$ rpki-client -vvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft File: FyPctBoEJopYeqzoz9na5fn1Hfc.mft (raw, json) Hash identifier: wFHvzgI9htrftikMW8IOLxQEeaVcD/ogOEshY84bJnc= Subject key identifier: 35:02:94:AE:54:CD:E5:49:EE:5E:80:18:AD:A4:69:41:11:F3:5D:89 Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 Certificate issuer: /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Certificate serial: 06D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft Manifest number: 06B6 Signing time: Sat 04 May 2024 23:22:14 +0000 Manifest this update: Sat 04 May 2024 23:22:13 +0000 Manifest next update: Sat 11 May 2024 23:22:13 +0000 Files and hashes: 1: FyPctBoEJopYeqzoz9na5fn1Hfc.crl (hash: cq85p0nKbpYOoEOw/SFAc5nlzXCkXYK5/1vEO+dwfk4=) 2: 3CD29BF4D46911EE8B36431CC4F9AE02.roa (hash: y+QqJ2Q6y9VOleH0ErR/27zKvdqnpypCtoqaXBhXuGM=) 3: 7AA7B416E01011EEA1CA127CC4F9AE02.roa (hash: Skg7lcDgm20gPmxDWfgadiPib3Ze9L6Issrq67LggAo=) 4: 8037BC50EB2E11EDB835EF4AC4F9AE02.roa (hash: ZCuh+/QKUtmujyQ3u9Ycas5/e8UGjjrI0oiZyV5xBCU=) 5: 2840D3A225FF11EBAF634966C4F9AE02.roa (hash: QsKZcBU1iWTlGOvNypdJ5N0WFJj0BAxljKarJCEkWIE=) 6: 81679802EB2E11EDB835EF4AC4F9AE02.roa (hash: UNJSQmdq1rxpNJFyahRqxuvRAaa0JCst6WRDtKJ+s8o=) 7: 26D56F6425FF11EBAF634966C4F9AE02.roa (hash: FuQYyTuvZZr1yGpUF9+fkJpxquRNWPwV6f102hzhVZ8=) 8: 284E9E9E1D5611EB891ADC6CC4F9AE02.roa (hash: egsq2fPjGTyeJ6pbR9RPIISdszae19pBFbidJodvsig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1744 (0x6d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Validity Not Before: May 4 23:22:13 2024 GMT Not After : May 11 23:22:13 2024 GMT Subject: CN=6636c325-a5d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:50:1b:2b:17:95:d0:3b:66:50:b1:2b:30:b2: d4:7d:32:e0:7f:b9:bf:e3:3b:3b:46:43:1d:fa:f0: 24:09:de:d3:cc:df:40:36:0e:00:57:5e:8a:d2:cb: 9a:f6:35:1b:49:9d:b6:83:c6:7c:89:8c:ec:eb:d9: 08:22:8f:9f:4c:a2:5f:a1:33:d3:c3:53:7f:69:f9: 30:5b:d0:98:32:e4:86:16:1a:2d:df:86:97:94:9b: ca:ec:dd:38:e0:d1:f2:1f:00:d3:2b:80:22:64:75: c3:09:94:d1:29:1d:91:f7:57:88:69:07:ef:77:f5: da:4e:ed:c2:ba:ce:95:df:c6:97:a4:88:37:d9:49: 25:38:d3:76:7d:da:94:40:48:73:48:5a:50:45:4c: 5c:75:6c:82:24:4b:16:5d:f9:cd:30:62:99:16:74: fe:fd:f3:ab:54:c0:c9:1b:f0:33:1f:3d:b1:c4:63: e4:38:29:12:4e:5d:bf:ee:c7:d4:97:1e:91:ea:e6: dc:67:ab:1d:a6:1e:b2:9c:2c:f8:9c:af:9b:14:96: ce:3d:23:2c:42:43:af:f1:74:e8:77:31:b9:bc:8b: 1e:cd:84:37:c3:ab:ab:8b:d9:d6:21:5d:1b:46:ec: c7:eb:96:88:86:68:31:b9:2e:a8:99:c6:86:c4:80: d9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:02:94:AE:54:CD:E5:49:EE:5E:80:18:AD:A4:69:41:11:F3:5D:89 