$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft File: -fNN9--KMQSq91p3EaUvfbGlDaQ.mft (raw, json) Hash identifier: 3PmU7/JUuMn9/xi9QYzh8l3DUYPKQbaYLFd2+gaLCXs= Subject key identifier: FB:0B:6C:C6:B6:E6:C2:7C:7B:E0:CC:D8:00:17:5E:4B:B9:CC:27:60 Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Certificate serial: 0BE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft Manifest number: 0BCF Signing time: Tue 30 Apr 2024 19:26:32 +0000 Manifest this update: Tue 30 Apr 2024 19:26:32 +0000 Manifest next update: Tue 07 May 2024 19:26:32 +0000 Files and hashes: 1: -fNN9--KMQSq91p3EaUvfbGlDaQ.crl (hash: SRoV1UQ/u2Fwug9yBwhhYXTe6ocYlB6R8kNMj5gKes0=) 2: 0D7B74CACE1111ED8BDB217CC4F9AE02.roa (hash: uH0p9W6gyErJqwQXUobMQ4l4IHk3TpFXVC4lxSYw/yc=) 3: 4AD97410632C11EE96048122C4F9AE02.roa (hash: aWVyhl403G+qwJ6jO2cb4Y7Az8v/lQUgKxECmfe73fI=) 4: 23B27B60F68011E982571C3EC4F9AE02.roa (hash: u+aZe6lXhjFNUVJNVlssesIeVBxkNnY96Z5bKTISH7k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 19:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3047 (0xbe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Validity Not Before: Apr 30 19:26:32 2024 GMT Not After : May 7 19:26:32 2024 GMT Subject: CN=663145e8-d517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:11:37:0e:89:48:5d:4a:b1:2e:0b:a4:35:4b: 37:2e:36:79:3b:49:53:55:33:8d:eb:e8:cc:60:79: 0b:36:02:89:22:6c:2e:6b:d1:86:52:8c:68:7e:86: 78:79:4c:e6:24:9e:4c:70:3d:e9:a6:d1:e3:91:46: 2e:33:1e:2e:c5:44:b4:e6:88:7f:82:45:d2:6b:7b: b0:88:b3:8d:7b:42:16:46:b7:13:aa:0b:72:e0:43: 48:f7:89:4a:75:d5:b5:d1:73:78:a1:35:55:31:83: ed:fe:05:6e:c8:49:c7:4b:ec:1c:de:10:14:f5:c1: ae:bf:69:9f:5e:a4:b8:cd:e0:0a:4f:a1:13:02:48: ba:ea:6b:30:d0:0c:8b:3f:dd:8b:e7:5f:94:88:81: 1b:65:e4:5c:7f:46:6e:ec:63:b2:e6:3a:3c:96:88: d1:15:7e:df:c7:db:07:3c:f7:fd:ce:94:e0:ac:c8: 44:7e:8d:a2:38:b8:d0:4b:15:bd:cc:36:ec:c9:7c: 19:e0:3e:7f:fc:c1:b8:36:63:5b:2d:4a:b0:7a:8c: 35:ce:b8:fd:21:7d:71:00:4c:82:c2:46:f2:6c:70: ed:73:c1:ec:f3:32:9b:3a:6c:3a:0c:f0:b9:90:68: 02:8c:ae:b7:47:9b:73:74:ab:29:9f:2c:c4:51:2d: 64:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:0B:6C:C6:B6:E6:C2:7C:7B:E0:CC:D8:00:17:5E:4B:B9:CC:27:60 X509v3 Authority Key Identifier: keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:85:c0:4d:57:f2:cf:2f:de:4b:48:a4:73:1e:71:1c:c3:95: 38:15:97:d8:d5:e0:a3:59:2c:13:46:fd:30:bc:d8:23:e0:b3: 16:22:48:9b:ac:75:90:eb:66:f5:f7:81:52:15:72:f2:31:52: 79:34:4c:5a:f6:61:58:11:ca:64:68:a0:70:1e:ce:a2:f5:8e: 3b:3e:74:06:de:67:ef:9f:9d:e2:e7:19:d5:c5:73:5d:d1:a8: 9c:6d:53:ca:26:11:ff:b0:13:61:d5:a8:2d:d9:8f:7f:69:2c: c2:52:09:0d:38:c9:cd:bf:57:f2:ab:a2:1f:7e:55:ee:d3:dd: cb:2b:b1:a7:83:92:3d:3b:72:ed:33:3e:d8:08:bd:bb:60:6b: 27:67:63:e5:f9:a5:bd:60:be:bc:58:62:ae:d8:63:c3:f3:97: ef:d2:2d:c6:26:04:30:6d:6d:f0:98:32:d0:22:3d:d3:7e:87: 42:73:22:0f:f6:3f:bf:26:b5:ca:98:7a:6e:d2:aa:dc:f4:aa: f4:12:5c:14:d3:7d:32:3a:54:04:45:a3:ea:69:5a:3f:d9:ba: 9c:92:90:03:9c:f7:9f:38:a6:1f:65:1a:1f:c1:b3:6d:e9:7a: ea:6d:54:98:cd:17:bd:ae:11:d9:97:cc:bd:65:4a:cc:8a:9e: 60:5e:4b:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE QjFBNTBEQTQwHhcNMjQwNDMwMTkyNjMyWhcNMjQwNTA3MTkyNjMyWjAYMRYwFAYD VQQDEw02NjMxNDVlOC1kNTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0BE3DolIXUqxLgukNUs3LjZ5O0lTVTON6+jMYHkLNgKJImwua9GGUoxofoZ4 eUzmJJ5McD3pptHjkUYuMx4uxUS05oh/gkXSa3uwiLONe0IWRrcTqgty4ENI94lK ddW10XN4oTVVMYPt/gVuyEnHS+wc3hAU9cGuv2mfXqS4zeAKT6ETAki66msw0AyL P92L51+UiIEbZeRcf0Zu7GOy5jo8lojRFX7fx9sHPPf9zpTgrMhEfo2iOLjQSxW9 zDbsyXwZ4D5//MG4NmNbLUqweow1zrj9IX1xAEyCwkbybHDtc8Hs8zKbOmw6DPC5 kGgCjK63R5tzdKspnyzEUS1k5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPsLbMa2 5sJ8e+DM2AAXXku5zCdgMB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2 N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEEwNi84MDFDQTU4NEY2N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01R U3E5MXAzRWFVdmZiR2xEYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLhcBNV/LPL95LSKRzHnEcw5U4FZfY1eCjWSwTRv0wvNgj4LMWIkib rHWQ62b194FSFXLyMVJ5NExa9mFYEcpkaKBwHs6i9Y47PnQG3mfvn53i5xnVxXNd 0aicbVPKJhH/sBNh1agt2Y9/aSzCUgkNOMnNv1fyq6IfflXu093LK7Gng5I9O3Lt Mz7YCL27YGsnZ2Pl+aW9YL68WGKu2GPD85fv0i3GJgQwbW3wmDLQIj3TfodCcyIP 9j+/JrXKmHpu0qrc9Kr0ElwU030yOlQERaPqaVo/2bqckpADnPefOKYfZRofwbNt 6XrqbVSYzRe9rhHZl8y9ZUrMip5gXkvO -----END CERTIFICATE-----Generated at Tue Apr 30 21:38:00 2024 by rpki-client on console-fra.rpki-client.org