$ rpki-client -vvf rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft File: f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft (raw, json) Hash identifier: bUKSDMZq/ITZehu2OEpUmyfLAco2bTzesbU7FnN7yRE= Subject key identifier: A2:0F:C4:5A:B0:89:3F:62:A8:1D:6C:B1:EE:1C:9D:65:83:F3:8C:D9 Authority key identifier: 7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF Certificate issuer: /CN=A9190992/serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF Certificate serial: 0392 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft Manifest number: 0387 Signing time: Sun 19 May 2024 02:44:27 +0000 Manifest this update: Sun 19 May 2024 02:44:26 +0000 Manifest next update: Sun 26 May 2024 02:44:26 +0000 Files and hashes: 1: f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl (hash: Y29CwI+Sn8nBTQ02PnL1l1mKZYIZoH0gkwemFB9kZn8=) 2: 5B24C51A60ED11EC874B903BC4F9AE02.roa (hash: 5KlVV40dnTtpT7Iu2PhBylpIj/RTeJ/3JQqia5d4j2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:44:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 914 (0x392) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190992/serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF Validity Not Before: May 19 02:44:26 2024 GMT Not After : May 26 02:44:26 2024 GMT Subject: CN=6649678b-8be9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8b:b9:f0:fc:6f:19:38:74:7d:c6:50:b1:d3: e2:5a:82:9b:3e:47:63:a7:e8:4a:de:5c:12:9b:7b: 67:c1:7f:f3:48:5e:39:fd:0c:95:40:49:d3:ef:7a: f0:a8:dd:ac:bc:33:bb:ce:4d:eb:d8:9d:cf:99:13: 9e:93:61:e0:e9:09:fb:39:00:e4:b7:c6:d4:b3:d5: 53:3e:e2:98:cf:7b:3e:3f:31:14:22:86:b6:29:38: 66:80:71:33:19:9d:9c:c4:bf:b8:be:9a:e2:16:34: e5:d3:fc:ff:1b:e0:70:95:77:9b:4d:eb:d3:24:87: 71:f6:6f:85:41:cc:36:51:05:6f:5c:e1:0c:2c:cf: 6a:a4:95:59:7a:85:ef:5f:0f:d4:9a:77:89:4c:74: 43:39:05:85:21:61:66:b0:54:56:bb:6a:f6:e8:9e: a8:50:86:b1:a9:c4:a4:f8:c0:5f:3b:ed:51:78:3b: 22:b6:04:3f:42:ca:77:cb:a7:8d:f4:22:ab:d8:3d: 9a:94:0e:a7:eb:a3:b4:f9:a3:2d:c3:7c:87:93:cf: 46:a0:58:a4:67:65:48:d4:4e:19:6d:5f:49:ca:69: 38:ed:1a:df:82:0e:f7:c8:3a:a7:da:ae:55:6c:ca: 74:a1:31:2b:9c:b0:ea:67:46:27:b9:61:55:6d:37: 0f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:0F:C4:5A:B0:89:3F:62:A8:1D:6C:B1:EE:1C:9D:65:83:F3:8C:D9 X509v3 Authority Key Identifier: keyid:7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:3c:61:34:f7:59:02:1b:69:53:60:49:f2:88:72:8d:01:c6: 04:7b:e4:5a:c1:57:fd:af:49:2f:d0:c0:9a:2e:28:38:bd:c3: aa:e4:60:9e:02:db:d7:8c:72:f6:97:af:5e:01:3c:59:64:34: d3:26:1d:ab:64:27:63:b4:5f:67:f0:30:7b:ab:1f:c9:8f:79: 2a:a9:fd:26:22:8d:2e:ba:77:38:59:36:a8:b2:05:70:ef:a5: c6:1c:94:b8:88:c1:36:87:10:49:65:b6:95:4d:a9:7a:4f:de: 2c:a0:30:bc:eb:87:bf:7a:0d:7c:0a:c8:b0:bb:05:15:9b:12: fb:2a:81:2c:20:6c:0e:96:71:13:d9:f6:77:ce:61:98:0d:7b: 0f:60:04:43:6d:7b:a4:93:35:9d:0f:74:d3:b5:78:d4:47:d5: b6:76:65:f0:b5:48:92:12:c2:d8:4b:90:d1:80:d6:ff:d5:3d: b5:ca:ba:cd:d8:da:b7:4c:13:13:52:6a:4e:89:02:6f:0d:e3: fa:de:ba:79:ba:f0:90:51:49:b4:97:ed:21:a2:db:d8:3a:d8: 77:43:3f:85:92:c0:f5:1a:cd:3a:d4:21:b3:b7:8e:f6:1b:42: 2d:e1:c7:74:7d:40:2c:f7:37:77:6b:5c:83:22:6b:21:c0:2b: 83:9d:b2:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5OTIxMTAvBgNVBAUTKDdGNjVDMTEwRTJBMTdFNDFENzcwRkMyREZBNDAzRDE2 QTMzRTVDQUYwHhcNMjQwNTE5MDI0NDI2WhcNMjQwNTI2MDI0NDI2WjAYMRYwFAYD VQQDEw02NjQ5Njc4Yi04YmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Yu58PxvGTh0fcZQsdPiWoKbPkdjp+hK3lwSm3tnwX/zSF45/QyVQEnT73rw qN2svDO7zk3r2J3PmROek2Hg6Qn7OQDkt8bUs9VTPuKYz3s+PzEUIoa2KThmgHEz GZ2cxL+4vpriFjTl0/z/G+BwlXebTevTJIdx9m+FQcw2UQVvXOEMLM9qpJVZeoXv Xw/UmneJTHRDOQWFIWFmsFRWu2r26J6oUIaxqcSk+MBfO+1ReDsitgQ/Qsp3y6eN 9CKr2D2alA6n66O0+aMtw3yHk89GoFikZ2VI1E4ZbV9Jymk47Rrfgg73yDqn2q5V bMp0oTErnLDqZ0YnuWFVbTcP1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIPxFqw iT9iqB1sse4cnWWD84zZMB8GA1UdIwQYMBaAFH9lwRDioX5B13D8LfpAPRajPlyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDk5Mi81QjNEMDgwMjVD MEUxMUVDOTc2MDM2MTdDNEY5QUUwMi9mMlhCRU9LaGZrSFhjUHd0LWtBOUZxTS1Y SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YyWEJFT0toZmtIWGNQd3Qta0E5RnFNLVhLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDk5Mi81QjNEMDgwMjVDMEUxMUVDOTc2MDM2MTdDNEY5QUUwMi9mMlhCRU9LaGZr SFhjUHd0LWtBOUZxTS1YSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOPGE091kCG2lTYEnyiHKNAcYEe+RawVf9r0kv0MCaLig4vcOq5GCe AtvXjHL2l69eATxZZDTTJh2rZCdjtF9n8DB7qx/Jj3kqqf0mIo0uunc4WTaosgVw 76XGHJS4iME2hxBJZbaVTal6T94soDC864e/eg18CsiwuwUVmxL7KoEsIGwOlnET 2fZ3zmGYDXsPYARDbXukkzWdD3TTtXjUR9W2dmXwtUiSEsLYS5DRgNb/1T21yrrN 2Nq3TBMTUmpOiQJvDeP63rp5uvCQUUm0l+0hotvYOth3Qz+FksD1Gs061CGzt472 G0It4cd0fUAs9zd3a1yDImshwCuDnbJE -----END CERTIFICATE-----Generated at Sun May 19 03:38:15 2024 by rpki-client on console-ams.rpki-client.org