$ rpki-client -vvf rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft File: FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft (raw, json) Hash identifier: Uuae6ZIN96xgr56PPZwtjDeGLUaIr78Or6OV+Dp5wO8= Subject key identifier: EF:CF:69:E7:6E:4F:21:7D:FB:51:F1:D7:12:88:4F:CF:EA:8E:46:C9 Authority key identifier: 16:14:4C:82:35:B4:51:9F:50:ED:D5:55:36:81:18:84:4D:17:11:A5 Certificate issuer: /CN=A9187208/serialNumber=16144C8235B4519F50EDD555368118844D1711A5 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft Manifest number: A6 Signing time: Sun 19 May 2024 06:41:42 +0000 Manifest this update: Sun 19 May 2024 06:41:41 +0000 Manifest next update: Sun 26 May 2024 06:41:41 +0000 Files and hashes: 1: FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl (hash: IV/f2mj3cWf59K5s4QoVJVrWgdC8af/y6uqJx40lCnk=) 2: 7F5C2CFA1A1B11EEBC083487C4F9AE02.roa (hash: 4dOibNybnRxXwpvQqDw6/KiKsdYGxIL5kbUNcXlEkVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187208/serialNumber=16144C8235B4519F50EDD555368118844D1711A5 Validity Not Before: May 19 06:41:41 2024 GMT Not After : May 26 06:41:41 2024 GMT Subject: CN=66499f26-a25c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1d:ef:f0:01:05:df:cb:a8:16:73:e4:14:a4: 03:a7:a4:00:bd:9d:00:73:95:3b:a4:f6:d0:31:ba: 17:bc:66:5a:12:c9:5d:f3:41:10:77:2f:db:24:05: 32:a9:3e:6d:6f:b2:3e:4c:ca:3e:4e:a6:c9:65:77: f3:83:5d:3f:b6:06:41:8c:fa:3e:4c:a5:0d:f8:65: 0f:3d:11:3f:e6:94:ec:35:d9:61:d6:e3:b9:1b:e8: ce:97:ca:6a:2e:4e:b2:98:11:7f:1f:41:e6:eb:3a: 74:1b:42:70:56:42:b8:b8:99:07:ba:c5:2c:d9:41: 10:08:67:a2:cd:e7:3c:cd:8e:a9:c9:64:a3:6f:fc: 71:f0:0b:73:a7:b9:35:67:ff:35:d5:17:f3:b4:27: a1:3b:5d:b8:04:be:cd:77:46:55:bc:7c:86:54:ea: 67:2f:0b:ae:f6:99:b1:a7:62:85:fa:e6:d9:4b:1e: f5:70:f0:79:45:80:7c:5f:58:40:cc:2f:e0:05:6b: 0d:79:6d:78:2d:5b:e9:51:c2:b7:11:cc:b8:b5:56: 76:e2:bf:d1:9a:d7:d0:c7:b2:70:7b:16:39:e6:59: ae:ba:93:96:f4:2e:42:6d:8c:cc:5c:a2:13:f9:4f: 9a:e8:c1:6e:66:78:fd:a4:a9:28:36:f9:29:9c:94: 16:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:CF:69:E7:6E:4F:21:7D:FB:51:F1:D7:12:88:4F:CF:EA:8E:46:C9 X509v3 Authority Key Identifier: keyid:16:14:4C:82:35:B4:51:9F:50:ED:D5:55:36:81:18:84:4D:17:11:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:1d:03:7e:8b:83:9b:1d:1c:22:d1:c8:d7:44:5f:7b:bf:71: 