$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft File: FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft (raw, json) Hash identifier: qs5+bTYNVLe7RYCrBNm0h5D3bIcRkDAyDLwmPNLYIDk= Subject key identifier: EC:E3:8B:D8:FF:3D:7F:01:A5:F6:FB:0F:FE:B6:E2:AD:E7:2A:8F:E9 Authority key identifier: 16:13:D1:15:ED:83:A0:6E:97:A7:3D:AE:55:16:BA:1B:68:4E:EC:09 Certificate issuer: /CN=A9158F08/serialNumber=1613D115ED83A06E97A73DAE5516BA1B684EEC09 Certificate serial: 0B73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft Manifest number: 13C9 Signing time: Mon 06 May 2024 19:35:29 +0000 Manifest this update: Mon 06 May 2024 19:35:29 +0000 Manifest next update: Mon 13 May 2024 19:35:29 +0000 Files and hashes: 1: FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl (hash: loK8JY63k4uSwyvWiR+fKecn4xk73Cde6Apzq3jUcTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 19:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2931 (0xb73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158F08/serialNumber=1613D115ED83A06E97A73DAE5516BA1B684EEC09 Validity Not Before: May 6 19:35:29 2024 GMT Not After : May 13 19:35:29 2024 GMT Subject: CN=66393101-be8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:98:51:48:f9:93:52:af:f3:e3:70:0c:6b:45: 67:d5:a4:67:81:7e:24:c9:22:0f:78:9a:cd:9f:90: 23:5d:f6:c9:bc:1d:b8:61:23:5c:9d:5a:b8:85:60: 4c:33:8d:ed:1b:95:cd:30:e8:54:06:1d:8b:b1:b6: 51:95:ed:29:67:48:82:e1:46:82:b8:27:55:93:c0: a8:f0:cc:90:79:c5:b3:17:c7:90:3d:bb:5c:06:18: 47:33:a5:87:b9:12:b2:bf:84:8d:7f:c0:d9:ee:e9: 8a:d3:38:21:0c:5d:30:3e:2f:02:79:f4:89:d0:3b: 00:89:bb:f4:63:25:d2:ca:e2:71:e6:8a:6a:1e:fa: fd:65:42:78:c6:22:da:91:53:ea:21:28:fd:38:7c: 2f:a2:02:b1:94:c7:1b:d5:2a:a5:20:cb:f9:42:85: a6:ce:25:ea:38:57:01:ce:f0:8e:59:ac:71:32:fe: 07:4e:17:0a:2c:d8:03:c6:d6:2c:fa:b0:e2:4b:f3: c8:b3:f9:d5:ed:8b:d6:10:d8:68:af:22:90:b1:1b: ed:cf:17:5d:39:3b:bb:b8:93:40:96:b3:82:a6:2e: 6f:16:00:ad:f6:68:2f:ce:8f:b7:f7:68:e8:ef:ba: c7:05:bd:11:dd:31:88:d3:f4:f4:0c:92:82:a4:82: 04:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E3:8B:D8:FF:3D:7F:01:A5:F6:FB:0F:FE:B6:E2:AD:E7:2A:8F:E9 X509v3 Authority Key Identifier: keyid:16:13:D1:15:ED:83:A0:6E:97:A7:3D:AE:55:16:BA:1B:68:4E:EC:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:9d:9c:83:c7:a4:bf:ba:06:8d:b6:dc:55:bc:cf:e8:fb:72: a6:a8:bd:b6:ec:94:a7:8d:d3:48:f1:9b:49:bf:c8:ce:cf:1b: 19:bd:ac:5e:9a:2a:02:fc:2b:9e:62:b2:21:e8:82:47:84:01: 3c:9c:5e:ad:a6:d8:aa:3b:32:75:f7:a7:e8:1d:af:d2:5a:b2: c5:36:fa:99:fa:39:0d:98:e3:bb:9d:9b:0e:db:3c:d6:ad:3c: 03:19:ce:8f:3d:ae:96:da:95:de:92:ec:5e:97:6b:1e:5e:76: 6f:49:4e:4c:2d:2c:53:63:0b:e8:22:b6:b5:a1:ca:48:67:75: 05:b3:ed:37:78:a2:0b:d5:91:8c:55:70:e1:d6:3b:84:49:31: f1:9f:f2:b2:c8:7c:81:f6:ef:9c:01:00:a3:a9:7e:d1:cc:85: 79:6a:93:6a:bc:7f:33:5e:ac:70:3a:8d:69:31:4a:bc:ed:19: c4:74:83:86:88:c7:64:7a:d6:61:47:cb:42:24:f9:09:1e:0c: 7f:76:75:89:a2:eb:09:ed:da:ed:f1:17:3e:de:83:09:62:a3: c4:8d:35:5a:5d:1e:16:cb:b7:78:e7:99:c0:dc:62:07:a7:20: d3:40:ad:73:7f:ef:7e:1e:78:31:68:e7:aa:93:35:96:bb:c8: 0b:e1:61:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThGMDgxMTAvBgNVBAUTKDE2MTNEMTE1RUQ4M0EwNkU5N0E3M0RBRTU1MTZCQTFC Njg0RUVDMDkwHhcNMjQwNTA2MTkzNTI5WhcNMjQwNTEzMTkzNTI5WjAYMRYwFAYD VQQDEw02NjM5MzEwMS1iZThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ZhRSPmTUq/z43AMa0Vn1aRngX4kySIPeJrNn5AjXfbJvB24YSNcnVq4hWBM M43tG5XNMOhUBh2LsbZRle0pZ0iC4UaCuCdVk8Co8MyQecWzF8eQPbtcBhhHM6WH uRKyv4SNf8DZ7umK0zghDF0wPi8CefSJ0DsAibv0YyXSyuJx5opqHvr9ZUJ4xiLa kVPqISj9OHwvogKxlMcb1SqlIMv5QoWmziXqOFcBzvCOWaxxMv4HThcKLNgDxtYs +rDiS/PIs/nV7YvWENhoryKQsRvtzxddOTu7uJNAlrOCpi5vFgCt9mgvzo+392jo 77rHBb0R3TGI0/T0DJKCpIIEEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzji9j/ PX8Bpfb7D/624q3nKo/pMB8GA1UdIwQYMBaAFBYT0RXtg6Bul6c9rlUWuhtoTuwJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEYwOC81QjE3RjZEMjA3 RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9GaFBSRmUyRG9HNlhwejJ1VlJhNkcyaE83 QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoUFJGZTJEb0c2WHB6MnVWUmE2RzJoTzdBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEYwOC81QjE3RjZEMjA3RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9GaFBSRmUyRG9H NlhwejJ1VlJhNkcyaE83QWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwnZyDx6S/ugaNttxVvM/o+3KmqL227JSnjdNI8ZtJv8jOzxsZvaxe mioC/CueYrIh6IJHhAE8nF6tptiqOzJ196foHa/SWrLFNvqZ+jkNmOO7nZsO2zzW rTwDGc6PPa6W2pXekuxel2seXnZvSU5MLSxTYwvoIra1ocpIZ3UFs+03eKIL1ZGM VXDh1juESTHxn/KyyHyB9u+cAQCjqX7RzIV5apNqvH8zXqxwOo1pMUq87RnEdIOG iMdketZhR8tCJPkJHgx/dnWJousJ7drt8Rc+3oMJYqPEjTVaXR4Wy7d455nA3GIH pyDTQK1zf+9+HngxaOeqkzWWu8gL4WH4 -----END CERTIFICATE-----Generated at Mon May 6 20:19:11 2024 by rpki-client on console-fra.rpki-client.org