$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft File: 9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft (raw, json) Hash identifier: +0uqysIg+vDs0mL6eYrxPwcYCRMgGWCPiweieP9AeLg= Subject key identifier: 91:23:39:07:84:A1:92:BC:E1:58:8C:12:70:0D:D4:9E:A4:C2:C8:2A Authority key identifier: F5:FD:27:4A:F2:7C:E9:5F:69:2D:B8:0B:E8:EF:67:C3:24:60:2B:48 Certificate issuer: /CN=A913FA48/serialNumber=F5FD274AF27CE95F692DB80BE8EF67C324602B48 Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft Manifest number: FC Signing time: Sun 19 May 2024 05:41:37 +0000 Manifest this update: Sun 19 May 2024 05:41:36 +0000 Manifest next update: Sun 26 May 2024 05:41:36 +0000 Files and hashes: 1: 9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl (hash: qGIX+ACw0AOvhvHHY/KtFuzWnjIR6QzyrS+131sZv6E=) 2: 56D1860A97D411ED801D7E41C4F9AE02.roa (hash: rTtYX1LDsjHbgRQGYM/IhQASFN1rXozG53hA00I5+ns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FA48/serialNumber=F5FD274AF27CE95F692DB80BE8EF67C324602B48 Validity Not Before: May 19 05:41:36 2024 GMT Not After : May 26 05:41:36 2024 GMT Subject: CN=66499110-c1ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ac:27:66:10:f9:e4:d8:8c:2a:99:23:b1:53: a8:d3:ec:e4:be:eb:54:bc:8e:e0:83:26:fd:b2:cb: 08:33:9e:68:3d:88:fe:42:ee:4c:7e:00:d5:b4:c2: f7:1a:62:57:6b:cf:e3:b1:9d:7b:ba:45:1e:67:dc: c1:ea:70:55:0b:f8:b2:71:cf:2c:12:b8:22:81:8a: db:26:4b:38:b3:7d:56:66:92:4a:e0:3d:7a:84:61: bf:cb:9b:14:1e:c6:4b:31:31:be:01:df:3a:e6:30: ae:77:40:15:cf:20:77:8c:b8:a9:cc:12:7f:b4:18: 05:99:97:03:f9:5e:8b:52:93:4a:91:48:3a:79:88: 2a:31:83:7d:75:9a:27:f0:c9:d4:65:c1:60:f9:1d: 81:77:cc:2a:94:2e:f0:8d:ae:c0:80:63:30:3e:28: 6e:5b:4f:57:0c:d7:cd:de:cf:d8:73:e8:41:66:b4: 2f:c1:c8:6a:01:7b:1b:e8:d3:9e:f6:bf:80:3b:97: b6:0c:0a:c1:0c:08:10:38:d8:63:c8:18:26:d9:c7: 92:eb:38:7d:85:47:0c:f8:66:75:a5:11:a7:86:42: 98:60:5b:bc:bd:e0:cc:77:5e:08:cf:c9:90:48:65: e9:9b:30:25:e4:3f:04:b8:5f:05:b1:36:e2:0e:c1: b6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:23:39:07:84:A1:92:BC:E1:58:8C:12:70:0D:D4:9E:A4:C2:C8:2A X509v3 Authority Key Identifier: keyid:F5:FD:27:4A:F2:7C:E9:5F:69:2D:B8:0B:E8:EF:67:C3:24:60:2B:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:18:82:0f:c9:8b:7c:98:16:83:c0:31:1d:33:7b:38:61:81: 41:54:a1:9d:d7:0a:1b:0f:a7:43:0f:5a:4a:89:1e:eb:c5:86: 