$ rpki-client -vvf rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft File: fSGgNfHk9MpCeHMKwuUHXbIxG08.mft (raw, json) Hash identifier: ApYXpbWcyzhCKfDeJxsl2KsE2rmUQs4yobQnH2g+tGg= Subject key identifier: E6:CD:36:2C:6C:85:89:7F:4E:0F:D9:45:82:0A:40:EB:02:C4:F2:12 Authority key identifier: 7D:21:A0:35:F1:E4:F4:CA:42:78:73:0A:C2:E5:07:5D:B2:31:1B:4F Certificate issuer: /CN=A916B826/serialNumber=7D21A035F1E4F4CA4278730AC2E5075DB2311B4F Certificate serial: 0958 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft Manifest number: 0950 Signing time: Thu 30 May 2024 21:30:34 +0000 Manifest this update: Thu 30 May 2024 21:30:33 +0000 Manifest next update: Thu 06 Jun 2024 21:30:33 +0000 Files and hashes: 1: fSGgNfHk9MpCeHMKwuUHXbIxG08.crl (hash: JNsOtmzYUhAoPci5os9wT+TBn/e9kHxCbvR+Qf52ZBc=) 2: 705B0F54743911EAA55F0482C4F9AE02.roa (hash: aRBdx3NNv6wvTHtMr+7NKDgZsiQyoOhH9t5SUgsymYg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.crl rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 21:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2392 (0x958) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B826/serialNumber=7D21A035F1E4F4CA4278730AC2E5075DB2311B4F Validity Not Before: May 30 21:30:33 2024 GMT Not After : Jun 6 21:30:33 2024 GMT Subject: CN=6658effa-79d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c9:c8:72:66:46:c4:d0:59:9b:ed:95:23:df: 3b:53:d7:d5:57:40:e6:32:59:0e:13:c7:30:ce:55: 92:50:26:b6:a5:cf:87:0b:cc:91:88:3c:71:cb:dd: 17:d8:27:f8:27:99:87:bd:6a:a9:70:1e:c5:fc:be: ab:6f:4b:50:ba:9f:76:ae:31:1b:34:28:7b:40:33: 4d:cd:68:1d:03:60:fd:b3:51:08:64:30:78:03:71: 65:16:ed:d8:94:df:84:8d:92:2e:0a:93:df:d0:a6: 08:b7:8f:4d:3c:ca:e3:c9:a8:86:1d:ef:92:ae:b5: 75:d9:e6:4b:1e:29:35:4b:f0:44:ff:77:0c:fc:13: 25:6a:84:d5:99:db:65:28:3d:33:9b:61:fc:08:dc: a8:ba:99:65:6c:92:01:7b:1b:cc:fd:09:5e:e2:4a: e9:4e:2b:e7:11:a5:9d:85:b6:fd:88:de:c4:f3:62: 1b:e4:46:3e:d2:62:e2:bf:0e:d5:60:75:3a:82:1c: 4e:68:f3:da:7e:57:f9:57:1f:26:dc:15:10:ac:59: ec:7f:bc:92:35:fb:2c:7b:b4:92:ab:3f:0a:01:3a: 01:fe:e1:ae:08:52:98:56:d6:10:50:e2:e7:48:a9: 08:07:b9:19:8c:26:af:9b:c0:a6:33:99:b3:8e:36: ea:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:CD:36:2C:6C:85:89:7F:4E:0F:D9:45:82:0A:40:EB:02:C4:F2:12 X509v3 Authority Key Identifier: keyid:7D:21:A0:35:F1:E4:F4:CA:42:78:73:0A:C2:E5:07:5D:B2:31:1B:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:9c:ae:76:5f:2d:4b:07:61:3c:f0:fc:e9:39:5e:e6:4f:44: f6:19:57:6d:3c:29:74:9a:73:95:cd:54:b6:e0:cf:37:50:3d: dd:ed:31:de:66:de:b9:4c:0c:ac:6e:02:2c:2e:c2:43:dc:7e: 3f:8a:c1:0f:81:cf:5a:57:3b:0d:5a:ac:c7:d2:d1:37:cf:ad: c2:54:7b:bb:c1:74:f5:e5:46:56:94:e9:a1:8b:f3:e0:a0:63: 8b:30:dd:79:1a:f3:5d:08:63:ff:7a:28:ca:06:c6:36:32:5c: 92:48:ea:03:d1:fa:47:50:14:55:1c:a0:8c:4d:0d:5c:45:87: 8f:89:54:c3:85:48:36:c7:56:6c:d2:9d:76:60:a2:6a:1f:2a: 92:17:53:64:0d:73:88:de:e1:12:d1:29:f9:a1:12:18:b4:b0: c6:2d:09:a6:ac:69:1a:84:d3:4b:08:b1:97:bd:b7:82:d3:4b: c3:a7:e0:16:f6:d5:74:52:fc:28:ab:2b:23:11:d2:57:fd:b4: 30:26:d6:19:5c:72:18:f8:d4:3c:81:cb:ae:2b:ed:9c:7a:5b: e2:e4:e0:f1:3f:7b:f8:a8:25:2b:f9:a4:a1:38:f5:16:4e:47: b0:7d:b3:5e:d1:08:47:83:2a:7e:db:8a:a6:0f:d0:ee:3e:68: 3e:3a:a4:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI4MjYxMTAvBgNVBAUTKDdEMjFBMDM1RjFFNEY0Q0E0Mjc4NzMwQUMyRTUwNzVE QjIzMTFCNEYwHhcNMjQwNTMwMjEzMDMzWhcNMjQwNjA2MjEzMDMzWjAYMRYwFAYD VQQDEw02NjU4ZWZmYS03OWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucnIcmZGxNBZm+2VI987U9fVV0DmMlkOE8cwzlWSUCa2pc+HC8yRiDxxy90X 2Cf4J5mHvWqpcB7F/L6rb0tQup92rjEbNCh7QDNNzWgdA2D9s1EIZDB4A3FlFu3Y lN+EjZIuCpPf0KYIt49NPMrjyaiGHe+SrrV12eZLHik1S/BE/3cM/BMlaoTVmdtl KD0zm2H8CNyoupllbJIBexvM/Qle4krpTivnEaWdhbb9iN7E82Ib5EY+0mLivw7V YHU6ghxOaPPaflf5Vx8m3BUQrFnsf7ySNfsse7SSqz8KAToB/uGuCFKYVtYQUOLn SKkIB7kZjCavm8CmM5mzjjbqbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObNNixs hYl/Tg/ZRYIKQOsCxPISMB8GA1UdIwQYMBaAFH0hoDXx5PTKQnhzCsLlB12yMRtP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjgyNi82Q0U1RDZDMDc0 MzgxMUVBOTAyNzA3ODFDNEY5QUUwMi9mU0dnTmZIazlNcENlSE1Ld3VVSFhiSXhH MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTR2dOZkhrOU1wQ2VITUt3dVVIWGJJeEcwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjgyNi82Q0U1RDZDMDc0MzgxMUVBOTAyNzA3ODFDNEY5QUUwMi9mU0dnTmZIazlN cENlSE1Ld3VVSFhiSXhHMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4nK52Xy1LB2E88PzpOV7mT0T2GVdtPCl0mnOVzVS24M83UD3d7THe Zt65TAysbgIsLsJD3H4/isEPgc9aVzsNWqzH0tE3z63CVHu7wXT15UZWlOmhi/Pg oGOLMN15GvNdCGP/eijKBsY2MlySSOoD0fpHUBRVHKCMTQ1cRYePiVTDhUg2x1Zs 0p12YKJqHyqSF1NkDXOI3uES0Sn5oRIYtLDGLQmmrGkahNNLCLGXvbeC00vDp+AW 9tV0UvwoqysjEdJX/bQwJtYZXHIY+NQ8gcuuK+2celvi5ODxP3v4qCUr+aShOPUW TkewfbNe0QhHgyp+24qmD9DuPmg+OqSu -----END CERTIFICATE-----Generated at Thu May 30 22:23:42 2024 by rpki-client on console-fra.rpki-client.org