$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft File: FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft (raw, json) Hash identifier: WQ7XejTuJw/NCsflZhgNG63/g6csUqFzJYyCkSXBN1w= Subject key identifier: 50:19:D2:F5:91:C0:67:AE:83:55:59:6C:4A:89:9C:1C:03:55:78:E6 Authority key identifier: 16:13:D1:15:ED:83:A0:6E:97:A7:3D:AE:55:16:BA:1B:68:4E:EC:09 Certificate issuer: /CN=A9158F08/serialNumber=1613D115ED83A06E97A73DAE5516BA1B684EEC09 Certificate serial: 0B78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft Manifest number: 13D3 Signing time: Thu 16 May 2024 19:38:47 +0000 Manifest this update: Thu 16 May 2024 19:38:46 +0000 Manifest next update: Thu 23 May 2024 19:38:46 +0000 Files and hashes: 1: FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl (hash: eg2aQNBjnHuilHLtsDuqGr9Cd1VgR+K090C8s0MvyoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 19:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2936 (0xb78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158F08/serialNumber=1613D115ED83A06E97A73DAE5516BA1B684EEC09 Validity Not Before: May 16 19:38:46 2024 GMT Not After : May 23 19:38:46 2024 GMT Subject: CN=664660c6-6c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:39:31:87:7f:f8:90:59:16:f0:d2:af:f1:5d: 92:c4:33:2f:fd:a9:8e:0a:98:02:2a:3e:fc:cd:fd: c9:3e:f7:d0:f9:be:fb:e2:b3:06:6f:b0:4e:8b:bd: 04:79:cf:49:0b:e1:cb:4d:f9:e8:57:4b:40:ee:e7: 74:78:a8:29:d3:49:9e:db:5a:f6:b6:13:c2:f2:98: 5d:89:57:42:da:f7:cb:ff:4b:07:d3:dc:b9:41:6f: 91:4e:81:d1:54:71:99:cf:0a:c9:00:84:86:33:9d: 24:9f:e3:5c:b5:19:9a:8f:c6:6f:a4:52:18:8a:39: 66:52:7f:4f:3d:a4:55:61:c0:1e:24:1d:03:3a:63: 1b:2b:84:56:51:d0:6a:d1:3d:0c:2d:34:06:ee:c1: 28:01:41:4b:33:d4:95:a0:38:68:0b:83:47:e4:ba: d3:36:93:96:37:45:35:6f:9e:aa:62:3e:86:34:e6: 0f:13:e5:bc:25:8e:cc:18:33:36:b1:ff:fb:bc:36: 10:ad:1f:f4:09:5d:0f:cf:dd:91:a5:f6:0d:3a:1c: 0e:5c:e2:65:50:cd:6c:c3:d7:1f:f1:26:d0:3d:22: f4:af:d2:5f:59:0d:fd:4c:3d:90:09:f4:a9:9f:ed: 83:23:fe:ca:10:47:0f:47:a8:3c:45:ce:47:11:31: e4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:19:D2:F5:91:C0:67:AE:83:55:59:6C:4A:89:9C:1C:03:55:78:E6 X509v3 Authority Key Identifier: keyid:16:13:D1:15:ED:83:A0:6E:97:A7:3D:AE:55:16:BA:1B:68:4E:EC:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f7:67:57:98:f9:31:a9:3e:29:59:fb:2f:65:78:36:5d:93: 7d:df:6d:e9:86:27:eb:4d:5b:e9:f9:18:53:d5:39:dd:bb:1b: 42:d1:d2:15:76:1c:46:95:3b:e8:ef:6e:f1:8c:19:32:2f:c5: e3:a6:ed:89:14:00:03:66:29:c4:58:77:58:1b:0b:a1:1e:7f: fc:23:0e:a4:c2:fe:c8:c7:67:5d:6f:52:2c:c3:40:aa:ec:e6: c7:2a:24:a3:ef:fc:2e:6d:f6:33:ac:ed:df:f2:2e:54:e4:97: cf:0b:65:ae:ce:23:73:0c:c1:12:d5:d4:fd:bf:99:48:50:96: cb:cd:59:b5:69:28:6b:40:5f:e5:b2:b9:12:cd:54:63:e3:c3: 1a:74:3f:4a:c1:41:f1:13:1b:43:e4:dd:63:f8:4e:0a:26:b2: 75:45:36:55:9c:cd:0f:8f:e7:97:e4:61:23:ca:e8:66:72:b7: b2:e2:b3:df:a0:2e:d4:88:79:80:45:9f:25:d9:af:12:27:dd: be:7b:e5:5e:56:ec:05:44:4f:bb:d4:ca:19:cb:d8:1e:6b:58: 81:31:15:70:f4:84:4c:a4:c9:a4:25:5d:af:e4:97:f6:a8:cd: 01:f3:94:65:85:a4:1a:c0:e3:ed:c0:49:c4:15:3c:ed:86:bb: 6d:2d:14:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThGMDgxMTAvBgNVBAUTKDE2MTNEMTE1RUQ4M0EwNkU5N0E3M0RBRTU1MTZCQTFC Njg0RUVDMDkwHhcNMjQwNTE2MTkzODQ2WhcNMjQwNTIzMTkzODQ2WjAYMRYwFAYD VQQDEw02NjQ2NjBjNi02Yzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7jkxh3/4kFkW8NKv8V2SxDMv/amOCpgCKj78zf3JPvfQ+b774rMGb7BOi70E ec9JC+HLTfnoV0tA7ud0eKgp00me21r2thPC8phdiVdC2vfL/0sH09y5QW+RToHR VHGZzwrJAISGM50kn+NctRmaj8ZvpFIYijlmUn9PPaRVYcAeJB0DOmMbK4RWUdBq 0T0MLTQG7sEoAUFLM9SVoDhoC4NH5LrTNpOWN0U1b56qYj6GNOYPE+W8JY7MGDM2 sf/7vDYQrR/0CV0Pz92RpfYNOhwOXOJlUM1sw9cf8SbQPSL0r9JfWQ39TD2QCfSp n+2DI/7KEEcPR6g8Rc5HETHkRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFAZ0vWR wGeug1VZbEqJnBwDVXjmMB8GA1UdIwQYMBaAFBYT0RXtg6Bul6c9rlUWuhtoTuwJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEYwOC81QjE3RjZEMjA3 RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9GaFBSRmUyRG9HNlhwejJ1VlJhNkcyaE83 QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoUFJGZTJEb0c2WHB6MnVWUmE2RzJoTzdBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEYwOC81QjE3RjZEMjA3RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9GaFBSRmUyRG9H NlhwejJ1VlJhNkcyaE83QWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA692dXmPkxqT4pWfsvZXg2XZN9323phifrTVvp+RhT1TnduxtC0dIV dhxGlTvo727xjBkyL8Xjpu2JFAADZinEWHdYGwuhHn/8Iw6kwv7Ix2ddb1Isw0Cq 7ObHKiSj7/wubfYzrO3f8i5U5JfPC2WuziNzDMES1dT9v5lIUJbLzVm1aShrQF/l srkSzVRj48MadD9KwUHxExtD5N1j+E4KJrJ1RTZVnM0Pj+eX5GEjyuhmcrey4rPf oC7UiHmARZ8l2a8SJ92+e+VeVuwFRE+71MoZy9gea1iBMRVw9IRMpMmkJV2v5Jf2 qM0B85RlhaQawOPtwEnEFTzthrttLRRo -----END CERTIFICATE-----Generated at Thu May 16 21:45:27 2024 by rpki-client on console-fra.rpki-client.org