$ rpki-client -vvf rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.mft File: H3amlEQsq0PX0XzW_fmpfgt_qo4.mft (raw, json) Hash identifier: BMnz6YxRyC6bmr+v4+Lp7PVSpGT8lESZ21ibHhKohBU= Subject key identifier: 67:2F:6D:CC:29:40:8C:B6:D9:5E:D8:54:F5:0F:73:18:F1:25:B5:B8 Authority key identifier: 1F:76:A6:94:44:2C:AB:43:D7:D1:7C:D6:FD:F9:A9:7E:0B:7F:AA:8E Certificate issuer: /CN=A9158059/serialNumber=1F76A694442CAB43D7D17CD6FDF9A97E0B7FAA8E Certificate serial: 0561 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H3amlEQsq0PX0XzW_fmpfgt_qo4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.mft Manifest number: 055D Signing time: Sun 19 May 2024 00:47:08 +0000 Manifest this update: Sun 19 May 2024 00:47:08 +0000 Manifest next update: Sun 26 May 2024 00:47:08 +0000 Files and hashes: 1: H3amlEQsq0PX0XzW_fmpfgt_qo4.crl (hash: N6naR25dRRVnjdA00sap06awgpSTxWOCUNwqjiDMtyY=) 2: 702A62CE9CC311EBA5A7A47BC4F9AE02.roa (hash: 4h1L3UPeFB7u6XpATtyAiPamwvkvOtamaw8dmDwjl7k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.crl rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H3amlEQsq0PX0XzW_fmpfgt_qo4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1377 (0x561) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158059/serialNumber=1F76A694442CAB43D7D17CD6FDF9A97E0B7FAA8E Validity Not Before: May 19 00:47:08 2024 GMT Not After : May 26 00:47:08 2024 GMT Subject: CN=66494c0c-b49a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ef:80:06:7a:c2:7d:91:cf:c6:93:73:3f:0a: 80:a9:56:0f:da:cf:0b:16:31:4d:61:52:c6:5e:ba: b3:b6:31:ee:9b:89:3b:20:1a:ea:9f:4d:e0:b3:f4: 79:9d:f5:1b:1a:e2:fc:e6:7d:7f:90:d8:63:1d:e0: 62:e9:2c:ad:c0:15:36:f4:83:58:53:95:3b:9c:5d: 5f:05:f9:4d:58:62:24:04:42:3e:a2:5e:68:b2:80: bb:86:8a:60:b1:fc:34:55:c7:0c:83:c9:2c:84:6d: 28:a0:8e:e6:97:ca:76:b8:b6:b2:0c:e1:b5:51:d5: 02:26:87:e3:97:bf:cc:35:ce:fd:6e:06:f5:45:2a: a0:2d:43:9a:33:a5:31:a0:f7:9a:52:56:85:b2:a5: 27:42:9e:fe:62:fc:5a:29:f8:9c:95:72:d4:b8:0a: 06:bd:97:04:07:87:c8:d8:05:f0:d2:ac:79:c2:1a: bf:a7:0d:a0:6c:a9:92:bc:99:47:32:79:2e:98:91: 36:5b:f9:a4:5e:51:dc:66:bc:c8:9f:8f:fb:21:26: 4e:76:13:7d:36:ee:85:5f:5d:77:9a:9f:50:47:69: 4f:f1:49:51:82:6d:a2:af:73:65:e0:63:39:7f:85: 76:29:d9:86:c1:43:9b:8d:86:2d:df:05:c7:eb:4a: cf:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2F:6D:CC:29:40:8C:B6:D9:5E:D8:54:F5:0F:73:18:F1:25:B5:B8 X509v3 Authority Key Identifier: keyid:1F:76:A6:94:44:2C:AB:43:D7:D1:7C:D6:FD:F9:A9:7E:0B:7F:AA:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H3amlEQsq0PX0XzW_fmpfgt_qo4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:e9:2e:fe:c0:7e:6a:7f:6d:db:f9:b8:7b:c3:8f:64:29:27: 1b:e3:1d:df:77:51:8d:a3:ee:c6:c0:4d:31:7e:d4:6d:da:91: 8e:19:7a:33:71:e4:21:d0:4c:64:c8:3a:6f:82:b8:3e:bd:a4: fe:01:bc:bd:52:c4:d3:c4:ba:2f:d9:a2:bb:61:05:7e:48:e0: a3:36:62:6a:f1:9d:d3:65:67:da:f6:2e:93:ce:e3:03:1a:1d: da:0b:09:13:8a:08:69:d0:1d:6f:64:dc:62:01:02:a0:9a:68: b5:9b:5f:83:f6:6e:e9:39:d4:9e:f4:f8:30:7c:2e:80:2f:a3: e3:27:b1:c0:a0:da:8a:c7:15:e5:0a:91:3e:f3:97:39:6c:2a: 7d:a5:63:68:5b:d2:b2:dc:09:b0:9a:7f:44:f2:e2:a7:26:92: de:98:b5:43:01:32:b9:ed:42:db:84:34:d1:ac:0a:dd:d9:c4: 8d:8e:e7:a6:cd:9d:51:73:1b:73:22:28:25:0f:9c:81:6a:68: cf:04:7e:7a:a2:dd:a5:0c:46:26:96:73:4a:87:c0:d5:0f:5e: a0:b2:60:15:f4:89:f2:5c:1c:f3:7b:60:91:f8:ad:8e:2e:ec: 4e:af:06:5c:14:c6:ca:88:06:ae:a7:ba:ad:6e:2c:fd:40:8d: e1:61:74:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwNTkxMTAvBgNVBAUTKDFGNzZBNjk0NDQyQ0FCNDNEN0QxN0NENkZERjlBOTdF MEI3RkFBOEUwHhcNMjQwNTE5MDA0NzA4WhcNMjQwNTI2MDA0NzA4WjAYMRYwFAYD VQQDEw02NjQ5NGMwYy1iNDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw++ABnrCfZHPxpNzPwqAqVYP2s8LFjFNYVLGXrqztjHum4k7IBrqn03gs/R5 nfUbGuL85n1/kNhjHeBi6SytwBU29INYU5U7nF1fBflNWGIkBEI+ol5osoC7hopg sfw0VccMg8kshG0ooI7ml8p2uLayDOG1UdUCJofjl7/MNc79bgb1RSqgLUOaM6Ux oPeaUlaFsqUnQp7+YvxaKficlXLUuAoGvZcEB4fI2AXw0qx5whq/pw2gbKmSvJlH MnkumJE2W/mkXlHcZrzIn4/7ISZOdhN9Nu6FX113mp9QR2lP8UlRgm2ir3Nl4GM5 f4V2KdmGwUObjYYt3wXH60rPywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGcvbcwp QIy22V7YVPUPcxjxJbW4MB8GA1UdIwQYMBaAFB92ppRELKtD19F81v35qX4Lf6qO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODA1OS9CQkQ4MURBODlD QzExMUVCQkZERTY1NzlDNEY5QUUwMi9IM2FtbEVRc3EwUFgwWHpXX2ZtcGZndF9x bzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gzYW1sRVFzcTBQWDBYeldfZm1wZmd0X3FvNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODA1OS9CQkQ4MURBODlDQzExMUVCQkZERTY1NzlDNEY5QUUwMi9IM2FtbEVRc3Ew UFgwWHpXX2ZtcGZndF9xbzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI6S7+wH5qf23b+bh7w49kKScb4x3fd1GNo+7GwE0xftRt2pGOGXoz ceQh0ExkyDpvgrg+vaT+Aby9UsTTxLov2aK7YQV+SOCjNmJq8Z3TZWfa9i6TzuMD Gh3aCwkTighp0B1vZNxiAQKgmmi1m1+D9m7pOdSe9PgwfC6AL6PjJ7HAoNqKxxXl CpE+85c5bCp9pWNoW9Ky3Amwmn9E8uKnJpLemLVDATK57ULbhDTRrArd2cSNjuem zZ1RcxtzIiglD5yBamjPBH56ot2lDEYmlnNKh8DVD16gsmAV9InyXBzze2CR+K2O LuxOrwZcFMbKiAaup7qtbiz9QI3hYXQd -----END CERTIFICATE-----Generated at Sun May 19 01:47:13 2024 by rpki-client on console-fra.rpki-client.org