$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft File: FrVkt1jfzVLFzokRkuMbcVscv-g.mft (raw, json) Hash identifier: Q0Wd48i6sjcquV2s0xwt6dVa4La/K+hAmU+E3t8vBe0= Subject key identifier: CC:C8:90:AF:CA:89:F2:3B:EF:6A:33:68:26:81:14:42:7F:08:CE:88 Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 Certificate issuer: /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Certificate serial: 3447 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft Manifest number: 3406 Signing time: Sat 18 May 2024 14:28:15 +0000 Manifest this update: Sat 18 May 2024 14:28:15 +0000 Manifest next update: Sat 25 May 2024 14:28:15 +0000 Files and hashes: 1: FrVkt1jfzVLFzokRkuMbcVscv-g.crl (hash: LMq00N0NenRqJLx4ZRRqiz0+Mt+ds6MNh6sbvxwHmjY=) 2: 10DAE05EB04811EABB4AEF61C4F9AE02.roa (hash: 78gdh99UZKTxTLqq433Oe99T4dYdzlmohoo3kOaH8l8=) 3: FBE279DAA3ED11E99F59303AC4F9AE02.roa (hash: 12jNFwIOSxFt4Q26sLiqGPF6xM8mbtcS0r5VdmPlKzg=) 4: 534379FCEE1611ECA6DE1824C4F9AE02.roa (hash: IXwPelFphEjwXzLKdDLjQ1M4IFH3NmjU6fYwFmkOlzM=) 5: 427BAA66E23211E8BD132210C4F9AE02.roa (hash: KJ3NI1fNIhBaaFLNZhlCWQ8tWEe65xfTnUKAOZ3K1sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13383 (0x3447) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Validity Not Before: May 18 14:28:15 2024 GMT Not After : May 25 14:28:15 2024 GMT Subject: CN=6648baff-10cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:24:95:bd:67:24:43:11:8f:38:6f:89:ec:e5: c7:f6:cf:9e:b2:9a:fb:83:61:b6:90:ca:f8:24:61: de:2e:53:f3:51:43:20:56:a6:fa:5e:3a:4a:9d:b4: 6f:5a:4a:04:8e:7f:4c:e9:38:7e:a4:63:89:d1:ec: 88:49:e4:3b:08:e7:3e:d3:55:c6:96:13:cf:c9:16: 86:18:42:86:92:85:ec:db:ce:e5:ad:bf:e2:82:1d: 43:26:02:27:c3:12:5b:1f:55:5d:b7:b0:fa:91:ba: 01:71:ad:46:65:89:78:95:e0:38:f4:88:1c:d7:fa: 69:c2:e0:c8:7d:e9:60:6d:97:fa:72:b3:50:c2:63: 46:dd:c4:6a:a0:93:06:d1:43:b6:34:cc:48:39:dc: 74:20:c9:46:04:a4:3d:2c:d1:75:1a:a9:83:cd:a0: ef:21:1f:4c:4b:bc:d4:a7:54:73:b3:8f:2a:99:2c: cd:33:1d:44:60:9f:30:73:c7:6c:b0:68:c8:37:e6: 33:44:ee:87:ac:13:2c:6c:d5:b4:4e:52:ee:f9:c0: 71:3f:61:e6:3f:20:90:0f:54:99:c7:52:61:2b:80: 8f:ec:26:03:93:20:a1:8c:cd:8f:a3:09:2e:4b:32: f9:39:19:a7:7e:ef:84:17:d3:67:00:a2:41:b7:4b: 26:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C8:90:AF:CA:89:F2:3B:EF:6A:33:68:26:81:14:42:7F:08:CE:88 X509v3 Authority Key Identifier: keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:de:9c:3a:e4:ca:5e:7f:bb:91:64:f1:9d:01:e2:90:a7:65: 