$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft File: FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft (raw, json) Hash identifier: lgKU1TGq/iV7NU4fvIiLotvik1IS0tx/vBpL6YlbjfA= Subject key identifier: BB:26:56:CC:E2:4B:BA:BF:36:12:8D:AB:55:97:5E:F2:53:DD:32:58 Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 Certificate issuer: /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571 Certificate serial: 0A61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft Manifest number: 0A4F Signing time: Sat 18 May 2024 20:23:07 +0000 Manifest this update: Sat 18 May 2024 20:23:07 +0000 Manifest next update: Sat 25 May 2024 20:23:07 +0000 Files and hashes: 1: FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl (hash: NDa32Bg/DZiPf8Z0kZH3F3SIWEvUPRozg9+foS/oKmc=) 2: B7BC4714BEF011ED9634C070C4F9AE02.roa (hash: 8B48WN3Cucj/+GbP/762W2PIVeIjbfD83vLGsoOpxzE=) 3: DCA05C0E419A11EAA5E2BA6EC4F9AE02.roa (hash: m1e+46EVW2Ru+G5LmSyDdLV24MWne8DiSGyaHbc7oyU=) 4: DC06CBC0419A11EAA5E2BA6EC4F9AE02.roa (hash: nEyyOyw7im8nWErYV8xgVjJLoHXkxaNm8iW5WtWapRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2657 (0xa61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571 Validity Not Before: May 18 20:23:07 2024 GMT Not After : May 25 20:23:07 2024 GMT Subject: CN=66490e2b-9fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:61:a8:03:ec:66:f3:42:fb:34:8c:8d:69:7b: e3:cd:89:1a:2d:d7:2c:f3:b4:a6:19:30:d9:06:2a: ae:b6:28:cf:2c:23:b7:63:aa:12:72:c6:2c:ce:08: 9d:98:ee:2e:5c:1b:41:a1:d1:f0:3c:02:27:90:ed: 46:73:10:cd:5f:b7:3d:c9:89:95:4e:c7:af:6b:e2: 58:94:5c:d3:5c:35:6d:17:63:8f:f8:35:31:f5:43: 3e:f1:2e:ee:53:fd:4c:4e:1c:57:2b:1c:60:34:54: 15:57:7d:a0:b3:c2:68:07:82:80:31:95:ac:be:7c: b8:d4:f9:3c:70:cb:ef:76:7b:b2:37:21:ef:92:8d: 2a:e1:cb:50:7b:2e:d3:96:76:1d:a2:19:d2:b9:8b: 71:29:e2:99:fa:cc:85:36:0f:d5:95:e6:ab:8b:82: d7:bc:23:31:ba:a8:69:f9:d4:1c:45:dc:80:11:89: 67:2c:26:4e:e6:57:18:cb:01:f5:5a:a3:4c:af:67: fc:7b:9d:91:2f:33:f4:4d:b0:26:86:ef:c1:ba:5d: aa:4b:64:c1:c6:a4:97:fb:86:2d:b3:bb:2a:de:07: 93:54:5a:cc:c3:01:bb:85:50:78:43:71:e0:8c:7e: 1e:06:73:b6:36:ca:fb:4a:18:a6:66:1e:b8:fe:cf: 2a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:26:56:CC:E2:4B:BA:BF:36:12:8D:AB:55:97:5E:F2:53:DD:32:58 X509v3 Authority Key Identifier: keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:aa:b5:2c:a8:ab:28:25:d6:59:13:d9:44:64:90:3e:fb:7b: 