$ rpki-client -vvf rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft File: FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft (raw, json) Hash identifier: fmHOKjDyF8cYjwLMobFdD7KArclG0XVV0ZhN4WpOEcI= Subject key identifier: 12:DC:E0:C8:E2:8A:DE:00:41:B3:39:AF:C3:B8:08:C3:72:D0:DF:DD Authority key identifier: 14:20:F8:07:09:DD:D3:DF:C3:F5:11:56:55:03:CE:F4:44:4B:ED:C3 Certificate issuer: /CN=A914F5BA/serialNumber=1420F80709DDD3DFC3F511565503CEF4444BEDC3 Certificate serial: 0831 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft Manifest number: 082B Signing time: Fri 31 May 2024 22:33:55 +0000 Manifest this update: Fri 31 May 2024 22:33:54 +0000 Manifest next update: Fri 07 Jun 2024 22:33:54 +0000 Files and hashes: 1: FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl (hash: vgAts7fk7JhiOSxbTqkwkQucwFeS//sPPTJ6/RbEPIs=) 2: E9E80356AD6211EABEDF046AC4F9AE02.roa (hash: 7BeIC/3MCE4ltdZdNYUXGP6p5TOokjZ4G97ql300lNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2097 (0x831) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F5BA/serialNumber=1420F80709DDD3DFC3F511565503CEF4444BEDC3 Validity Not Before: May 31 22:33:54 2024 GMT Not After : Jun 7 22:33:54 2024 GMT Subject: CN=665a5052-62c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d9:c6:34:04:9d:6b:f9:1c:90:41:4b:5e:28: b9:4a:5a:58:76:a1:38:87:08:92:64:75:fb:b5:22: c3:3a:43:49:6a:5b:9e:75:40:f7:36:ed:41:0e:3c: 11:34:1d:e1:a5:00:7e:43:0c:9d:b5:17:62:90:bd: d8:cf:bc:82:c0:64:81:32:7b:97:f6:0f:03:af:ad: d0:15:53:db:d7:64:8c:9a:27:71:30:a8:12:b2:7b: 1c:f5:f7:28:47:0d:ae:93:04:db:2b:ea:7d:fc:ca: ba:7d:6f:8e:20:b0:72:ef:4e:f4:26:20:78:7e:18: d5:ff:b8:56:4a:39:be:fb:0a:90:8f:ee:5e:99:08: f8:82:c0:0a:75:0c:d9:23:c0:1e:dd:0f:00:f4:23: 9d:c6:06:93:05:00:42:47:11:14:d4:97:ae:bb:44: 05:a5:bf:88:fd:2a:72:10:f5:48:a7:67:c4:70:9f: 3e:9a:53:e9:76:6e:ba:85:81:e9:dd:74:b3:4e:0f: 0b:6b:12:bd:7b:61:a7:a2:cd:12:1a:cd:b5:36:a8: 6a:d6:8f:81:cf:57:11:dd:ce:3d:70:4d:85:9a:e3: ca:83:75:e2:28:30:db:88:7d:38:d4:97:28:c3:e2: 83:66:68:51:84:ed:4c:76:78:64:78:a4:7a:d9:08: 83:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DC:E0:C8:E2:8A:DE:00:41:B3:39:AF:C3:B8:08:C3:72:D0:DF:DD X509v3 Authority Key Identifier: keyid:14:20:F8:07:09:DD:D3:DF:C3:F5:11:56:55:03:CE:F4:44:4B:ED:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:24:67:64:b4:2e:ae:e8:33:73:0f:d1:6e:e2:72:78:49:ad: 