$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft File: fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft (raw, json) Hash identifier: h7jcQedLpY4/jVk730q8omxaNW8h5RHmkKNF0yMWxds= Subject key identifier: E0:02:F1:22:EC:1A:08:69:40:52:34:D7:54:38:3C:7E:46:7B:71:90 Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5 Certificate issuer: /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5 Certificate serial: 028B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft Manifest number: 0288 Signing time: Tue 07 May 2024 03:40:01 +0000 Manifest this update: Tue 07 May 2024 03:40:00 +0000 Manifest next update: Tue 14 May 2024 03:40:00 +0000 Files and hashes: 1: fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl (hash: oaAV1XDZt0YK/XTBcYlofo8SsPvCdAYwqXCJHu+NX6s=) 2: A38BA6BEB9AF11ECAC4BC97EC4F9AE02.roa (hash: y99qHJ9OVc/A/XAEYnRHaQqgSfNvTYhESyHYrQgVW9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 03:28:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 651 (0x28b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5 Validity Not Before: May 7 03:40:00 2024 GMT Not After : May 14 03:40:00 2024 GMT Subject: CN=6639a291-58fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:06:94:62:ed:d1:e5:60:b2:cc:c1:7e:02:70: 63:c0:06:88:d0:0d:bd:05:4d:0d:f2:fd:0e:0f:46: d0:36:f5:a9:ce:5a:56:d6:7a:fe:41:d1:dd:e9:13: 0b:14:d2:ca:e8:23:30:b3:2b:1f:49:d3:26:ab:9b: d4:8b:c3:69:53:7c:3e:7d:d0:06:31:7b:27:0c:15: 27:44:58:eb:8c:76:99:c3:a0:0d:6a:3a:4c:3f:b7: b7:20:98:9a:1f:0f:29:f4:68:2d:8c:47:26:51:ef: e1:67:d8:b4:76:1a:37:84:33:6c:73:25:4a:51:42: 7d:34:ad:f3:0e:71:a1:8f:b1:b2:8f:0a:01:29:9a: 21:8a:5b:12:93:3e:b6:04:60:a8:05:e7:51:8a:22: 73:01:38:26:e3:0d:2d:fe:e7:26:de:3a:16:9d:a6: a7:28:ca:7d:32:eb:9e:46:26:0b:30:ec:bf:86:b9: 24:c8:76:7a:20:81:a8:d7:78:d8:f1:8c:86:95:ff: 6b:2b:9e:bb:a0:78:ac:74:93:8e:de:3e:1d:a3:38: 0d:2f:7d:fd:f0:09:95:93:3b:93:15:5c:83:0e:99: cc:f8:1c:0d:7f:c9:65:72:28:67:a9:2c:93:b1:0f: 37:05:ee:bf:90:fb:4e:c2:d5:e7:4b:7f:88:6c:df: 3b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:02:F1:22:EC:1A:08:69:40:52:34:D7:54:38:3C:7E:46:7B:71:90 X509v3 Authority Key Identifier: keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:eb:5c:19:2f:1c:57:33:0f:0c:8b:ce:5c:c3:60:40:18:54: b0:64:1e:f9:df:cd:ba:04:9f:c9:40:8a:01:d5:8a:17:65:60: de:c7:93:b9:90:ae:9d:ab:f7:ed:49:96:9c:0c:97:b5:3a:9f: e2:f2:70:a7:28:9f:6b:b7:12:c2:8e:35:fc:82:35:19:e0:d3: 54:45:29:98:4f:91:d6:2f:36:9a:d2:ee:aa:6c:38:76:5d:68: bb:d9:a5:84:a7:83:7e:14:98:91:e1:75:d8:44:4a:0e:e6:3e: 4c:77:5f:37:81:a0:65:50:52:fd:25:4f:d0:1e:e4:7b:15:c3: e0:ca:0d:e3:e2:5f:52:63:b9:8d:ec:ea:e9:fb:5d:6b:22:2c: 65:95:08:37:27:c0:ef:e4:27:94:72:83:5a:32:d5:e1:aa:ff: 62:ab:2e:e8:83:d5:9d:2c:23:de:91:56:ee:40:45:8a:e6:af: 70:10:3b:85:b1:3a:d2:46:36:61:38:10:38:2e:63:69:2e:91: c3:f5:13:ae:00:d5:bc:ec:0d:58:ea:07:fe:46:2f:8d:88:23: 50:0c:71:56:bb:75:4b:65:d4:50:d8:37:ee:ff:60:64:3b:7c: 78:a5:00:b5:83:69:4a:01:8f:ef:85:de:ee:a3:78:10:3f:e2: 01:70:3e:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ0RjIxMTAvBgNVBAUTKDdEMThEODc3NTAyMTA1RkExODcyQURFRTRDRjI2MjND NDE0RjE2QjUwHhcNMjQwNTA3MDM0MDAwWhcNMjQwNTE0MDM0MDAwWjAYMRYwFAYD VQQDEw02NjM5YTI5MS01OGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQaUYu3R5WCyzMF+AnBjwAaI0A29BU0N8v0OD0bQNvWpzlpW1nr+QdHd6RML FNLK6CMwsysfSdMmq5vUi8NpU3w+fdAGMXsnDBUnRFjrjHaZw6ANajpMP7e3IJia Hw8p9GgtjEcmUe/hZ9i0dho3hDNscyVKUUJ9NK3zDnGhj7GyjwoBKZohilsSkz62 BGCoBedRiiJzATgm4w0t/ucm3joWnaanKMp9MuueRiYLMOy/hrkkyHZ6IIGo13jY 8YyGlf9rK567oHisdJOO3j4dozgNL3398AmVkzuTFVyDDpnM+BwNf8llcihnqSyT sQ83Be6/kPtOwtXnS3+IbN870QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAC8SLs GghpQFI011Q4PH5Ge3GQMB8GA1UdIwQYMBaAFH0Y2HdQIQX6GHKt7kzyYjxBTxa1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDRGMi9EMjk5RjhFQ0I5 QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJmb1ljcTN1VFBKaVBFRlBG clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZSallkMUFoQmZvWWNxM3VUUEppUEVGUEZyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDRGMi9EMjk5RjhFQ0I5QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJm b1ljcTN1VFBKaVBFRlBGclUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd61wZLxxXMw8Mi85cw2BAGFSwZB753826BJ/JQIoB1YoXZWDex5O5 kK6dq/ftSZacDJe1Op/i8nCnKJ9rtxLCjjX8gjUZ4NNURSmYT5HWLzaa0u6qbDh2 XWi72aWEp4N+FJiR4XXYREoO5j5Md183gaBlUFL9JU/QHuR7FcPgyg3j4l9SY7mN 7Orp+11rIixllQg3J8Dv5CeUcoNaMtXhqv9iqy7og9WdLCPekVbuQEWK5q9wEDuF sTrSRjZhOBA4LmNpLpHD9ROuANW87A1Y6gf+Ri+NiCNQDHFWu3VLZdRQ2Dfu/2Bk O3x4pQC1g2lKAY/vhd7uo3gQP+IBcD5S -----END CERTIFICATE-----Generated at Tue May 7 04:35:39 2024 by rpki-client on console-ams.rpki-client.org