$ rpki-client -vvf rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft File: fJsp8fVuh-6usb90B2lNtO3a1Ts.mft (raw, json) Hash identifier: 1KNjeeL62+93zhgX91iDp8WP5UL+X0wHlMzc8+HOvyM= Subject key identifier: 09:6D:72:80:36:D3:45:18:7D:50:B5:85:7F:CF:21:EE:0D:98:D2:39 Authority key identifier: 7C:9B:29:F1:F5:6E:87:EE:AE:B1:BF:74:07:69:4D:B4:ED:DA:D5:3B Certificate issuer: /CN=A9171845/serialNumber=7C9B29F1F56E87EEAEB1BF7407694DB4EDDAD53B Certificate serial: 0411 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft Manifest number: 040C Signing time: Fri 03 May 2024 02:13:41 +0000 Manifest this update: Fri 03 May 2024 02:13:40 +0000 Manifest next update: Fri 10 May 2024 02:13:40 +0000 Files and hashes: 1: fJsp8fVuh-6usb90B2lNtO3a1Ts.crl (hash: X3kMrnKJxls4044azxEbfkN75y9JSGILAxZ49DBJ508=) 2: FE5E15E2216911EC82319078C4F9AE02.roa (hash: YOxQS7wbDsHA9b8R2NY8zeKWUY5gGxp6TJUqyu7Un64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.crl rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 02:13:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1041 (0x411) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171845/serialNumber=7C9B29F1F56E87EEAEB1BF7407694DB4EDDAD53B Validity Not Before: May 3 02:13:40 2024 GMT Not After : May 10 02:13:40 2024 GMT Subject: CN=66344854-6d77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d3:1b:74:9a:b6:4a:17:50:b8:e3:6a:b2:47: ba:31:14:80:e7:a6:08:6b:66:7b:da:07:b9:66:99: 33:1c:73:00:74:e5:e6:e3:53:e2:ef:ec:35:56:8c: c2:89:cf:be:38:4d:49:59:2e:05:80:c6:08:d5:fa: 0b:12:cb:e9:5c:9f:2d:1a:b3:e1:b5:1f:9b:b3:eb: e4:65:f0:99:47:9b:35:34:75:9c:0b:cf:d1:bc:81: d6:a5:8f:38:b0:4e:63:b3:6a:81:0e:79:27:1b:77: 3a:9b:37:fc:40:80:75:1d:a2:45:c2:0e:d7:85:90: a0:a9:6d:12:d2:96:3e:d8:e3:ae:a0:66:5a:8d:fc: 53:38:3f:31:db:ba:2e:08:e7:b2:67:8f:7b:53:77: c4:84:7b:42:da:9f:1f:af:b3:e3:14:cb:29:10:5b: f4:56:bc:c0:a6:eb:dd:c4:cc:b1:70:e1:9e:55:09: 01:61:d6:e2:3f:f0:c3:99:40:02:a6:1b:e1:83:fa: 06:d1:90:75:63:d7:f3:9f:d6:4d:57:75:ce:25:70: da:1c:92:c8:33:ff:c9:c0:fa:5a:7d:15:9c:75:67: ff:91:d4:27:f1:7a:99:36:a5:ae:21:dc:7d:10:29: 11:83:64:64:36:6e:c1:b5:03:b4:95:e4:d5:c3:d8: e7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:6D:72:80:36:D3:45:18:7D:50:B5:85:7F:CF:21:EE:0D:98:D2:39 X509v3 Authority Key Identifier: keyid:7C:9B:29:F1:F5:6E:87:EE:AE:B1:BF:74:07:69:4D:B4:ED:DA:D5:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:47:66:09:27:28:d2:e9:d9:ea:24:ad:32:87:b8:7e:ce:39: 