3f:3e:74:99:94:f1:bb:6a:59:50:9f:90:de:a2:c6:17:66:6d: 07:99:ce:34:67:d9:4f:0b:50:d5:d8:4a:16:b5:f4:59:85:2c: 3a:7f:08:7d:56:d5:e6:bc:3f:17:8a:51:c4:52:82:7b:b8:f3: 66:7e:f7:5a:0f:d2:2e:d4:56:f1:24:47:b6:bc:8e:d7:07:f1: 36:07:26:96:56:8b:f5:c3:00:01:da:9e:32:aa:6f:75:41:78: 1c:32:74:b9:bf:b3:7b:8e:88:48:04:90:e1:fc:7d:65:da:ba: 28:19:b7:b9:a2:67:aa:5d:2e:48:20:ad:56:29:2b:f3:ef:0a: 22:94:43:7f:f9:48:68:e1:4b:ee:05:4b:ba:f3:ed:c0:b9:a7: 60:33:5e:ac:a4:1c:bf:e8:66:78:55:5d:8b:26:91:65:04:4f: ad:c8:9c:1c:a4:30:32:23:43:a8:da:42:50:c1:5c:9b:b4:ff: 32:b9:1b:76:c9:22:54:2e:47:77:ce:ba:e7:1e:8b:c7:7a:94: 77:c4:8d:b3:6a:32:d5:6d:e0:2d:8a:32:52:42:fd:1a:6d:79: c4:19:46:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZBNDgxMTAvBgNVBAUTKEY1RkQyNzRBRjI3Q0U5NUY2OTJEQjgwQkU4RUY2N0Mz MjQ2MDJCNDgwHhcNMjQwNTE5MDU0MTM2WhcNMjQwNTI2MDU0MTM2WjAYMRYwFAYD VQQDEw02NjQ5OTExMC1jMWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwawnZhD55NiMKpkjsVOo0+zkvutUvI7ggyb9sssIM55oPYj+Qu5MfgDVtML3 GmJXa8/jsZ17ukUeZ9zB6nBVC/iycc8sErgigYrbJks4s31WZpJK4D16hGG/y5sU HsZLMTG+Ad865jCud0AVzyB3jLipzBJ/tBgFmZcD+V6LUpNKkUg6eYgqMYN9dZon 8MnUZcFg+R2Bd8wqlC7wja7AgGMwPihuW09XDNfN3s/Yc+hBZrQvwchqAXsb6NOe 9r+AO5e2DArBDAgQONhjyBgm2ceS6zh9hUcM+GZ1pRGnhkKYYFu8veDMd14Iz8mQ SGXpmzAl5D8EuF8FsTbiDsG2+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJEjOQeE oZK84ViMEnAN1J6kwsgqMB8GA1UdIwQYMBaAFPX9J0ryfOlfaS24C+jvZ8MkYCtI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkE0OC9GNzM3MTNGNjk3 RDExMUVEQjFBMjU0NDFDNEY5QUUwMi85ZjBuU3ZKODZWOXBMYmdMNk85bnd5UmdL MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlmMG5Tdko4NlY5cExiZ0w2Tzlud3lSZ0swZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkE0OC9GNzM3MTNGNjk3RDExMUVEQjFBMjU0NDFDNEY5QUUwMi85ZjBuU3ZKODZW OXBMYmdMNk85bnd5UmdLMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3GIIPyYt8mBaDwDEdM3s4YYFBVKGd1wobD6dDD1pKiR7rxYY/PnSZ lPG7allQn5DeosYXZm0Hmc40Z9lPC1DV2EoWtfRZhSw6fwh9VtXmvD8XilHEUoJ7 uPNmfvdaD9Iu1FbxJEe2vI7XB/E2ByaWVov1wwAB2p4yqm91QXgcMnS5v7N7johI BJDh/H1l2rooGbe5omeqXS5IIK1WKSvz7woilEN/+Uho4UvuBUu68+3AuadgM16s pBy/6GZ4VV2LJpFlBE+tyJwcpDAyI0Oo2kJQwVybtP8yuRt2ySJULkd3zrrnHovH epR3xI2zajLVbeAtijJSQv0abXnEGUbY -----END CERTIFICATE-----Generated at Sun May 19 07:40:38 2024 by rpki-client on console-fra.rpki-client.org