$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft File: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft (raw, json) Hash identifier: daH+QC7MRo0sAugABHBEzGuGhHLY1WLi4FtIwKUc1H8= Subject key identifier: 07:8D:DF:50:89:FD:BB:FD:6C:C5:C6:9C:B0:79:34:55:D5:45:44:F2 Authority key identifier: 15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4 Certificate issuer: /CN=A9189BB3/serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4 Certificate serial: 04C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft Manifest number: 04BC Signing time: Wed 01 May 2024 01:51:05 +0000 Manifest this update: Wed 01 May 2024 01:51:05 +0000 Manifest next update: Wed 08 May 2024 01:51:05 +0000 Files and hashes: 1: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl (hash: 4CBq3977pt07UA9+/2P5BzW+6N3Xa+rHTdpP+HjPsTQ=) 2: AB532852B38911ED825BDC70C4F9AE02.roa (hash: lI89gGOdI2wC7bAgpTLQT93m/SNfGU9hrbeNWg8jfRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 01:51:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1224 (0x4c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189BB3/serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4 Validity Not Before: May 1 01:51:05 2024 GMT Not After : May 8 01:51:05 2024 GMT Subject: CN=6631a009-5789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:93:68:7f:b4:b7:55:3d:00:af:d6:bf:d0:2f: 32:c4:23:60:7e:37:6b:a5:f7:a5:05:c4:46:a8:d5: c5:47:67:2a:f8:78:fb:05:5b:45:da:0d:59:13:0f: 96:b2:cf:d5:93:2d:ed:d3:28:80:c7:2a:8d:27:c4: bf:fc:0c:4f:f1:53:33:35:6f:f9:17:a4:e2:99:6f: 9a:d9:66:f8:05:b9:02:6d:62:d6:7a:fb:b0:6d:3e: f1:a5:12:8c:3d:2a:ba:eb:b3:a1:f8:2a:93:d6:9f: ba:df:d9:f5:c5:a0:3a:a0:8d:c1:70:eb:cf:cc:3e: 39:9b:2e:e1:e7:e7:61:7c:07:58:be:9c:44:68:84: cb:47:e2:f5:78:21:80:f3:d1:89:f3:e8:3d:45:ee: 1d:c8:dd:28:bd:2c:b1:a1:b4:da:71:22:cf:53:fb: 37:ce:a2:90:2b:56:07:8b:3e:63:88:21:33:bc:99: 43:16:3a:3b:08:7c:a7:bb:ed:a9:d9:e7:81:ba:68: f0:70:b5:e6:13:a7:8f:35:a6:6b:1e:70:0a:b3:b7: 8d:d4:37:c6:14:82:c4:d5:7c:12:8d:40:79:12:d7: ed:0f:57:bd:d9:cf:33:77:4d:17:d9:c9:bf:f7:d5: 7e:51:63:2d:a2:73:bd:71:86:2f:e0:07:2f:32:05: af:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:8D:DF:50:89:FD:BB:FD:6C:C5:C6:9C:B0:79:34:55:D5:45:44:F2 X509v3 Authority Key Identifier: keyid:15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:a4:4b:d5:da:83:a0:e1:71:41:c1:cd:55:c2:ce:cd:30:4e: 59:27:a1:80:17:c9:59:50:71:57:77:2a:db:85:9e:d1:19:e3: 29:76:69:6e:78:ae:84:0e:92:2f:bf:7a:1a:68:e9:40:51:81: 7a:f5:84:41:0c:4d:b6:65:f7:09:0b:d9:85:96:5f:3c:2e:ce: a9:ac:84:b5:ee:c7:10:05:c4:3f:5e:d1:67:11:ce:48:64:fe: eb:59:31:54:c5:3d:50:2d:91:d5:fc:51:00:f4:04:9a:d2:7b: 77:0c:a7:b0:b0:1c:0c:51:9f:be:86:4b:c9:e9:a8:4b:27:5a: 2e:b0:7b:92:9f:7f:ae:37:19:8c:88:62:bd:81:86:d2:e8:8b: 3e:26:6c:7f:43:77:20:a3:98:67:28:96:e5:e1:29:5e:17:73: 1b:ef:fb:36:30:84:82:4a:3d:5f:8a:0d:24:c0:d9:14:24:59: 84:77:f5:5d:00:90:15:0e:e8:5f:0f:e2:8e:f0:46:4e:85:19: e4:15:33:87:1d:25:53:26:67:8f:b9:7b:07:b3:29:a4:b6:ec: 6c:7b:37:e1:8b:ba:36:a6:97:49:6f:6d:03:ed:e2:47:ed:6a: 5b:1d:db:c6:19:52:7e:31:d5:e9:60:b1:82:2b:11:47:8a:bd: d6:04:57:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCQjMxMTAvBgNVBAUTKDE1MjhGNjNEMjhGM0UxMzY2OTAyQzZCNjRBRjU4NjZD Q0JBOERBQzQwHhcNMjQwNTAxMDE1MTA1WhcNMjQwNTA4MDE1MTA1WjAYMRYwFAYD VQQDEw02NjMxYTAwOS01Nzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpNof7S3VT0Ar9a/0C8yxCNgfjdrpfelBcRGqNXFR2cq+Hj7BVtF2g1ZEw+W ss/Vky3t0yiAxyqNJ8S//AxP8VMzNW/5F6TimW+a2Wb4BbkCbWLWevuwbT7xpRKM PSq667Oh+CqT1p+639n1xaA6oI3BcOvPzD45my7h5+dhfAdYvpxEaITLR+L1eCGA 89GJ8+g9Re4dyN0ovSyxobTacSLPU/s3zqKQK1YHiz5jiCEzvJlDFjo7CHynu+2p 2eeBumjwcLXmE6ePNaZrHnAKs7eN1DfGFILE1XwSjUB5EtftD1e92c8zd00X2cm/ 99V+UWMtonO9cYYv4AcvMgWvhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAeN31CJ /bv9bMXGnLB5NFXVRUTyMB8GA1UdIwQYMBaAFBUo9j0o8+E2aQLGtkr1hmzLqNrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUJCMy9BNDQ3ODY3NERG Q0UxMUVCOTU5QjUwMUZDNEY5QUUwMi9GU2oyUFNqejRUWnBBc2EyU3ZXR2JNdW8y c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTajJQU2p6NFRacEFzYTJTdldHYk11bzJzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUJCMy9BNDQ3ODY3NERGQ0UxMUVCOTU5QjUwMUZDNEY5QUUwMi9GU2oyUFNqejRU WnBBc2EyU3ZXR2JNdW8yc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjpEvV2oOg4XFBwc1Vws7NME5ZJ6GAF8lZUHFXdyrbhZ7RGeMpdmlu eK6EDpIvv3oaaOlAUYF69YRBDE22ZfcJC9mFll88Ls6prIS17scQBcQ/XtFnEc5I ZP7rWTFUxT1QLZHV/FEA9ASa0nt3DKewsBwMUZ++hkvJ6ahLJ1ousHuSn3+uNxmM iGK9gYbS6Is+Jmx/Q3cgo5hnKJbl4SleF3Mb7/s2MISCSj1fig0kwNkUJFmEd/Vd AJAVDuhfD+KO8EZOhRnkFTOHHSVTJmePuXsHsymktuxsezfhi7o2ppdJb20D7eJH 7WpbHdvGGVJ+MdXpYLGCKxFHir3WBFdq -----END CERTIFICATE-----Generated at Wed May 1 03:20:33 2024 by rpki-client on console-fra.rpki-client.org