$ rpki-client -vvf rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft File: fkTc6XLxPIDlNLLmhf4dKg12FRI.mft (raw, json) Hash identifier: s4ygSCX4SL3Ny4P/w9kTwBvhDGsB3JEi7Hr1ZRfi/vQ= Subject key identifier: A6:EA:04:09:23:E3:36:BA:31:BE:89:C9:1E:8C:06:01:A9:D8:2C:35 Authority key identifier: 7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12 Certificate issuer: /CN=A917270F/serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft Manifest number: 01C5 Signing time: Sun 19 May 2024 04:27:33 +0000 Manifest this update: Sun 19 May 2024 04:27:32 +0000 Manifest next update: Sun 26 May 2024 04:27:32 +0000 Files and hashes: 1: fkTc6XLxPIDlNLLmhf4dKg12FRI.crl (hash: lc/D8KKL3QYNqmLXxrF8WhMjVSfciiQGkImaEn98igc=) 2: FC30C80A34EF11EEB8AE456DC4F9AE02.roa (hash: N3cOFHb0uCiPeuu/37pwn8vkx9Zpt6TeJbKhwrin6l0=) 3: 4B0B5F9434F011EEBB58A637C4F9AE02.roa (hash: uU6/IpU1DxEBqRCwO7LCFA2XtYeatD3hsh1AAU+h4h8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917270F/serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512 Validity Not Before: May 19 04:27:32 2024 GMT Not After : May 26 04:27:32 2024 GMT Subject: CN=66497fb5-14a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e6:64:5d:e8:9c:ae:f6:30:52:a5:85:ec:b4: a8:2d:14:bb:a3:5c:ce:a5:12:4d:ea:43:98:99:82: e1:8c:12:f4:a8:4d:82:85:1c:6d:80:30:6b:b2:59: 28:f0:6c:57:40:5a:3c:bb:4f:2f:a7:6e:a8:4b:cc: e0:59:e6:1a:60:59:4f:5f:00:7e:86:51:04:f4:1e: 4c:56:89:81:38:0a:c4:c3:32:5f:d0:f9:c4:e8:13: 38:b8:bf:ee:a5:5f:91:76:6a:d6:1d:57:b0:f2:51: 5e:a4:b3:c7:30:48:db:37:cc:27:5d:ea:29:35:89: d3:82:4e:ee:4b:a3:f0:9e:dd:7f:ca:76:f6:c7:28: c0:d5:c6:bc:f2:cb:83:57:ee:ec:6e:df:58:ff:8a: c2:2e:a8:20:ea:81:af:b0:de:5d:1b:f9:da:b0:40: 98:f2:8d:f0:c5:c3:d1:a9:61:18:d8:28:5f:e6:66: d8:f7:28:b8:5c:b0:d7:de:c6:e2:c8:8c:ac:0b:73: 20:af:e5:a5:db:b4:43:9c:43:87:cf:ea:54:ed:65: 54:92:a3:ea:c4:49:10:d4:25:55:a9:0e:2f:48:db: 28:67:a8:1c:3e:2e:66:ed:37:1c:a3:36:76:da:0b: 49:c5:ba:08:92:92:8c:1f:4a:c6:ee:fb:f1:6e:1c: 46:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:EA:04:09:23:E3:36:BA:31:BE:89:C9:1E:8C:06:01:A9:D8:2C:35 X509v3 Authority Key Identifier: keyid:7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:b4:76:27:59:82:f5:8b:7d:54:53:e0:a5:f0:c0:e7:19:d9: 7c:43:d8:d3:31:ee:d0:bf:46:6b:85:ca:dc:00:14:8a:8c:8e: