$ rpki-client -vvf rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft File: fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft (raw, json) Hash identifier: nseFV+0vkQNWH/TUPLy2MRtP1bb9h+eb4pzO4lEty5c= Subject key identifier: D9:37:91:FA:1C:57:FE:58:A7:D4:41:F5:18:03:1C:05:6F:2B:C0:1A Authority key identifier: 7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D Certificate issuer: /CN=A918753F/serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D Certificate serial: 07E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft Manifest number: 07DA Signing time: Sat 18 May 2024 21:59:08 +0000 Manifest this update: Sat 18 May 2024 21:59:08 +0000 Manifest next update: Sat 25 May 2024 21:59:08 +0000 Files and hashes: 1: fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl (hash: ds+79+hqzahncNiTKdrY3g1Oi0ByXFo+tV4yS8u5xvo=) 2: 10A6E062B70A11EDB851464EC4F9AE02.roa (hash: XquIDLjEhOAmQqmF0eFe890gPbqlxjKM1c1+XdvRXFE=) 3: 38B92F54E17D11EDBCAFC081C4F9AE02.roa (hash: tWyNWbcGvommNE54pGTBI9V0mq0dDaX2rOT4IeoLLOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2019 (0x7e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918753F/serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D Validity Not Before: May 18 21:59:08 2024 GMT Not After : May 25 21:59:08 2024 GMT Subject: CN=664924ac-897f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5f:ef:11:43:d6:90:66:e1:0b:0c:d2:70:60: 12:cc:10:f2:e1:b1:f5:f1:55:fd:5d:ea:7a:b9:06: ca:61:e7:88:3e:18:f5:cf:e7:cb:f6:b1:e1:86:3f: f3:c3:b2:05:44:f1:04:21:16:3b:97:58:63:be:0d: 14:ac:37:a7:b6:5c:6e:4b:ab:0a:75:b5:1e:0d:04: b3:38:c2:39:a3:14:b6:f5:dc:3c:49:89:a0:b0:27: 40:f7:c9:06:f9:b7:0d:68:c9:f2:61:ee:73:21:19: 47:37:be:db:bf:97:75:7e:18:70:d6:20:5e:64:c3: ba:96:8a:a8:dc:8e:86:f7:18:8e:a4:6f:ca:08:ef: 44:4d:f2:0e:4b:59:33:df:09:41:8f:55:0d:76:92: 61:0d:81:88:0c:7a:5c:16:06:a0:8d:08:45:a1:eb: 14:e7:a8:d7:b3:b2:85:e1:c7:10:0e:7b:d8:08:0d: 9f:b2:e6:e6:f0:88:52:2c:3b:86:43:98:56:3c:49: df:b1:b9:4a:04:f8:ae:87:4d:26:32:7c:c4:64:b9: f7:37:c8:9b:cb:b7:8f:65:ee:f0:4a:f4:a8:e7:ce: 3f:c9:82:37:88:5b:60:9d:00:eb:df:8d:e5:68:db: f6:e3:60:11:fd:7d:4c:98:ea:d5:fb:b9:5e:58:0d: be:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:37:91:FA:1C:57:FE:58:A7:D4:41:F5:18:03:1C:05:6F:2B:C0:1A X509v3 Authority Key Identifier: keyid:7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:32:03:fc:a7:fd:eb:53:8f:16:39:1e:f6:7f:22:30:d2:12: 