$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft File: fHyggZUNrvx8VLjERpi0jo18abg.mft (raw, json) Hash identifier: kfm+7wbqeU993re4Z4u6ucOdT8S0k5AkCb72vI87iJk= Subject key identifier: D9:7F:95:68:80:7D:0E:4E:94:5E:8E:C2:82:9C:16:30:7B:C4:C6:94 Authority key identifier: 7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8 Certificate issuer: /CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8 Certificate serial: 0FD4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft Manifest number: 0FAE Signing time: Sat 18 May 2024 18:08:07 +0000 Manifest this update: Sat 18 May 2024 18:08:07 +0000 Manifest next update: Sat 25 May 2024 18:08:07 +0000 Files and hashes: 1: fHyggZUNrvx8VLjERpi0jo18abg.crl (hash: 9R+DB6gTB2Q3PemL5ECGTgdNR1k5HwjtOGPj4TcVAwU=) 2: 5FADE68E288811EE97A1EC5CC4F9AE02.roa (hash: ZM9lhKcpu/Yw8iwrVv778rvTOTFa6v4+IUkQwi1E1MY=) 3: 658A332E5C0311E999AF9478C4F9AE02.roa (hash: suUdH6Ugfv0O0zo3EWdu2SzDw7vZm7qfcDa3w/SPffc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4052 (0xfd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8 Validity Not Before: May 18 18:08:07 2024 GMT Not After : May 25 18:08:07 2024 GMT Subject: CN=6648ee87-985b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:25:17:a6:36:54:82:4e:ad:6c:6a:f2:2c:f1: 50:bc:86:82:bd:9a:27:99:27:2e:f4:48:32:6b:cc: 39:82:b1:0f:0e:66:7e:28:fe:0f:12:00:2d:0f:81: c9:c2:8c:6f:06:da:db:73:b5:b0:44:d3:a9:b6:f8: e7:7d:73:1c:b9:84:38:03:c4:61:88:96:ce:db:6a: f9:aa:0c:55:4e:64:79:37:ad:52:74:50:e7:3a:07: 22:2a:d1:62:b1:9c:36:97:4e:fb:37:02:32:ef:6f: 7c:ac:0d:4e:70:98:eb:5e:d3:08:f3:64:e2:15:ea: 33:f3:38:6b:cc:f8:49:7d:4c:c4:ae:cf:b1:74:de: 04:be:85:6d:e5:3c:d3:67:8f:94:3a:ed:a7:93:d9: 00:76:01:9b:b3:ce:6c:27:4e:df:f2:c1:33:63:f9: ad:f3:4c:ac:02:75:16:56:61:99:28:33:86:7f:5c: e2:11:27:59:29:55:73:7c:2c:a0:87:42:50:58:a2: 18:0d:0d:57:5f:51:c8:01:f0:28:68:93:ce:30:fa: 68:fa:63:84:d9:75:97:97:c7:aa:3e:f8:eb:02:22: 23:57:04:4a:b1:b2:c1:4d:f4:a8:07:f4:04:3a:a8: 92:e0:46:d3:a5:d0:13:fc:11:e8:a1:2c:08:66:3b: 15:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:7F:95:68:80:7D:0E:4E:94:5E:8E:C2:82:9C:16:30:7B:C4:C6:94 X509v3 Authority Key Identifier: keyid:7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:75:c2:41:28:aa:a2:96:e9:1f:87:5d:06:4c:f0:21:5e:39: 