03:a4:52:74:69:7a:df:9d:e8:55:3d:76:ac:6e:ad:5a:64:5d: 1b:a0:c6:6e:e9:6c:07:6b:2c:6d:20:6e:a2:2d:c5:cc:06:13: 6f:d2:34:21:37:55:0e:16:70:64:9a:91:85:54:81:9c:23:87: 54:98:54:a4:db:f5:87:06:03:4d:d2:de:c9:91:23:4b:45:ec: 0e:a1:f7:5c:48:e3:67:d4:de:a5:c0:bc:25:67:1e:de:4a:71: 47:f4:14:30:07:4d:99:29:86:03:fb:9b:cc:d3:b2:9c:73:63: 43:d9:1a:7d:c5:a8:74:00:ca:c1:99:19:b4:73:e1:8d:bb:a3: b4:8f:67:30:6d:63:3a:0c:57:6a:30:07:65:79:59:7a:63:85: 28:fe:7f:24:f9:e1:49:a8:9d:b2:d7:80:62:37:d2:c8:3c:26: cb:6e:1d:d4:89:c1:96:f6:0a:b6:df:ac:91:ff:d7:6c:98:d5: c0:50:28:4f:e7:d9:9d:3a:88:44:b0:1e:75:4c:3c:72:20:4f: 86:c2:58:35:2a:de:f0:5d:25:ee:b4:55:c9:e2:ab:bc:28:fd: 44:17:8c:fe:b4:55:38:a3:4f:b7:1d:3a:6d:dc:37:ef:e7:9b: 44:9f:9a:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y0RkUxMTAvBgNVBAUTKDE2QjU2NEI3NThERkNENTJDNUNFODkxMTkyRTMxQjcx NUIxQ0JGRTgwHhcNMjQwNTE4MTQyODE1WhcNMjQwNTI1MTQyODE1WjAYMRYwFAYD VQQDEw02NjQ4YmFmZi0xMGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCSVvWckQxGPOG+J7OXH9s+espr7g2G2kMr4JGHeLlPzUUMgVqb6XjpKnbRv WkoEjn9M6Th+pGOJ0eyISeQ7COc+01XGlhPPyRaGGEKGkoXs287lrb/igh1DJgIn wxJbH1Vdt7D6kboBca1GZYl4leA49Igc1/ppwuDIfelgbZf6crNQwmNG3cRqoJMG 0UO2NMxIOdx0IMlGBKQ9LNF1GqmDzaDvIR9MS7zUp1Rzs48qmSzNMx1EYJ8wc8ds sGjIN+YzRO6HrBMsbNW0TlLu+cBxP2HmPyCQD1SZx1JhK4CP7CYDkyChjM2Powku SzL5ORmnfu+EF9NnAKJBt0smjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzIkK/K ifI772ozaCaBFEJ/CM6IMB8GA1UdIwQYMBaAFBa1ZLdY381Sxc6JEZLjG3FbHL/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjRGRS9CQTEzMTI0RTFE ODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpWTEZ6b2tSa3VNYmNWc2N2 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyVmt0MWpmelZMRnpva1JrdU1iY1ZzY3YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjRGRS9CQTEzMTI0RTFEODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpW TEZ6b2tSa3VNYmNWc2N2LWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+3pw65Mpef7uRZPGdAeKQp2UDpFJ0aXrfnehVPXasbq1aZF0boMZu 6WwHayxtIG6iLcXMBhNv0jQhN1UOFnBkmpGFVIGcI4dUmFSk2/WHBgNN0t7JkSNL RewOofdcSONn1N6lwLwlZx7eSnFH9BQwB02ZKYYD+5vM07Kcc2ND2Rp9xah0AMrB mRm0c+GNu6O0j2cwbWM6DFdqMAdleVl6Y4Uo/n8k+eFJqJ2y14BiN9LIPCbLbh3U icGW9gq236yR/9dsmNXAUChP59mdOohEsB51TDxyIE+Gwlg1Kt7wXSXutFXJ4qu8 KP1EF4z+tFU4o0+3HTpt3Dfv55tEn5qP -----END CERTIFICATE-----Generated at Sat May 18 15:58:26 2024 by rpki-client on console-ams.rpki-client.org