$ rpki-client -vvf rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft File: fIyfexbMnstE8DINx4y4FM1Cp6Y.mft (raw, json) Hash identifier: vUPMHsURxR8mzpyz3Y9wXgC9knKmFZYwTso9yc1YuWs= Subject key identifier: 30:C2:E3:27:C3:15:EB:DB:0F:67:11:D0:2F:C1:97:07:B0:AC:7D:5E Authority key identifier: 7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6 Certificate issuer: /CN=A9168973/serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6 Certificate serial: 0208 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft Manifest number: 0206 Signing time: Fri 03 May 2024 04:14:32 +0000 Manifest this update: Fri 03 May 2024 04:14:32 +0000 Manifest next update: Fri 10 May 2024 04:14:32 +0000 Files and hashes: 1: fIyfexbMnstE8DINx4y4FM1Cp6Y.crl (hash: 9b30XhUwJ+kAJreVOC/s9C2qLtDrE7sB/yRkKZi5wm8=) 2: 686A55E2EB4811EC85B4E60EC4F9AE02.roa (hash: S2ETYbJpdwq6bjGJpzN3I8RN36Crc5ZAriE1+3dLOZk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 520 (0x208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168973/serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6 Validity Not Before: May 3 04:14:32 2024 GMT Not After : May 10 04:14:32 2024 GMT Subject: CN=663464a8-a7fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ee:5b:6d:08:2c:e7:ea:ae:db:82:48:41:43: 2b:ea:2f:ce:03:17:0c:75:eb:9f:0e:ea:ea:31:40: 9f:bd:81:80:99:9a:db:42:95:d0:95:cb:ee:7d:37: fc:2e:28:4a:86:55:d2:28:90:99:4f:39:df:ab:8b: 16:9c:2e:93:52:2d:4f:f5:57:19:a3:d3:c3:1f:ae: 9a:b3:0b:ef:12:73:c0:33:6a:bc:68:ee:fd:33:b6: 01:62:f3:73:14:b5:aa:c1:84:b8:2b:48:53:28:30: 2a:60:55:47:b8:98:b2:e7:2d:e4:dd:2f:2d:50:e9: 9d:d7:c0:88:f2:c0:59:57:e2:fc:74:7d:0e:ab:e6: 26:df:fe:fe:01:5b:c0:3f:e2:d8:a2:c5:11:ff:52: 7b:89:12:94:f4:73:02:2d:12:67:de:39:bd:49:d6: 05:fe:11:c1:c3:74:5b:4b:67:e5:0e:d7:30:6b:8c: fc:96:08:d6:f6:b0:8f:46:b4:28:b8:bb:46:36:27: a9:df:0a:90:17:49:29:f2:78:25:5d:bf:15:69:9a: b6:fa:77:4d:09:a2:f8:a1:6f:35:4b:11:73:b9:99: 6e:3a:6e:1d:23:b0:f8:ce:d5:a3:25:49:3f:ce:37: cd:c2:86:10:0b:17:ac:b4:a7:d9:38:29:ca:b7:3b: e4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C2:E3:27:C3:15:EB:DB:0F:67:11:D0:2F:C1:97:07:B0:AC:7D:5E X509v3 Authority Key Identifier: keyid:7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:c5:0c:61:ad:8d:8e:65:27:82:0a:9c:58:25:4e:e2:78:ca: 83:09:48:68:f2:48:3d:7e:12:7e:42:4f:f5:0f:59:3e:a2:54: c2:a6:ce:c8:b3:fa:14:d6:54:f2:bd:08:b9:0c:d4:e8:b5:4f: 78:ec:8c:49:32:5f:64:49:bb:bc:79:78:cf:4d:b1:6b:c2:7e: 4d:69:89:b4:e2:0e:0f:2d:5c:c7:f2:7c:c3:57:ca:e8:cf:4b: d7:c4:61:10:0d:60:45:32:77:a7:23:17:54:8a:04:e5:05:3e: 57:63:d6:56:5d:7b:9c:14:72:be:dc:1e:f2:ff:71:7d:cc:77: 36:30:ce:ba:61:3f:79:28:60:8b:a9:e4:08:67:a6:a3:a7:7d: a4:f4:0a:b2:e0:b9:ae:ba:09:1a:91:23:f4:81:c0:0f:2f:6d: a8:cb:dd:4f:15:60:d8:aa:51:58:73:bf:a9:2f:c3:11:75:1d: e3:99:16:58:8f:93:df:71:5b:55:8a:b6:a4:26:f1:81:40:c3: 04:75:04:c7:e1:09:4e:90:2d:09:0c:db:28:af:91:cd:63:2f: bd:f7:39:8f:5c:9a:f6:17:a8:33:2c:9c:8d:88:85:13:22:70: 84:ca:39:26:77:1e:fd:a1:74:cb:96:7c:10:69:4f:c1:88:0f: b7:84:81:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5NzMxMTAvBgNVBAUTKDdDOEM5RjdCMTZDQzlFQ0I0NEYwMzIwREM3OENCODE0 Q0Q0MkE3QTYwHhcNMjQwNTAzMDQxNDMyWhcNMjQwNTEwMDQxNDMyWjAYMRYwFAYD VQQDEw02NjM0NjRhOC1hN2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+5bbQgs5+qu24JIQUMr6i/OAxcMdeufDurqMUCfvYGAmZrbQpXQlcvufTf8 LihKhlXSKJCZTznfq4sWnC6TUi1P9VcZo9PDH66aswvvEnPAM2q8aO79M7YBYvNz FLWqwYS4K0hTKDAqYFVHuJiy5y3k3S8tUOmd18CI8sBZV+L8dH0Oq+Ym3/7+AVvA P+LYosUR/1J7iRKU9HMCLRJn3jm9SdYF/hHBw3RbS2flDtcwa4z8lgjW9rCPRrQo uLtGNiep3wqQF0kp8nglXb8VaZq2+ndNCaL4oW81SxFzuZluOm4dI7D4ztWjJUk/ zjfNwoYQCxestKfZOCnKtzvk8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDC4yfD FevbD2cR0C/BlwewrH1eMB8GA1UdIwQYMBaAFHyMn3sWzJ7LRPAyDceMuBTNQqem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk3My81NjA2QUUyMkVC NDQxMUVDQURFMUVENjJDNEY5QUUwMi9mSXlmZXhiTW5zdEU4RElOeDR5NEZNMUNw NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZJeWZleGJNbnN0RThESU54NHk0Rk0xQ3A2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODk3My81NjA2QUUyMkVCNDQxMUVDQURFMUVENjJDNEY5QUUwMi9mSXlmZXhiTW5z dEU4RElOeDR5NEZNMUNwNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByxQxhrY2OZSeCCpxYJU7ieMqDCUho8kg9fhJ+Qk/1D1k+olTCps7I s/oU1lTyvQi5DNTotU947IxJMl9kSbu8eXjPTbFrwn5NaYm04g4PLVzH8nzDV8ro z0vXxGEQDWBFMnenIxdUigTlBT5XY9ZWXXucFHK+3B7y/3F9zHc2MM66YT95KGCL qeQIZ6ajp32k9Aqy4LmuugkakSP0gcAPL22oy91PFWDYqlFYc7+pL8MRdR3jmRZY j5PfcVtVirakJvGBQMMEdQTH4QlOkC0JDNsor5HNYy+99zmPXJr2F6gzLJyNiIUT InCEyjkmdx79oXTLlnwQaU/BiA+3hIFg -----END CERTIFICATE-----Generated at Fri May 3 06:28:40 2024 by rpki-client on console-fra.rpki-client.org