ef:23:5a:36:cb:0c:00:26:f5:f1:d2:26:61:b9:11:92:51:e3: ed:00:a8:9d:30:16:14:ae:8f:c3:ab:4c:c7:99:58:2e:a0:06: af:3a:f3:6b:91:02:ce:fc:e7:b5:1d:ed:72:84:8d:ef:26:9b: 29:d4:0f:f8:38:59:b2:26:73:d4:ca:fb:98:b7:f7:9e:23:c7: cd:2a:6e:ca:4d:97:0e:fc:96:90:84:39:b3:8d:9f:3f:79:35: ee:58:6a:5b:00:86:1e:98:07:32:5f:7d:11:34:72:a6:99:ca: 1f:ef:c7:90:2d:59:ed:e8:23:fe:16:59:02:ce:4a:9c:49:2b: 14:e0:48:d3:10:6c:8c:fe:2b:68:fe:a1:2b:9b:51:6b:07:9a: df:d6:07:64:1c:87:e1:92:c8:75:f0:40:4a:64:79:09:02:2f: 0e:51:01:5b:97:3e:7c:1e:63:db:4c:2c:ba:f5:2b:95:d6:84: 28:26:8f:89:4d:94:03:58:c9:da:13:81:23:01:a3:47:fa:92: ba:0f:b1:a4:b1:d7:95:05:67:df:7e:ae:14:28:45:e1:aa:84: 6a:a9:86:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI3MEYxMTAvBgNVBAUTKDdFNDREQ0U5NzJGMTNDODBFNTM0QjJFNjg1RkUxRDJB MEQ3NjE1MTIwHhcNMjQwNTE5MDQyNzMyWhcNMjQwNTI2MDQyNzMyWjAYMRYwFAYD VQQDEw02NjQ5N2ZiNS0xNGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0uZkXeicrvYwUqWF7LSoLRS7o1zOpRJN6kOYmYLhjBL0qE2ChRxtgDBrslko 8GxXQFo8u08vp26oS8zgWeYaYFlPXwB+hlEE9B5MVomBOArEwzJf0PnE6BM4uL/u pV+RdmrWHVew8lFepLPHMEjbN8wnXeopNYnTgk7uS6Pwnt1/ynb2xyjA1ca88suD V+7sbt9Y/4rCLqgg6oGvsN5dG/nasECY8o3wxcPRqWEY2Chf5mbY9yi4XLDX3sbi yIysC3Mgr+Wl27RDnEOHz+pU7WVUkqPqxEkQ1CVVqQ4vSNsoZ6gcPi5m7TccozZ2 2gtJxboIkpKMH0rG7vvxbhxGKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKbqBAkj 4za6Mb6JyR6MBgGp2Cw1MB8GA1UdIwQYMBaAFH5E3Oly8TyA5TSy5oX+HSoNdhUS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjcwRi9EQzVFNzRDQTA4 RTgxMUVEQjlFMUI2MzNDNEY5QUUwMi9ma1RjNlhMeFBJRGxOTExtaGY0ZEtnMTJG UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZrVGM2WEx4UElEbE5MTG1oZjRkS2cxMkZSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjcwRi9EQzVFNzRDQTA4RTgxMUVEQjlFMUI2MzNDNEY5QUUwMi9ma1RjNlhMeFBJ RGxOTExtaGY0ZEtnMTJGUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBtHYnWYL1i31UU+Cl8MDnGdl8Q9jTMe7Qv0ZrhcrcABSKjI7vI1o2 ywwAJvXx0iZhuRGSUePtAKidMBYUro/Dq0zHmVguoAavOvNrkQLO/Oe1He1yhI3v Jpsp1A/4OFmyJnPUyvuYt/eeI8fNKm7KTZcO/JaQhDmzjZ8/eTXuWGpbAIYemAcy X30RNHKmmcof78eQLVnt6CP+FlkCzkqcSSsU4EjTEGyM/ito/qErm1FrB5rf1gdk HIfhksh18EBKZHkJAi8OUQFblz58HmPbTCy69SuV1oQoJo+JTZQDWMnaE4EjAaNH +pK6D7GksdeVBWfffq4UKEXhqoRqqYYg -----END CERTIFICATE-----Generated at Sun May 19 04:56:55 2024 by rpki-client on console-fra.rpki-client.org