$ rpki-client -vvf rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.mft File: FTtjqTdzsliYghhmVd7zBEbdhg0.mft (raw, json) Hash identifier: 8UAJUR+sJ/zXSBpakhUz2NsTV/lBRuzb1OPe4HPR31k= Subject key identifier: 49:5E:B7:2E:C3:E8:DB:22:55:73:59:2C:AB:57:07:7D:50:3D:B4:1B Authority key identifier: 15:3B:63:A9:37:73:B2:58:98:82:18:66:55:DE:F3:04:46:DD:86:0D Certificate issuer: /CN=A91810B4/serialNumber=153B63A93773B2589882186655DEF30446DD860D Certificate serial: 01A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTtjqTdzsliYghhmVd7zBEbdhg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.mft Manifest number: 01A0 Signing time: Sun 19 May 2024 04:38:14 +0000 Manifest this update: Sun 19 May 2024 04:38:14 +0000 Manifest next update: Sun 26 May 2024 04:38:14 +0000 Files and hashes: 1: FTtjqTdzsliYghhmVd7zBEbdhg0.crl (hash: NNFTFq7z/dQ4d4yAZc90q5n5vYphA5qcFpnr+ihP+vM=) 2: 27A32D7A16BA11EDB0E9E464C4F9AE02.roa (hash: 9+/uK3UhO6sPq3a6D0tmdFb5UgMPGW/QyQl9kJEknrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.crl rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTtjqTdzsliYghhmVd7zBEbdhg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91810B4/serialNumber=153B63A93773B2589882186655DEF30446DD860D Validity Not Before: May 19 04:38:14 2024 GMT Not After : May 26 04:38:14 2024 GMT Subject: CN=66498236-b140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:6a:02:b3:45:96:81:37:76:d7:87:d6:73:3f: 33:5e:38:25:e5:14:c8:08:ef:07:0d:16:77:bb:e4: 0b:2c:a0:df:5b:2f:27:83:e8:51:24:d8:86:33:6d: 8f:30:ac:f6:0e:5f:8d:5f:0c:a6:fb:f6:3b:ce:b0: 88:fd:66:e0:aa:5b:15:17:73:5a:9a:7f:7a:1a:29: 8c:6e:c0:a1:a4:e6:1a:94:83:ac:1e:7e:71:28:5f: 04:cf:3f:2b:16:d5:f5:15:de:91:7a:35:7b:52:8b: b7:6b:aa:4b:56:0e:18:38:68:b1:bf:84:60:18:94: eb:8f:5b:7d:a2:bc:f2:e1:b0:bf:8b:81:29:50:ab: a5:13:a4:47:48:f0:67:c3:3b:4b:da:ad:51:0f:67: 16:5d:2b:42:c5:a5:0b:c0:3b:73:51:57:f9:77:57: f7:9d:e1:78:d7:ff:9f:0b:71:ca:91:c0:46:94:b8: 1b:0e:0f:82:df:68:51:2d:7f:ca:c1:92:dc:21:4a: 01:91:ae:ad:ad:f3:e7:9f:66:e7:8e:d3:6b:b7:32: bc:44:fa:ec:9b:fc:42:56:8a:e4:45:44:dc:1a:7c: ce:e1:78:70:cd:f1:04:30:68:d3:08:25:22:18:e3: ca:28:94:ce:a6:15:13:74:7e:31:f5:83:63:27:b3: f7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:5E:B7:2E:C3:E8:DB:22:55:73:59:2C:AB:57:07:7D:50:3D:B4:1B X509v3 Authority Key Identifier: keyid:15:3B:63:A9:37:73:B2:58:98:82:18:66:55:DE:F3:04:46:DD:86:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTtjqTdzsliYghhmVd7zBEbdhg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:19:a6:16:a4:2b:2e:83:74:27:47:22:0b:a6:ff:b6:2d:02: 