$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft File: fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft (raw, json) Hash identifier: qLwo8iu9ehz9+ls6x9M5cJbovdQAGgvz6t+zKQvWOoA= Subject key identifier: 77:79:08:47:92:4C:D3:B7:C9:DC:B4:01:A2:59:D1:DC:88:57:9B:42 Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Certificate serial: 0A87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft Manifest number: 0A39 Signing time: Mon 06 May 2024 20:50:18 +0000 Manifest this update: Mon 06 May 2024 20:50:18 +0000 Manifest next update: Mon 13 May 2024 20:50:18 +0000 Files and hashes: 1: fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl (hash: xMGrmOdsqpbpC7AU2Ni9WPkCnq6/Ozxw0ZDEdXjLtxk=) 2: AC36F4D4AA9F11EEBEEB100EC4F9AE02.roa (hash: a31NhKXb2lrWAAka7e5K4Qmwgb9+qAfYXBMo6SjT30E=) 3: E8819018178811EC876F5F50C4F9AE02.roa (hash: TLHDXkS8WtHGfLs2y/89jOmoRxtUMDoVgd5GAJ/O2+k=) 4: 52863B4C9DBA11EB83364624C4F9AE02.roa (hash: TSKe5a6Dwzh5Red511THRgHJsg0bJeFYzcfYywaeVS8=) 5: 958CC8DA1C2611ECB416AA68C4F9AE02.roa (hash: Qn8h9e3xBlNCJgJT5HRLQzveKu81gP0DGsTM6ZrDAn8=) 6: 8008F5CA620C11ECAFF5941AC4F9AE02.roa (hash: v5xTyIM5G7AH2R3SMoZRXU2nKuMp8Wu7kTcZL5MUeF4=) 7: 36036734FD5B11EEAC213C56C4F9AE02.roa (hash: WXKgBz2Hy08Zv2taRhWDGc3vU76I53pHWZxuWxtnLbQ=) 8: 1605F9B6169E11EC9D259855C4F9AE02.roa (hash: sWbjIIBh6BQZOATeKu+4sCTvUOLmA9aqmcEjAgBBzBU=) 9: DFAA6EC60A5F11EEB7C7EE60C4F9AE02.roa (hash: 8B24cuolZRJIs6ptFgm6sE567gsrA85wODnR2z4hOzE=) 10: 206969823B9411EB9F059D7EC4F9AE02.roa (hash: +WOWkZ4IvvEDoqbOmLKdD/j0EEQBFPOUPDqLgvMz59A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2695 (0xa87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Validity Not Before: May 6 20:50:18 2024 GMT Not After : May 13 20:50:18 2024 GMT Subject: CN=6639428a-1500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:56:1f:91:02:0c:a7:05:1f:ed:9a:11:68:fe: 1a:65:9e:00:55:38:65:13:9b:7e:49:7b:5f:55:40: 21:0d:cd:1c:f6:e3:2d:88:a3:b4:b1:27:17:ba:78: 61:38:25:e5:dd:5d:d9:f8:99:ec:8e:a2:19:ec:d6: 63:b6:af:c5:97:2b:f8:0d:f0:82:0e:d2:54:df:40: 9a:68:52:d9:c7:59:ee:8c:f9:93:9b:8e:13:da:36: 8a:55:e2:61:8e:8c:fc:a4:a9:64:b6:a7:24:31:7b: 13:8e:74:03:c2:5e:e0:40:5a:5e:da:f9:2d:22:4c: 5b:58:3f:fc:f9:49:5d:18:5f:5a:de:8c:2c:29:56: 41:99:c9:cc:24:21:fd:27:4b:42:9a:33:e7:db:c5: 92:72:9d:97:a0:e8:ea:6f:0a:58:e6:ba:75:84:6d: 2c:70:52:72:aa:be:dc:76:97:17:13:7e:11:7a:fe: 36:ab:bf:9d:27:01:8c:77:b9:32:ed:cb:ce:9f:80: 43:d1:a8:6e:c4:62:c1:11:f0:f2:7a:43:0c:1e:4d: