$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft File: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft (raw, json) Hash identifier: C8h8bGaKSq/KTwgJRzWvoZaCukXSA/WFPx/KDCsX5cM= Subject key identifier: EF:74:12:6D:46:93:77:5F:18:0A:15:54:C9:C9:A6:72:AA:BD:10:7D Authority key identifier: 99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A Certificate issuer: /CN=A9167B50/serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A Certificate serial: 3434 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft Manifest number: 33FC Signing time: Thu 02 May 2024 14:45:30 +0000 Manifest this update: Thu 02 May 2024 14:45:29 +0000 Manifest next update: Thu 09 May 2024 14:45:29 +0000 Files and hashes: 1: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl (hash: 1nom5j2IZ8YztzrFE2hgGHPF7gWu/U/zRPbb36HaXb8=) 2: 925D8646772A11EBAE8A8181C4F9AE02.roa (hash: ou31H2fcyxzh7Lj/rpjswzuPaCyO16JeeWEDMSwueMU=) 3: 31745126CD1811EC917CB819C4F9AE02.roa (hash: j5OV2OvF8tNNP+AVLmMvlYAh+dmIQcDsjYusvsFeVL0=) 4: B35C646A52E211EAAF44AE23C4F9AE02.roa (hash: ao1Wr7vNeGVliqTGN9SNG5wwxHLrdENYcs4yur0fNr8=) 5: 9322B46CAEB111EA8EFC2878C4F9AE02.roa (hash: /qJNeD1dNZYV0h90MQHA68P9nwi9hwbDEc0k2ByNJOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 14:45:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13364 (0x3434) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B50/serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A Validity Not Before: May 2 14:45:29 2024 GMT Not After : May 9 14:45:29 2024 GMT Subject: CN=6633a70a-e58b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:34:95:38:8d:99:f5:5b:59:a6:32:41:a3:e5: b6:e1:c9:7e:79:44:55:e4:3b:4a:3e:26:42:5d:c5: 87:03:a2:69:7c:77:da:51:46:ee:df:05:6e:42:90: eb:0e:c4:2d:0f:31:65:e6:b4:58:cc:64:c2:18:a2: 6b:8c:12:11:52:7c:5c:29:fa:55:fe:73:27:ae:18: 65:52:f7:2f:4c:e1:8a:d0:9d:8d:19:b0:d3:4d:3b: d1:1f:b1:87:b4:60:7d:80:d5:e7:de:e3:34:2d:9c: 06:c9:05:e1:be:26:19:88:84:c8:13:62:2e:ac:a6: d8:ec:23:a0:3d:c6:f7:ee:a3:41:f4:45:df:07:52: 6a:6f:87:51:73:b5:a6:13:5e:07:7f:a1:65:30:44: 33:c3:b4:74:3b:4b:38:d4:fc:0f:c7:83:ac:18:73: 00:99:de:00:d5:90:de:bb:2b:bf:89:29:29:72:2d: fc:82:67:c2:0e:2a:b0:28:c4:2d:63:12:b9:bb:0d: 80:21:6e:91:ff:df:d6:f4:62:1c:f5:3c:69:89:d3: e7:ea:91:be:ec:0b:37:f6:65:b6:b4:e8:3f:5e:cf: cf:e5:12:75:c9:94:03:e4:7c:51:74:b0:05:18:3b: 83:f0:56:2f:4b:5a:ef:aa:31:59:19:9a:e5:89:d9: 73:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:74:12:6D:46:93:77:5F:18:0A:15:54:C9:C9:A6:72:AA:BD:10:7D