$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft File: FH6XVkOdnbcVYTSsePkcIzuTkqc.mft (raw, json) Hash identifier: DXOqlEYe2cphFCU4x20sYqQO48Qmouv1FbKFItL03/w= Subject key identifier: DD:61:68:BF:D9:F7:A3:CD:88:DA:53:F2:7C:BE:EA:BD:EA:0F:CC:CD Authority key identifier: 14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7 Certificate issuer: /CN=A912CB2A/serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7 Certificate serial: 05A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft Manifest number: 0593 Signing time: Tue 07 May 2024 00:39:37 +0000 Manifest this update: Tue 07 May 2024 00:39:37 +0000 Manifest next update: Tue 14 May 2024 00:39:37 +0000 Files and hashes: 1: FH6XVkOdnbcVYTSsePkcIzuTkqc.crl (hash: bwcPUw/cu91DZ39JDS0EGVyQmQlwRXmPbKb3Ce3R7sw=) 2: D4FD4D5237DE11EEA2885B71C4F9AE02.roa (hash: LrWBV4QYdGPDtdI6VNtzsrHnDIjjs6dEu3xrmBEvUZE=) 3: 8A0E66D647FC11EE838F6160C4F9AE02.roa (hash: ySXxkDc51kEpYhdFRVWLwuVywdIahS4srP0fSYYLjiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 00:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1449 (0x5a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CB2A/serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7 Validity Not Before: May 7 00:39:37 2024 GMT Not After : May 14 00:39:37 2024 GMT Subject: CN=66397849-0e4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6a:d1:53:3a:82:88:e2:82:fb:4d:8b:89:ea: 37:60:4e:dd:19:9b:60:f1:ed:aa:8d:43:7a:05:1c: 4d:0e:53:21:b2:d5:2d:f3:81:24:e5:ee:35:39:7b: 48:5d:9f:b7:a4:67:5c:d1:33:bd:fc:91:c8:33:ab: a2:53:b6:6d:0f:88:7f:d8:b5:ef:b2:01:05:82:90: 1f:78:95:ac:3b:a1:25:11:f2:1f:15:ac:c1:27:5d: d5:96:43:84:d1:ba:03:fd:0f:90:67:ca:46:75:ff: d3:e2:e6:2a:5e:86:f6:6c:a5:3b:de:6a:01:40:4e: 4a:f3:06:7a:a5:f7:ab:c7:c3:e5:82:68:2c:dc:1d: d9:c1:a6:ee:b8:43:1d:c9:5e:bd:b0:3c:e2:5c:f6: e5:67:af:95:4f:85:5b:b7:5f:22:74:4f:42:50:c0: 0a:43:25:44:c5:90:c7:5d:33:d1:5e:ad:b3:70:d0: 6a:08:f9:e0:71:ef:97:f0:de:b3:04:d6:38:dd:b9: 93:7b:9c:68:f4:3b:80:30:cf:54:14:02:d1:ff:7d: 2e:02:ca:18:d7:8f:d4:b9:76:8e:23:b8:03:ee:17: 2f:33:c7:f5:a4:8a:e7:b0:a1:0e:1b:3a:b9:7c:04: 5b:70:c2:93:41:50:b9:15:88:86:dc:9e:3b:4e:79: a4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:61:68:BF:D9:F7:A3:CD:88:DA:53:F2:7C:BE:EA:BD:EA:0F:CC:CD X509v3 Authority Key Identifier: keyid:14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:a7:82:a7:90:6f:5f:48:fa:7b:7b:93:ef:cd:ba:2f:00:3a: 