$ rpki-client -vvf rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft File: FrgD2zk43LFdxZooyXcZ2h_yClM.mft (raw, json) Hash identifier: 3nooZZ5n9vmAEnOCC1np3FBwFXqvgqHK+i/ubampGQQ= Subject key identifier: 41:67:3A:07:5C:C0:90:57:6A:39:D2:C6:B9:40:F6:A8:5E:1C:E2:B9 Authority key identifier: 16:B8:03:DB:39:38:DC:B1:5D:C5:9A:28:C9:77:19:DA:1F:F2:0A:53 Certificate issuer: /CN=A9149E0D/serialNumber=16B803DB3938DCB15DC59A28C97719DA1FF20A53 Certificate serial: 0A86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft Manifest number: 0A7C Signing time: Sat 18 May 2024 20:16:55 +0000 Manifest this update: Sat 18 May 2024 20:16:55 +0000 Manifest next update: Sat 25 May 2024 20:16:55 +0000 Files and hashes: 1: FrgD2zk43LFdxZooyXcZ2h_yClM.crl (hash: L6XKPuT1rt/HttRgReRw/qYGdXHV4TH9hYNCVD9JuFA=) 2: C8FB48F808AF11EBAB78DF6BC4F9AE02.roa (hash: PrjpZlh7Tuh2bb8hiFmK68isEjfllyctC7vNKOM8jnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.crl rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2694 (0xa86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149E0D/serialNumber=16B803DB3938DCB15DC59A28C97719DA1FF20A53 Validity Not Before: May 18 20:16:55 2024 GMT Not After : May 25 20:16:55 2024 GMT Subject: CN=66490cb7-42dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:95:fe:64:54:23:50:16:05:fd:21:3e:fc:aa: 99:32:59:c8:3e:62:13:48:3b:e1:ce:d8:46:15:3d: 3b:c3:30:18:48:4b:fd:dc:01:61:c5:98:d8:48:36: c2:2f:85:1b:9d:fa:c1:39:7e:8a:44:e4:40:fe:c6: af:50:1d:a3:8b:65:69:c6:81:39:d7:d6:bc:56:07: 62:03:c2:12:d1:08:8f:07:12:4e:f3:cf:d8:a5:96: 7e:77:63:f1:59:f5:59:57:f6:2c:bf:36:0d:c9:7f: ac:19:c2:c1:7a:b5:c2:43:4d:68:73:8d:43:21:49: 05:5f:e7:c7:a8:10:0b:e8:fc:f5:2e:e6:92:cf:9d: f6:30:2c:4e:1e:67:f5:07:1c:2f:06:64:9c:59:50: c1:ce:f7:cb:57:8c:4d:9a:4e:54:03:7f:3c:46:34: 16:b3:bf:d8:85:96:e2:88:9c:31:3d:f8:b3:f5:24: fa:09:60:e6:fd:02:d7:a6:59:8a:84:7d:f1:48:5d: 70:00:45:b9:e3:69:85:75:51:a4:e4:e7:62:44:63: ce:bc:b6:19:37:6a:89:99:7f:38:f6:f4:73:7a:8b: 61:6b:33:a0:04:37:56:39:24:e3:39:de:48:51:91: 2d:ee:34:e5:8e:d7:af:84:59:25:a3:bc:d6:98:c8: 15:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:67:3A:07:5C:C0:90:57:6A:39:D2:C6:B9:40:F6:A8:5E:1C:E2:B9 X509v3 Authority Key Identifier: keyid:16:B8:03:DB:39:38:DC:B1:5D:C5:9A:28:C9:77:19:DA:1F:F2:0A:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:5f:b9:00:b2:6c:4d:66:f6:63:d2:09:e9:5d:4a:b3:ce:7c: 