$ rpki-client -vvf rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft File: FWPM6JxbrDwQTe02KznzsvJZ8BA.mft (raw, json) Hash identifier: a4Kj1uVCo3A6WsDaWKUJwMgATc1UjpDM6bdnX3XPNVE= Subject key identifier: 09:42:4F:B4:38:F4:F1:2F:5B:56:71:CD:55:1D:F0:41:C4:9A:EC:C3 Authority key identifier: 15:63:CC:E8:9C:5B:AC:3C:10:4D:ED:36:2B:39:F3:B2:F2:59:F0:10 Certificate issuer: /CN=A9186A4B/serialNumber=1563CCE89C5BAC3C104DED362B39F3B2F259F010 Certificate serial: 0F86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft Manifest number: 0F72 Signing time: Sat 18 May 2024 18:08:42 +0000 Manifest this update: Sat 18 May 2024 18:08:42 +0000 Manifest next update: Sat 25 May 2024 18:08:42 +0000 Files and hashes: 1: FWPM6JxbrDwQTe02KznzsvJZ8BA.crl (hash: mc7nSrYyVzgf6m6wTqoFVFS1xgzWcgUV70wbHQulGVY=) 2: 0E37BE12773E11ECAD064E68C4F9AE02.roa (hash: UIDG4hidGjMCuqQe/KhvxpXKsRwNmql3jj/jGdPw3CQ=) 3: 98783026EB5F11ECB4060F86C4F9AE02.roa (hash: 5KLzaxwqFiAw/m64WegkLhB0ZcHulm0eyER2YrcckJw=) 4: 975940EAEB5F11ECB4060F86C4F9AE02.roa (hash: wPpVepx4FFYkvB6w6kZLIAZjBiXcOD593qeyNz3X4N4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.crl rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3974 (0xf86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186A4B/serialNumber=1563CCE89C5BAC3C104DED362B39F3B2F259F010 Validity Not Before: May 18 18:08:42 2024 GMT Not After : May 25 18:08:42 2024 GMT Subject: CN=6648eeaa-a99d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c2:87:f5:cd:59:da:31:10:ee:45:9f:45:a4: 1a:de:f7:f6:3f:78:6d:47:69:45:f0:48:60:86:0b: 85:c3:a7:07:9e:6a:2b:77:58:13:ff:c4:b7:85:f7: 8c:78:67:8f:dc:da:1c:24:b8:7f:65:7a:f6:86:5b: 60:4b:94:39:6d:a5:67:2f:a1:92:2b:41:6a:60:1c: 64:d8:34:69:19:2b:33:6f:ed:9c:bf:43:28:02:a0: 4e:f9:63:b5:14:38:b0:3d:66:9a:44:35:91:e6:6a: 5d:ac:4e:28:6d:67:37:4e:48:06:4f:23:35:27:c7: fe:29:77:b5:60:8a:e2:5f:f2:d0:66:52:d3:12:d2: 99:7e:f3:80:18:6d:05:33:4c:29:f0:bf:d8:ee:65: 92:7c:71:b7:64:f8:0c:7c:1a:2b:cd:d3:8b:71:a6: 53:c3:af:14:ae:92:6c:db:26:a6:9a:c4:43:fd:27: c8:cf:21:b0:1b:47:e7:83:8d:d9:dd:6c:0d:a0:33: 89:30:d6:93:16:c5:28:84:49:fd:9b:0a:ee:ce:b9: 45:7c:97:52:b3:65:db:00:88:63:35:a0:b7:2d:ee: ee:d8:b5:ee:92:22:ca:fe:4e:e1:d0:68:29:10:c7: 85:58:e5:22:39:a3:4b:fd:75:5e:3e:79:cd:0b:72: 55:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:42:4F:B4:38:F4:F1:2F:5B:56:71:CD:55:1D:F0:41:C4:9A:EC:C3 X509v3 Authority Key Identifier: