$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft File: F9X-Mj6_2ajTROd7c3majnViQ1I.mft (raw, json) Hash identifier: dVF7n7E5wsTGvjkKLtVesgrvMjlgh0xAlFM7XxUKnZI= Subject key identifier: 7C:39:2C:96:F4:3C:1D:77:9E:FB:2C:B4:84:9E:E8:E5:97:17:B7:44 Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 Certificate issuer: /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft Manifest number: 0173 Signing time: Sun 19 May 2024 04:52:35 +0000 Manifest this update: Sun 19 May 2024 04:52:34 +0000 Manifest next update: Sun 26 May 2024 04:52:34 +0000 Files and hashes: 1: F9X-Mj6_2ajTROd7c3majnViQ1I.crl (hash: 6pthrEAPDIqkA/qUBSosvxlR+DQyFnItG/JFWkMMTbw=) 2: 014DA14E596F11ED9DE99A66C4F9AE02.roa (hash: fbBppngywddJN+6MFQFW9QaW1XuLv3iL2tKQckSDN9c=) 3: 4BBA96965CD511EE9A078180C4F9AE02.roa (hash: WDbglvOn95tuIlpktbaG0blllFtFk0P6mtQAsNXqVlI=) 4: 61CC010AE4BA11EE8037FD6DC4F9AE02.roa (hash: 1Lnaosa/OY0RTGhcXjsPmYkBR63tS7Qpn/EZaqAxnaM=) 5: 66E8964AE4B911EE8EC7426CC4F9AE02.roa (hash: gVDLzFxD2tTXT3/N7woH15fz8r/mQqWD4IXL5ujPovo=) 6: 50AF1E205CD411EEBADBCF7DC4F9AE02.roa (hash: nuueDOx0/+apmDU7DZPGRGBg+qRwYmEeSxZjhAXG0Z4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Validity Not Before: May 19 04:52:34 2024 GMT Not After : May 26 04:52:34 2024 GMT Subject: CN=66498592-bb72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:71:27:f9:f4:91:36:45:6c:f8:7d:f1:7f:0a: 0c:9e:cc:ab:b1:fb:b6:b0:c8:b4:7c:a6:05:36:d5: 93:c2:17:08:51:11:e2:00:d2:bb:3f:34:d6:55:ca: 10:55:f8:b8:88:c3:78:66:19:7c:b7:24:49:10:b4: f7:f2:c1:71:d2:37:0e:bb:e8:72:4b:3d:1c:dc:9c: 7f:ab:e7:46:4d:6c:16:9a:62:25:cb:73:2d:89:d9: 01:58:b6:fd:2b:01:3e:b9:ba:a5:fb:d5:b3:aa:61: da:ca:b5:37:fb:21:1b:27:95:fb:3c:a3:b7:c3:f9: 92:b7:e3:8a:8f:7e:6a:c1:d6:4d:a0:5d:01:c1:e8: b6:02:0a:34:91:fe:30:4f:46:46:b6:cc:f1:ee:65: ba:b0:eb:3a:12:0f:32:74:e6:e1:31:48:20:60:2f: 34:48:94:7e:e9:3a:75:17:c6:61:fe:99:62:27:42: 51:a6:42:c2:af:fc:64:6e:08:11:49:92:bb:eb:5e: 1f:3d:8c:eb:4f:fc:9a:c8:05:60:94:ba:d3:ec:e2: 7b:89:1f:30:6d:8f:2a:18:d4:e0:8d:ee:44:44:ff: c0:6d:05:73:22:de:d9:4f:d0:dd:b6:6f:94:a1:b7: 2e:df:42:30:d2:70:ca:b9:1b:0e:ef:f5:2e:a1:52: 4c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:39:2C:96:F4:3C:1D:77:9E:FB:2C:B4:84:9E:E8:E5:97:17:B7:44 X509v3 Authority Key Identifier: keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:f8:9f:1f:06:bc:da:2c:40:3b:c7:f7:46:9e:da:45:a6:84: 