55:6a:29:6b:de:83:11:4e:ad:dc:a6:d1:cc:ac:0a:1a:ae:a5: 17:2a:17:f5:ad:91:4e:5f:15:44:77:25:b7:30:bb:f9:bc:6a: b5:cd:41:28:61:47:03:5f:91:6a:35:4d:c3:7f:4c:ef:a0:04: ec:b2:8d:90:11:ae:e7:b3:01:d4:05:6d:f5:f9:4a:1c:b8:96: 7c:9d:8f:7d:b7:c7:fe:94:11:f6:52:e6:9b:9c:fd:e6:a7:a7: ea:b5:68:0f:60:f4:63:94:07:ac:b6:a8:2b:b5:60:25:8f:6b: 28:c3:65:91:4b:07:cb:fb:59:37:f4:76:f4:28:b8:ac:83:93: 73:da:79:41:8e:56:10:e1:77:a2:58:e3:c6:ac:aa:a5:ee:82: 93:51:fd:8f:da:92:16:1f:6e:fb:43:7b:ba:a4:ee:a1:09:c2: 5b:4e:e5:1d:42:7a:25:b8:ee:55:a0:80:e0:d9:f5:ea:63:9f: 68:5a:5c:c0:90:a0:03:06:04:8b:2f:11:23:29:f6:0a:dd:69: d7:65:d1:24:a8:88:60:3a:ec:bb:4a:73:bf:5d:be:b8:ec:1e: cb:09:c5:19:c6:e9:6c:f7:68:ca:bc:d1:76:84:91:a9:dc:ea: 59:3d:51:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEwQjQxMTAvBgNVBAUTKDE1M0I2M0E5Mzc3M0IyNTg5ODgyMTg2NjU1REVGMzA0 NDZERDg2MEQwHhcNMjQwNTE5MDQzODE0WhcNMjQwNTI2MDQzODE0WjAYMRYwFAYD VQQDEw02NjQ5ODIzNi1iMTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6WoCs0WWgTd214fWcz8zXjgl5RTICO8HDRZ3u+QLLKDfWy8ng+hRJNiGM22P MKz2Dl+NXwym+/Y7zrCI/WbgqlsVF3Namn96GimMbsChpOYalIOsHn5xKF8Ezz8r FtX1Fd6RejV7Uou3a6pLVg4YOGixv4RgGJTrj1t9orzy4bC/i4EpUKulE6RHSPBn wztL2q1RD2cWXStCxaULwDtzUVf5d1f3neF41/+fC3HKkcBGlLgbDg+C32hRLX/K wZLcIUoBka6trfPnn2bnjtNrtzK8RPrsm/xCVorkRUTcGnzO4XhwzfEEMGjTCCUi GOPKKJTOphUTdH4x9YNjJ7P3dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFElety7D 6NsiVXNZLKtXB31QPbQbMB8GA1UdIwQYMBaAFBU7Y6k3c7JYmIIYZlXe8wRG3YYN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTBCNC83N0Q1MkFBMDE2 QjUxMUVEOTgwM0EyNzJDNEY5QUUwMi9GVHRqcVRkenNsaVlnaGhtVmQ3ekJFYmRo ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZUdGpxVGR6c2xpWWdoaG1WZDd6QkViZGhnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTBCNC83N0Q1MkFBMDE2QjUxMUVEOTgwM0EyNzJDNEY5QUUwMi9GVHRqcVRkenNs aVlnaGhtVmQ3ekJFYmRoZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqGaYWpCsug3QnRyILpv+2LQJVailr3oMRTq3cptHMrAoarqUXKhf1 rZFOXxVEdyW3MLv5vGq1zUEoYUcDX5FqNU3Df0zvoATsso2QEa7nswHUBW31+Uoc uJZ8nY99t8f+lBH2UuabnP3mp6fqtWgPYPRjlAestqgrtWAlj2sow2WRSwfL+1k3 9Hb0KLisg5Nz2nlBjlYQ4XeiWOPGrKql7oKTUf2P2pIWH277Q3u6pO6hCcJbTuUd QnoluO5VoIDg2fXqY59oWlzAkKADBgSLLxEjKfYK3WnXZdEkqIhgOuy7SnO/Xb64 7B7LCcUZxuls92jKvNF2hJGp3OpZPVHr -----END CERTIFICATE-----Generated at Sun May 19 05:48:51 2024 by rpki-client on console-fra.rpki-client.org