$ rpki-client -vvf rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft File: _fz0IvXEZi3h5GQ6JxwEax4hxK0.mft (raw, json) Hash identifier: Tyjv0uTgZub9GnQlX8cDGSBvL75OmttKDavY2XuhvkM= Subject key identifier: AC:58:08:55:AB:10:68:2C:19:1F:A9:17:5D:CA:E3:3B:C9:0D:7B:6C Authority key identifier: FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD Certificate issuer: /CN=A9125A95/serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD Certificate serial: 036B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft Manifest number: 0368 Signing time: Sun 05 May 2024 02:59:01 +0000 Manifest this update: Sun 05 May 2024 02:59:01 +0000 Manifest next update: Sun 12 May 2024 02:59:01 +0000 Files and hashes: 1: _fz0IvXEZi3h5GQ6JxwEax4hxK0.crl (hash: ne5Q/wFSTgxAvFqzt0A6eoU9rR8dEtpYFlueJYFNvas=) 2: AF506F14630811EC97879243C4F9AE02.roa (hash: ADZe52n7KpNwXGtA9lVaGhND4dnFjDyI/3kJIZzzGgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 875 (0x36b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125A95/serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD Validity Not Before: May 5 02:59:01 2024 GMT Not After : May 12 02:59:01 2024 GMT Subject: CN=6636f5f5-7623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9e:52:8c:e3:4d:04:de:83:49:82:fd:88:b4: d5:3c:b4:7f:d5:bb:d2:81:0e:77:af:81:67:98:f1: 0a:c0:ae:99:a1:de:10:17:8b:82:5d:25:d5:b3:b2: de:1a:93:ba:36:31:e1:85:09:ef:be:9a:9b:3b:ad: 07:70:66:1b:e1:5b:67:de:a0:11:bf:f6:74:d9:3f: ba:3b:8b:82:fa:38:b6:45:14:8d:37:3f:9f:df:4c: f5:3b:35:e6:fb:6a:7e:ed:22:85:42:f8:83:82:16: e9:72:72:92:a7:ce:6b:e4:a9:80:58:db:15:92:47: b9:a7:f7:15:db:57:2c:da:ac:63:1c:09:1b:3e:37: 4d:8c:64:e3:30:b9:d5:3b:36:92:74:cb:f7:a6:38: 1f:d4:f4:b6:da:b8:e5:75:fc:15:e3:52:d8:f8:b0: 0d:da:35:8f:bf:07:af:14:f9:6d:61:42:8f:e2:df: 61:70:9d:88:f8:f6:77:28:fd:f3:7e:62:72:33:44: b6:f9:8d:2c:ea:9f:08:4f:4e:32:79:26:f7:45:17: 16:61:bc:bd:70:1f:93:ba:21:01:8e:e5:72:99:e7: a7:eb:8d:0a:59:98:bc:30:a0:49:c7:d0:36:3a:a0: b9:1d:71:04:14:21:14:30:d2:d1:41:f4:53:45:4f: 11:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:58:08:55:AB:10:68:2C:19:1F:A9:17:5D:CA:E3:3B:C9:0D:7B:6C X509v3 Authority Key Identifier: keyid:FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:02:4b:23:24:84:40:40:27:0d:50:02:8e:de:c6:2a:98:74: 63:f4:49:6d:53:25:3a:25:32:d1:b4:07:22:df:98:b9:86:fa: 3b:6e:2d:0d:d6:97:e6:9e:18:1b:b0:e5:13:80:09:f4:1f:d6: 52:ca:f9:39:bc:ca:98:7e:ce:0b:a0:03:52:e7:00:6e:ea:63: 3e:d6:bb:e7:e2:d7:b7:b8:0f:9c:54:c0:69:98:ea:3c:6d:9f: 46:a1:b4:0d:23:15:61:ac:e7:85:88:07:60:6e:df:78:47:f2: 36:1e:06:c0:b0:2e:46:db:0a:fc:98:85:57:43:6b:4a:c6:37: e9:56:57:b5:54:fd:93:e4:54:f5:d4:77:02:0d:4d:cf:55:5d: 0d:ef:52:39:fc:55:21:07:55:e9:da:34:94:3c:db:56:2b:ee: d2:b5:7a:e0:40:c8:0d:9b:4a:6d:5f:5d:3f:3b:ac:10:c8:2b: d6:96:dc:9a:a0:93:a2:17:d4:a4:fb:2b:dd:0d:34:54:85:cf: a6:28:b4:82:5f:43:69:54:ba:a9:54:3e:08:87:fa:3d:be:9e: b8:5e:69:30:80:70:00:10:6b:33:33:10:e8:f8:b6:9a:2e:73: 21:9c:1a:0d:c8:c7:74:87:43:88:11:8b:4d:ce:a6:b3:8d:0b: 29:4b:c2:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVBOTUxMTAvBgNVBAUTKEZERkNGNDIyRjVDNDY2MkRFMUU0NjQzQTI3MUMwNDZC MUUyMUM0QUQwHhcNMjQwNTA1MDI1OTAxWhcNMjQwNTEyMDI1OTAxWjAYMRYwFAYD VQQDEw02NjM2ZjVmNS03NjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZ5SjONNBN6DSYL9iLTVPLR/1bvSgQ53r4FnmPEKwK6Zod4QF4uCXSXVs7Le GpO6NjHhhQnvvpqbO60HcGYb4Vtn3qARv/Z02T+6O4uC+ji2RRSNNz+f30z1OzXm +2p+7SKFQviDghbpcnKSp85r5KmAWNsVkke5p/cV21cs2qxjHAkbPjdNjGTjMLnV OzaSdMv3pjgf1PS22rjldfwV41LY+LAN2jWPvwevFPltYUKP4t9hcJ2I+PZ3KP3z fmJyM0S2+Y0s6p8IT04yeSb3RRcWYby9cB+TuiEBjuVymeen640KWZi8MKBJx9A2 OqC5HXEEFCEUMNLRQfRTRU8RnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxYCFWr EGgsGR+pF13K4zvJDXtsMB8GA1UdIwQYMBaAFP389CL1xGYt4eRkOiccBGseIcSt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUE5NS9BQTYwQzhFQzYx NzIxMUVDQTMxNzIwODZDNEY5QUUwMi9fZnowSXZYRVppM2g1R1E2Snh3RWF4NGh4 SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19mejBJdlhFWmkzaDVHUTZKeHdFYXg0aHhLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUE5NS9BQTYwQzhFQzYxNzIxMUVDQTMxNzIwODZDNEY5QUUwMi9fZnowSXZYRVpp M2g1R1E2Snh3RWF4NGh4SzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhAksjJIRAQCcNUAKO3sYqmHRj9EltUyU6JTLRtAci35i5hvo7bi0N 1pfmnhgbsOUTgAn0H9ZSyvk5vMqYfs4LoANS5wBu6mM+1rvn4te3uA+cVMBpmOo8 bZ9GobQNIxVhrOeFiAdgbt94R/I2HgbAsC5G2wr8mIVXQ2tKxjfpVle1VP2T5FT1 1HcCDU3PVV0N71I5/FUhB1Xp2jSUPNtWK+7StXrgQMgNm0ptX10/O6wQyCvWltya oJOiF9Sk+yvdDTRUhc+mKLSCX0NpVLqpVD4Ih/o9vp64XmkwgHAAEGszMxDo+Laa LnMhnBoNyMd0h0OIEYtNzqazjQspS8IA -----END CERTIFICATE-----Generated at Sun May 5 03:47:41 2024 by rpki-client on console-fra.rpki-client.org