83:22:6c:69:d6:41:3c:2e:25:30:aa:ca:f3:69:32:43:4b:76: 93:3d:8c:64:2a:10:9d:6f:3b:13:00:b6:4b:93:d3:f9:1b:6e: d7:91:a3:14:ce:98:8d:ba:d7:8f:9f:f2:94:d2:7b:2c:54:c0: 47:ef:c3:7d:a5:a4:51:88:9f:45:dd:6a:5d:80:df:de:04:7e: 5c:72:d3:69:b2:25:c1:57:42:3b:af:43:c9:3a:2a:9a:77:a7: f7:d3:f5:d8:fd:da:eb:03:bc:11:da:ad:75:93:d7:b4:a2:59: be:74:8b:8a:c7:86:cb:24:95:fe:79:04:dd:3f:34:18:23:e6: 19:e0:60:d0:b1:3c:a7:8b:26:ea:85:3e:05:eb:f9:d8:ac:19: ad:5c:2c:66:67:4a:78:e5:22:ba:f8:30:85:4a:8a:89:e0:2d: 19:1c:2c:b2:a0:0a:66:b5:1f:30:82:f3:0d:91:9f:34:28:bd: c6:fe:44:af:e6:38:61:0e:ac:2a:32:75:71:e7:4b:1d:d5:67: a3:8d:3e:b2:58:58:14:45:e9:96:f2:e1:f4:ed:9f:a6:04:e5: ed:7c:f0:b1:39:26:2d:e0:30:8a:aa:bb:f5:48:7c:f5:0a:8c: 98:9c:d6:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlFMEQxMTAvBgNVBAUTKDE2QjgwM0RCMzkzOERDQjE1REM1OUEyOEM5NzcxOURB MUZGMjBBNTMwHhcNMjQwNTE4MjAxNjU1WhcNMjQwNTI1MjAxNjU1WjAYMRYwFAYD VQQDEw02NjQ5MGNiNy00MmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJX+ZFQjUBYF/SE+/KqZMlnIPmITSDvhzthGFT07wzAYSEv93AFhxZjYSDbC L4UbnfrBOX6KRORA/savUB2ji2VpxoE519a8VgdiA8IS0QiPBxJO88/YpZZ+d2Px WfVZV/YsvzYNyX+sGcLBerXCQ01oc41DIUkFX+fHqBAL6Pz1LuaSz532MCxOHmf1 BxwvBmScWVDBzvfLV4xNmk5UA388RjQWs7/YhZbiiJwxPfiz9ST6CWDm/QLXplmK hH3xSF1wAEW542mFdVGk5OdiRGPOvLYZN2qJmX849vRzeothazOgBDdWOSTjOd5I UZEt7jTljtevhFklo7zWmMgVUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFnOgdc wJBXajnSxrlA9qheHOK5MB8GA1UdIwQYMBaAFBa4A9s5ONyxXcWaKMl3Gdof8gpT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUUwRC85MDRFNzQ3RTM5 MDkxMUVBQjBERTNGNDlDNEY5QUUwMi9GcmdEMnprNDNMRmR4Wm9veVhjWjJoX3lD bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyZ0Qyems0M0xGZHhab295WGNaMmhfeUNsTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUUwRC85MDRFNzQ3RTM5MDkxMUVBQjBERTNGNDlDNEY5QUUwMi9GcmdEMnprNDNM RmR4Wm9veVhjWjJoX3lDbE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnX7kAsmxNZvZj0gnpXUqzznyDImxp1kE8LiUwqsrzaTJDS3aTPYxk KhCdbzsTALZLk9P5G27XkaMUzpiNutePn/KU0nssVMBH78N9paRRiJ9F3WpdgN/e BH5cctNpsiXBV0I7r0PJOiqad6f30/XY/drrA7wR2q11k9e0olm+dIuKx4bLJJX+ eQTdPzQYI+YZ4GDQsTyniybqhT4F6/nYrBmtXCxmZ0p45SK6+DCFSoqJ4C0ZHCyy oApmtR8wgvMNkZ80KL3G/kSv5jhhDqwqMnVx50sd1WejjT6yWFgURemW8uH07Z+m BOXtfPCxOSYt4DCKqrv1SHz1CoyYnNYf -----END CERTIFICATE-----Generated at Sat May 18 21:31:27 2024 by rpki-client on console-ams.rpki-client.org