$ rpki-client -vvf rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft File: fJsp8fVuh-6usb90B2lNtO3a1Ts.mft (raw, json) Hash identifier: NiFQu+6dKtbbHxOj6fWPgf30D6aY00HV142g7VG3eDI= Subject key identifier: 12:3F:98:C3:BC:4C:02:85:51:B9:85:E8:0F:DF:0C:7D:D4:97:3F:62 Authority key identifier: 7C:9B:29:F1:F5:6E:87:EE:AE:B1:BF:74:07:69:4D:B4:ED:DA:D5:3B Certificate issuer: /CN=A9171845/serialNumber=7C9B29F1F56E87EEAEB1BF7407694DB4EDDAD53B Certificate serial: 0418 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft Manifest number: 0413 Signing time: Sun 19 May 2024 02:05:59 +0000 Manifest this update: Sun 19 May 2024 02:05:59 +0000 Manifest next update: Sun 26 May 2024 02:05:59 +0000 Files and hashes: 1: fJsp8fVuh-6usb90B2lNtO3a1Ts.crl (hash: MfvxZyISr9O1HmrxMvCNUGCtgmaxhewMUmkfXeMuHpg=) 2: FE5E15E2216911EC82319078C4F9AE02.roa (hash: YOxQS7wbDsHA9b8R2NY8zeKWUY5gGxp6TJUqyu7Un64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.crl rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1048 (0x418) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171845/serialNumber=7C9B29F1F56E87EEAEB1BF7407694DB4EDDAD53B Validity Not Before: May 19 02:05:59 2024 GMT Not After : May 26 02:05:59 2024 GMT Subject: CN=66495e87-cea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:55:73:fc:40:bd:ef:41:77:cc:29:77:4b:a2: 70:e2:48:ad:6c:b1:99:8b:9b:cf:ce:6b:cf:d0:7e: c1:ac:61:8a:58:df:f7:f8:2d:22:07:cb:8a:1c:1f: 5c:03:20:1c:fd:52:09:d2:cb:33:6f:2a:c9:76:38: 8b:a0:e3:1b:46:9a:68:b0:31:85:50:3e:33:39:73: a0:5b:5f:b8:23:e3:93:25:46:83:fb:73:35:28:e7: f3:a0:fa:7e:9d:2e:4d:a5:5c:7b:50:33:1f:94:12: 2f:37:62:ae:0c:e2:ae:29:26:ec:d9:5e:a6:d8:bb: 2c:f4:8e:04:00:e4:a4:f7:b6:b5:33:58:62:de:5c: 66:88:f9:dd:43:43:39:8e:44:2c:51:c0:63:7d:d5: 6e:8c:76:e9:a7:9b:50:67:f6:a4:ee:73:bc:df:56: c8:1b:fa:c7:d9:d6:4d:4a:a9:a5:a0:e8:a1:11:d0: 0d:1a:95:32:31:67:34:68:4d:a5:ae:0a:a0:4b:6e: 55:78:7c:35:5b:80:f1:e4:4b:7d:e5:97:5d:71:9a: bb:83:e3:50:38:36:0b:1e:bf:2c:84:49:71:0f:4d: 25:5d:b7:02:49:70:3b:0c:15:70:ba:88:ca:7c:1c: 31:95:70:41:d9:f9:41:53:0a:8f:79:15:00:ae:30: e5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3F:98:C3:BC:4C:02:85:51:B9:85:E8:0F:DF:0C:7D:D4:97:3F:62 X509v3 Authority Key Identifier: keyid:7C:9B:29:F1:F5:6E:87:EE:AE:B1:BF:74:07:69:4D:B4:ED:DA:D5:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:9d:22:82:9c:c0:02:1a:e3:19:42:4e:06:6f:35:91:37:54: 