$ rpki-client -vvf rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.mft File: H3amlEQsq0PX0XzW_fmpfgt_qo4.mft (raw, json) Hash identifier: NOcUw9ZbCGPe0+0AdPS2XdtBMCijb3hzS6idPm5C4ZQ= Subject key identifier: F2:93:06:90:3E:23:30:23:6E:A3:CB:5E:0B:78:9D:9B:B1:93:23:16 Authority key identifier: 1F:76:A6:94:44:2C:AB:43:D7:D1:7C:D6:FD:F9:A9:7E:0B:7F:AA:8E Certificate issuer: /CN=A9158059/serialNumber=1F76A694442CAB43D7D17CD6FDF9A97E0B7FAA8E Certificate serial: 0558 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H3amlEQsq0PX0XzW_fmpfgt_qo4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.mft Manifest number: 0555 Signing time: Sun 05 May 2024 00:58:06 +0000 Manifest this update: Sun 05 May 2024 00:58:06 +0000 Manifest next update: Sun 12 May 2024 00:58:06 +0000 Files and hashes: 1: H3amlEQsq0PX0XzW_fmpfgt_qo4.crl (hash: Pvoyndt1DqHW2gR6U3SdXnZALPf4R494dtvoaPsAxoY=) 2: 702A62CE9CC311EBA5A7A47BC4F9AE02.roa (hash: C2I7TMjmmFago4shJ53/JY6xyf+ZBouOUvCQ8876srU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.crl rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H3amlEQsq0PX0XzW_fmpfgt_qo4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1368 (0x558) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158059/serialNumber=1F76A694442CAB43D7D17CD6FDF9A97E0B7FAA8E Validity Not Before: May 5 00:58:06 2024 GMT Not After : May 12 00:58:06 2024 GMT Subject: CN=6636d99e-b176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f3:80:59:4c:2d:12:01:da:0d:7a:f7:c4:13: 15:9f:38:e4:29:cc:4e:2a:2a:2b:03:21:91:39:eb: c2:b4:fc:b2:04:2a:42:5a:6c:26:bb:02:c0:04:8c: 33:61:af:79:16:90:94:6a:ba:d4:4c:53:a4:cb:0d: 8c:3c:0a:52:ec:85:a2:7a:89:42:1c:31:07:36:8f: 3d:9b:33:8f:18:4c:eb:fc:f5:14:10:d4:e3:f7:32: 9f:72:28:c6:fe:77:8a:e5:8f:1a:6c:38:1c:1a:95: 95:8b:86:6e:6d:bf:d6:64:7a:4b:30:b2:fc:7f:d3: 1b:2a:df:b7:77:2b:a4:48:66:db:e3:70:73:89:27: db:53:66:72:a6:4e:6b:c0:62:b9:ba:98:4c:91:a9: 49:97:f5:47:9d:68:51:33:09:99:1c:09:35:20:3e: 00:7d:6a:8c:0f:99:76:4e:cb:87:78:c9:95:07:5f: ca:ed:16:9a:68:1a:64:32:ec:04:7d:9a:21:f4:4e: 6c:3b:d4:4b:d8:d8:ef:50:85:e2:20:0b:96:db:dc: 2c:44:3d:a5:81:42:1f:b8:a0:06:59:91:eb:13:a7: 23:8e:59:28:1b:ed:6b:53:f2:90:8f:fa:aa:5a:6a: 0b:11:c7:4b:87:bf:12:dc:26:30:f3:fb:ef:d9:aa: 7f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:93:06:90:3E:23:30:23:6E:A3:CB:5E:0B:78:9D:9B:B1:93:23:16 X509v3 Authority Key Identifier: keyid:1F:76:A6:94:44:2C:AB:43:D7:D1:7C:D6:FD:F9:A9:7E:0B:7F:AA:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H3amlEQsq0PX0XzW_fmpfgt_qo4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:81:7c:7d:01:00:4e:dc:28:9c:ad:25:4d:bd:c6:ca:aa:09: b3:be:bc:cb:97:d6:ef:53:ba:76:85:03:c1:01:a2:33:07:6f: bc:81:f4:34:dc:9b:20:88:57:81:9d:85:ea:24:ec:31:0d:84: 48:3c:45:08:dd:a8:22:88:74:e4:6d:58:58:88:03:20:16:57: 86:c7:c6:23:bc:16:0c:ac:47:fc:9a:6a:ab:7f:3e:49:db:bd: ff:1f:f2:ce:14:f9:e0:ae:4c:07:68:c2:d3:c4:4f:98:39:87: d4:19:67:48:dc:13:ea:54:dc:fb:34:f6:98:52:5d:53:cb:10: 11:e1:9d:4d:eb:04:d6:35:02:f5:2d:0c:71:31:76:6d:6d:94: 90:32:91:f9:d0:c3:71:b7:aa:e5:c9:54:ce:bc:33:a4:71:f6: 9f:b7:f7:2b:c9:02:63:e2:2a:07:39:de:37:e4:e1:19:25:cd: a5:95:73:9c:04:0d:51:99:df:85:4c:0b:59:fc:57:87:3a:72: e9:f1:ea:2d:a9:45:70:2e:3c:6e:be:41:9f:56:a4:95:84:17: 44:2e:a0:e7:c2:ae:b3:73:ed:93:68:89:93:50:4f:79:af:72: f3:84:40:42:ba:95:a2:27:b1:0e:a1:25:43:78:b0:1a:c8:14: 46:d3:3f:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwNTkxMTAvBgNVBAUTKDFGNzZBNjk0NDQyQ0FCNDNEN0QxN0NENkZERjlBOTdF MEI3RkFBOEUwHhcNMjQwNTA1MDA1ODA2WhcNMjQwNTEyMDA1ODA2WjAYMRYwFAYD VQQDEw02NjM2ZDk5ZS1iMTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4POAWUwtEgHaDXr3xBMVnzjkKcxOKiorAyGROevCtPyyBCpCWmwmuwLABIwz Ya95FpCUarrUTFOkyw2MPApS7IWieolCHDEHNo89mzOPGEzr/PUUENTj9zKfcijG /neK5Y8abDgcGpWVi4Zubb/WZHpLMLL8f9MbKt+3dyukSGbb43BziSfbU2Zypk5r wGK5uphMkalJl/VHnWhRMwmZHAk1ID4AfWqMD5l2TsuHeMmVB1/K7RaaaBpkMuwE fZoh9E5sO9RL2NjvUIXiIAuW29wsRD2lgUIfuKAGWZHrE6cjjlkoG+1rU/KQj/qq WmoLEcdLh78S3CYw8/vv2ap//QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKTBpA+ IzAjbqPLXgt4nZuxkyMWMB8GA1UdIwQYMBaAFB92ppRELKtD19F81v35qX4Lf6qO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODA1OS9CQkQ4MURBODlD QzExMUVCQkZERTY1NzlDNEY5QUUwMi9IM2FtbEVRc3EwUFgwWHpXX2ZtcGZndF9x bzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gzYW1sRVFzcTBQWDBYeldfZm1wZmd0X3FvNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODA1OS9CQkQ4MURBODlDQzExMUVCQkZERTY1NzlDNEY5QUUwMi9IM2FtbEVRc3Ew UFgwWHpXX2ZtcGZndF9xbzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABgXx9AQBO3CicrSVNvcbKqgmzvrzLl9bvU7p2hQPBAaIzB2+8gfQ0 3JsgiFeBnYXqJOwxDYRIPEUI3agiiHTkbVhYiAMgFleGx8YjvBYMrEf8mmqrfz5J 273/H/LOFPngrkwHaMLTxE+YOYfUGWdI3BPqVNz7NPaYUl1TyxAR4Z1N6wTWNQL1 LQxxMXZtbZSQMpH50MNxt6rlyVTOvDOkcfaft/cryQJj4ioHOd435OEZJc2llXOc BA1Rmd+FTAtZ/FeHOnLp8eotqUVwLjxuvkGfVqSVhBdELqDnwq6zc+2TaImTUE95 r3LzhEBCupWiJ7EOoSVDeLAayBRG0z8Z -----END CERTIFICATE-----Generated at Sun May 5 02:33:35 2024 by rpki-client on console-fra.rpki-client.org