08:d0:9b:b2:83:0c:f8:20:41:69:60:9e:1d:03:27:a2:73:e0: 69:60:0a:0b:a6:02:42:1a:e8:a1:84:85:f6:d5:f0:98:ba:71: b5:de:19:34:20:5b:8a:eb:7b:12:d3:ed:5f:d3:fb:b7:c5:d2: cb:fd:77:e5:78:0a:04:0e:b7:a5:e0:68:7b:91:50:01:97:fb: e4:8d:28:0b:1c:60:25:0a:a7:47:30:ee:24:fd:a3:b3:2f:c5: 38:67:c5:39:3f:42:66:fb:ce:4a:c9:ba:44:1d:75:79:48:f9: db:a0:1a:39:bd:72:fb:75:a2:91:7e:9a:75:e8:67:9c:34:9f: 95:df:83:16:58:a9:81:e3:19:79:21:7f:a3:9f:28:f6:72:7f: 02:f5:6c:d3:57:18:bf:0e:39:48:70:34:e2:cd:03:30:6f:cc: 25:5f:f3:a2:2c:88:dc:54:7f:56:79:5f:b4:99:4c:23:da:e7: f1:ae:69:ab:ae:3a:ec:50:e4:5b:b1:4b:0c:e4:79:ce:4a:5c: 28:1a:3d:ec:b4:0c:01:fc:80:dd:46:67:47:a9:2b:f6:3e:27: 73:22:b7:48:47:20:3e:24:22:14:29:d7:ec:ef:b1:78:60:cf: bc:9f:b9:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZERDYxMTAvBgNVBAUTKDdDN0NBMDgxOTUwREFFRkM3QzU0QjhDNDQ2OThCNDhF OEQ3QzY5QjgwHhcNMjQwNTE4MTgwODA3WhcNMjQwNTI1MTgwODA3WjAYMRYwFAYD VQQDEw02NjQ4ZWU4Ny05ODViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCUXpjZUgk6tbGryLPFQvIaCvZonmScu9Egya8w5grEPDmZ+KP4PEgAtD4HJ woxvBtrbc7WwRNOptvjnfXMcuYQ4A8RhiJbO22r5qgxVTmR5N61SdFDnOgciKtFi sZw2l077NwIy7298rA1OcJjrXtMI82TiFeoz8zhrzPhJfUzErs+xdN4EvoVt5TzT Z4+UOu2nk9kAdgGbs85sJ07f8sEzY/mt80ysAnUWVmGZKDOGf1ziESdZKVVzfCyg h0JQWKIYDQ1XX1HIAfAoaJPOMPpo+mOE2XWXl8eqPvjrAiIjVwRKsbLBTfSoB/QE OqiS4EbTpdAT/BHooSwIZjsVnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNl/lWiA fQ5OlF6OwoKcFjB7xMaUMB8GA1UdIwQYMBaAFHx8oIGVDa78fFS4xEaYtI6NfGm4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkRENi9EMzYyQTFDQTNC MzcxMUU5QTAzOEFCMkFDNEY5QUUwMi9mSHlnZ1pVTnJ2eDhWTGpFUnBpMGpvMThh YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZIeWdnWlVOcnZ4OFZMakVScGkwam8xOGFiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkRENi9EMzYyQTFDQTNCMzcxMUU5QTAzOEFCMkFDNEY5QUUwMi9mSHlnZ1pVTnJ2 eDhWTGpFUnBpMGpvMThhYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5dcJBKKqilukfh10GTPAhXjkI0Juygwz4IEFpYJ4dAyeic+BpYAoL pgJCGuihhIX21fCYunG13hk0IFuK63sS0+1f0/u3xdLL/XfleAoEDrel4Gh7kVAB l/vkjSgLHGAlCqdHMO4k/aOzL8U4Z8U5P0Jm+85KybpEHXV5SPnboBo5vXL7daKR fpp16GecNJ+V34MWWKmB4xl5IX+jnyj2cn8C9WzTVxi/DjlIcDTizQMwb8wlX/Oi LIjcVH9WeV+0mUwj2ufxrmmrrjrsUORbsUsM5HnOSlwoGj3stAwB/IDdRmdHqSv2 PidzIrdIRyA+JCIUKdfs77F4YM+8n7mL -----END CERTIFICATE-----Generated at Sat May 18 18:46:45 2024 by rpki-client on console-fra.rpki-client.org