keyid:15:63:CC:E8:9C:5B:AC:3C:10:4D:ED:36:2B:39:F3:B2:F2:59:F0:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:8b:c3:dd:eb:2f:dc:6f:3d:ce:36:c2:4f:13:44:08:42:31: 78:62:14:3e:d0:70:21:2e:b0:2a:61:e7:66:33:fa:f8:ad:07: 95:60:82:46:43:b2:82:95:09:57:92:3d:ec:23:7a:49:ec:e8: 31:f3:21:15:f9:33:97:f1:d3:6e:14:15:3c:9a:f3:01:35:7f: 36:46:e3:43:c4:c8:6a:5e:ab:e8:43:a3:e0:07:d4:bf:f2:28: 44:ad:ad:35:fb:e3:f2:82:7a:72:ad:a3:18:18:77:97:09:73: 0a:97:fc:ac:31:4e:da:fe:94:f0:69:cb:74:cc:65:15:70:a6: b2:2a:f9:23:1e:8e:7b:36:2a:e2:ee:b1:eb:eb:e4:83:eb:8e: 3a:2c:2d:3f:31:72:c4:8d:10:4d:aa:d8:d7:59:c8:6a:86:7b: bd:48:88:c3:c5:58:8c:a4:a9:bc:49:23:2e:4b:92:a0:eb:de: f7:48:48:e1:4b:91:3a:f2:d0:65:80:a2:03:07:b0:2b:52:bb: c8:e7:06:18:69:44:50:5c:54:77:48:16:dc:ea:61:f3:2e:fa: 1e:97:a8:a7:74:01:47:ab:c6:7d:a8:3e:7d:77:6c:5a:3a:cf: 8c:16:29:a5:c2:a1:b3:65:4c:09:9b:8c:eb:54:2f:ef:75:48: be:ec:ea:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZBNEIxMTAvBgNVBAUTKDE1NjNDQ0U4OUM1QkFDM0MxMDRERUQzNjJCMzlGM0Iy RjI1OUYwMTAwHhcNMjQwNTE4MTgwODQyWhcNMjQwNTI1MTgwODQyWjAYMRYwFAYD VQQDEw02NjQ4ZWVhYS1hOTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAosKH9c1Z2jEQ7kWfRaQa3vf2P3htR2lF8EhghguFw6cHnmord1gT/8S3hfeM eGeP3NocJLh/ZXr2hltgS5Q5baVnL6GSK0FqYBxk2DRpGSszb+2cv0MoAqBO+WO1 FDiwPWaaRDWR5mpdrE4obWc3TkgGTyM1J8f+KXe1YIriX/LQZlLTEtKZfvOAGG0F M0wp8L/Y7mWSfHG3ZPgMfBorzdOLcaZTw68UrpJs2yammsRD/SfIzyGwG0fng43Z 3WwNoDOJMNaTFsUohEn9mwruzrlFfJdSs2XbAIhjNaC3Le7u2LXukiLK/k7h0Ggp EMeFWOUiOaNL/XVePnnNC3JVRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlCT7Q4 9PEvW1ZxzVUd8EHEmuzDMB8GA1UdIwQYMBaAFBVjzOicW6w8EE3tNis587LyWfAQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkE0Qi81REE1QzI3NjNF RUExMUU5OTdCNzk4MzFDNEY5QUUwMi9GV1BNNkp4YnJEd1FUZTAyS3puenN2Slo4 QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXUE02SnhickR3UVRlMDJLem56c3ZKWjhCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkE0Qi81REE1QzI3NjNFRUExMUU5OTdCNzk4MzFDNEY5QUUwMi9GV1BNNkp4YnJE d1FUZTAyS3puenN2Slo4QkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmi8Pd6y/cbz3ONsJPE0QIQjF4YhQ+0HAhLrAqYedmM/r4rQeVYIJG Q7KClQlXkj3sI3pJ7Ogx8yEV+TOX8dNuFBU8mvMBNX82RuNDxMhqXqvoQ6PgB9S/ 8ihEra01++PygnpyraMYGHeXCXMKl/ysMU7a/pTwact0zGUVcKayKvkjHo57Niri 7rHr6+SD6446LC0/MXLEjRBNqtjXWchqhnu9SIjDxViMpKm8SSMuS5Kg6973SEjh S5E68tBlgKIDB7ArUrvI5wYYaURQXFR3SBbc6mHzLvoel6indAFHq8Z9qD59d2xa Os+MFimlwqGzZUwJm4zrVC/vdUi+7OoL -----END CERTIFICATE-----Generated at Sat May 18 18:46:46 2024 by rpki-client on console-fra.rpki-client.org