$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft File: fHxDqtDIa183jl18MzKgXeRhJ1A.mft (raw, json) Hash identifier: pW52EcXjUASSaq3rFLIOi/2byCoG3o5OLV+31lFllgg= Subject key identifier: 78:50:DA:BE:CB:B9:FE:48:53:A6:71:2D:96:C6:E4:80:3B:F7:32:2B Authority key identifier: 7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50 Certificate issuer: /CN=A912CA50/serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750 Certificate serial: 0722 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft Manifest number: 0707 Signing time: Sat 18 May 2024 22:43:05 +0000 Manifest this update: Sat 18 May 2024 22:43:05 +0000 Manifest next update: Sat 25 May 2024 22:43:05 +0000 Files and hashes: 1: fHxDqtDIa183jl18MzKgXeRhJ1A.crl (hash: o1jRyPgfCcwsGqUypLyPUB4XhGm+Bc6ILQFi/6bAiSw=) 2: E7EBC9003EE411ED905A3415C4F9AE02.roa (hash: xx+PBcR35lYfvVhYY3jCSIatuhW5Ou+Pfl4qfbk9F1w=) 3: E897EA5A3EE411ED905A3415C4F9AE02.roa (hash: 7gnux3JJVSafwAbp/hh7Sk/FtmSXj3Dz7M19UaND69o=) 4: 5035F194413211EDAAFCC96EC4F9AE02.roa (hash: y+f1klILC9YoygccEz1/DmfBbKOgqYXibSy3/dRFFE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1826 (0x722) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CA50/serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750 Validity Not Before: May 18 22:43:05 2024 GMT Not After : May 25 22:43:05 2024 GMT Subject: CN=66492ef9-5c58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:13:d2:19:14:f6:f1:f6:17:b4:f0:41:cb:26: 80:09:78:43:75:5f:6e:ea:23:b0:d4:cc:2c:ca:51: bd:55:0a:51:14:4c:5c:08:a4:93:17:c6:bc:04:7b: d6:d2:1b:b7:64:66:9f:83:12:19:a5:46:dd:89:51: d7:33:e8:f3:0b:40:e3:98:e4:27:09:b7:a4:a2:31: 67:01:ac:31:7e:b5:cf:2a:09:33:3e:26:a6:0c:7f: 06:da:d8:d7:06:27:e5:28:5c:58:ad:3b:3f:60:99: 97:ae:e9:bd:d0:74:dd:45:02:b2:1c:02:9e:a8:d2: 18:b0:40:cf:28:9f:ef:7b:d0:65:05:a1:ff:38:53: 29:93:e8:78:0f:b0:80:29:3e:b9:f3:f3:59:67:60: 4b:50:bb:76:68:2b:80:d0:a4:72:4d:73:e1:69:bf: 0b:8f:c6:16:0f:6b:ab:3c:7b:0e:f5:33:69:4b:db: e5:b1:49:ae:0c:a8:cf:ea:df:3d:f9:ec:f5:e8:32: 2d:f9:26:9d:30:21:cb:7d:fd:77:7b:c0:3c:64:c9: 3a:eb:c3:d8:bd:0c:7a:88:ca:01:96:e8:48:62:a2: e3:96:0f:a5:43:d7:d0:53:31:82:19:0c:8f:ae:65: 5c:8f:31:a6:d6:68:d7:80:22:23:c6:1e:41:51:1e: bb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:50:DA:BE:CB:B9:FE:48:53:A6:71:2D:96:C6:E4:80:3B:F7:32:2B X509v3 Authority Key Identifier: keyid:7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:83:37:27:0c:73:0d:79:8e:24:d2:10:bd:15:38:40:82:51: 44:f9:5a:c6:4c:cb:c9:74:d7:59:fb:6e:22:59:bc:22:ab:bd: cd:90:af:b3:8e:e1:25:b1:db:d2:7b:5e:43:29:0b:ce:fc:ba: d4:60:ec:1e:71:b7:27:77:06:f8:65:f7:89:2b:0d:6d:ef:8a: 8e:9d:4c:3d:5e:de:07:a4:b5:80:94:02:fc:4b:ce:73:6a:dc: e2:21:f9:34:ff:44:72:ce:c9:70:37:ba:59:11:5a:a0:bb:0b: 2c:f8:fb:80:13:7c:42:38:dd:1f:d8:01:26:ae:cf:78:10:11: c8:02:0f:8c:5d:5f:33:5f:3f:45:04:3c:47:91:c7:3b:77:9e: a6:0d:2b:5a:01:47:c4:4d:38:d9:30:d1:ab:05:32:9b:12:82: a9:cc:e9:24:65:93:94:4d:7c:39:8d:3b:45:96:87:a3:62:3d: a0:14:ca:41:c0:e7:29:3b:79:0b:1a:24:c1:14:d7:06:4b:c9: 2b:5a:42:e0:46:0f:4b:0c:c1:88:26:9d:de:54:b9:c4:63:c0: 66:08:b7:f9:ca:51:0b:b7:6e:c1:ef:99:90:08:2d:8b:c2:44: c4:67:19:99:a0:a6:01:33:ca:e8:3a:28:2f:c7:eb:4d:7b:34: e0:aa:d6:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNBNTAxMTAvBgNVBAUTKDdDN0M0M0FBRDBDODZCNUYzNzhFNUQ3QzMzMzJBMDVE RTQ2MTI3NTAwHhcNMjQwNTE4MjI0MzA1WhcNMjQwNTI1MjI0MzA1WjAYMRYwFAYD VQQDEw02NjQ5MmVmOS01YzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhPSGRT28fYXtPBByyaACXhDdV9u6iOw1MwsylG9VQpRFExcCKSTF8a8BHvW 0hu3ZGafgxIZpUbdiVHXM+jzC0DjmOQnCbekojFnAawxfrXPKgkzPiamDH8G2tjX BiflKFxYrTs/YJmXrum90HTdRQKyHAKeqNIYsEDPKJ/ve9BlBaH/OFMpk+h4D7CA KT658/NZZ2BLULt2aCuA0KRyTXPhab8Lj8YWD2urPHsO9TNpS9vlsUmuDKjP6t89 +ez16DIt+SadMCHLff13e8A8ZMk668PYvQx6iMoBluhIYqLjlg+lQ9fQUzGCGQyP rmVcjzGm1mjXgCIjxh5BUR67AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhQ2r7L uf5IU6ZxLZbG5IA79zIrMB8GA1UdIwQYMBaAFHx8Q6rQyGtfN45dfDMyoF3kYSdQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0E1MC8zODFDMTcxNkZC QTUxMUVBQkJBRUIzNjNDNEY5QUUwMi9mSHhEcXRESWExODNqbDE4TXpLZ1hlUmhK MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZIeERxdERJYTE4M2psMThNektnWGVSaEoxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0E1MC8zODFDMTcxNkZCQTUxMUVBQkJBRUIzNjNDNEY5QUUwMi9mSHhEcXRESWEx ODNqbDE4TXpLZ1hlUmhKMUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBgzcnDHMNeY4k0hC9FThAglFE+VrGTMvJdNdZ+24iWbwiq73NkK+z juElsdvSe15DKQvO/LrUYOwecbcndwb4ZfeJKw1t74qOnUw9Xt4HpLWAlAL8S85z atziIfk0/0RyzslwN7pZEVqguwss+PuAE3xCON0f2AEmrs94EBHIAg+MXV8zXz9F BDxHkcc7d56mDStaAUfETTjZMNGrBTKbEoKpzOkkZZOUTXw5jTtFloejYj2gFMpB wOcpO3kLGiTBFNcGS8krWkLgRg9LDMGIJp3eVLnEY8BmCLf5ylELt27B75mQCC2L wkTEZxmZoKYBM8roOigvx+tNezTgqtam -----END CERTIFICATE-----Generated at Sun May 19 00:30:13 2024 by rpki-client on console-ams.rpki-client.org