63:8f:f1:cb:36:39:f9:e2:10:c6:f4:76:bb:05:13:c7:63:c3: 0f:10:f1:87:9d:be:6f:54:c6:2a:46:be:14:59:e9:aa:1e:a3: 5f:2f:84:c0:1c:aa:11:60:0d:a6:70:67:59:25:93:44:96:d4: 04:75:37:4c:05:dc:26:66:e4:75:6b:d2:ab:0f:68:a7:bd:74: 2f:42:3c:1d:bf:9f:63:17:f0:4f:96:1a:99:79:82:27:4b:97: 4b:95:03:95:d0:39:72:49:7c:46:72:3e:6a:1c:89:64:71:fe: 2f:46:90:ca:fd:b9:a9:c8:2b:68:c2:f2:c0:53:69:ad:5a:c6: e4:2a:8e:97:5a:bf:53:2f:d8:1a:d2:a4:30:d8:a0:32:ec:98: 28:6b:84:44:1c:d5:fd:ac:17:f4:09:04:de:d5:05:63:e9:a5: d1:0d:db:ca:1b:12:f1:37:84:7d:ea:75:45:40:a0:5d:56:f9: 9b:a6:43:3f:f1:bb:b9:eb:43:e2:4a:b0:81:63:8b:a7:01:88: ad:4a:7a:84:be:d6:24:df:bc:5d:7c:41:16:2c:18:7f:d2:0c: 8d:64:74:cd:aa:a2:43:c7:e4:12:3b:7a:28:9c:5f:4b:9d:ce: e2:c0:1c:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcyMDgxMTAvBgNVBAUTKDE2MTQ0QzgyMzVCNDUxOUY1MEVERDU1NTM2ODExODg0 NEQxNzExQTUwHhcNMjQwNTE5MDY0MTQxWhcNMjQwNTI2MDY0MTQxWjAYMRYwFAYD VQQDEw02NjQ5OWYyNi1hMjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAth3v8AEF38uoFnPkFKQDp6QAvZ0Ac5U7pPbQMboXvGZaEsld80EQdy/bJAUy qT5tb7I+TMo+TqbJZXfzg10/tgZBjPo+TKUN+GUPPRE/5pTsNdlh1uO5G+jOl8pq Lk6ymBF/H0Hm6zp0G0JwVkK4uJkHusUs2UEQCGeizec8zY6pyWSjb/xx8Atzp7k1 Z/811RfztCehO124BL7Nd0ZVvHyGVOpnLwuu9pmxp2KF+ubZSx71cPB5RYB8X1hA zC/gBWsNeW14LVvpUcK3Ecy4tVZ24r/RmtfQx7JwexY55lmuupOW9C5CbYzMXKIT +U+a6MFuZnj9pKkoNvkpnJQWNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/Paedu TyF9+1Hx1xKIT8/qjkbJMB8GA1UdIwQYMBaAFBYUTII1tFGfUO3VVTaBGIRNFxGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzIwOC9DNkQ5NkQ5RTFB MTcxMUVFODIwNjM2ODFDNEY5QUUwMi9GaFJNZ2pXMFVaOVE3ZFZWTm9FWWhFMFhF YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoUk1nalcwVVo5UTdkVlZOb0VZaEUwWEVhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzIwOC9DNkQ5NkQ5RTFBMTcxMUVFODIwNjM2ODFDNEY5QUUwMi9GaFJNZ2pXMFVa OVE3ZFZWTm9FWWhFMFhFYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxHQN+i4ObHRwi0cjXRF97v3Fjj/HLNjn54hDG9Ha7BRPHY8MPEPGH nb5vVMYqRr4UWemqHqNfL4TAHKoRYA2mcGdZJZNEltQEdTdMBdwmZuR1a9KrD2in vXQvQjwdv59jF/BPlhqZeYInS5dLlQOV0DlySXxGcj5qHIlkcf4vRpDK/bmpyCto wvLAU2mtWsbkKo6XWr9TL9ga0qQw2KAy7Jgoa4REHNX9rBf0CQTe1QVj6aXRDdvK GxLxN4R96nVFQKBdVvmbpkM/8bu560PiSrCBY4unAYitSnqEvtYk37xdfEEWLBh/ 0gyNZHTNqqJDx+QSO3oonF9Lnc7iwBx4 -----END CERTIFICATE-----Generated at Sun May 19 07:40:41 2024 by rpki-client on console-fra.rpki-client.org