44:9f:48:79:8e:0c:c0:36:44:b8:df:a1:8e:ae:e9:5a:9c:1d: e4:e0:2e:29:72:c6:cd:6f:b0:df:a9:1a:44:96:a4:0f:6f:ab: 0a:48:29:66:6f:86:06:82:eb:8b:9c:58:c9:f1:1e:e7:5f:a0: 7d:44:e5:d0:04:14:4c:f0:a7:03:15:55:bc:0e:68:20:82:9b: 18:bf:2a:58:07:6f:e1:86:cc:4c:d6:e7:93:bb:c5:10:da:9e: 4b:b8:ca:2e:47:f1:08:f3:f0:f2:18:98:fc:83:db:9a:2b:3a: 52:1d:30:ee:28:63:27:21:a9:40:69:ad:ea:f3:20:db:b4:50: 16:40:8f:9d:1e:7a:13:b9:db:b6:08:f2:20:38:c2:12:6b:60: 45:ac:27:aa:6c:ff:3c:53:29:3c:84:36:f2:b3:a6:5e:68:d8: e1:a1:9b:b7:71:97:68:ec:4a:a9:4f:eb:03:4e:b4:3b:0a:55: ac:60:e8:b6:fd:8b:e7:85:09:f8:78:a7:ce:ad:21:57:ce:af: 4d:d7:59:f4:79:7f:4b:01:0d:1b:b4:a6:02:e6:ba:fb:a0:3a: 14:8b:56:e7:df:db:df:31:c2:9c:83:b6:27:de:35:41:88:87: ee:09:19:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE4NDUxMTAvBgNVBAUTKDdDOUIyOUYxRjU2RTg3RUVBRUIxQkY3NDA3Njk0REI0 RUREQUQ1M0IwHhcNMjQwNTE5MDIwNTU5WhcNMjQwNTI2MDIwNTU5WjAYMRYwFAYD VQQDEw02NjQ5NWU4Ny1jZWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0lVz/EC970F3zCl3S6Jw4kitbLGZi5vPzmvP0H7BrGGKWN/3+C0iB8uKHB9c AyAc/VIJ0sszbyrJdjiLoOMbRpposDGFUD4zOXOgW1+4I+OTJUaD+3M1KOfzoPp+ nS5NpVx7UDMflBIvN2KuDOKuKSbs2V6m2Lss9I4EAOSk97a1M1hi3lxmiPndQ0M5 jkQsUcBjfdVujHbpp5tQZ/ak7nO831bIG/rH2dZNSqmloOihEdANGpUyMWc0aE2l rgqgS25VeHw1W4Dx5Et95ZddcZq7g+NQODYLHr8shElxD00lXbcCSXA7DBVwuojK fBwxlXBB2flBUwqPeRUArjDlFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBI/mMO8 TAKFUbmF6A/fDH3Ulz9iMB8GA1UdIwQYMBaAFHybKfH1bofurrG/dAdpTbTt2tU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTg0NS84Njc1QkU4MDIw Q0ExMUVDQjY2QzE0NTJDNEY5QUUwMi9mSnNwOGZWdWgtNnVzYjkwQjJsTnRPM2Ex VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZKc3A4ZlZ1aC02dXNiOTBCMmxOdE8zYTFUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTg0NS84Njc1QkU4MDIwQ0ExMUVDQjY2QzE0NTJDNEY5QUUwMi9mSnNwOGZWdWgt NnVzYjkwQjJsTnRPM2ExVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtnSKCnMACGuMZQk4GbzWRN1REn0h5jgzANkS436GOrulanB3k4C4p csbNb7DfqRpElqQPb6sKSClmb4YGguuLnFjJ8R7nX6B9ROXQBBRM8KcDFVW8Dmgg gpsYvypYB2/hhsxM1ueTu8UQ2p5LuMouR/EI8/DyGJj8g9uaKzpSHTDuKGMnIalA aa3q8yDbtFAWQI+dHnoTudu2CPIgOMISa2BFrCeqbP88Uyk8hDbys6ZeaNjhoZu3 cZdo7EqpT+sDTrQ7ClWsYOi2/YvnhQn4eKfOrSFXzq9N11n0eX9LAQ0btKYC5rr7 oDoUi1bn39vfMcKcg7Yn3jVBiIfuCRn7 -----END CERTIFICATE-----Generated at Sun May 19 02:59:08 2024 by rpki-client on console-ams.rpki-client.org