$ rpki-client -vvf rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft File: fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft (raw, json) Hash identifier: B5oLZgFGMzz1UjEOl7UedxIsvnW4Y7iYTPxUiaS4NK8= Subject key identifier: 8E:E5:A4:C0:A2:B2:91:5D:D8:11:2B:7B:98:36:95:A0:55:D8:22:17 Authority key identifier: 7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D Certificate issuer: /CN=A918753F/serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D Certificate serial: 07DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft Manifest number: 07D3 Signing time: Thu 02 May 2024 22:08:08 +0000 Manifest this update: Thu 02 May 2024 22:08:08 +0000 Manifest next update: Thu 09 May 2024 22:08:08 +0000 Files and hashes: 1: fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl (hash: frvKTosTzY4knpFB2Cs2gid56+eukez9RZKogrwQwPw=) 2: 10A6E062B70A11EDB851464EC4F9AE02.roa (hash: XquIDLjEhOAmQqmF0eFe890gPbqlxjKM1c1+XdvRXFE=) 3: 38B92F54E17D11EDBCAFC081C4F9AE02.roa (hash: tWyNWbcGvommNE54pGTBI9V0mq0dDaX2rOT4IeoLLOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2012 (0x7dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918753F/serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D Validity Not Before: May 2 22:08:08 2024 GMT Not After : May 9 22:08:08 2024 GMT Subject: CN=66340ec8-6f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7c:d3:c5:59:4d:a2:0a:55:4f:e6:41:69:20: b5:f6:ba:db:02:b8:1e:20:8e:7e:c7:e3:d5:80:10: 91:c7:66:ee:11:d8:2e:4c:2f:47:88:e8:75:1b:98: b6:70:1b:f9:84:2f:81:6e:dd:47:05:54:9c:bc:1a: e4:f5:5d:b9:c0:77:3c:51:3d:4c:12:55:66:b7:4d: 8b:7b:fe:db:7d:84:e1:a8:3c:37:d8:41:37:ef:3c: 0f:26:29:a7:33:44:69:ab:86:38:49:92:6b:1d:40: 64:7d:f0:31:59:5b:49:02:d0:ee:fa:94:13:00:73: f5:3d:74:b9:29:ac:6d:8b:c3:76:bc:6b:ce:e1:6a: 48:8a:03:e5:9f:50:86:7c:20:6d:ae:c7:f1:4f:bf: 74:6b:95:48:69:0b:ed:78:1f:c0:93:fd:25:34:e0: 2d:c0:71:6c:53:3d:4d:6d:9a:2c:e2:12:fa:58:7c: f2:62:3a:a2:25:a5:79:a5:cb:9b:77:94:f6:f8:b0: 4d:00:90:00:08:be:0f:3b:3b:3d:be:88:a1:36:5a: 72:ec:de:e3:35:67:51:66:7c:f8:e3:4b:6c:65:ac: 65:9c:67:2a:cf:3a:d5:84:b5:ad:ec:68:89:79:25: 12:a1:38:16:2f:6c:a6:8a:5f:ba:99:d6:95:23:9d: d9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E5:A4:C0:A2:B2:91:5D:D8:11:2B:7B:98:36:95:A0:55:D8:22:17 X509v3 Authority Key Identifier: keyid:7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:f5:4a:21:c7:7c:c5:a7:fd:cd:23:83:09:89:ad:65:b7:25: 