$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft File: FXsL3g48rbKUg5vJgVZVZE2ybpE.mft (raw, json) Hash identifier: HK+B8+ZQcpSvFEyH0PiNXAXtExbElcne3Lj8g6NIOeM= Subject key identifier: B6:68:02:A7:FB:6C:E8:2D:32:05:8E:90:FE:B5:30:62:05:96:B0:E3 Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Certificate serial: 0471 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft Manifest number: 0451 Signing time: Sun 05 May 2024 02:07:34 +0000 Manifest this update: Sun 05 May 2024 02:07:33 +0000 Manifest next update: Sun 12 May 2024 02:07:33 +0000 Files and hashes: 1: FXsL3g48rbKUg5vJgVZVZE2ybpE.crl (hash: aITeDtdAbSoKQECzcN3AFQ6Ej3tpVJF6OL9ZX18Rw14=) 2: EED0B20C82EB11EEBE17CF64C4F9AE02.roa (hash: SwBo+OcsaURt95JqH6PW/tQ/o8ENThL7XYVsUvLLJ9Y=) 3: E586021E822911EEB37BF572C4F9AE02.roa (hash: o9uDTg9XGiNMw+UpS+A5jPsQcusBbSebh6vWuuAfq74=) 4: 0E677936853811EEAC9D230CC4F9AE02.roa (hash: Cy/aqUvLVXbS6LlQLGlYgkVgduuimzJaPt1A+n4CwlU=) 5: 282DAABE82EC11EEB4D96065C4F9AE02.roa (hash: Q2vr7Gro7CPSBWIBXgNWEfCuh8qIitp6+jrEA/bCwE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1137 (0x471) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Validity Not Before: May 5 02:07:33 2024 GMT Not After : May 12 02:07:33 2024 GMT Subject: CN=6636e9e6-4300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1a:97:9a:6f:c8:2d:65:1b:a3:62:e8:2f:cb: df:e0:a8:c0:5f:e0:99:c0:13:1d:ef:60:9b:3b:3b: fc:ed:a6:45:8c:80:bc:80:2c:cf:b6:f4:ed:51:b2: 50:19:f9:cd:98:9c:b0:f6:0e:83:53:ac:5a:6d:51: 03:bc:0e:35:f0:aa:2c:45:63:ad:9d:fb:c7:ed:b2: 1f:34:34:f5:3a:17:3a:4f:fe:1a:31:bc:59:c7:c5: b6:e5:a3:1f:d5:37:e9:9c:4a:b6:48:a0:09:5b:d8: 9a:50:8a:47:aa:65:27:52:f7:e9:98:cf:b6:96:03: fb:c2:51:74:a3:3e:f7:56:c7:6d:58:ab:1f:b3:df: 2a:26:1f:16:b8:1b:f8:58:bc:63:b6:e0:33:d7:09: 96:d9:fd:69:4b:74:75:cc:47:d9:87:8d:36:e1:69: f5:b7:1d:b6:88:3e:b0:41:9b:e8:e4:26:d6:ea:fb: 34:44:b9:63:b6:d7:92:56:5d:f1:6c:9b:73:89:76: 71:4f:60:c5:ee:38:50:0c:bb:a1:dd:17:28:55:31: c8:0f:41:23:46:89:59:88:59:2f:7e:a1:08:97:90: 62:53:9e:44:53:77:74:db:90:ef:ba:b1:bb:45:c6: f7:c8:96:56:c0:d9:8c:f6:b8:c3:24:43:5b:d9:df: 84:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:68:02:A7:FB:6C:E8:2D:32:05:8E:90:FE:B5:30:62:05:96:B0:E3 X509v3 Authority Key Identifier: keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:b8:54:aa:65:1c:a2:54:83:9d:ae:a8:3c:2d:a2:b9:80:ec: ec:da:c8:bd:32:e9:27:52:d0:b1:0a:64:fd:e4:7b:2d:b2:9b: 97:d2:a4:42:ef:83:83:d3:f6:5f:11:85:b4:9d:44:c2:a9:38: 7c:0c:6e:38:51:b3:ff:ea:ab:9f:c9:a5:e6:eb:2a:74:3c:a8: 0a:f6:ba:b3:84:fd:49:51:4e:2b:11:ea:9a:14:db:14:cb:a5: 89:d5:45:36:c0:65:02:ed:98:73:24:9a:fa:29:0b:30:7a:59: 53:83:19:83:84:74:58:8b:4c:7b:79:39:32:26:d4:16:35:61: f4:44:26:65:c8:1e:fb:f6:2b:ba:96:08:5b:fa:c9:b2:21:c2: 79:7d:06:71:6b:78:20:6d:42:e4:12:d3:7c:d6:11:71:50:24: a5:77:e4:a2:dd:07:82:0b:9d:30:6c:dd:9c:1f:c2:b8:fa:89: 30:ca:76:bb:67:82:dc:d9:e5:44:74:2c:01:82:e4:c6:1e:16: 2b:29:ad:83:dc:23:2c:ab:68:58:86:1a:ab:2f:92:94:f1:f3: 5c:19:56:54:9b:c6:56:d1:b5:9a:d4:4d:51:6f:6b:d2:f6:e1: db:29:d6:12:8e:8d:21:b6:96:01:41:cd:b4:12:ef:09:03:ec: 91:9c:80:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCRkExMTAvBgNVBAUTKDE1N0IwQkRFMEUzQ0FEQjI5NDgzOUJDOTgxNTY1NTY0 NERCMjZFOTEwHhcNMjQwNTA1MDIwNzMzWhcNMjQwNTEyMDIwNzMzWjAYMRYwFAYD VQQDEw02NjM2ZTllNi00MzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBqXmm/ILWUbo2LoL8vf4KjAX+CZwBMd72CbOzv87aZFjIC8gCzPtvTtUbJQ GfnNmJyw9g6DU6xabVEDvA418KosRWOtnfvH7bIfNDT1Ohc6T/4aMbxZx8W25aMf 1TfpnEq2SKAJW9iaUIpHqmUnUvfpmM+2lgP7wlF0oz73VsdtWKsfs98qJh8WuBv4 WLxjtuAz1wmW2f1pS3R1zEfZh4024Wn1tx22iD6wQZvo5CbW6vs0RLljtteSVl3x bJtziXZxT2DF7jhQDLuh3RcoVTHID0EjRolZiFkvfqEIl5BiU55EU3d025DvurG7 Rcb3yJZWwNmM9rjDJENb2d+EDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZoAqf7 bOgtMgWOkP61MGIFlrDjMB8GA1UdIwQYMBaAFBV7C94OPK2ylIObyYFWVWRNsm6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEJGQS8wNEEyNEMzNDEx NDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJiS1VnNXZKZ1ZaVlpFMnli cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYc0wzZzQ4cmJLVWc1dkpnVlpWWkUyeWJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEJGQS8wNEEyNEMzNDExNDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJi S1VnNXZKZ1ZaVlpFMnlicEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuuFSqZRyiVIOdrqg8LaK5gOzs2si9MuknUtCxCmT95HstspuX0qRC 74OD0/ZfEYW0nUTCqTh8DG44UbP/6qufyaXm6yp0PKgK9rqzhP1JUU4rEeqaFNsU y6WJ1UU2wGUC7ZhzJJr6KQswellTgxmDhHRYi0x7eTkyJtQWNWH0RCZlyB779iu6 lghb+smyIcJ5fQZxa3ggbULkEtN81hFxUCSld+Si3QeCC50wbN2cH8K4+okwyna7 Z4Lc2eVEdCwBguTGHhYrKa2D3CMsq2hYhhqrL5KU8fNcGVZUm8ZW0bWa1E1Rb2vS 9uHbKdYSjo0htpYBQc20Eu8JA+yRnICg -----END CERTIFICATE-----Generated at Sun May 5 03:09:53 2024 by rpki-client on console-ams.rpki-client.org