$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft File: fd2N3PFW56GBobc5eyTUIJY1Pdg.mft (raw, json) Hash identifier: yQS4qxJ/ql/m+BpxZO8ssg1DOHDeqtIhHaHZwGPS/FQ= Subject key identifier: 96:C2:D8:52:E2:96:B2:F2:8B:29:58:B1:0F:9B:B5:EB:BA:9A:A5:F7 Authority key identifier: 7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8 Certificate issuer: /CN=A91A55EC/serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8 Certificate serial: 0392 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft Manifest number: 038C Signing time: Sun 19 May 2024 02:41:59 +0000 Manifest this update: Sun 19 May 2024 02:41:59 +0000 Manifest next update: Sun 26 May 2024 02:41:59 +0000 Files and hashes: 1: fd2N3PFW56GBobc5eyTUIJY1Pdg.crl (hash: 1KrtLiW3+S6+5OFOmh52iUeNPk5ljF9sJaC46iWXYWU=) 2: 8E15FBF25CFF11ECB5477E0BC4F9AE02.roa (hash: EJYgzer8+vXx8u7MJTCTkYBHErTwzRTpiwQcsCSE90E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 914 (0x392) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55EC/serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8 Validity Not Before: May 19 02:41:59 2024 GMT Not After : May 26 02:41:59 2024 GMT Subject: CN=664966f7-7375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:de:00:6e:f5:20:80:8c:a8:6c:b1:c4:a6:0a: 0f:8b:74:ff:cb:48:26:38:93:aa:74:7a:1b:3b:44: b1:70:31:79:a2:3f:5f:02:1a:77:d9:33:ae:0c:84: b0:1a:a0:37:5c:97:76:61:f3:14:32:88:69:34:9d: f8:af:1c:01:13:86:d3:eb:81:44:22:b3:1b:8f:79: ca:dd:d4:58:cd:31:78:ae:23:a5:62:af:e8:39:95: 26:2f:ec:24:a2:d9:f8:a3:70:da:43:82:b3:95:9c: c9:38:68:be:68:20:22:4f:9c:05:cf:ff:8d:4b:44: f6:6c:f7:18:e5:dc:d9:19:09:6c:60:34:ab:b2:ba: b7:95:a5:32:46:06:55:98:4a:08:62:8b:b3:e7:c4: 72:90:d1:d0:7f:0c:62:47:97:26:f9:68:f8:0c:e0: af:6e:8f:17:03:35:da:72:0c:0b:a6:9a:50:e4:a8: 07:86:02:c8:5a:aa:22:b0:91:e9:45:4c:98:bc:36: 7a:8b:f2:81:b0:94:3a:4c:6f:01:16:4c:80:b6:b9: 43:a9:42:3d:2a:b5:45:44:3d:86:61:62:9d:3a:8a: 1f:76:20:77:34:7b:25:0a:6c:78:a6:69:10:f8:09: da:6b:e9:04:b7:1b:19:06:a4:80:8a:bb:e6:64:9d: 04:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C2:D8:52:E2:96:B2:F2:8B:29:58:B1:0F:9B:B5:EB:BA:9A:A5:F7 X509v3 Authority Key Identifier: keyid:7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:a0:c6:8b:fa:f5:d0:a7:aa:23:e7:ab:32:ea:26:df:52:b9: cc:6a:05:99:f2:93:4c:6a:36:e3:2e:92:cc:fe:84:b6:5c:8a: 82:80:d8:13:89:ba:3d:a8:7c:5f:6b:93:b1:55:23:cd:8e:e1: 26:a3:ff:c9:18:1b:57:55:9c:54:ba:f6:c1:78:ca:ed:ea:e0: 78:b3:0a:39:8f:92:79:f3:f5:cb:b7:07:a9:64:cb:04:39:cc: bb:ac:99:01:6d:ac:81:76:d1:d1:84:d4:fd:13:3a:e3:c8:36: aa:17:ef:96:12:07:bc:dc:f0:85:db:e9:20:6d:14:79:4c:ce: d9:d3:d4:60:a8:92:2e:6d:67:6e:78:00:28:37:28:30:f2:6c: a0:1b:ec:ae:a7:e4:33:77:1e:f2:cd:1e:9d:cd:29:c0:8b:0c: 52:ab:9f:ab:5c:a4:ba:df:ae:a3:7b:b2:de:3b:c9:52:48:27: 7a:75:ce:40:19:fe:84:a1:bc:d8:d5:a9:ca:22:54:68:d8:bb: 6a:22:0e:c9:69:ae:a4:88:21:84:af:36:90:b9:4a:6a:ef:b6: 2c:08:15:e0:96:56:0b:51:03:68:11:fa:4d:b6:90:b7:9b:7d: 32:2a:f3:13:27:16:23:e6:81:30:7a:56:8d:23:75:45:2d:6e: 5f:9f:68:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1RUMxMTAvBgNVBAUTKDdEREQ4RERDRjE1NkU3QTE4MUExQjczOTdCMjRENDIw OTYzNTNERDgwHhcNMjQwNTE5MDI0MTU5WhcNMjQwNTI2MDI0MTU5WjAYMRYwFAYD VQQDEw02NjQ5NjZmNy03Mzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxt4AbvUggIyobLHEpgoPi3T/y0gmOJOqdHobO0SxcDF5oj9fAhp32TOuDISw GqA3XJd2YfMUMohpNJ34rxwBE4bT64FEIrMbj3nK3dRYzTF4riOlYq/oOZUmL+wk otn4o3DaQ4KzlZzJOGi+aCAiT5wFz/+NS0T2bPcY5dzZGQlsYDSrsrq3laUyRgZV mEoIYouz58RykNHQfwxiR5cm+Wj4DOCvbo8XAzXacgwLpppQ5KgHhgLIWqoisJHp RUyYvDZ6i/KBsJQ6TG8BFkyAtrlDqUI9KrVFRD2GYWKdOoofdiB3NHslCmx4pmkQ +Anaa+kEtxsZBqSAirvmZJ0EDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbC2FLi lrLyiylYsQ+bteu6mqX3MB8GA1UdIwQYMBaAFH3djdzxVuehgaG3OXsk1CCWNT3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVFQy9ERjY1REU5MjU3 ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2R0JvYmM1ZXlUVUlKWTFQ ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZkMk4zUEZXNTZHQm9iYzVleVRVSUpZMVBkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTVFQy9ERjY1REU5MjU3ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2 R0JvYmM1ZXlUVUlKWTFQZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCloMaL+vXQp6oj56sy6ibfUrnMagWZ8pNMajbjLpLM/oS2XIqCgNgT ibo9qHxfa5OxVSPNjuEmo//JGBtXVZxUuvbBeMrt6uB4swo5j5J58/XLtwepZMsE Ocy7rJkBbayBdtHRhNT9EzrjyDaqF++WEge83PCF2+kgbRR5TM7Z09RgqJIubWdu eAAoNygw8mygG+yup+Qzdx7yzR6dzSnAiwxSq5+rXKS6366je7LeO8lSSCd6dc5A Gf6EobzY1anKIlRo2LtqIg7Jaa6kiCGErzaQuUpq77YsCBXgllYLUQNoEfpNtpC3 m30yKvMTJxYj5oEwelaNI3VFLW5fn2ge -----END CERTIFICATE-----Generated at Sun May 19 03:38:15 2024 by rpki-client on console-ams.rpki-client.org