$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft File: fHyggZUNrvx8VLjERpi0jo18abg.mft (raw, json) Hash identifier: NMh+T9HxTemWkMKc6i4bw2LLcyqFDZsmuC7rItctlVk= Subject key identifier: E2:10:3F:F7:B1:8D:22:CA:BF:0E:E8:AE:E5:16:C7:D6:21:A4:CD:0E Authority key identifier: 7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8 Certificate issuer: /CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8 Certificate serial: 0FCC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft Manifest number: 0FA6 Signing time: Thu 02 May 2024 18:13:07 +0000 Manifest this update: Thu 02 May 2024 18:13:06 +0000 Manifest next update: Thu 09 May 2024 18:13:06 +0000 Files and hashes: 1: fHyggZUNrvx8VLjERpi0jo18abg.crl (hash: VYL4L3inmAVhvk1HOrj/CCWjCY598VUA0ZQaLcy6x+U=) 2: 5FADE68E288811EE97A1EC5CC4F9AE02.roa (hash: ZM9lhKcpu/Yw8iwrVv778rvTOTFa6v4+IUkQwi1E1MY=) 3: 658A332E5C0311E999AF9478C4F9AE02.roa (hash: suUdH6Ugfv0O0zo3EWdu2SzDw7vZm7qfcDa3w/SPffc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4044 (0xfcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8 Validity Not Before: May 2 18:13:06 2024 GMT Not After : May 9 18:13:06 2024 GMT Subject: CN=6633d7b3-e4d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:16:7d:cd:54:2e:bc:2f:71:56:42:94:ea:7f: 0f:1f:b2:da:e0:23:94:23:dd:6e:72:ea:08:f6:28: a9:20:50:bb:5a:0e:b0:0d:5f:5a:3c:bf:6b:96:8b: d5:30:5f:8f:c1:51:b4:a8:12:4b:1b:d1:fc:bd:fb: e6:4b:13:91:70:53:d9:3f:67:74:83:b4:73:97:7e: 00:f1:55:cd:d5:2f:b4:8f:26:4e:16:ac:2d:40:cf: e8:0c:ef:b1:7e:8b:a0:0d:51:44:6e:c0:c7:98:af: 52:bf:f1:0e:6f:a7:64:f2:90:15:0a:f5:6d:0a:23: 89:a0:f3:d1:88:33:5a:11:e2:f7:4d:db:aa:14:2d: 2d:67:84:1e:8b:e3:88:b9:48:15:3e:18:04:91:e0: 52:89:e5:fe:e9:30:0a:07:53:74:a4:5d:74:4d:ae: 0c:e2:0f:f3:bb:78:dc:0f:57:dc:91:0d:29:8b:e5: 7a:da:b2:aa:a3:b0:5f:be:95:e6:6e:ad:be:c8:0b: 35:9e:5f:13:15:39:70:88:ce:28:85:d5:dd:83:ea: b4:5c:e3:5f:7f:90:d5:a0:ed:b7:0e:dc:38:54:8f: 78:62:f0:33:74:be:89:9b:ac:8f:03:22:17:d8:3a: 25:65:f7:0e:d2:29:bc:d4:c6:97:62:8c:80:2f:34: d3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:10:3F:F7:B1:8D:22:CA:BF:0E:E8:AE:E5:16:C7:D6:21:A4:CD:0E X509v3 Authority Key Identifier: keyid:7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:33:e6:50:dd:fc:40:88:0f:52:71:92:d5:05:cb:94:a7:9d: d9:26:42:60:d1:3a:68:56:96:dd:9e:65:6b:31:d0:6c:2b:aa: 12:3f:37:86:ce:08:94:37:3c:74:31:63:73:c9:c7:5d:52:ae: 7a:a5:5e:65:c9:7e:33:3f:7e:08:ec:9f:f7:36:3e:e3:a2:40: ab:9f:3c:40:4e:81:d5:93:87:99:4b:a7:59:9a:90:2f:36:a4: b1:21:b9:f9:79:35:18:7f:bb:f7:6d:59:06:bb:8f:0d:ad:ba: 15:ea:d1:89:0b:d7:6a:00:13:27:fa:e0:29:af:63:be:ad:a3: 88:09:b3:64:76:a9:df:75:1d:7f:da:80:8f:33:74:2e:5f:f4: 5a:ba:a8:58:45:9d:42:76:2e:df:9e:81:95:b2:59:07:93:9a: 0b:4a:17:79:02:28:a2:df:e5:a8:ef:1d:20:d4:a8:0e:3e:a7: b0:a3:53:5f:e9:a6:98:a8:27:76:a6:7a:30:a3:68:40:59:f4: 89:59:aa:30:5e:cc:b4:b0:f6:88:f0:fc:9a:6b:19:e4:fd:ab: a8:15:95:cd:35:94:d2:03:fc:0c:3f:2c:40:5d:a0:78:2e:92: 53:01:e5:15:95:7b:6b:5f:3e:64:5c:16:d0:05:f9:ff:55:77: f8:d5:f2:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZERDYxMTAvBgNVBAUTKDdDN0NBMDgxOTUwREFFRkM3QzU0QjhDNDQ2OThCNDhF OEQ3QzY5QjgwHhcNMjQwNTAyMTgxMzA2WhcNMjQwNTA5MTgxMzA2WjAYMRYwFAYD VQQDEw02NjMzZDdiMy1lNGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6BZ9zVQuvC9xVkKU6n8PH7La4COUI91ucuoI9iipIFC7Wg6wDV9aPL9rlovV MF+PwVG0qBJLG9H8vfvmSxORcFPZP2d0g7Rzl34A8VXN1S+0jyZOFqwtQM/oDO+x fougDVFEbsDHmK9Sv/EOb6dk8pAVCvVtCiOJoPPRiDNaEeL3TduqFC0tZ4Qei+OI uUgVPhgEkeBSieX+6TAKB1N0pF10Ta4M4g/zu3jcD1fckQ0pi+V62rKqo7BfvpXm bq2+yAs1nl8TFTlwiM4ohdXdg+q0XONff5DVoO23Dtw4VI94YvAzdL6Jm6yPAyIX 2DolZfcO0im81MaXYoyALzTTEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIQP/ex jSLKvw7oruUWx9YhpM0OMB8GA1UdIwQYMBaAFHx8oIGVDa78fFS4xEaYtI6NfGm4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkRENi9EMzYyQTFDQTNC MzcxMUU5QTAzOEFCMkFDNEY5QUUwMi9mSHlnZ1pVTnJ2eDhWTGpFUnBpMGpvMThh YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZIeWdnWlVOcnZ4OFZMakVScGkwam8xOGFiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkRENi9EMzYyQTFDQTNCMzcxMUU5QTAzOEFCMkFDNEY5QUUwMi9mSHlnZ1pVTnJ2 eDhWTGpFUnBpMGpvMThhYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7M+ZQ3fxAiA9ScZLVBcuUp53ZJkJg0TpoVpbdnmVrMdBsK6oSPzeG zgiUNzx0MWNzycddUq56pV5lyX4zP34I7J/3Nj7jokCrnzxAToHVk4eZS6dZmpAv NqSxIbn5eTUYf7v3bVkGu48NrboV6tGJC9dqABMn+uApr2O+raOICbNkdqnfdR1/ 2oCPM3QuX/RauqhYRZ1Cdi7fnoGVslkHk5oLShd5Aiii3+Wo7x0g1KgOPqewo1Nf 6aaYqCd2pnowo2hAWfSJWaowXsy0sPaI8Pyaaxnk/auoFZXNNZTSA/wMPyxAXaB4 LpJTAeUVlXtrXz5kXBbQBfn/VXf41fIE -----END CERTIFICATE-----Generated at Thu May 2 20:50:22 2024 by rpki-client on console-fra.rpki-client.org