$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft File: FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft (raw, json) Hash identifier: /IGFDzYx5UjoewA/fbputYltCmN1AFIN3Q9dzQKyYuk= Subject key identifier: 93:D8:5F:F2:5B:66:06:EB:15:4F:F6:AA:4C:DA:E7:55:48:B2:FC:6B Authority key identifier: 16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45 Certificate issuer: /CN=A911A0C0/serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45 Certificate serial: 184A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft Manifest number: 183E Signing time: Thu 02 May 2024 16:59:43 +0000 Manifest this update: Thu 02 May 2024 16:59:43 +0000 Manifest next update: Thu 09 May 2024 16:59:43 +0000 Files and hashes: 1: FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl (hash: VW2RirQLaeiaaQfFCIWeZx2Zd6doYZYbazwJgik3sgA=) 2: 543AF5B283D911E78F2FA066C4F9AE02.roa (hash: fKwJVqgMUMQZB27+5tjX0qOaFLH1LRRBqtOZNdKWHTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6218 (0x184a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A0C0/serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45 Validity Not Before: May 2 16:59:43 2024 GMT Not After : May 9 16:59:43 2024 GMT Subject: CN=6633c67f-3a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:97:de:cb:0d:34:92:c1:06:d3:57:cc:3f:46: 68:f5:77:87:6c:51:7d:ea:6d:e3:fa:57:35:36:c4: 86:dc:fa:c0:39:ad:84:96:59:1d:59:58:21:ad:30: 0c:66:07:79:ef:d3:c2:7c:50:d1:73:bc:79:bb:27: 22:2c:27:04:c9:9e:9e:d8:11:81:58:69:b6:db:96: 35:ae:55:e7:5a:33:b8:4c:6a:bf:f9:ea:d1:c3:d0: af:4b:76:5b:7b:3f:98:7d:2b:f4:c8:07:ca:47:0d: fc:4e:e1:85:39:92:0e:2d:03:5a:f2:fd:00:65:13: cd:90:c2:30:c1:b7:91:b6:d9:71:e6:50:7f:66:0b: 1d:9a:54:13:8d:63:ec:19:e3:9c:6a:da:ec:49:28: 1f:9c:6b:e1:a9:26:14:ee:a6:09:70:e7:ae:83:11: ab:ac:03:14:57:53:66:0c:35:38:68:34:c3:ca:7c: 40:4c:8b:ab:bb:b2:be:2c:e2:71:ee:3e:c5:c2:8d: 31:33:03:3c:d9:38:82:3f:08:52:17:e1:e3:97:f1: 88:c8:56:47:c5:61:ba:55:ef:0e:5d:62:27:1d:58: ac:c4:b3:d4:17:20:0d:01:30:dc:d4:bd:68:23:18: 2a:28:c5:8c:46:2f:19:b6:7a:b9:ce:7b:37:39:df: 90:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D8:5F:F2:5B:66:06:EB:15:4F:F6:AA:4C:DA:E7:55:48:B2:FC:6B X509v3 Authority Key Identifier: keyid:16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:fa:85:ad:88:7f:19:7c:bf:72:96:83:ea:29:8b:33:5a:44: 5b:b4:e5:2c:bc:a2:7f:87:89:55:5c:93:ad:40:0b:8a:50:15: 04:c1:a8:f7:1e:18:8f:21:28:73:92:e0:eb:1c:37:4a:99:7d: 9b:6d:a2:41:b6:0e:86:4f:32:4f:f4:19:26:b8:a7:74:44:59: d7:5d:96:83:03:e3:52:cd:0d:8c:c6:1d:4f:94:91:c8:a3:3b: be:be:11:22:8e:85:a6:fe:5e:16:a9:71:e7:61:ec:19:dd:e4: 1c:02:35:86:a8:3e:2f:11:6a:78:11:1b:8c:0b:5f:b7:99:34: 10:4f:22:e3:f8:11:10:39:54:d0:77:ad:69:f6:94:9d:f1:8f: ec:71:11:7a:34:73:c4:86:3d:ab:2d:2c:31:e3:b4:ce:5b:b3: fd:ef:bb:07:8a:1b:9d:12:d9:40:4d:63:7e:a9:90:9a:3d:39: f1:62:a9:be:dc:c0:fe:18:71:0e:75:59:2f:45:3d:7c:9b:c7: f3:7b:6b:92:ab:29:1d:e3:26:d9:a5:c9:bc:73:c0:08:2b:46: 87:f4:c0:4c:1f:2e:74:a5:ed:8d:ed:62:7b:f3:ea:f9:28:ba: 96:bd:1f:10:4e:fc:74:cc:52:ca:74:a6:19:d2:8f:4d:06:7a: 7c:c2:ec:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEwQzAxMTAvBgNVBAUTKDE2MDY0RUFCODFBRTE4NzNBMTAxOUQwOTI4OTZGOTIy N0E1RUVGNDUwHhcNMjQwNTAyMTY1OTQzWhcNMjQwNTA5MTY1OTQzWjAYMRYwFAYD VQQDEw02NjMzYzY3Zi0zYTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5pfeyw00ksEG01fMP0Zo9XeHbFF96m3j+lc1NsSG3PrAOa2EllkdWVghrTAM Zgd579PCfFDRc7x5uyciLCcEyZ6e2BGBWGm225Y1rlXnWjO4TGq/+erRw9CvS3Zb ez+YfSv0yAfKRw38TuGFOZIOLQNa8v0AZRPNkMIwwbeRttlx5lB/ZgsdmlQTjWPs GeOcatrsSSgfnGvhqSYU7qYJcOeugxGrrAMUV1NmDDU4aDTDynxATIuru7K+LOJx 7j7Fwo0xMwM82TiCPwhSF+Hjl/GIyFZHxWG6Ve8OXWInHVisxLPUFyANATDc1L1o IxgqKMWMRi8Ztnq5zns3Od+QvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJPYX/Jb ZgbrFU/2qkza51VIsvxrMB8GA1UdIwQYMBaAFBYGTquBrhhzoQGdCSiW+SJ6Xu9F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTBDMC8wQjMwNDY3MDgz RDgxMUU3Qjc1RjI1NjVDNEY5QUUwMi9GZ1pPcTRHdUdIT2hBWjBKS0piNUlucGU3 MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnWk9xNEd1R0hPaEFaMEpLSmI1SW5wZTcwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTBDMC8wQjMwNDY3MDgzRDgxMUU3Qjc1RjI1NjVDNEY5QUUwMi9GZ1pPcTRHdUdI T2hBWjBKS0piNUlucGU3MFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa+oWtiH8ZfL9yloPqKYszWkRbtOUsvKJ/h4lVXJOtQAuKUBUEwaj3 HhiPIShzkuDrHDdKmX2bbaJBtg6GTzJP9BkmuKd0RFnXXZaDA+NSzQ2Mxh1PlJHI ozu+vhEijoWm/l4WqXHnYewZ3eQcAjWGqD4vEWp4ERuMC1+3mTQQTyLj+BEQOVTQ d61p9pSd8Y/scRF6NHPEhj2rLSwx47TOW7P977sHihudEtlATWN+qZCaPTnxYqm+ 3MD+GHEOdVkvRT18m8fze2uSqykd4ybZpcm8c8AIK0aH9MBMHy50pe2N7WJ78+r5 KLqWvR8QTvx0zFLKdKYZ0o9NBnp8wuxc -----END CERTIFICATE-----Generated at Thu May 2 20:04:25 2024 by rpki-client on console-ams.rpki-client.org