$ rpki-client -vvf rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft File: ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft (raw, json) Hash identifier: N7Lg8zYjWvat3r28FXORzRc1vK2hB6/oO7KRiCcYNWc= Subject key identifier: B2:F7:AF:40:F1:CC:28:1C:96:43:9E:37:F2:9E:87:99:19:1C:9C:36 Authority key identifier: 7E:DE:27:65:36:54:14:EA:5C:1D:9E:49:F1:78:8D:09:4E:AB:FB:74 Certificate issuer: /CN=A91803B8/serialNumber=7EDE2765365414EA5C1D9E49F1788D094EABFB74 Certificate serial: 0A01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft Manifest number: 09F6 Signing time: Sat 18 May 2024 20:42:07 +0000 Manifest this update: Sat 18 May 2024 20:42:07 +0000 Manifest next update: Sat 25 May 2024 20:42:07 +0000 Files and hashes: 1: ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl (hash: Tz5SGDZWqLBZfXk//kLL6xgb4v/MZG5gA5kTglEnswY=) 2: 378397D8539A11EAAA519470C4F9AE02.roa (hash: GblOnvimhRhM9wmDAJ0TPkoEjzxIQCa4Y3teaol4cAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2561 (0xa01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803B8/serialNumber=7EDE2765365414EA5C1D9E49F1788D094EABFB74 Validity Not Before: May 18 20:42:07 2024 GMT Not After : May 25 20:42:07 2024 GMT Subject: CN=6649129f-df62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:49:66:3c:47:b7:63:6a:2b:47:c0:79:3d:30: 48:1b:a3:b1:0c:ff:79:ce:c2:4a:ad:d3:f4:0b:98: ac:67:e3:ea:06:48:40:04:61:aa:11:c8:00:7f:a9: a1:84:60:25:5c:6b:d4:36:d7:4f:3f:77:4b:5f:42: 91:5c:f6:52:0e:32:69:c8:35:c2:f4:87:ab:11:b0: 86:24:ca:8f:34:a5:be:23:ca:91:f5:e5:47:e9:4d: 8a:ab:5f:cd:a7:4c:08:50:ab:72:a5:d9:64:87:57: 56:df:71:c7:d9:6f:65:16:8d:51:f5:a9:78:4c:b7: ea:bc:cb:77:9c:d8:32:5c:ff:6a:14:d6:ca:de:77: 1a:88:1b:df:18:a7:fb:58:22:57:e6:32:31:49:b7: 67:e2:1f:0f:01:21:32:78:ce:5f:d1:74:9a:c4:f3: 67:d3:5b:45:15:ff:26:f6:92:91:90:6c:e0:c8:8d: 07:db:7a:83:0c:fb:d1:f8:63:56:5e:8d:cd:ac:1c: 90:70:50:de:48:fb:6c:a1:01:cb:03:74:46:57:7c: ca:c6:50:c4:83:8d:fa:e9:ab:6a:33:bb:da:fd:e3: 07:4a:c0:a6:fa:28:d5:fb:06:c8:74:b2:e6:01:d7: 52:91:b5:76:cf:29:c8:34:26:f6:e3:54:e1:ff:52: b8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F7:AF:40:F1:CC:28:1C:96:43:9E:37:F2:9E:87:99:19:1C:9C:36 X509v3 Authority Key Identifier: keyid:7E:DE:27:65:36:54:14:EA:5C:1D:9E:49:F1:78:8D:09:4E:AB:FB:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:2f:20:6d:38:be:9d:0d:6a:18:a0:fa:d6:56:78:57:b8:0e: 