55:8b:eb:85:49:a9:d5:de:f9:cb:d0:28:f5:d2:e1:b8:97:44: 5c:4a:82:63:98:7f:7d:20:a2:6c:9a:55:d9:db:74:53:45:13: 30:f1:41:50:48:1d:69:3f:f7:c7:86:8a:0d:74:a5:50:4f:f8: 31:97:9e:fd:2e:f8:09:17:32:f5:85:85:83:fd:84:2c:92:fb: 0e:bb:37:85:16:98:03:79:63:a8:85:d6:ac:41:d7:4a:1b:c4: 17:8c:f1:a3:d3:94:7a:70:05:f9:57:94:e9:72:fe:19:04:fc: 66:f4:11:ed:ed:53:36:f3:8d:e7:1e:84:cd:1d:b6:d2:80:ea: f2:1d:ac:ca:9e:d7:e7:50:6a:5c:2f:df:e0:d6:8a:04:7d:22: 33:9b:7d:ed:b1:8a:cf:48:45:b6:75:86:5e:67:f3:f6:f5:77: f6:5c:c4:f8:60:b0:65:f9:b9:19:7f:51:96:bb:10:9b:37:b0: f8:5f:b1:a7:07:24:8a:01:68:bb:7c:a6:9e:8a:ef:ae:a7:67: 5b:95:e5:cc:66:bd:ca:b7:30:3c:da:8a:d4:0d:86:c9:05:7e: ce:fe:37:f6:bc:3a:34:79:36:14:c1:1d:94:05:bc:1b:6c:36: 4e:c9:0d:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc1M0YxMTAvBgNVBAUTKDdFNzJEODAxQjM4QTcyQUI0QjAzNzZFMTJDOTU0MTI0 QUFFNDNDNkQwHhcNMjQwNTE4MjE1OTA4WhcNMjQwNTI1MjE1OTA4WjAYMRYwFAYD VQQDEw02NjQ5MjRhYy04OTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1/vEUPWkGbhCwzScGASzBDy4bH18VX9Xep6uQbKYeeIPhj1z+fL9rHhhj/z w7IFRPEEIRY7l1hjvg0UrDentlxuS6sKdbUeDQSzOMI5oxS29dw8SYmgsCdA98kG +bcNaMnyYe5zIRlHN77bv5d1fhhw1iBeZMO6loqo3I6G9xiOpG/KCO9ETfIOS1kz 3wlBj1UNdpJhDYGIDHpcFgagjQhFoesU56jXs7KF4ccQDnvYCA2fsubm8IhSLDuG Q5hWPEnfsblKBPiuh00mMnzEZLn3N8iby7ePZe7wSvSo584/yYI3iFtgnQDr343l aNv242AR/X1MmOrV+7leWA2+2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNk3kfoc V/5Yp9RB9RgDHAVvK8AaMB8GA1UdIwQYMBaAFH5y2AGzinKrSwN24SyVQSSq5Dxt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzUzRi9CREE1N0ZGRUJD MTYxMUVBOUYyQjc0MTJDNEY5QUUwMi9mbkxZQWJPS2NxdExBM2JoTEpWQkpLcmtQ RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZuTFlBYk9LY3F0TEEzYmhMSlZCSktya1BHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzUzRi9CREE1N0ZGRUJDMTYxMUVBOUYyQjc0MTJDNEY5QUUwMi9mbkxZQWJPS2Nx dExBM2JoTEpWQkpLcmtQRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdMgP8p/3rU48WOR72fyIw0hJVi+uFSanV3vnL0Cj10uG4l0RcSoJj mH99IKJsmlXZ23RTRRMw8UFQSB1pP/fHhooNdKVQT/gxl579LvgJFzL1hYWD/YQs kvsOuzeFFpgDeWOohdasQddKG8QXjPGj05R6cAX5V5Tpcv4ZBPxm9BHt7VM2843n HoTNHbbSgOryHazKntfnUGpcL9/g1ooEfSIzm33tsYrPSEW2dYZeZ/P29Xf2XMT4 YLBl+bkZf1GWuxCbN7D4X7GnBySKAWi7fKaeiu+up2dbleXMZr3KtzA82orUDYbJ BX7O/jf2vDo0eTYUwR2UBbwbbDZOyQ2u -----END CERTIFICATE-----Generated at Sun May 19 00:16:16 2024 by rpki-client on console-fra.rpki-client.org