:1E:B8:AF:07:9A:2A:A9:07:B8 Certificate issuer: /CN=A9130AC8/serialNumber=7C5D56FECF4DA259A1C2AE1EB8AF079A2AA907B8 Certificate serial: 1002 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF1W_s9Nolmhwq4euK8HmiqpB7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft Manifest number: 0FFA Signing time: Sat 18 May 2024 18:00:58 +0000 Manifest this update: Sat 18 May 2024 18:00:57 +0000 Manifest next update: Sat 25 May 2024 18:00:57 +0000 Files and hashes: 1: fF1W_s9Nolmhwq4euK8HmiqpB7g.crl (hash: JCmM2Lw2p+iSNq5/G2RtFQ1qFb9TSWoECI/ETJKy+nU=) 2: 39D0B1102F7911E9A4F69342C4F9AE02.roa (hash: F6ottlDMp/X1nIQAx7Xwhfgz2kxmTbIfyf8fA8xTUcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.crl rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF1W_s9Nolmhwq4euK8HmiqpB7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4098 (0x1002) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130AC8/serialNumber=7C5D56FECF4DA259A1C2AE1EB8AF079A2AA907B8 Validity Not Before: May 18 18:00:57 2024 GMT Not After : May 25 18:00:57 2024 GMT Subject: CN=6648ecda-e346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:cd:52:05:61:32:8d:9d:0b:5e:43:4e:28:20: 6b:a0:2e:e3:c8:16:6f:54:3c:5c:6f:41:17:00:ee: 14:56:5e:b2:a2:61:d6:5d:c0:95:55:c1:e3:4a:8f: e8:af:0e:5a:c7:6c:22:cd:af:bd:c1:5f:2e:fc:ba: fa:46:6e:79:43:1b:19:83:30:a4:7a:05:ac:6a:7c: 80:6d:a2:32:97:14:f2:8f:13:46:34:93:0e:f9:79: 74:23:d1:ca:1e:5e:71:27:b8:f1:77:a7:53:70:f6: e7:5e:9b:c2:74:71:b8:44:a4:6f:2c:60:15:22:f3: e3:50:fa:0e:89:dd:b4:db:a9:e1:46:d4:04:70:56: 04:fd:47:39:a7:ce:32:2e:65:ef:dd:8c:c2:13:27: d2:c8:9b:d0:74:d2:5c:54:70:78:90:07:e9:c6:c7: 94:ed:31:00:68:a2:32:a7:df:b7:4a:65:79:a8:d5: 59:9c:37:3b:92:ff:2a:c9:82:ff:ac:c9:a4:22:6e: 4b:fd:26:24:92:72:bf:83:19:96:8d:42:4e:df:46: eb:29:e4:82:7e:a2:66:28:2f:dc:e0:fe:dc:8b:b8: ab:22:aa:25:db:c5:ee:e3:57:23:93:ab:17:f1:fb: a4:ec:55:50:40:74:5f:e8:7d:51:0b:d9:3c:22:9d: 35:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B5:EC:67:73:82:F4:80:A8:BD:DE:48:6D:6B:E5:C4:08:F4:F4:60 X509v3 Authority Key Identifier: keyid:7C:5D:56:FE:CF:4D:A2:59:A1:C2:AE:1E:B8:AF:07:9A:2A:A9:07:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF1W_s9Nolmhwq4euK8HmiqpB7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:77:92:7f:7f:d1:bc:39:02:47:4b:88:c6:15:fa:db:3f:e9: 