X509v3 Authority Key Identifier: keyid:99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:03:37:43:eb:fa:4c:de:d1:29:03:89:e4:ba:1a:f0:5d:34: f9:6f:f1:22:84:87:c5:67:4c:1f:5b:30:ab:af:32:ce:da:ec: cd:9a:ce:72:23:ab:4d:00:98:bc:f3:8e:8f:af:cb:bd:e8:f4: 6f:12:66:b1:b5:d2:a1:24:6a:57:70:15:32:00:a8:75:85:9e: ae:81:d2:6e:e3:8e:42:e4:dc:d1:d7:1e:01:f8:1a:88:96:29: 76:90:a8:9c:ce:b7:87:f7:72:83:66:b1:16:7d:76:33:ba:f1: c6:4e:22:9d:a7:74:1c:46:5a:b3:1f:da:09:9e:a2:d1:62:d7: 7e:a7:4e:85:2a:01:54:d2:6f:98:88:a0:43:51:ba:b0:3c:11: 82:69:3c:e4:54:f7:d2:31:ce:91:b2:9e:e3:78:96:a6:4e:53: ec:01:ba:88:3b:83:42:2d:9c:b5:25:68:16:24:43:ab:77:bb: 4a:e4:05:b0:a6:b3:57:a1:4b:54:80:5b:a1:77:60:a8:7a:c9: dc:35:ba:a6:0f:8d:aa:dd:c0:03:a5:76:87:34:39:c8:ec:b7: b0:be:6c:12:59:c7:d8:5a:d9:73:9f:2c:36:bb:76:34:bd:1d: 64:22:be:4e:f8:21:45:3e:d6:bc:75:24:25:a2:79:04:34:67: 4f:dd:0f:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCNTAxMTAvBgNVBAUTKDk5MUIzRjE3MDg0Rjc2RjEyRjlGMDUwOUQ1OTdGMEZG RUNBMDRCNEEwHhcNMjQwNTAyMTQ0NTI5WhcNMjQwNTA5MTQ0NTI5WjAYMRYwFAYD VQQDEw02NjMzYTcwYS1lNThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDSVOI2Z9VtZpjJBo+W24cl+eURV5DtKPiZCXcWHA6JpfHfaUUbu3wVuQpDr DsQtDzFl5rRYzGTCGKJrjBIRUnxcKfpV/nMnrhhlUvcvTOGK0J2NGbDTTTvRH7GH tGB9gNXn3uM0LZwGyQXhviYZiITIE2IurKbY7COgPcb37qNB9EXfB1Jqb4dRc7Wm E14Hf6FlMEQzw7R0O0s41PwPx4OsGHMAmd4A1ZDeuyu/iSkpci38gmfCDiqwKMQt YxK5uw2AIW6R/9/W9GIc9TxpidPn6pG+7As39mW2tOg/Xs/P5RJ1yZQD5HxRdLAF GDuD8FYvS1rvqjFZGZrlidlzZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO90Em1G k3dfGAoVVMnJpnKqvRB9MB8GA1UdIwQYMBaAFJkbPxcIT3bxL58FCdWX8P/soEtK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I1MC85RDEzMDVDODFE OEYxMUUyQTAyQkNERUUwOEIwMkNEMi9tUnNfRndoUGR2RXZud1VKMVpmd18teWdT MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21Sc19Gd2hQZHZFdm53VUoxWmZ3Xy15Z1Mwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I1MC85RDEzMDVDODFEOEYxMUUyQTAyQkNERUUwOEIwMkNEMi9tUnNfRndoUGR2 RXZud1VKMVpmd18teWdTMG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPAzdD6/pM3tEpA4nkuhrwXTT5b/EihIfFZ0wfWzCrrzLO2uzNms5y I6tNAJi8846Pr8u96PRvEmaxtdKhJGpXcBUyAKh1hZ6ugdJu445C5NzR1x4B+BqI lil2kKiczreH93KDZrEWfXYzuvHGTiKdp3QcRlqzH9oJnqLRYtd+p06FKgFU0m+Y iKBDUbqwPBGCaTzkVPfSMc6Rsp7jeJamTlPsAbqIO4NCLZy1JWgWJEOrd7tK5AWw prNXoUtUgFuhd2CoesncNbqmD42q3cADpXaHNDnI7LewvmwSWcfYWtlznyw2u3Y0 vR1kIr5O+CFFPta8dSQlonkENGdP3Q9P -----END CERTIFICATE-----Generated at Thu May 2 17:43:09 2024 by rpki-client on console-fra.rpki-client.org