13:4c:a6:a5:4c:64:fb:ba:fc:dc:c9:52:14:6c:94:15:9f:54: 08:d0:1b:3b:32:3b:a8:8b:33:f8:1f:11:67:b2:f9:a6:84:db: 41:b5:b4:a4:14:9a:3f:65:be:9e:73:fe:7e:fb:0c:df:6a:07: 72:75:58:f0:e5:38:3d:ca:ce:b0:f1:6b:a1:bd:34:ae:f9:2b: c4:9c:a0:ea:38:cf:04:65:ec:fd:3d:49:40:51:97:fd:7c:98: 38:5d:89:6e:37:1a:9b:9f:d4:7f:21:a9:bd:33:bb:9a:c5:69: 2f:aa:50:5f:2f:20:dc:7e:89:f2:ce:52:19:e9:f4:23:8e:1a: 19:65:e9:bd:4f:c0:ab:07:ca:b7:c4:a5:92:94:43:6d:72:e7: a8:99:ef:c1:ff:69:e5:d3:5b:01:3f:68:f0:db:96:2e:d1:97: 88:28:d6:e2:1d:4d:5c:24:2e:01:b8:3c:7d:d7:4d:8f:f2:57: c4:00:8e:1f:68:b3:46:16:83:00:a9:04:79:66:e9:5f:7f:32: 83:d3:51:16:9d:c0:bf:d9:a5:ed:f5:45:3d:c7:f4:10:6b:67: 67:8f:7f:c0:72:3b:ef:53:52:60:23:dc:d1:16:04:70:61:46: 9e:21:4e:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc1M0YxMTAvBgNVBAUTKDdFNzJEODAxQjM4QTcyQUI0QjAzNzZFMTJDOTU0MTI0 QUFFNDNDNkQwHhcNMjQwNTAyMjIwODA4WhcNMjQwNTA5MjIwODA4WjAYMRYwFAYD VQQDEw02NjM0MGVjOC02ZjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA33zTxVlNogpVT+ZBaSC19rrbArgeII5+x+PVgBCRx2buEdguTC9HiOh1G5i2 cBv5hC+Bbt1HBVScvBrk9V25wHc8UT1MElVmt02Le/7bfYThqDw32EE37zwPJimn M0Rpq4Y4SZJrHUBkffAxWVtJAtDu+pQTAHP1PXS5Kaxti8N2vGvO4WpIigPln1CG fCBtrsfxT790a5VIaQvteB/Ak/0lNOAtwHFsUz1NbZos4hL6WHzyYjqiJaV5pcub d5T2+LBNAJAACL4POzs9voihNlpy7N7jNWdRZnz440tsZaxlnGcqzzrVhLWt7GiJ eSUSoTgWL2ymil+6mdaVI53ZdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7lpMCi spFd2BEre5g2laBV2CIXMB8GA1UdIwQYMBaAFH5y2AGzinKrSwN24SyVQSSq5Dxt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzUzRi9CREE1N0ZGRUJD MTYxMUVBOUYyQjc0MTJDNEY5QUUwMi9mbkxZQWJPS2NxdExBM2JoTEpWQkpLcmtQ RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZuTFlBYk9LY3F0TEEzYmhMSlZCSktya1BHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzUzRi9CREE1N0ZGRUJDMTYxMUVBOUYyQjc0MTJDNEY5QUUwMi9mbkxZQWJPS2Nx dExBM2JoTEpWQkpLcmtQRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU9Uohx3zFp/3NI4MJia1ltyUTTKalTGT7uvzcyVIUbJQVn1QI0Bs7 MjuoizP4HxFnsvmmhNtBtbSkFJo/Zb6ec/5++wzfagdydVjw5Tg9ys6w8WuhvTSu +SvEnKDqOM8EZez9PUlAUZf9fJg4XYluNxqbn9R/Iam9M7uaxWkvqlBfLyDcfony zlIZ6fQjjhoZZem9T8CrB8q3xKWSlENtcueome/B/2nl01sBP2jw25Yu0ZeIKNbi HU1cJC4BuDx9102P8lfEAI4faLNGFoMAqQR5ZulffzKD01EWncC/2aXt9UU9x/QQ a2dnj3/AcjvvU1JgI9zRFgRwYUaeIU5z -----END CERTIFICATE-----Generated at Thu May 2 23:19:01 2024 by rpki-client on console-ams.rpki-client.org