83:f5:36:ea:51:f8:e7:74:fb:fc:ef:0b:13:2b:48:09:43:d3: 1c:ff:46:fa:ab:9e:b6:4d:b8:5c:d5:c2:73:bb:04:7c:7c:27: 06:4a:c8:b4:80:30:06:d6:ed:fd:dc:96:d5:73:90:aa:72:bf: 2a:8b:67:e7:8e:35:85:53:d6:5a:6d:86:8d:e0:ea:20:1a:9c: 41:e8:ee:8a:50:bd:fc:c7:63:1d:63:ce:60:dc:74:27:e5:c7: 95:8b:f6:a3:6d:92:b4:3d:eb:12:77:32:42:cc:f1:36:b7:69: 34:19:60:c6:27:4f:8b:20:26:46:0c:84:80:33:15:bd:b6:de: a3:70:25:34:fb:0a:81:cc:9a:c9:58:0d:0f:18:13:ee:29:d1: be:51:71:a1:dc:4e:41:81:12:53:44:68:bb:cc:13:81:ba:6d: 0d:15:b8:15:e5:6b:2c:07:4c:25:f9:2c:6b:a1:fe:fd:ae:ab: 7a:ab:0c:ff:60:52:a1:ea:03:02:91:41:fa:52:46:c9:b8:7e: 67:b5:30:61:4c:88:f3:ac:91:7a:0e:2f:f3:25:fe:d3:69:fa: cc:2e:f9:56:43:96:ad:fe:e4:28:b7:7b:28:4c:ea:77:9e:e0: 83:36:fc:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBBQzgxMTAvBgNVBAUTKDdDNUQ1NkZFQ0Y0REEyNTlBMUMyQUUxRUI4QUYwNzlB MkFBOTA3QjgwHhcNMjQwNTE4MTgwMDU3WhcNMjQwNTI1MTgwMDU3WjAYMRYwFAYD VQQDEw02NjQ4ZWNkYS1lMzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8c1SBWEyjZ0LXkNOKCBroC7jyBZvVDxcb0EXAO4UVl6yomHWXcCVVcHjSo/o rw5ax2wiza+9wV8u/Lr6Rm55QxsZgzCkegWsanyAbaIylxTyjxNGNJMO+Xl0I9HK Hl5xJ7jxd6dTcPbnXpvCdHG4RKRvLGAVIvPjUPoOid2026nhRtQEcFYE/Uc5p84y LmXv3YzCEyfSyJvQdNJcVHB4kAfpxseU7TEAaKIyp9+3SmV5qNVZnDc7kv8qyYL/ rMmkIm5L/SYkknK/gxmWjUJO30brKeSCfqJmKC/c4P7ci7irIqol28Xu41cjk6sX 8fuk7FVQQHRf6H1RC9k8Ip01nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOi17Gdz gvSAqL3eSG1r5cQI9PRgMB8GA1UdIwQYMBaAFHxdVv7PTaJZocKuHrivB5oqqQe4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEFDOC9GRTgwRjk5MjI0 MkIxMUU5QTRCMkIzMzNDNEY5QUUwMi9mRjFXX3M5Tm9sbWh3cTRldUs4SG1pcXBC N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGMVdfczlOb2xtaHdxNGV1SzhIbWlxcEI3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEFDOC9GRTgwRjk5MjI0MkIxMUU5QTRCMkIzMzNDNEY5QUUwMi9mRjFXX3M5Tm9s bWh3cTRldUs4SG1pcXBCN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMd5J/f9G8OQJHS4jGFfrbP+mD9TbqUfjndPv87wsTK0gJQ9Mc/0b6 q562Tbhc1cJzuwR8fCcGSsi0gDAG1u393JbVc5Cqcr8qi2fnjjWFU9ZabYaN4Oog GpxB6O6KUL38x2MdY85g3HQn5ceVi/ajbZK0PesSdzJCzPE2t2k0GWDGJ0+LICZG DISAMxW9tt6jcCU0+wqBzJrJWA0PGBPuKdG+UXGh3E5BgRJTRGi7zBOBum0NFbgV 5WssB0wl+Sxrof79rqt6qwz/YFKh6gMCkUH6UkbJuH5ntTBhTIjzrJF6Di/zJf7T afrMLvlWQ5at/uQot3soTOp3nuCDNvxz -----END CERTIFICATE-----Generated at Sat May 18 19:15:24 2024 by rpki-client on console-ams.rpki-client.org