X509v3 Authority Key Identifier: keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:fb:bd:51:a4:8e:4d:b2:66:ff:4d:17:b3:90:76:56:87:29: 5b:22:3f:11:5d:61:9b:a3:6e:15:8b:49:15:50:ba:b0:75:12: 80:ea:90:ac:b9:7e:09:69:9f:98:69:15:73:d4:8f:8c:ca:0c: e2:c7:97:10:10:3e:84:91:93:5f:bb:8a:11:77:e2:79:42:9b: cd:dd:72:7a:59:69:c5:81:17:08:89:77:84:b5:8f:c8:a4:7b: 13:a8:9f:29:1c:ee:b8:33:93:fc:2d:ef:b0:19:b3:db:30:46: 93:86:83:2d:b2:f4:42:69:9d:db:ac:1b:d2:b5:6f:d5:90:e6: 41:30:a3:27:d8:24:46:af:d3:a8:55:c7:6c:8f:cb:4a:60:85: 1d:ca:cc:13:27:09:28:ab:ed:8c:f3:9c:d7:3b:89:3f:84:e3: 35:89:c3:ed:eb:ed:41:3a:02:ee:3d:dc:37:4d:dc:90:d1:cb: 02:6c:28:e1:8a:37:9b:80:86:37:88:dc:b4:ec:7f:38:2e:11: fa:63:80:11:bd:7e:a3:05:bc:cf:00:85:b5:91:6a:c0:38:32: 11:60:26:26:3f:1d:12:c9:b1:eb:a2:4a:f2:c2:6b:5f:7c:94: 21:51:e8:8c:48:de:a2:08:b1:b2:0e:9c:e2:de:bd:57:75:5e: 4c:02:55:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlEQ0IxMTAvBgNVBAUTKDE3MjNEQ0I0MUEwNDI2OEE1ODdBQUNFOENGRDlEQUU1 RjlGNTFERjcwHhcNMjQwNTA0MjMyMjEzWhcNMjQwNTExMjMyMjEzWjAYMRYwFAYD VQQDEw02NjM2YzMyNS1hNWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6VAbKxeV0DtmULErMLLUfTLgf7m/4zs7RkMd+vAkCd7TzN9ANg4AV16K0sua 9jUbSZ22g8Z8iYzs69kIIo+fTKJfoTPTw1N/afkwW9CYMuSGFhot34aXlJvK7N04 4NHyHwDTK4AiZHXDCZTRKR2R91eIaQfvd/XaTu3Cus6V38aXpIg32UklONN2fdqU QEhzSFpQRUxcdWyCJEsWXfnNMGKZFnT+/fOrVMDJG/AzHz2xxGPkOCkSTl2/7sfU lx6R6ubcZ6sdph6ynCz4nK+bFJbOPSMsQkOv8XTodzG5vIsezYQ3w6uri9nWIV0b RuzH65aIhmgxuS6omcaGxIDZ1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUClK5U zeVJ7l6AGK2kaUER812JMB8GA1UdIwQYMBaAFBcj3LQaBCaKWHqs6M/Z2uX59R33 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOURDQi9FNEMwRjU2QzE4 N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpvcFllcXpvejluYTVmbjFI ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z5UGN0Qm9FSm9wWWVxem96OW5hNWZuMUhmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OURDQi9FNEMwRjU2QzE4N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpv cFllcXpvejluYTVmbjFIZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt+71RpI5Nsmb/TRezkHZWhylbIj8RXWGbo24Vi0kVULqwdRKA6pCs uX4JaZ+YaRVz1I+Mygzix5cQED6EkZNfu4oRd+J5QpvN3XJ6WWnFgRcIiXeEtY/I pHsTqJ8pHO64M5P8Le+wGbPbMEaThoMtsvRCaZ3brBvStW/VkOZBMKMn2CRGr9Oo Vcdsj8tKYIUdyswTJwkoq+2M85zXO4k/hOM1icPt6+1BOgLuPdw3TdyQ0csCbCjh ijebgIY3iNy07H84LhH6Y4ARvX6jBbzPAIW1kWrAODIRYCYmPx0SybHrokrywmtf fJQhUeiMSN6iCLGyDpzi3r1XdV5MAlVm -----END CERTIFICATE-----Generated at Sun May 5 00:14:40 2024 by rpki-client on console-ams.rpki-client.org