$ rpki-client -vvf rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft File: fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft (raw, json) Hash identifier: Zm5+e+RIC8+vchhOpT80G/PgSSkDP16HrJi+0cJDGPw= Subject key identifier: 82:7D:22:F7:01:DA:C2:BB:78:66:40:C3:DC:8E:30:B8:A5:CE:95:D8 Authority key identifier: 7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B Certificate issuer: /CN=A9152A4E/serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B Certificate serial: 0572 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft Manifest number: 056D Signing time: Fri 03 May 2024 00:50:19 +0000 Manifest this update: Fri 03 May 2024 00:50:19 +0000 Manifest next update: Fri 10 May 2024 00:50:19 +0000 Files and hashes: 1: fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl (hash: 0cmD1Na6yxwezaJCBubIPjrvUeS74h/YMhFmxzmmNX4=) 2: 6E1BCBC495BD11EB89199F37C4F9AE02.roa (hash: XlLT32IxBdqf7V0GZCqsjVmnK/jLmMhLi1fEuHNYzRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1394 (0x572) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152A4E/serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B Validity Not Before: May 3 00:50:19 2024 GMT Not After : May 10 00:50:19 2024 GMT Subject: CN=663434cb-2438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:07:9a:e2:86:9b:82:98:96:66:5b:27:40:40: 85:73:bc:d5:49:c6:81:ab:e1:15:a3:29:91:f4:4f: 52:a3:fd:33:85:72:35:6e:25:7d:73:f2:3f:5c:19: ae:16:26:a4:31:23:2d:3b:16:b7:24:18:3c:bb:e8: 7a:c8:48:97:98:dc:d1:65:3d:e2:0c:26:2b:be:bd: d5:29:d5:22:da:c7:f7:7c:cf:d9:6e:17:ab:bc:80: 5a:1b:cd:74:e6:60:ea:cb:0f:8c:f1:34:cf:e3:50: 0b:6b:18:f2:78:63:bb:12:f6:d2:7b:6d:64:f8:d8: 0c:48:09:2b:2b:8a:72:f4:6c:4a:a2:79:d2:6a:34: 63:16:d9:c5:bb:5e:80:62:d6:a8:39:40:a6:9f:68: 17:ba:c6:b7:1b:61:21:b7:41:df:eb:99:db:94:ca: 5c:f9:b5:c7:3b:c6:4a:5d:a1:04:72:53:7e:e1:e2: cf:4c:70:b4:78:a0:88:be:57:d8:9b:94:7e:76:d1: ec:d2:3e:6a:a6:86:b6:dd:79:b2:8f:82:d4:71:b0: d7:8d:a7:88:9a:96:44:2e:0a:a8:1c:1f:72:50:c7: 1c:46:6b:a2:52:f6:91:87:8e:a9:e7:61:cd:4d:e2: 3b:0e:e1:66:85:4d:49:ea:ea:55:23:fe:61:f3:9a: 24:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:7D:22:F7:01:DA:C2:BB:78:66:40:C3:DC:8E:30:B8:A5:CE:95:D8 X509v3 Authority Key Identifier: keyid:7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:b8:1b:aa:61:a6:e3:c0:41:45:29:b3:1b:7d:7e:35:dc:7c: 02:bf:51:69:64:dd:28:ae:13:d3:18:b0:8b:3b:b4:f5:be:79: 13:dd:d5:43:d1:b9:fd:ed:e8:93:68:bf:bd:61:3a:f7:f3:af: 75:f6:e8:57:16:6c:91:f3:15:5d:df:ab:03:ad:40:08:59:3e: 6e:29:ba:45:c9:a3:96:a0:b6:a2:e2:8a:30:36:60:88:bf:13: 5e:9c:4c:50:47:ba:cb:6e:7a:d3:b3:30:c4:a5:0b:d6:01:35: c0:1c:b4:24:b0:45:3a:ea:ef:3d:a9:d4:f5:b5:a3:39:3b:59: 30:d2:90:7c:70:e0:4e:4a:17:99:2b:b8:d7:0e:6f:c1:59:85: 78:1c:0c:bf:a9:4a:3e:f0:b7:5d:53:19:76:66:94:ae:5d:a7: 82:ef:8d:0f:7b:c1:48:98:3e:be:37:07:3c:95:75:4c:11:f4: 6b:9b:fb:4b:ca:34:7c:e9:bb:ad:fa:91:d9:85:71:2b:ba:d2: 86:1e:df:64:3a:c5:a6:a0:46:24:24:d4:d4:a1:3e:8a:24:fe: fc:80:8c:53:1f:46:85:d3:db:c5:f4:6a:75:a1:fc:37:b0:26: b0:d2:c7:a3:04:f6:02:fe:76:7b:91:59:95:70:45:2f:45:4f: 42:45:ca:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJBNEUxMTAvBgNVBAUTKDdENzNFRjExNUIwMkM1RTAxMDIzODQ3QTkxQjBCMEYw NzhCNUYwMkIwHhcNMjQwNTAzMDA1MDE5WhcNMjQwNTEwMDA1MDE5WjAYMRYwFAYD VQQDEw02NjM0MzRjYi0yNDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Qea4oabgpiWZlsnQECFc7zVScaBq+EVoymR9E9So/0zhXI1biV9c/I/XBmu FiakMSMtOxa3JBg8u+h6yEiXmNzRZT3iDCYrvr3VKdUi2sf3fM/ZbhervIBaG810 5mDqyw+M8TTP41ALaxjyeGO7EvbSe21k+NgMSAkrK4py9GxKonnSajRjFtnFu16A YtaoOUCmn2gXusa3G2Eht0Hf65nblMpc+bXHO8ZKXaEEclN+4eLPTHC0eKCIvlfY m5R+dtHs0j5qpoa23Xmyj4LUcbDXjaeImpZELgqoHB9yUMccRmuiUvaRh46p52HN TeI7DuFmhU1J6upVI/5h85okpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJ9IvcB 2sK7eGZAw9yOMLilzpXYMB8GA1UdIwQYMBaAFH1z7xFbAsXgECOEepGwsPB4tfAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkE0RS9FM0UwODQ2NDk1 QkIxMUVCOTQ5RkU1MzVDNEY5QUUwMi9mWFB2RVZzQ3hlQVFJNFI2a2JDdzhIaTE4 Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZYUHZFVnNDeGVBUUk0UjZrYkN3OEhpMThDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkE0RS9FM0UwODQ2NDk1QkIxMUVCOTQ5RkU1MzVDNEY5QUUwMi9mWFB2RVZzQ3hl QVFJNFI2a2JDdzhIaTE4Q3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnuBuqYabjwEFFKbMbfX413HwCv1FpZN0orhPTGLCLO7T1vnkT3dVD 0bn97eiTaL+9YTr386919uhXFmyR8xVd36sDrUAIWT5uKbpFyaOWoLai4oowNmCI vxNenExQR7rLbnrTszDEpQvWATXAHLQksEU66u89qdT1taM5O1kw0pB8cOBOSheZ K7jXDm/BWYV4HAy/qUo+8LddUxl2ZpSuXaeC740Pe8FImD6+Nwc8lXVMEfRrm/tL yjR86but+pHZhXErutKGHt9kOsWmoEYkJNTUoT6KJP78gIxTH0aF09vF9Gp1ofw3 sCaw0sejBPYC/nZ7kVmVcEUvRU9CRcod -----END CERTIFICATE-----Generated at Fri May 3 01:30:24 2024 by rpki-client on console-fra.rpki-client.org