$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft File: fPkomAMwIeA7O5PA7riCE8f7XsU.mft (raw, json) Hash identifier: CrKJKKFPjWDa30HVA54SIlAmfk3yb63/HQFxHPp7K4o= Subject key identifier: 3F:B2:E0:7F:C4:DC:12:BC:92:71:9A:73:1D:29:10:C1:40:80:9F:54 Authority key identifier: 7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 Certificate issuer: /CN=A91BDA06/serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Certificate serial: 0E7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft Manifest number: 0E78 Signing time: Fri 31 May 2024 18:52:14 +0000 Manifest this update: Fri 31 May 2024 18:52:14 +0000 Manifest next update: Fri 07 Jun 2024 18:52:14 +0000 Files and hashes: 1: fPkomAMwIeA7O5PA7riCE8f7XsU.crl (hash: q2AIg1kGznJKnX6y5oapQNCM5aXldkLA+1sCALv0z1Q=) 2: DCE5E9CA713611E9A71D3311C4F9AE02.roa (hash: MfoY7jUmOisar1psO6c2ywlJIDw6cqEA61WVzaSNP5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3710 (0xe7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDA06/serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Validity Not Before: May 31 18:52:14 2024 GMT Not After : Jun 7 18:52:14 2024 GMT Subject: CN=665a1c5e-1bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8d:e5:92:cf:64:2f:50:6b:7f:a5:1c:a1:d3: 24:94:5e:7b:a2:eb:ef:d4:c3:51:89:fc:85:94:2d: 44:e8:e0:f4:e3:de:51:2e:22:97:17:63:97:27:9c: 30:f8:58:f0:72:7a:7b:b8:5d:b2:bf:7f:77:2d:05: a1:73:d2:0a:9e:71:4b:c2:2d:40:dd:23:a2:be:87: 6e:61:c7:8f:0b:35:25:bb:31:c8:15:c8:75:9b:a2: 13:75:b8:e8:2c:17:7d:05:d2:e0:e9:05:66:29:b2: f0:8b:4b:aa:de:96:66:48:03:5d:c9:7e:f9:ee:72: 7e:14:cc:90:d0:ea:41:16:bd:7a:70:21:01:2b:a9: 15:16:25:26:85:9f:ef:4a:86:84:60:c4:ed:e8:97: 3c:a3:a8:aa:98:04:15:bd:8a:0a:c8:0b:34:89:1f: 01:d4:b1:10:7c:be:0a:48:d5:88:62:c1:03:f1:d2: de:95:ba:e9:4c:8a:aa:5f:25:8b:85:db:0a:f2:de: 00:88:32:a2:90:a8:1b:cd:0a:16:8a:68:5f:7c:ae: 4a:08:a1:a6:d6:91:b6:5e:16:d2:9b:d6:bb:7a:69: 93:fa:d0:b5:7d:1e:7e:ad:45:8b:ac:7b:41:81:91: dd:83:f6:17:6f:90:9f:25:8e:e4:9c:03:83:ce:d9: 54:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B2:E0:7F:C4:DC:12:BC:92:71:9A:73:1D:29:10:C1:40:80:9F:54 X509v3 Authority Key Identifier: keyid:7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:dd:03:59:dd:6c:46:aa:c0:c5:4c:fa:74:3b:a3:4e:86:97: 3a:53:9d:43:a3:3f:7d:a3:8c:72:0a:84:97:17:a4:a8:05:72: 06:09:ca:7c:f2:1d:2e:63:01:cf:d3:41:22:b1:8f:ae:06:c4: bd:f9:f8:fd:95:e1:96:c7:be:23:33:aa:b7:6b:06:02:e7:47: f5:66:6b:1d:f2:cc:a9:a5:7c:4a:0a:4b:31:b4:0f:a1:24:65: 29:5b:d7:de:dc:3e:0d:f3:62:3f:7a:60:3c:6d:2c:f4:3b:69: c0:05:9a:52:45:83:2e:8d:e4:1d:7c:da:f1:4a:ce:a5:14:41: d2:41:86:70:98:9d:ac:1e:6d:dc:46:65:a0:1c:8c:ee:a8:18: e4:64:60:af:54:b9:3e:0e:32:6a:a8:bc:a3:8e:f0:b0:bc:0a: e6:46:59:5f:56:77:28:fc:27:c7:f6:7f:b0:c1:c8:94:3e:28: af:12:43:25:b0:10:bb:2f:bc:36:5a:31:b0:6f:1e:59:d9:72: 32:e3:1c:94:3d:58:e8:74:40:f9:a8:63:66:88:c0:89:67:53: a9:c5:d2:3b:de:d7:80:ef:05:a7:05:eb:fe:d8:de:04:74:de: 3c:03:58:9b:15:6b:46:92:c2:48:ee:a1:89:f4:c1:ad:14:75: 74:27:09:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRBMDYxMTAvBgNVBAUTKDdDRjkyODk4MDMzMDIxRTAzQjNCOTNDMEVFQjg4MjEz QzdGQjVFQzUwHhcNMjQwNTMxMTg1MjE0WhcNMjQwNjA3MTg1MjE0WjAYMRYwFAYD VQQDEw02NjVhMWM1ZS0xYmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA043lks9kL1Brf6UcodMklF57ouvv1MNRifyFlC1E6OD0495RLiKXF2OXJ5ww +Fjwcnp7uF2yv393LQWhc9IKnnFLwi1A3SOivoduYcePCzUluzHIFch1m6ITdbjo LBd9BdLg6QVmKbLwi0uq3pZmSANdyX757nJ+FMyQ0OpBFr16cCEBK6kVFiUmhZ/v SoaEYMTt6Jc8o6iqmAQVvYoKyAs0iR8B1LEQfL4KSNWIYsED8dLelbrpTIqqXyWL hdsK8t4AiDKikKgbzQoWimhffK5KCKGm1pG2XhbSm9a7emmT+tC1fR5+rUWLrHtB gZHdg/YXb5CfJY7knAODztlU0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+y4H/E 3BK8knGacx0pEMFAgJ9UMB8GA1UdIwQYMBaAFHz5KJgDMCHgOzuTwO64ghPH+17F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREEwNi8yQkZDODk0ODcx MzYxMUU5ODY5REJGMTBDNEY5QUUwMi9mUGtvbUFNd0llQTdPNVBBN3JpQ0U4ZjdY c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZQa29tQU13SWVBN081UEE3cmlDRThmN1hzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REEwNi8yQkZDODk0ODcxMzYxMUU5ODY5REJGMTBDNEY5QUUwMi9mUGtvbUFNd0ll QTdPNVBBN3JpQ0U4ZjdYc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB3QNZ3WxGqsDFTPp0O6NOhpc6U51Doz99o4xyCoSXF6SoBXIGCcp8 8h0uYwHP00EisY+uBsS9+fj9leGWx74jM6q3awYC50f1Zmsd8syppXxKCksxtA+h JGUpW9fe3D4N82I/emA8bSz0O2nABZpSRYMujeQdfNrxSs6lFEHSQYZwmJ2sHm3c RmWgHIzuqBjkZGCvVLk+DjJqqLyjjvCwvArmRllfVnco/CfH9n+wwciUPiivEkMl sBC7L7w2WjGwbx5Z2XIy4xyUPVjodED5qGNmiMCJZ1OpxdI73teA7wWnBev+2N4E dN48A1ibFWtGksJI7qGJ9MGtFHV0Jwlk -----END CERTIFICATE-----Generated at Fri May 31 19:47:52 2024 by rpki-client on console-fra.rpki-client.org