6c:14:fd:24:40:19:f4:de:c6:8f:e7:65:ea:7a:35:ff:54:42: aa:e1:c3:51:84:77:3d:aa:41:1c:6f:97:7e:27:c2:25:2a:63: 29:5a:20:d2:f4:ae:dc:a4:dd:a4:92:8d:b2:a9:f0:e7:7e:80: dc:9a:03:91:26:92:6f:26:6a:c9:93:87:b2:bb:15:b6:ea:0c: e2:7a:5c:7d:7a:30:15:37:04:59:63:a7:cd:d3:af:c1:9c:3a: 0f:07:e3:da:e9:2e:3f:bd:93:fd:b3:42:b4:b8:2d:4c:25:fd: b8:40:59:d1:c7:bf:5e:94:f8:b7:11:5c:ce:9d:e6:bb:4c:17: fe:7f:66:e9:21:32:19:2e:eb:a0:ee:9d:74:c0:dc:9b:6a:92: 9b:f7:f8:50:e8:02:cb:9b:e4:4e:cd:a1:b3:b0:67:cc:0a:15: 01:f8:5f:6c:ba:74:14:ec:20:59:a1:10:51:f1:2c:18:33:82: fa:07:3e:d2:1e:a5:4c:a9:f6:10:09:39:89:cb:71:b3:9a:e5: a5:49:de:87:11:bd:25:55:a4:71:da:97:f7:60:ed:c1:cb:d0: da:19:78:ca:a6:6c:5e:03:fc:84:5b:9c:9f:23:90:1d:e3:88: e8:30:dc:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNDcxMTAvBgNVBAUTKDE3RDVGRTMyM0VCRkQ5QThEMzQ0RTc3QjczNzk5QThF NzU2MjQzNTIwHhcNMjQwNTE5MDQ1MjM0WhcNMjQwNTI2MDQ1MjM0WjAYMRYwFAYD VQQDEw02NjQ5ODU5Mi1iYjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXEn+fSRNkVs+H3xfwoMnsyrsfu2sMi0fKYFNtWTwhcIURHiANK7PzTWVcoQ Vfi4iMN4Zhl8tyRJELT38sFx0jcOu+hySz0c3Jx/q+dGTWwWmmIly3MtidkBWLb9 KwE+ubql+9WzqmHayrU3+yEbJ5X7PKO3w/mSt+OKj35qwdZNoF0Bwei2Ago0kf4w T0ZGtszx7mW6sOs6Eg8ydObhMUggYC80SJR+6Tp1F8Zh/pliJ0JRpkLCr/xkbggR SZK7614fPYzrT/yayAVglLrT7OJ7iR8wbY8qGNTgje5ERP/AbQVzIt7ZT9Ddtm+U obcu30Iw0nDKuRsO7/UuoVJM4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHw5LJb0 PB13nvsstISe6OWXF7dEMB8GA1UdIwQYMBaAFBfV/jI+v9mo00Tne3N5mo51YkNS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI0Ny9FODhFOUM3RTMz QUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJhalRST2Q3YzNtYWpuVmlR MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Y5WC1NajZfMmFqVFJPZDdjM21ham5WaVExSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkI0Ny9FODhFOUM3RTMzQUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJh alRST2Q3YzNtYWpuVmlRMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC+J8fBrzaLEA7x/dGntpFpoRsFP0kQBn03saP52XqejX/VEKq4cNR hHc9qkEcb5d+J8IlKmMpWiDS9K7cpN2kko2yqfDnfoDcmgORJpJvJmrJk4eyuxW2 6gzielx9ejAVNwRZY6fN06/BnDoPB+Pa6S4/vZP9s0K0uC1MJf24QFnRx79elPi3 EVzOnea7TBf+f2bpITIZLuug7p10wNybapKb9/hQ6ALLm+ROzaGzsGfMChUB+F9s unQU7CBZoRBR8SwYM4L6Bz7SHqVMqfYQCTmJy3GzmuWlSd6HEb0lVaRx2pf3YO3B y9DaGXjKpmxeA/yEW5yfI5Ad44joMNxc -----END CERTIFICATE-----Generated at Sun May 19 05:48:52 2024 by rpki-client on console-fra.rpki-client.org