$ rpki-client -vvf rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft File: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft (raw, json) Hash identifier: m7GTvdhGGYjbxj1+6kbcC69rvqW7PUwWiGXdfGTKoKI= Subject key identifier: D9:41:3C:40:78:6C:46:DD:5F:9F:B7:B6:47:C6:72:D3:07:9B:5A:82 Authority key identifier: 15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59 Certificate issuer: /CN=A918B0C4/serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159 Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft Manifest number: 010F Signing time: Sun 19 May 2024 05:26:33 +0000 Manifest this update: Sun 19 May 2024 05:26:32 +0000 Manifest next update: Sun 26 May 2024 05:26:32 +0000 Files and hashes: 1: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl (hash: mgLUPs5tLTOxsDoC2fnT91e9gjosHsmQUUB55Kc4SiA=) 2: F59959807A0511EDA112EF32C4F9AE02.roa (hash: nX27drcrP8AaT2QCFKoTRkRmZ5PcbQ8QNUhuQKKy2LI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B0C4/serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159 Validity Not Before: May 19 05:26:32 2024 GMT Not After : May 26 05:26:32 2024 GMT Subject: CN=66498d89-f65d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:db:18:66:44:47:6d:1a:2d:fc:df:ae:27:9b: 7b:e4:c0:1d:c7:66:93:49:76:af:91:de:fa:b4:e5: dc:7b:d8:af:1c:d1:4a:f7:44:f6:c3:f7:6e:5f:71: f2:a5:39:52:f5:eb:98:82:37:f1:83:2d:44:f3:90: 40:8b:d5:1e:22:ae:79:63:be:12:2b:39:81:d7:b8: 13:a2:ce:7c:6a:6b:45:8a:e5:21:69:29:f7:14:65: 6b:40:1b:0f:6f:a1:a3:8c:9e:42:6f:20:d1:2f:22: 92:33:4b:39:50:13:80:02:1b:44:73:02:0a:a5:ef: 00:8e:df:72:7d:4e:6a:d3:b1:0f:cb:36:e8:33:a5: 4c:6d:9a:82:c5:71:d5:fe:01:5d:1d:3d:09:91:ae: e6:65:bf:3d:57:58:c1:25:4f:2e:ea:99:7c:c7:f0: 99:50:51:30:a3:fc:68:97:0f:e6:fd:5e:03:5b:5a: 88:e2:a2:eb:a0:b0:a5:23:69:89:33:4e:1a:db:a0: 51:06:cd:d8:e6:7c:09:d8:22:f9:37:55:84:33:6a: e9:a2:9f:29:7e:28:69:95:9f:69:17:78:fd:2f:47: cf:43:eb:11:66:52:55:2f:c5:16:2d:2f:a8:d3:6b: c1:85:f1:d7:db:22:c1:ba:08:68:05:85:7b:d8:13: c8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:41:3C:40:78:6C:46:DD:5F:9F:B7:B6:47:C6:72:D3:07:9B:5A:82 X509v3 Authority Key Identifier: keyid:15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:46:bb:c1:fd:ae:b7:e2:d5:3c:9b:ff:f1:a8:f8:4f:a0:38: 60:78:53:31:9a:aa:c4:2b:5d:55:a8:8f:11:b8:bb:ae:0c:de: a3:1c:8c:78:8c:28:f0:a5:31:af:c4:31:2b:97:14:b9:77:c3: 02:64:28:12:42:bf:57:31:65:5d:59:ab:79:49:c9:21:04:d4: 78:73:3b:90:b9:db:59:e4:08:d2:c7:fb:ff:25:6d:fa:0e:d8: 6b:cf:e6:0b:a1:d0:64:81:82:a3:24:64:92:72:e6:ba:47:02: df:b1:db:47:d0:d6:2b:42:6b:e5:53:a5:fb:0f:38:df:85:b6: 69:55:e6:d7:26:72:7c:02:ce:4d:55:20:4c:7f:4c:76:bb:8d: 99:95:96:52:f5:56:7f:fe:d3:5a:ff:c2:64:1d:be:6a:03:8e: 16:e1:82:80:f6:ba:70:dd:86:f2:81:65:b6:3b:87:3b:a6:0c: 84:5c:d2:42:aa:76:ea:fa:86:e9:7d:f4:2b:fc:96:8b:b8:1c: 7d:1f:88:63:7a:af:b8:a2:d0:74:cb:83:c7:b3:8a:44:65:16: cb:96:57:97:83:3c:20:e8:ad:70:5b:16:4a:64:ff:4e:26:6b: 20:a7:e1:d9:bf:de:8a:6c:41:24:55:94:47:03:48:bd:90:9f: de:ee:2d:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIwQzQxMTAvBgNVBAUTKDE1RjBBNDA2ODVFNjlBNjQxREI3MEU4MkJGNzgwQTlB QkZFM0YxNTkwHhcNMjQwNTE5MDUyNjMyWhcNMjQwNTI2MDUyNjMyWjAYMRYwFAYD VQQDEw02NjQ5OGQ4OS1mNjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn9sYZkRHbRot/N+uJ5t75MAdx2aTSXavkd76tOXce9ivHNFK90T2w/duX3Hy pTlS9euYgjfxgy1E85BAi9UeIq55Y74SKzmB17gTos58amtFiuUhaSn3FGVrQBsP b6GjjJ5CbyDRLyKSM0s5UBOAAhtEcwIKpe8Ajt9yfU5q07EPyzboM6VMbZqCxXHV /gFdHT0Jka7mZb89V1jBJU8u6pl8x/CZUFEwo/xolw/m/V4DW1qI4qLroLClI2mJ M04a26BRBs3Y5nwJ2CL5N1WEM2rpop8pfihplZ9pF3j9L0fPQ+sRZlJVL8UWLS+o 02vBhfHX2yLBughoBYV72BPIPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNlBPEB4 bEbdX5+3tkfGctMHm1qCMB8GA1UdIwQYMBaAFBXwpAaF5ppkHbcOgr94Cpq/4/FZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjBDNC9GM0E4NzJEQTdB MDIxMUVEQkIzNkRCMkVDNEY5QUUwMi9GZkNrQm9YbW1tUWR0dzZDdjNnS21yX2o4 VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZmQ2tCb1htbW1RZHR3NkN2M2dLbXJfajhWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjBDNC9GM0E4NzJEQTdBMDIxMUVEQkIzNkRCMkVDNEY5QUUwMi9GZkNrQm9YbW1t UWR0dzZDdjNnS21yX2o4VmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRRrvB/a634tU8m//xqPhPoDhgeFMxmqrEK11VqI8RuLuuDN6jHIx4 jCjwpTGvxDErlxS5d8MCZCgSQr9XMWVdWat5SckhBNR4czuQudtZ5AjSx/v/JW36 Dthrz+YLodBkgYKjJGSScua6RwLfsdtH0NYrQmvlU6X7DzjfhbZpVebXJnJ8As5N VSBMf0x2u42ZlZZS9VZ//tNa/8JkHb5qA44W4YKA9rpw3YbygWW2O4c7pgyEXNJC qnbq+obpffQr/JaLuBx9H4hjeq+4otB0y4PHs4pEZRbLlleXgzwg6K1wWxZKZP9O Jmsgp+HZv96KbEEkVZRHA0i9kJ/e7i3R -----END CERTIFICATE-----Generated at Sun May 19 07:40:41 2024 by rpki-client on console-fra.rpki-client.org