$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft File: fFO_avST0kw7fGuiFrOCsMf3_CQ.mft (raw, json) Hash identifier: +2+oceUIW2zxQ1WXwL6XgZUohZckITbc2VU+ouSGTeo= Subject key identifier: BD:EE:90:61:8A:4C:44:B2:74:3F:93:C6:F8:8B:65:82:D4:98:4B:8D Authority key identifier: 7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24 Certificate issuer: /CN=A913FA1D/serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24 Certificate serial: 07C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft Manifest number: 07B8 Signing time: Fri 26 Apr 2024 22:04:08 +0000 Manifest this update: Fri 26 Apr 2024 22:04:08 +0000 Manifest next update: Fri 03 May 2024 22:04:08 +0000 Files and hashes: 1: fFO_avST0kw7fGuiFrOCsMf3_CQ.crl (hash: AGTayHs0nd0/rLspxRpV353jYqaiqwUsTWBnV4EHXc8=) 2: F86B8216BFED11EABE972E5AC4F9AE02.roa (hash: V0pjnh04vEdgmV8Kv8derW5bLwshO/M+fOtkhl/pSHk=) 3: F902E016BFED11EABE972E5AC4F9AE02.roa (hash: zJnQAoVQnMFggHhOkukGbqVFmuwnoJ5l6Pzb/DNiFGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 22:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1986 (0x7c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FA1D/serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24 Validity Not Before: Apr 26 22:04:08 2024 GMT Not After : May 3 22:04:08 2024 GMT Subject: CN=662c24d8-e51d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:77:e2:5c:3b:b3:43:37:25:b5:f0:8d:46:52: 78:8e:f6:48:5a:57:bf:af:1e:7b:31:b8:8b:8e:70: 35:a7:9c:44:0a:1e:a9:ec:bb:ce:4d:a0:9e:66:bc: 15:63:b4:24:97:67:7e:a0:fa:0b:74:d9:3d:9a:ce: ca:2f:bc:d0:64:97:2d:48:a9:49:8a:b3:4a:2d:47: 07:d6:28:57:a0:05:54:f7:da:6a:98:ad:36:65:93: 1a:bd:ff:28:6d:93:7e:7e:73:45:1c:8f:bd:b4:c4: c6:db:9b:c5:13:6e:00:79:30:b3:bc:b4:d0:fe:fc: 8a:e9:34:44:77:e3:07:bd:1b:5e:0a:3d:cc:f8:80: bb:bd:1d:73:21:3d:1e:a5:bb:8c:78:b5:5e:57:93: 25:c9:13:57:8f:5f:16:f9:0a:4d:15:6e:bf:26:96: 2a:45:47:71:9a:70:ea:2a:5e:76:c3:9d:59:c9:4d: 91:28:d6:81:2b:73:02:e8:53:18:d4:8a:6e:6a:14: d5:9b:5c:88:bf:75:79:8e:29:79:c3:1e:9f:4d:c9: 7f:9c:7a:ea:a4:cb:28:17:db:93:67:27:22:85:9e: f7:c7:22:57:06:29:68:42:26:2f:e4:b0:cf:1c:05: 3d:df:78:c8:98:f1:f0:f2:5e:b4:da:c3:d2:c5:90: 2a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:EE:90:61:8A:4C:44:B2:74:3F:93:C6:F8:8B:65:82:D4:98:4B:8D X509v3 Authority Key Identifier: keyid:7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:29:bf:e4:8d:f0:3a:a7:e2:72:ee:64:4e:98:13:44:08:73: ad:a8:72:3b:8e:6d:f4:5c:43:44:a3:ef:55:f9:c4:65:6e:19: 76:0c:13:21:4f:50:50:ea:c1:d6:e0:07:91:72:74:76:65:84: 1c:81:52:25:c7:05:e6:28:43:29:12:cc:6e:e3:2d:22:bb:3e: 63:10:c3:0b:c2:12:7f:91:fd:17:6d:3c:75:e3:1c:93:f4:97: fc:1c:4c:30:c8:4c:db:51:cb:0e:a9:6d:df:91:4f:88:ad:37: 9f:f5:be:f8:35:70:5d:fe:3b:87:41:de:a7:9a:5c:5e:2a:86: 52:80:81:da:22:e6:5c:d2:26:2a:8a:bf:b4:d9:fc:ba:c9:8a: 0b:38:e2:d3:9b:5d:3b:32:6a:50:6d:54:57:17:06:4d:a5:90: 08:15:c9:87:64:d0:a3:65:40:ec:f3:eb:cd:00:ee:d6:1a:12: 2b:9c:c3:85:13:dd:9b:64:e3:71:d4:4d:f1:e3:20:d6:65:88: a0:1b:9b:8d:69:c1:f8:08:08:b4:58:09:cf:bc:73:fc:95:cf: 64:0e:93:4c:bf:ec:b6:fc:11:a3:77:3e:8b:49:73:f2:61:a8: 76:0b:3c:c5:1c:39:ee:2b:7f:c2:e7:e9:69:8e:d7:4a:d2:0f: db:00:92:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZBMUQxMTAvBgNVBAUTKDdDNTNCRjZBRjQ5M0QyNEMzQjdDNkJBMjE2QjM4MkIw QzdGN0ZDMjQwHhcNMjQwNDI2MjIwNDA4WhcNMjQwNTAzMjIwNDA4WjAYMRYwFAYD VQQDEw02NjJjMjRkOC1lNTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoHfiXDuzQzcltfCNRlJ4jvZIWle/rx57MbiLjnA1p5xECh6p7LvOTaCeZrwV Y7Qkl2d+oPoLdNk9ms7KL7zQZJctSKlJirNKLUcH1ihXoAVU99pqmK02ZZMavf8o bZN+fnNFHI+9tMTG25vFE24AeTCzvLTQ/vyK6TREd+MHvRteCj3M+IC7vR1zIT0e pbuMeLVeV5MlyRNXj18W+QpNFW6/JpYqRUdxmnDqKl52w51ZyU2RKNaBK3MC6FMY 1IpuahTVm1yIv3V5jil5wx6fTcl/nHrqpMsoF9uTZycihZ73xyJXBiloQiYv5LDP HAU933jImPHw8l602sPSxZAqbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3ukGGK TESydD+TxviLZYLUmEuNMB8GA1UdIwQYMBaAFHxTv2r0k9JMO3xrohazgrDH9/wk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkExRC85RUVBNEQ2OEJG RUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBrdzdmR3VpRnJPQ3NNZjNf Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGT19hdlNUMGt3N2ZHdWlGck9Dc01mM19DUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkExRC85RUVBNEQ2OEJGRUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBr dzdmR3VpRnJPQ3NNZjNfQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaKb/kjfA6p+Jy7mROmBNECHOtqHI7jm30XENEo+9V+cRlbhl2DBMh T1BQ6sHW4AeRcnR2ZYQcgVIlxwXmKEMpEsxu4y0iuz5jEMMLwhJ/kf0XbTx14xyT 9Jf8HEwwyEzbUcsOqW3fkU+IrTef9b74NXBd/juHQd6nmlxeKoZSgIHaIuZc0iYq ir+02fy6yYoLOOLTm107MmpQbVRXFwZNpZAIFcmHZNCjZUDs8+vNAO7WGhIrnMOF E92bZONx1E3x4yDWZYigG5uNacH4CAi0WAnPvHP8lc9kDpNMv+y2/BGjdz6LSXPy Yah2CzzFHDnuK3/C5+lpjtdK0g/bAJKY -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:45 2024 by rpki-client on console-ams.rpki-client.org