$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft File: ftCxNhmz84MH3uG0Dn8neTItvm4.mft (raw, json) Hash identifier: xX7YK6t3ZIIdudAtCcGCTRjsacBIem20WYNhwqNfsbs= Subject key identifier: 31:DB:E8:02:37:1A:10:E4:2B:35:37:20:0E:84:5C:97:F0:14:77:65 Authority key identifier: 7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E Certificate issuer: /CN=A91A7EA5/serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E Certificate serial: 0BB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft Manifest number: 0B9F Signing time: Sat 18 May 2024 19:18:08 +0000 Manifest this update: Sat 18 May 2024 19:18:08 +0000 Manifest next update: Sat 25 May 2024 19:18:08 +0000 Files and hashes: 1: ftCxNhmz84MH3uG0Dn8neTItvm4.crl (hash: 38AsbtVu+ELcxTUGAVHfsB1F6WQiYGRP6ufUyLiW+b0=) 2: 93E73ABE833811ECA0A7120DC4F9AE02.roa (hash: zt5mlkuL79j13v4muRi6EDk6EGbk+65+ZTDU4JrlEu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2996 (0xbb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7EA5/serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E Validity Not Before: May 18 19:18:08 2024 GMT Not After : May 25 19:18:08 2024 GMT Subject: CN=6648fef0-ff80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ab:a7:b8:9a:c8:7e:51:c2:2b:8b:59:40:07: 5c:ca:45:e4:f8:c0:0b:70:63:23:95:0e:de:ff:df: da:55:02:67:7b:1c:21:a7:10:d8:79:68:fa:a0:e3: 63:8c:3d:86:2b:c7:e9:23:b4:b1:0b:5f:42:35:aa: 59:08:45:ac:7d:c9:d8:f5:db:a8:07:8c:d9:7a:ea: 17:36:f3:ed:c4:d4:38:69:28:e8:ce:da:2d:45:fc: 55:c0:53:aa:80:e5:36:a0:35:3f:71:cd:20:ea:77: cd:d7:88:4e:2c:d7:87:c3:d3:1d:92:ff:61:07:f0: 53:de:72:8e:53:89:07:ba:29:36:8c:60:56:51:c4: 8f:8a:a0:26:b4:9d:c4:89:0f:54:12:de:e1:f8:db: ee:7f:8e:c3:5b:a3:0a:46:ca:52:72:8b:3c:af:99: 65:82:f4:dd:75:34:ca:e7:98:a3:1e:dc:47:8d:17: 84:b6:7f:aa:ff:af:ae:83:c2:09:ed:73:4c:c4:40: 01:45:0f:5e:64:68:c3:8f:10:80:f5:fd:14:85:40: a4:b7:32:12:7e:67:49:4a:a8:92:1d:04:1f:d1:f7: ea:a4:77:7a:1d:3c:75:d3:ba:5e:af:8f:05:f1:0c: 02:59:5c:03:50:cc:8e:73:16:ab:65:76:80:b1:fa: 16:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DB:E8:02:37:1A:10:E4:2B:35:37:20:0E:84:5C:97:F0:14:77:65 X509v3 Authority Key Identifier: keyid:7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:74:aa:70:51:f1:78:e6:c6:df:4b:67:a2:eb:9a:0c:b3:f5: 82:bb:84:d6:6b:59:fc:f2:19:0d:57:d1:4a:b4:f3:a2:ce:bc: e9:e5:28:30:9e:69:9d:46:e1:f6:5f:fa:2f:12:d3:08:c6:08: d7:18:26:46:d5:c0:01:42:ab:87:99:cc:51:b1:dc:36:76:6b: c9:bf:e0:4e:df:0c:ed:21:5a:c3:64:80:8b:8e:13:df:64:fa: a5:4d:5e:3c:8a:66:82:f7:78:31:be:c8:65:00:86:10:8d:b0: 8a:94:31:9b:fc:98:96:80:f6:6c:8f:ee:52:19:80:e7:86:66: f6:3a:23:01:86:35:a1:cb:70:e6:c8:0c:b1:61:64:7b:eb:0f: 81:11:c6:7b:47:3a:6b:6d:bf:b6:03:a7:05:82:7b:fe:c3:77: 9c:13:69:38:20:b3:d1:05:a5:68:09:b8:fa:9d:b9:73:96:25: 5e:e2:ba:02:81:13:e3:f5:35:82:be:d6:7b:71:56:0d:59:2e: d6:b4:4b:41:8a:c0:1d:3a:03:47:c5:b7:cb:4f:21:33:24:b4: 30:09:f1:03:67:05:70:d9:b4:5e:f6:4d:28:fb:85:ce:6a:d7: 1e:29:29:04:a5:c3:3f:5b:80:e2:0e:f6:8e:90:6f:45:f9:83: 0a:d5:40:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdFQTUxMTAvBgNVBAUTKDdFRDBCMTM2MTlCM0YzODMwN0RFRTFCNDBFN0YyNzc5 MzIyREJFNkUwHhcNMjQwNTE4MTkxODA4WhcNMjQwNTI1MTkxODA4WjAYMRYwFAYD VQQDEw02NjQ4ZmVmMC1mZjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvaunuJrIflHCK4tZQAdcykXk+MALcGMjlQ7e/9/aVQJnexwhpxDYeWj6oONj jD2GK8fpI7SxC19CNapZCEWsfcnY9duoB4zZeuoXNvPtxNQ4aSjoztotRfxVwFOq gOU2oDU/cc0g6nfN14hOLNeHw9Mdkv9hB/BT3nKOU4kHuik2jGBWUcSPiqAmtJ3E iQ9UEt7h+Nvuf47DW6MKRspScos8r5llgvTddTTK55ijHtxHjReEtn+q/6+ug8IJ 7XNMxEABRQ9eZGjDjxCA9f0UhUCktzISfmdJSqiSHQQf0ffqpHd6HTx107per48F 8QwCWVwDUMyOcxarZXaAsfoWSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDHb6AI3 GhDkKzU3IA6EXJfwFHdlMB8GA1UdIwQYMBaAFH7QsTYZs/ODB97htA5/J3kyLb5u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0VBNS9DNzg0Q0Y0RTA0 NTAxMUVBOUIzMjg4MTlDNEY5QUUwMi9mdEN4Tmhtejg0TUgzdUcwRG44bmVUSXR2 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0Q3hOaG16ODRNSDN1RzBEbjhuZVRJdHZtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0VBNS9DNzg0Q0Y0RTA0NTAxMUVBOUIzMjg4MTlDNEY5QUUwMi9mdEN4Tmhtejg0 TUgzdUcwRG44bmVUSXR2bTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsdKpwUfF45sbfS2ei65oMs/WCu4TWa1n88hkNV9FKtPOizrzp5Sgw nmmdRuH2X/ovEtMIxgjXGCZG1cABQquHmcxRsdw2dmvJv+BO3wztIVrDZICLjhPf ZPqlTV48imaC93gxvshlAIYQjbCKlDGb/JiWgPZsj+5SGYDnhmb2OiMBhjWhy3Dm yAyxYWR76w+BEcZ7Rzprbb+2A6cFgnv+w3ecE2k4ILPRBaVoCbj6nblzliVe4roC gRPj9TWCvtZ7cVYNWS7WtEtBisAdOgNHxbfLTyEzJLQwCfEDZwVw2bRe9k0o+4XO atceKSkEpcM/W4DiDvaOkG9F+YMK1UDR -----END CERTIFICATE-----Generated at Sat May 18 19:56:06 2024 by rpki-client on console-fra.rpki-client.org