47:b6:bf:1a:ab:27:21:1b:e5:3b:29:08:ac:a8:a8:dc:5f:b1: 94:a2:2f:dc:40:aa:85:60:92:74:35:7e:30:e2:06:79:ea:9e: 32:3d:be:37:b6:cc:3b:d8:b4:8e:25:d1:39:19:02:33:b1:e8: 30:35:b4:ca:bd:a1:29:35:cf:75:3e:34:55:c1:13:73:38:09: 2e:d1:57:89:09:a7:81:c5:63:bf:67:67:c7:86:db:8a:cc:c9: dc:83:ac:4d:f4:be:6d:1c:98:d5:0a:fc:96:dc:74:db:e8:dc: 3f:eb:c6:63:2f:c2:a2:62:4b:d7:a0:c4:2b:ad:59:34:ab:e9: a7:a4:7b:73:8b:38:54:8c:7a:4c:fe:58:38:a4:97:ad:40:aa: a5:2a:49:4c:04:18:18:f8:e5:9c:58:0a:93:1b:bc:05:1d:ef: 9d:10:9c:a3:3c:f0:c9:84:91:26:4e:62:db:69:a7:11:46:3d: 80:04:42:1e:a4:5c:19:38:af:10:23:ab:13:ab:d5:4a:c9:66: 8a:1e:55:57:a1:1b:0d:58:6c:35:69:60:84:6c:e7:3d:05:03: 37:27:3f:bd:15:6e:1b:a6:a2:6b:f3:8c:0f:d7:76:43:66:d9: 42:71:30:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzQjgxMTAvBgNVBAUTKDdFREUyNzY1MzY1NDE0RUE1QzFEOUU0OUYxNzg4RDA5 NEVBQkZCNzQwHhcNMjQwNTE4MjA0MjA3WhcNMjQwNTI1MjA0MjA3WjAYMRYwFAYD VQQDEw02NjQ5MTI5Zi1kZjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0lmPEe3Y2orR8B5PTBIG6OxDP95zsJKrdP0C5isZ+PqBkhABGGqEcgAf6mh hGAlXGvUNtdPP3dLX0KRXPZSDjJpyDXC9IerEbCGJMqPNKW+I8qR9eVH6U2Kq1/N p0wIUKtypdlkh1dW33HH2W9lFo1R9al4TLfqvMt3nNgyXP9qFNbK3ncaiBvfGKf7 WCJX5jIxSbdn4h8PASEyeM5f0XSaxPNn01tFFf8m9pKRkGzgyI0H23qDDPvR+GNW Xo3NrByQcFDeSPtsoQHLA3RGV3zKxlDEg4366atqM7va/eMHSsCm+ijV+wbIdLLm AddSkbV2zynINCb241Th/1K4+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLL3r0Dx zCgclkOeN/Keh5kZHJw2MB8GA1UdIwQYMBaAFH7eJ2U2VBTqXB2eSfF4jQlOq/t0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNCOC8zRDZCNTkzNDUz OTkxMUVBOUVBRDRCNkZDNEY5QUUwMi9mdDRuWlRaVUZPcGNIWjVKOFhpTkNVNnIt M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0NG5aVFpVRk9wY0haNUo4WGlOQ1U2ci0zUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDNCOC8zRDZCNTkzNDUzOTkxMUVBOUVBRDRCNkZDNEY5QUUwMi9mdDRuWlRaVUZP cGNIWjVKOFhpTkNVNnItM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6LyBtOL6dDWoYoPrWVnhXuA5Htr8aqychG+U7KQisqKjcX7GUoi/c QKqFYJJ0NX4w4gZ56p4yPb43tsw72LSOJdE5GQIzsegwNbTKvaEpNc91PjRVwRNz OAku0VeJCaeBxWO/Z2fHhtuKzMncg6xN9L5tHJjVCvyW3HTb6Nw/68ZjL8KiYkvX oMQrrVk0q+mnpHtzizhUjHpM/lg4pJetQKqlKklMBBgY+OWcWAqTG7wFHe+dEJyj PPDJhJEmTmLbaacRRj2ABEIepFwZOK8QI6sTq9VKyWaKHlVXoRsNWGw1aWCEbOc9 BQM3Jz+9FW4bpqJr84wP13ZDZtlCcTBS -----END CERTIFICATE-----Generated at Sat May 18 21:24:22 2024 by rpki-client on console-fra.rpki-client.org