58:ec:73:53:6a:cf:2e:50:44:ce:84:2a:35:bd:4f:ee:06:a8: 2d:e6:5d:03:03:95:c6:f5:69:65:ef:f0:8e:1c:75:6f:d8:e3: cf:87:88:10:ea:e9:c8:aa:60:80:78:6b:1f:1a:9e:99:45:e7: 7f:90:5d:ad:84:99:bf:15:85:33:1c:8a:7a:ea:68:0b:0e:11: 99:d7:8c:ad:3c:01:de:6c:4f:6a:f6:fb:05:5a:5e:17:5b:71: 3d:08:93:57:8f:f8:cf:6d:e4:4f:6e:6e:72:5e:b1:03:3d:46: 89:cd:28:bc:a9:b2:84:83:30:0b:fb:45:e2:66:72:38:e2:c7: 1d:60:cd:a0:ce:a7:6c:85:3b:54:68:65:34:d0:98:e4:f7:8e: 2c:a6:80:8c:9c:3d:49:0c:38:38:e2:ed:28:b5:87:34:d4:26: 27:03:38:8c:8d:b1:a9:1a:e3:4f:18:81:70:bb:04:a4:fe:aa: ed:51:b7:14:97:f7:4f:1e:ad:c7:db:c1:bb:79:6e:d3:16:12: 49:8d:f3:0e:82:67:6f:65:61:e5:0a:dd:09:25:57:0c:77:50: 60:05:8d:00:66:00:e3:bd:53:5f:7c:b2:0d:53:2f:c7:b5:7b: b7:40:f3:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY1QkExMTAvBgNVBAUTKDE0MjBGODA3MDlEREQzREZDM0Y1MTE1NjU1MDNDRUY0 NDQ0QkVEQzMwHhcNMjQwNTMxMjIzMzU0WhcNMjQwNjA3MjIzMzU0WjAYMRYwFAYD VQQDEw02NjVhNTA1Mi02MmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytnGNASda/kckEFLXii5SlpYdqE4hwiSZHX7tSLDOkNJaluedUD3Nu1BDjwR NB3hpQB+QwydtRdikL3Yz7yCwGSBMnuX9g8Dr63QFVPb12SMmidxMKgSsnsc9fco Rw2ukwTbK+p9/Mq6fW+OILBy7070JiB4fhjV/7hWSjm++wqQj+5emQj4gsAKdQzZ I8Ae3Q8A9COdxgaTBQBCRxEU1Jeuu0QFpb+I/SpyEPVIp2fEcJ8+mlPpdm66hYHp 3XSzTg8LaxK9e2Gnos0SGs21Nqhq1o+Bz1cR3c49cE2FmuPKg3XiKDDbiH041Jco w+KDZmhRhO1MdnhkeKR62QiD5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLc4Mji it4AQbM5r8O4CMNy0N/dMB8GA1UdIwQYMBaAFBQg+AcJ3dPfw/URVlUDzvRES+3D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjVCQS8wNDlEQ0QyMkFE NjExMUVBOEYxQThENjNDNEY5QUUwMi9GQ0Q0QnduZDA5X0Q5UkZXVlFQTzlFUkw3 Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0ZDRDRCd25kMDlfRDlSRldWUVBPOUVSTDdjTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjVCQS8wNDlEQ0QyMkFENjExMUVBOEYxQThENjNDNEY5QUUwMi9GQ0Q0QnduZDA5 X0Q5UkZXVlFQTzlFUkw3Y00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHJGdktC6u6DNzD9Fu4nJ4Sa1Y7HNTas8uUETOhCo1vU/uBqgt5l0D A5XG9Wll7/COHHVv2OPPh4gQ6unIqmCAeGsfGp6ZRed/kF2thJm/FYUzHIp66mgL DhGZ14ytPAHebE9q9vsFWl4XW3E9CJNXj/jPbeRPbm5yXrEDPUaJzSi8qbKEgzAL +0XiZnI44scdYM2gzqdshTtUaGU00Jjk944spoCMnD1JDDg44u0otYc01CYnAziM jbGpGuNPGIFwuwSk/qrtUbcUl/dPHq3H28G7eW7TFhJJjfMOgmdvZWHlCt0JJVcM d1BgBY0AZgDjvVNffLINUy/HtXu3QPOr -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:13 2024 by rpki-client on console-ams.rpki-client.org