$ rpki-client -vvf rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft File: fONyLR7LAIObJGf9XDmmrUamImE.mft (raw, json) Hash identifier: wt43kf1jiD61mu0SjH0yXwhHSqvsYab4qNGBAUqiepk= Subject key identifier: 27:8F:EB:98:06:D2:B3:2B:BB:34:6C:95:52:DA:E1:79:00:EC:EE:D6 Authority key identifier: 7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61 Certificate issuer: /CN=A9156E6F/serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261 Certificate serial: 0B7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft Manifest number: 0B75 Signing time: Thu 02 May 2024 19:34:59 +0000 Manifest this update: Thu 02 May 2024 19:34:59 +0000 Manifest next update: Thu 09 May 2024 19:34:59 +0000 Files and hashes: 1: fONyLR7LAIObJGf9XDmmrUamImE.crl (hash: Z9xaGdPYnJuQPi9rZ2QchRAi/+tzfHCGYpwphv9/5vA=) 2: ABD61D2E06D611EA8EBBEA50C4F9AE02.roa (hash: /H4A2Af8EG8CLowec7MEwbNHL59DoJ0Pi5kDeNhhtig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 19:34:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2940 (0xb7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156E6F/serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261 Validity Not Before: May 2 19:34:59 2024 GMT Not After : May 9 19:34:59 2024 GMT Subject: CN=6633eae3-3245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5c:8d:e0:b7:35:18:ea:fb:0a:41:a9:33:a9: bd:85:57:6a:21:e5:4f:40:8b:4b:8d:9b:62:b5:c9: e9:a0:1f:59:e2:da:ac:a0:a9:d5:29:ab:bc:bf:10: 57:dd:df:29:10:d7:2d:c9:b3:6e:63:fc:3f:40:2c: 97:2e:b7:c9:26:36:b9:36:68:05:60:f1:d5:7c:95: 54:65:21:71:c4:a8:bb:cd:59:9d:d3:51:33:9c:cc: 0e:22:0d:63:28:44:e2:96:69:7a:20:eb:33:2c:38: 12:78:29:43:d5:58:83:e0:e9:60:d8:2c:12:e4:9a: 96:c6:ac:e8:6c:19:76:a3:9d:87:34:ab:d9:52:31: b7:a8:3c:02:8d:1f:a5:4f:b7:23:f6:a7:dd:70:ad: 4a:69:f6:32:14:c1:cd:ab:8b:8c:52:3d:15:3e:66: 6b:b5:c4:bd:59:84:e1:b3:25:57:ff:2b:03:71:48: 00:30:51:79:38:42:8b:74:ca:81:1b:82:4c:03:75: 48:e6:82:6b:e1:dc:f0:60:cc:b5:e3:29:da:b4:d9: 4f:1d:d5:0c:a4:a7:ca:fd:b9:f5:5c:40:a0:77:ed: 40:5b:ea:0b:78:7e:20:4b:f8:91:cc:15:ec:49:99: 5f:5a:f3:57:c8:25:be:08:81:cb:12:23:90:ed:49: 2d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:8F:EB:98:06:D2:B3:2B:BB:34:6C:95:52:DA:E1:79:00:EC:EE:D6 X509v3 Authority Key Identifier: keyid:7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:fc:56:2d:2f:3b:e0:54:d3:c1:62:c6:f4:5e:1f:c1:3d:88: 8f:b1:9d:87:09:26:2e:18:ab:86:5e:70:da:5c:6a:8a:7e:d1: 77:8e:6b:07:1b:e5:02:a9:60:ef:ae:1d:aa:0d:53:74:06:d6: c3:34:86:c9:52:98:83:00:eb:09:07:df:c1:93:5c:4a:91:87: 18:3b:ec:b9:6f:e9:03:88:7c:1d:9d:11:b1:d9:00:45:17:83: 32:28:f7:5c:71:f3:78:d3:c0:92:b9:bf:49:79:05:4c:df:66: a0:8c:12:54:fc:9a:b6:32:ac:25:e2:b4:54:f0:98:81:a4:d3: 40:6b:8b:ec:7d:86:11:86:d7:cd:91:ff:ea:fd:11:f4:44:93: 55:26:c4:7a:ef:2c:f6:91:0d:7e:06:dd:99:45:2b:66:62:cf: 2a:65:82:87:6b:8a:25:1f:76:83:97:56:04:24:75:17:df:cf: bc:73:99:1e:fa:77:92:63:e2:94:56:bc:fb:dd:5e:b3:a4:da: ee:ba:eb:a1:a1:58:5e:25:2d:a1:e5:e0:fb:e0:62:e7:bb:30: 0c:c2:06:9a:10:ce:b3:d0:84:47:5a:84:33:f6:24:e3:a2:70: 47:c7:b3:50:4c:36:3b:9e:ea:cb:01:84:23:a7:10:3b:ce:9a: b6:f5:26:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZFNkYxMTAvBgNVBAUTKDdDRTM3MjJEMUVDQjAwODM5QjI0NjdGRDVDMzlBNkFE NDZBNjIyNjEwHhcNMjQwNTAyMTkzNDU5WhcNMjQwNTA5MTkzNDU5WjAYMRYwFAYD VQQDEw02NjMzZWFlMy0zMjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq1yN4Lc1GOr7CkGpM6m9hVdqIeVPQItLjZtitcnpoB9Z4tqsoKnVKau8vxBX 3d8pENctybNuY/w/QCyXLrfJJja5NmgFYPHVfJVUZSFxxKi7zVmd01EznMwOIg1j KETilml6IOszLDgSeClD1ViD4Olg2CwS5JqWxqzobBl2o52HNKvZUjG3qDwCjR+l T7cj9qfdcK1KafYyFMHNq4uMUj0VPmZrtcS9WYThsyVX/ysDcUgAMFF5OEKLdMqB G4JMA3VI5oJr4dzwYMy14ynatNlPHdUMpKfK/bn1XECgd+1AW+oLeH4gS/iRzBXs SZlfWvNXyCW+CIHLEiOQ7UktrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCeP65gG 0rMruzRslVLa4XkA7O7WMB8GA1UdIwQYMBaAFHzjci0eywCDmyRn/Vw5pq1GpiJh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkU2Ri9CMUI1QjNENjA2 RDUxMUVBQThCQTNFNEZDNEY5QUUwMi9mT055TFI3TEFJT2JKR2Y5WERtbXJVYW1J bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZPTnlMUjdMQUlPYkpHZjlYRG1tclVhbUltRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkU2Ri9CMUI1QjNENjA2RDUxMUVBQThCQTNFNEZDNEY5QUUwMi9mT055TFI3TEFJ T2JKR2Y5WERtbXJVYW1JbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN/FYtLzvgVNPBYsb0Xh/BPYiPsZ2HCSYuGKuGXnDaXGqKftF3jmsH G+UCqWDvrh2qDVN0BtbDNIbJUpiDAOsJB9/Bk1xKkYcYO+y5b+kDiHwdnRGx2QBF F4MyKPdccfN408CSub9JeQVM32agjBJU/Jq2Mqwl4rRU8JiBpNNAa4vsfYYRhtfN kf/q/RH0RJNVJsR67yz2kQ1+Bt2ZRStmYs8qZYKHa4olH3aDl1YEJHUX38+8c5ke +neSY+KUVrz73V6zpNruuuuhoVheJS2h5eD74GLnuzAMwgaaEM6z0IRHWoQz9iTj onBHx7NQTDY7nurLAYQjpxA7zpq29Sbk -----END CERTIFICATE-----Generated at Thu May 2 22:28:50 2024 by rpki-client on console-ams.rpki-client.org