42:78:86:b5:49:6b:b6:ae:43:c2:9c:40:d1:d7:4f:02:64:45: f7:94:26:2b:c0:5f:ce:89:ef:8a:69:fe:3e:d2:cb:f5:12:da: 25:31:33:6e:67:29:ff:a8:72:33:27:da:d5:40:2c:bd:3c:49: 5e:43:6c:b2:b4:09:c3:b9:9e:1a:ff:08:c1:07:43:ec:a7:d4: 36:5d:2f:86:81:75:6a:d4:d2:3a:b6:0b:73:3d:34:8d:34:fa: 9a:5f:11:8c:71:c3:b0:16:e2:a7:a4:f2:d6:a6:7c:1c:b2:11: 40:50:74:d8:1e:8a:9f:88:06:bd:f1:db:22:ff:b6:fc:7a:88: 11:cc:56:b2:14:d6:a1:3f:e3:a1:c3:1d:66:37:a9:5a:d3:64: 52:a2:dd:c6:bf:72:6c:f3:b8:3c:04:a7:ed:00:f8:1c:cf:78: 5d:47:82:a9:fd:1b:4a:b0:46:e7:1e:d9:e3:cb:d2:68:78:3d: 64:db:41:10:27:47:73:6c:7e:18:76:16:f3:02:71:ba:ca:63: 99:e7:60:28:43:fc:42:0a:ac:5d:8d:e1:85:2f:12:e7:59:59: 10:a6:97:26:8e:39:7b:f3:a3:c3:73:8d:66:c0:6e:c3:f3:fd: 79:6a:7a:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE4NDUxMTAvBgNVBAUTKDdDOUIyOUYxRjU2RTg3RUVBRUIxQkY3NDA3Njk0REI0 RUREQUQ1M0IwHhcNMjQwNTAzMDIxMzQwWhcNMjQwNTEwMDIxMzQwWjAYMRYwFAYD VQQDEw02NjM0NDg1NC02ZDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtMbdJq2ShdQuONqske6MRSA56YIa2Z72ge5ZpkzHHMAdOXm41Pi7+w1VozC ic++OE1JWS4FgMYI1foLEsvpXJ8tGrPhtR+bs+vkZfCZR5s1NHWcC8/RvIHWpY84 sE5js2qBDnknG3c6mzf8QIB1HaJFwg7XhZCgqW0S0pY+2OOuoGZajfxTOD8x27ou COeyZ497U3fEhHtC2p8fr7PjFMspEFv0VrzApuvdxMyxcOGeVQkBYdbiP/DDmUAC phvhg/oG0ZB1Y9fzn9ZNV3XOJXDaHJLIM//JwPpafRWcdWf/kdQn8XqZNqWuIdx9 ECkRg2RkNm7BtQO0leTVw9jnYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAltcoA2 00UYfVC1hX/PIe4NmNI5MB8GA1UdIwQYMBaAFHybKfH1bofurrG/dAdpTbTt2tU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTg0NS84Njc1QkU4MDIw Q0ExMUVDQjY2QzE0NTJDNEY5QUUwMi9mSnNwOGZWdWgtNnVzYjkwQjJsTnRPM2Ex VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZKc3A4ZlZ1aC02dXNiOTBCMmxOdE8zYTFUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTg0NS84Njc1QkU4MDIwQ0ExMUVDQjY2QzE0NTJDNEY5QUUwMi9mSnNwOGZWdWgt NnVzYjkwQjJsTnRPM2ExVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0R2YJJyjS6dnqJK0yh7h+zjlCeIa1SWu2rkPCnEDR108CZEX3lCYr wF/Oie+Kaf4+0sv1EtolMTNuZyn/qHIzJ9rVQCy9PEleQ2yytAnDuZ4a/wjBB0Ps p9Q2XS+GgXVq1NI6tgtzPTSNNPqaXxGMccOwFuKnpPLWpnwcshFAUHTYHoqfiAa9 8dsi/7b8eogRzFayFNahP+Ohwx1mN6la02RSot3Gv3Js87g8BKftAPgcz3hdR4Kp /RtKsEbnHtnjy9JoeD1k20EQJ0dzbH4YdhbzAnG6ymOZ52AoQ/xCCqxdjeGFLxLn WVkQppcmjjl786PDc41mwG7D8/15anq5 -----END CERTIFICATE-----Generated at Fri May 3 04:45:16 2024 by rpki-client on console-fra.rpki-client.org