05:6d:47:77:0f:b0:f9:3c:d3:6a:22:e6:5e:9e:bc:e3:74:f6: a2:f3:d2:a7:d5:b3:26:f1:76:3b:b9:df:1d:5c:ce:a7:75:aa: dd:48:d4:e1:b2:c3:7c:35:d1:c3:2f:d0:ca:41:c8:98:dd:cc: ff:03:64:0a:74:da:ab:d0:b7:74:db:f6:20:c9:ed:ee:c4:c4: 0a:f7:7a:6a:ec:26:fb:a7:4a:08:37:c7:ed:0a:b6:9d:f9:d9: 80:9b:4f:34:72:9b:fc:7a:87:50:b4:bf:88:cc:67:f1:d5:31: 71:44:26:bf:c4:35:48:c7:80:2d:7e:d9:3a:10:a4:0b:ca:82: 91:4c:1c:c0:65:d2:78:1d:ff:e2:53:4b:0f:85:52:dc:da:b2: ca:57:4b:68:66:54:48:4f:08:66:e0:6b:94:a4:df:d2:76:97: 66:e1:a7:44:6d:69:15:f7:64:3a:37:2a:37:74:95:23:31:4a: 94:3d:b2:68:b9:53:77:c2:b6:58:17:89:0b:82:8b:f0:be:14: 90:c3:12:07:ba:93:72:9a:5f:17:7c:9e:46:2c:e8:72:3d:a3: 8e:fe:85:51:70:55:31:52:da:7b:b7:52:31:11:b5:44:a2:ac: 48:a7:8d:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDNDAxMTAvBgNVBAUTKDE2MDFEODY1MERENTU2QjJBRkIwODNCMjMzRkY2NUFF M0RBRDE1NzEwHhcNMjQwNTE4MjAyMzA3WhcNMjQwNTI1MjAyMzA3WjAYMRYwFAYD VQQDEw02NjQ5MGUyYi05ZmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWGoA+xm80L7NIyNaXvjzYkaLdcs87SmGTDZBiqutijPLCO3Y6oScsYszgid mO4uXBtBodHwPAInkO1GcxDNX7c9yYmVTseva+JYlFzTXDVtF2OP+DUx9UM+8S7u U/1MThxXKxxgNFQVV32gs8JoB4KAMZWsvny41Pk8cMvvdnuyNyHvko0q4ctQey7T lnYdohnSuYtxKeKZ+syFNg/Vleari4LXvCMxuqhp+dQcRdyAEYlnLCZO5lcYywH1 WqNMr2f8e52RLzP0TbAmhu/Bul2qS2TBxqSX+4Yts7sq3geTVFrMwwG7hVB4Q3Hg jH4eBnO2Nsr7ShimZh64/s8qqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLsmVszi S7q/NhKNq1WXXvJT3TJYMB8GA1UdIwQYMBaAFBYB2GUN1Vayr7CDsjP/Za49rRVx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM0MC82MTdGMzUzNjQw RTExMUVBQkM2MkRCMjZDNEY5QUUwMi9GZ0hZWlEzVlZyS3ZzSU95TV85bHJqMnRG WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnSFlaUTNWVnJLdnNJT3lNXzlscmoydEZYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkM0MC82MTdGMzUzNjQwRTExMUVBQkM2MkRCMjZDNEY5QUUwMi9GZ0hZWlEzVlZy S3ZzSU95TV85bHJqMnRGWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvqrUsqKsoJdZZE9lEZJA++3sFbUd3D7D5PNNqIuZenrzjdPai89Kn 1bMm8XY7ud8dXM6ndardSNThssN8NdHDL9DKQciY3cz/A2QKdNqr0Ld02/Ygye3u xMQK93pq7Cb7p0oIN8ftCrad+dmAm080cpv8eodQtL+IzGfx1TFxRCa/xDVIx4At ftk6EKQLyoKRTBzAZdJ4Hf/iU0sPhVLc2rLKV0toZlRITwhm4GuUpN/Sdpdm4adE bWkV92Q6Nyo3dJUjMUqUPbJouVN3wrZYF4kLgovwvhSQwxIHupNyml8XfJ5GLOhy PaOO/oVRcFUxUtp7t1IxEbVEoqxIp43p -----END CERTIFICATE-----Generated at Sat May 18 20:48:20 2024 by rpki-client on console-fra.rpki-client.org