$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft File: -Xh9LKFDLKbpMzLg7e9rB7JF17A.mft (raw, json) Hash identifier: UqoN/yMkA9aKa+pyRD9GQxDtyUoEHokPUZbOcVyD8yk= Subject key identifier: 5F:A3:2E:72:3C:99:B1:06:53:B3:60:FF:01:16:E8:31:53:D7:B9:32 Authority key identifier: F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0 Certificate issuer: /CN=A912DA1F/serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0 Certificate serial: 0748 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft Manifest number: 0741 Signing time: Fri 26 Apr 2024 22:20:18 +0000 Manifest this update: Fri 26 Apr 2024 22:20:17 +0000 Manifest next update: Fri 03 May 2024 22:20:17 +0000 Files and hashes: 1: -Xh9LKFDLKbpMzLg7e9rB7JF17A.crl (hash: yF5B24T7IGxAPVNeb7SeRO1e8Bm7z3COI7c4MKvSmzw=) 2: D6883996DABE11EAB12A5209C4F9AE02.roa (hash: xAsoNlMA4kaCQmzRRhRKb4SY4CmPykwmaXjyJ9sgHgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 22:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1864 (0x748) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1F/serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0 Validity Not Before: Apr 26 22:20:17 2024 GMT Not After : May 3 22:20:17 2024 GMT Subject: CN=662c28a2-eb67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cd:3c:04:44:05:0b:d1:9a:b6:d8:52:e7:71: 6b:27:50:db:75:56:ec:07:bb:46:52:2d:2e:e1:3d: f5:d0:3b:10:f0:08:1e:21:b1:91:8f:be:17:be:55: c6:2c:e6:32:0e:45:41:3a:04:65:62:cc:e1:9d:cc: 24:0a:85:53:b9:01:97:68:72:8c:df:82:df:99:67: d1:1d:e8:77:73:b5:b4:2e:ba:0c:58:74:0b:8d:61: 2e:43:43:e9:4f:e3:49:75:87:de:f3:b3:c8:c7:c9: 64:9f:6d:83:0f:d8:cd:6f:2d:14:e3:38:44:ad:4e: 82:4d:ca:14:a6:4c:3c:bf:61:4d:c6:97:53:ab:30: ec:36:b3:47:1a:af:b4:86:53:c8:da:cb:60:30:52: 76:45:23:81:87:db:29:54:5b:3d:83:bb:16:3b:46: fc:f1:50:c6:c7:e5:7b:b2:8e:d6:8b:37:70:8c:f8: 98:7c:54:b0:56:b1:13:66:16:36:71:58:9f:7c:79: 29:4f:d8:7e:3a:ca:89:f5:3a:8d:50:d1:9e:fa:bd: 28:5f:14:36:89:58:8d:70:03:7f:09:c1:16:45:c5: 29:fc:ef:ab:b5:5f:4d:03:b1:4e:6c:79:df:8f:64: 26:32:ef:8e:c2:df:29:ec:34:99:e1:13:1e:76:0b: 11:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A3:2E:72:3C:99:B1:06:53:B3:60:FF:01:16:E8:31:53:D7:B9:32 X509v3 Authority Key Identifier: keyid:F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:6f:31:be:fc:1b:7c:2f:2f:a4:c8:10:bf:85:94:09:e8:f1: 22:ec:63:e1:fd:28:54:dd:37:71:77:7f:a2:e0:a3:05:e1:c2: e5:0d:9e:3e:be:18:86:5f:d9:23:a8:2b:26:00:dd:86:7f:b3: 0a:3e:78:76:e7:eb:b6:fa:53:e4:04:0b:54:82:fe:a2:de:60: ad:9c:1a:81:47:59:1a:d6:9a:2f:15:69:2a:10:e3:92:30:5f: 44:15:3b:00:3a:7e:a4:0d:d7:79:33:fc:0e:4d:dd:a8:c3:fe: 3c:ce:dc:d8:c1:42:65:b3:c0:5c:54:ee:dd:d4:54:cd:d6:ea: 77:45:1c:b7:de:dd:69:bf:8c:7f:87:e3:21:07:33:56:b9:c0: 26:bf:5d:46:71:49:db:b2:19:88:1d:ca:a5:c3:01:61:0e:29: 19:03:34:73:96:a1:eb:65:48:bf:94:64:a0:b1:d7:1b:ae:c3: cd:35:4d:72:d5:e4:ee:fe:4e:9d:96:cd:dd:6b:de:12:ee:52: 61:d5:75:69:ad:6a:35:25:c8:4d:be:a5:02:6c:57:84:3c:44: 4c:8a:40:de:bc:4f:b0:34:27:e7:63:c8:89:1f:04:b7:cb:11: c1:25:fa:ae:90:47:e4:5c:9c:c0:1b:bb:5a:dd:ef:c6:48:0d: ac:11:38:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUYxMTAvBgNVBAUTKEY5Nzg3RDJDQTE0MzJDQTZFOTMzMzJFMEVERUY2QjA3 QjI0NUQ3QjAwHhcNMjQwNDI2MjIyMDE3WhcNMjQwNTAzMjIyMDE3WjAYMRYwFAYD VQQDEw02NjJjMjhhMi1lYjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuc08BEQFC9GatthS53FrJ1DbdVbsB7tGUi0u4T310DsQ8AgeIbGRj74XvlXG LOYyDkVBOgRlYszhncwkCoVTuQGXaHKM34LfmWfRHeh3c7W0LroMWHQLjWEuQ0Pp T+NJdYfe87PIx8lkn22DD9jNby0U4zhErU6CTcoUpkw8v2FNxpdTqzDsNrNHGq+0 hlPI2stgMFJ2RSOBh9spVFs9g7sWO0b88VDGx+V7so7WizdwjPiYfFSwVrETZhY2 cViffHkpT9h+OsqJ9TqNUNGe+r0oXxQ2iViNcAN/CcEWRcUp/O+rtV9NA7FObHnf j2QmMu+Owt8p7DSZ4RMedgsRewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+jLnI8 mbEGU7Ng/wEW6DFT17kyMB8GA1UdIwQYMBaAFPl4fSyhQyym6TMy4O3vaweyRdew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRi9GQjE0QTg4MkRB QkMxMUVBQTYyMDJDODVDNEY5QUUwMi8tWGg5TEtGRExLYnBNekxnN2U5ckI3SkYx N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YaDlMS0ZETEticE16TGc3ZTlyQjdKRjE3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRi9GQjE0QTg4MkRBQkMxMUVBQTYyMDJDODVDNEY5QUUwMi8tWGg5TEtGRExL YnBNekxnN2U5ckI3SkYxN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZbzG+/Bt8Ly+kyBC/hZQJ6PEi7GPh/ShU3Tdxd3+i4KMF4cLlDZ4+ vhiGX9kjqCsmAN2Gf7MKPnh25+u2+lPkBAtUgv6i3mCtnBqBR1ka1povFWkqEOOS MF9EFTsAOn6kDdd5M/wOTd2ow/48ztzYwUJls8BcVO7d1FTN1up3RRy33t1pv4x/ h+MhBzNWucAmv11GcUnbshmIHcqlwwFhDikZAzRzlqHrZUi/lGSgsdcbrsPNNU1y 1eTu/k6dls3da94S7lJh1XVprWo1JchNvqUCbFeEPERMikDevE+wNCfnY8iJHwS3 yxHBJfqukEfkXJzAG7ta3e/GSA2sETiT -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:37 2024 by rpki-client on console-ams.rpki-client.org