ea:bb:ac:fa:0e:7d:cf:f5:ee:fe:8a:f3:fd:99:9a: 7a:93:1f:cb:07:1c:ff:05:e4:33:b8:62:86:e7:c4: d0:49:70:1c:df:82:b3:4c:52:33:74:ad:bd:80:54: c4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:79:08:47:92:4C:D3:B7:C9:DC:B4:01:A2:59:D1:DC:88:57:9B:42 X509v3 Authority Key Identifier: keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:31:9a:39:f1:51:89:33:32:de:89:cd:26:c4:16:31:b9:8f: 64:a1:18:a9:57:31:5e:d0:97:73:7e:b2:0b:0a:a9:77:17:99: be:31:6c:10:92:ac:48:9a:7e:f9:65:f7:d3:e3:9c:5d:9d:de: 51:e4:75:a0:9d:0d:a7:c5:58:ef:96:51:cc:34:f3:5f:e7:48: db:8b:a0:50:3a:ce:2c:0c:00:5a:fc:91:0d:42:da:b3:34:23: 77:8d:8f:e0:6b:67:79:9d:46:bc:6a:af:a8:75:93:f8:28:03: f4:10:47:3c:81:63:22:67:d8:a0:fc:ab:61:97:b9:50:1c:57: 60:bc:e3:9b:4d:d9:67:2b:62:9a:b5:17:12:f0:cd:d9:76:05: 7f:e0:e1:51:57:9f:ce:58:67:36:56:8b:37:ed:83:ec:09:45: db:31:be:9c:7d:1f:5a:77:c3:31:22:6d:57:41:be:1b:be:2f: ad:b7:13:7c:fb:a2:7c:b8:82:ad:19:c4:2a:99:0d:dc:0f:b2: 22:d6:b5:9f:08:f9:45:88:0a:4a:30:86:54:59:9f:44:9d:50: de:2d:73:27:f0:52:03:92:5f:79:67:c7:48:95:9f:30:31:4f: 45:f3:23:b9:d0:ad:e0:97:e5:5e:6d:ef:f7:36:0e:cb:a7:3c: c6:5a:f5:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4 ODFBRTQ5MTgwHhcNMjQwNTA2MjA1MDE4WhcNMjQwNTEzMjA1MDE4WjAYMRYwFAYD VQQDEw02NjM5NDI4YS0xNTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAolYfkQIMpwUf7ZoRaP4aZZ4AVThlE5t+SXtfVUAhDc0c9uMtiKO0sScXunhh OCXl3V3Z+JnsjqIZ7NZjtq/Flyv4DfCCDtJU30CaaFLZx1nujPmTm44T2jaKVeJh joz8pKlktqckMXsTjnQDwl7gQFpe2vktIkxbWD/8+UldGF9a3owsKVZBmcnMJCH9 J0tCmjPn28WScp2XoOjqbwpY5rp1hG0scFJyqr7cdpcXE34Rev42q7+dJwGMd7ky 7cvOn4BD0ahuxGLBEfDyekMMHk3qu6z6Dn3P9e7+ivP9mZp6kx/LBxz/BeQzuGKG 58TQSXAc34KzTFIzdK29gFTEPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHd5CEeS TNO3ydy0AaJZ0dyIV5tCMB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0 NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEUzRi9DMjQzMjJCQTU0NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0 UGdQQWVGRmhKMUdJR3VTUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoMZo58VGJMzLeic0mxBYxuY9koRipVzFe0JdzfrILCql3F5m+MWwQ kqxImn75ZffT45xdnd5R5HWgnQ2nxVjvllHMNPNf50jbi6BQOs4sDABa/JENQtqz NCN3jY/ga2d5nUa8aq+odZP4KAP0EEc8gWMiZ9ig/Kthl7lQHFdgvOObTdlnK2Ka tRcS8M3ZdgV/4OFRV5/OWGc2Vos37YPsCUXbMb6cfR9ad8MxIm1XQb4bvi+ttxN8 +6J8uIKtGcQqmQ3cD7Ii1rWfCPlFiApKMIZUWZ9EnVDeLXMn8FIDkl95Z8dIlZ8w MU9F8yO50K3gl+Vebe/3Ng7LpzzGWvX4 -----END CERTIFICATE-----Generated at Mon May 6 23:05:39 2024 by rpki-client on console-fra.rpki-client.org