$ rpki-client -vvf rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.mft File: Fa9eqD_fKJoNZhz127iziIvHWOs.mft (raw, json) Hash identifier: deWchjKT3MJtfqKE/VcEELnafw319BWP54l08y0O0co= Subject key identifier: B3:AC:7E:C1:8A:51:C1:79:C8:F9:73:D7:7D:87:ED:23:D0:E5:AC:99 Authority key identifier: 15:AF:5E:A8:3F:DF:28:9A:0D:66:1C:F5:DB:B8:B3:88:8B:C7:58:EB Certificate issuer: /CN=A91C66D4/serialNumber=15AF5EA83FDF289A0D661CF5DBB8B3888BC758EB Certificate serial: 05BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fa9eqD_fKJoNZhz127iziIvHWOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.mft Manifest number: 05B7 Signing time: Sun 19 May 2024 00:11:36 +0000 Manifest this update: Sun 19 May 2024 00:11:36 +0000 Manifest next update: Sun 26 May 2024 00:11:36 +0000 Files and hashes: 1: Fa9eqD_fKJoNZhz127iziIvHWOs.crl (hash: 1eAVGcAJOVfD5bPpWptNf5WS8zxRZ391yT11KtgKEqk=) 2: A33A3E10755611ED9BD81B73C4F9AE02.roa (hash: 7IOJI4hAFKwjxkzmC8riezJXoYygnlaloMbPjQm5zHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.crl rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fa9eqD_fKJoNZhz127iziIvHWOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1470 (0x5be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C66D4/serialNumber=15AF5EA83FDF289A0D661CF5DBB8B3888BC758EB Validity Not Before: May 19 00:11:36 2024 GMT Not After : May 26 00:11:36 2024 GMT Subject: CN=664943b8-6651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4e:f2:45:2b:20:5a:13:ba:53:1c:99:0e:06: c0:b7:36:bf:c9:6d:e5:f0:12:25:f5:04:7b:d2:92: 77:3e:6f:06:df:4d:01:05:ce:ab:b6:29:c4:fb:28: 8a:78:e7:af:df:97:0f:84:d1:81:b9:5f:40:a7:b2: 9e:88:f5:31:31:ab:a0:80:02:e7:a2:e4:a9:05:02: 4f:a9:d2:01:50:47:08:46:b4:84:31:06:40:9b:63: 11:c4:e9:3e:52:c5:59:87:07:a4:08:33:68:9b:32: 1c:4f:a8:51:10:c1:45:f7:67:7b:b7:54:46:fe:8e: d9:be:c3:38:af:f9:b1:06:49:51:7f:db:1e:a9:79: 34:ad:87:df:03:dc:da:f9:99:5c:0e:84:23:7a:46: df:b5:44:32:66:03:fc:f4:76:81:a3:21:7d:b7:18: 19:0d:99:74:b0:e5:a5:09:a8:6a:06:74:5b:82:84: 17:98:34:d5:bd:64:08:f7:6a:1b:46:50:f0:0e:19: ff:fd:81:cb:7b:17:f2:91:31:d3:00:5c:ab:6c:79: bf:4c:ef:45:63:57:03:84:d2:1c:2c:ab:12:87:d2: 11:1b:f7:29:d1:7f:f8:38:e5:7d:38:9b:9d:0c:1d: 90:2d:5e:80:e6:a9:c5:b9:06:34:08:a2:44:dd:33: d1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AC:7E:C1:8A:51:C1:79:C8:F9:73:D7:7D:87:ED:23:D0:E5:AC:99 X509v3 Authority Key Identifier: keyid:15:AF:5E:A8:3F:DF:28:9A:0D:66:1C:F5:DB:B8:B3:88:8B:C7:58:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fa9eqD_fKJoNZhz127iziIvHWOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:26:74:91:1a:b5:6e:3c:03:be:ec:29:34:5c:3a:47:66:05: e8:ee:c9:c8:ca:b5:c6:56:eb:71:ea:2f:b5:8b:f5:4c:b7:2f: 81:55:66:e5:b1:29:5e:d7:ea:c3:8b:56:63:dc:ac:f4:f2:9b: 58:20:23:21:38:05:ab:61:7f:44:56:c1:25:dd:3f:d0:a2:ff: 6f:3b:16:69:bd:28:ab:6f:42:d6:6b:ab:e9:ff:89:f6:e0:b9: d0:e2:8b:0d:5c:77:c0:04:82:a1:c7:26:ee:fb:4a:2c:08:77: 9a:ce:50:af:49:04:ae:00:75:de:05:90:42:cb:9f:c8:f0:98: 3e:da:eb:a4:26:06:b5:d1:d0:3f:44:d9:6f:64:39:4c:47:4f: 04:0c:3a:51:78:a5:f8:97:a9:8e:17:c6:87:6c:de:d1:c5:55: b0:ec:1b:63:18:6f:ba:3e:6d:42:79:3c:3a:7b:29:5c:fb:74: 89:bb:89:8a:37:10:57:94:4d:29:6e:59:8e:70:8e:b2:e9:6a: 97:e9:24:66:ee:e2:20:0a:4a:cd:d4:d1:c3:52:9c:99:c0:0d: 44:aa:18:1a:8d:af:42:d3:c1:7a:0f:25:fd:b0:bc:56:c1:7d: ee:15:8a:ca:e0:88:55:37:b2:cb:41:bd:9e:fa:c5:15:18:94: 8f:e2:5f:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY2RDQxMTAvBgNVBAUTKDE1QUY1RUE4M0ZERjI4OUEwRDY2MUNGNURCQjhCMzg4 OEJDNzU4RUIwHhcNMjQwNTE5MDAxMTM2WhcNMjQwNTI2MDAxMTM2WjAYMRYwFAYD VQQDEw02NjQ5NDNiOC02NjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsE7yRSsgWhO6UxyZDgbAtza/yW3l8BIl9QR70pJ3Pm8G300BBc6rtinE+yiK eOev35cPhNGBuV9Ap7KeiPUxMauggALnouSpBQJPqdIBUEcIRrSEMQZAm2MRxOk+ UsVZhwekCDNomzIcT6hREMFF92d7t1RG/o7ZvsM4r/mxBklRf9seqXk0rYffA9za +ZlcDoQjekbftUQyZgP89HaBoyF9txgZDZl0sOWlCahqBnRbgoQXmDTVvWQI92ob RlDwDhn//YHLexfykTHTAFyrbHm/TO9FY1cDhNIcLKsSh9IRG/cp0X/4OOV9OJud DB2QLV6A5qnFuQY0CKJE3TPRkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLOsfsGK UcF5yPlz132H7SPQ5ayZMB8GA1UdIwQYMBaAFBWvXqg/3yiaDWYc9du4s4iLx1jr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjZENC9CRDk4NzUwMjdB OEUxMUVCQTkwQ0NFMjJDNEY5QUUwMi9GYTllcURfZktKb05aaHoxMjdpemlJdkhX T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZhOWVxRF9mS0pvTlpoejEyN2l6aUl2SFdPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjZENC9CRDk4NzUwMjdBOEUxMUVCQTkwQ0NFMjJDNEY5QUUwMi9GYTllcURfZktK b05aaHoxMjdpemlJdkhXT3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXJnSRGrVuPAO+7Ck0XDpHZgXo7snIyrXGVutx6i+1i/VMty+BVWbl sSle1+rDi1Zj3Kz08ptYICMhOAWrYX9EVsEl3T/Qov9vOxZpvSirb0LWa6vp/4n2 4LnQ4osNXHfABIKhxybu+0osCHeazlCvSQSuAHXeBZBCy5/I8Jg+2uukJga10dA/ RNlvZDlMR08EDDpReKX4l6mOF8aHbN7RxVWw7BtjGG+6Pm1CeTw6eylc+3SJu4mK NxBXlE0pblmOcI6y6WqX6SRm7uIgCkrN1NHDUpyZwA1Eqhgaja9C08F6DyX9sLxW wX3uFYrK4IhVN7LLQb2e+sUVGJSP4l8h -----END CERTIFICATE-----Generated at Sun May 19 01:47:16 2024 by rpki-client on console-ams.rpki-client.org