$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft File: FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft (raw, json) Hash identifier: Ao4F0Z0fNf7l5gUN2EKRQVA3z3DChi2/zVoDG8GX5EU= Subject key identifier: AC:1F:74:D3:84:13:E9:A5:10:2A:85:16:3B:17:98:FD:AC:AF:6F:21 Authority key identifier: 14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45 Certificate issuer: /CN=A9173CF2/serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745 Certificate serial: 05A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft Manifest number: 059F Signing time: Sun 19 May 2024 00:21:40 +0000 Manifest this update: Sun 19 May 2024 00:21:39 +0000 Manifest next update: Sun 26 May 2024 00:21:39 +0000 Files and hashes: 1: FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl (hash: d+2G32PYqiWgC4TlyHemaFfvwec9Y8t8z/bZ0HEBHmU=) 2: D9E7CFF681EF11EBAEE9D17AC4F9AE02.roa (hash: 9WRq22az0Z8RvcUQryVIS6iUqfIQaGp2znosV95epgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1443 (0x5a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CF2/serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745 Validity Not Before: May 19 00:21:39 2024 GMT Not After : May 26 00:21:39 2024 GMT Subject: CN=66494614-becd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fc:76:8e:2c:5c:1f:ac:3b:cb:31:ee:aa:96: 63:cb:0d:b0:22:c7:4d:b1:9a:35:d4:2f:c5:43:b9: 0a:86:06:83:d9:04:34:78:c5:bd:ec:03:5b:5a:58: 35:87:09:d6:66:25:53:dd:66:89:05:4a:2b:09:36: dd:4b:8b:e8:f4:7e:39:16:c1:f8:95:50:bf:b4:86: 06:62:0d:78:3b:ef:a4:12:d5:a5:c7:b8:1c:00:9d: a1:4a:44:28:d9:a4:74:a2:c5:38:d7:62:6a:91:4a: ef:49:10:85:1f:38:16:5d:f5:4f:00:cb:4a:fc:ef: 18:e6:d9:1f:50:d0:21:8c:22:61:d4:15:5a:2f:aa: e6:81:a2:d5:02:79:0f:cc:0b:28:95:5c:73:0d:9a: d0:86:6d:60:e8:cf:c4:5a:5d:de:c5:97:54:18:e5: a9:87:4a:28:10:60:b2:67:40:b4:cd:14:5b:87:0b: 79:4b:00:27:97:27:58:50:f4:e8:b2:32:52:ee:7c: a1:7f:67:c4:09:e9:7d:71:06:d5:f8:c9:5c:33:2b: bd:23:5e:a1:0c:dc:19:82:aa:27:5c:cb:dc:df:ca: a8:46:b4:89:00:12:85:e0:31:a2:e6:fc:b3:de:f9: 3a:27:9d:10:85:80:a8:37:51:4e:b2:10:e1:ff:34: d8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1F:74:D3:84:13:E9:A5:10:2A:85:16:3B:17:98:FD:AC:AF:6F:21 X509v3 Authority Key Identifier: keyid:14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:30:ca:07:40:0c:ef:bf:67:42:07:14:b7:23:55:64:5b:a0: 90:8d:af:55:99:d8:6e:98:da:86:8e:93:1a:6b:f5:12:34:b9: 8b:ee:6a:74:02:68:95:2d:ac:54:13:d2:d9:dd:71:1b:32:f3: d6:5b:fa:a4:5f:b1:ad:d3:d4:ae:93:22:63:7c:b9:e3:f7:3c: 05:d2:85:67:cf:b8:f9:f9:ab:f0:fb:8c:e9:8e:6e:98:6a:1d: 37:72:7f:eb:d4:73:c9:cd:38:f5:62:b2:3a:86:0b:d8:93:24: 2b:4c:be:5b:d7:f8:97:7c:87:c6:fd:81:c1:4f:fc:07:46:c5: 52:10:b5:de:c1:16:24:b8:a0:27:aa:79:2b:f9:98:6e:4f:c9: 5c:e7:fe:99:41:f6:a6:a9:1d:ed:86:c4:58:11:81:b8:86:3b: 48:f2:39:a7:06:63:78:5f:b3:b3:e1:24:e4:7a:3c:02:fc:57: 2a:17:63:be:82:0e:fc:a5:4f:1d:da:c2:cf:4c:12:9c:9a:6e: 36:b2:af:f7:ac:d5:90:c0:60:f5:3b:e7:1a:4e:98:c3:5c:74: 6a:29:61:00:f9:60:8a:de:40:77:37:ee:6f:cb:2a:50:a5:37: fd:24:e1:da:ea:a4:a4:7e:e7:b7:3e:d9:a3:db:99:88:56:1d: 83:07:02:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDRjIxMTAvBgNVBAUTKDE0NDdENDRCNDlGNzkwNkRDNjM3MzFBNUQ5OEQ4NTJF QzEwQjc3NDUwHhcNMjQwNTE5MDAyMTM5WhcNMjQwNTI2MDAyMTM5WjAYMRYwFAYD VQQDEw02NjQ5NDYxNC1iZWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPx2jixcH6w7yzHuqpZjyw2wIsdNsZo11C/FQ7kKhgaD2QQ0eMW97ANbWlg1 hwnWZiVT3WaJBUorCTbdS4vo9H45FsH4lVC/tIYGYg14O++kEtWlx7gcAJ2hSkQo 2aR0osU412JqkUrvSRCFHzgWXfVPAMtK/O8Y5tkfUNAhjCJh1BVaL6rmgaLVAnkP zAsolVxzDZrQhm1g6M/EWl3exZdUGOWph0ooEGCyZ0C0zRRbhwt5SwAnlydYUPTo sjJS7nyhf2fECel9cQbV+MlcMyu9I16hDNwZgqonXMvc38qoRrSJABKF4DGi5vyz 3vk6J50QhYCoN1FOshDh/zTYCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKwfdNOE E+mlECqFFjsXmP2sr28hMB8GA1UdIwQYMBaAFBRH1EtJ95BtxjcxpdmNhS7BC3dF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NGMi8xQUU5MDM0Njgx RUUxMUVCQkUzNTQ5NUZDNEY5QUUwMi9GRWZVUzBuM2tHM0dOekdsMlkyRkxzRUxk MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZFZlVTMG4za0czR056R2wyWTJGTHNFTGQwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0NGMi8xQUU5MDM0NjgxRUUxMUVCQkUzNTQ5NUZDNEY5QUUwMi9GRWZVUzBuM2tH M0dOekdsMlkyRkxzRUxkMFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/MMoHQAzvv2dCBxS3I1VkW6CQja9VmdhumNqGjpMaa/USNLmL7mp0 AmiVLaxUE9LZ3XEbMvPWW/qkX7Gt09SukyJjfLnj9zwF0oVnz7j5+avw+4zpjm6Y ah03cn/r1HPJzTj1YrI6hgvYkyQrTL5b1/iXfIfG/YHBT/wHRsVSELXewRYkuKAn qnkr+ZhuT8lc5/6ZQfamqR3thsRYEYG4hjtI8jmnBmN4X7Oz4STkejwC/FcqF2O+ gg78pU8d2sLPTBKcmm42sq/3rNWQwGD1O+caTpjDXHRqKWEA+WCK3kB3N+5vyypQ pTf9JOHa6qSkfue3Ptmj25mIVh2DBwLS -----END CERTIFICATE-----Generated at Sun May 19 01:47:13 2024 by rpki-client on console-ams.rpki-client.org