6e:62:18:1a:6e:0e:f1:e9:9c:60:62:f0:2f:fc:eb:af:2b:f5: 1b:1f:14:a0:47:ba:d0:c0:65:b3:77:ba:b2:93:da:28:1f:87: ec:a0:52:55:9b:42:68:34:b0:5d:1a:96:3a:0a:98:b9:02:4f: 5a:81:c0:42:7f:53:b8:62:e3:83:5a:cb:df:f9:88:e4:c0:b7: 89:8a:d0:11:41:34:cc:ff:19:f4:a8:e4:73:c4:28:84:ad:49: bd:ff:a9:09:db:8d:f9:ac:4d:3b:03:01:0c:9d:e8:67:8d:a2: 1f:b8:b3:6f:9c:1d:4d:e3:2c:f8:81:5e:8d:99:f8:86:40:75: 69:07:5a:17:f9:e0:6c:8b:15:93:c6:b4:85:0c:33:40:5c:76: 97:70:7b:c1:82:5a:80:c4:ec:cd:e3:70:b5:b9:bd:4b:1a:39: 7c:52:4e:eb:1a:84:43:d2:cf:0f:48:01:ef:2b:72:45:42:ef: 31:9f:1d:05:0c:0f:97:c3:04:2e:0d:4d:07:ce:d9:75:bd:fc: d9:db:d9:75:56:3f:dc:f8:83:ec:21:18:99:0e:03:18:67:2a: 53:20:4e:73:bf:0e:20:ee:bb:e4:55:cd:70:1a:2d:99:49:b4: 50:c3:2f:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNCMkExMTAvBgNVBAUTKDE0N0U5NzU2NDM5RDlEQjcxNTYxMzRBQzc4RjkxQzIz M0I5MzkyQTcwHhcNMjQwNTA3MDAzOTM3WhcNMjQwNTE0MDAzOTM3WjAYMRYwFAYD VQQDEw02NjM5Nzg0OS0wZTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmrRUzqCiOKC+02Lieo3YE7dGZtg8e2qjUN6BRxNDlMhstUt84Ek5e41OXtI XZ+3pGdc0TO9/JHIM6uiU7ZtD4h/2LXvsgEFgpAfeJWsO6ElEfIfFazBJ13VlkOE 0boD/Q+QZ8pGdf/T4uYqXob2bKU73moBQE5K8wZ6pferx8Plgmgs3B3ZwabuuEMd yV69sDziXPblZ6+VT4Vbt18idE9CUMAKQyVExZDHXTPRXq2zcNBqCPngce+X8N6z BNY43bmTe5xo9DuAMM9UFALR/30uAsoY14/UuXaOI7gD7hcvM8f1pIrnsKEOGzq5 fARbcMKTQVC5FYiG3J47TnmkYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN1haL/Z 96PNiNpT8ny+6r3qD8zNMB8GA1UdIwQYMBaAFBR+l1ZDnZ23FWE0rHj5HCM7k5Kn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0IyQS9FMDFDN0E4NDkw RTAxMUVCQTEwNTg3MUZDNEY5QUUwMi9GSDZYVmtPZG5iY1ZZVFNzZVBrY0l6dVRr cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZINlhWa09kbmJjVllUU3NlUGtjSXp1VGtxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0IyQS9FMDFDN0E4NDkwRTAxMUVCQTEwNTg3MUZDNEY5QUUwMi9GSDZYVmtPZG5i Y1ZZVFNzZVBrY0l6dVRrcWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCup4KnkG9fSPp7e5PvzbovADpuYhgabg7x6ZxgYvAv/OuvK/UbHxSg R7rQwGWzd7qyk9ooH4fsoFJVm0JoNLBdGpY6Cpi5Ak9agcBCf1O4YuODWsvf+Yjk wLeJitARQTTM/xn0qORzxCiErUm9/6kJ2435rE07AwEMnehnjaIfuLNvnB1N4yz4 gV6NmfiGQHVpB1oX+eBsixWTxrSFDDNAXHaXcHvBglqAxOzN43C1ub1LGjl8Uk7r GoRD0s8PSAHvK3JFQu8xnx0FDA+XwwQuDU0Hztl1vfzZ29l1Vj/c+IPsIRiZDgMY ZypTIE5zvw4g7rvkVc1wGi2ZSbRQwy+q -----END CERTIFICATE-----Generated at Tue May 7 02:00:59 2024 by rpki-client on console-ams.rpki-client.org