$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft File: ft761lb9iDJvbfriSHAQWAQCo18.mft (raw, json) Hash identifier: PbbrfTFXIPbxm9nsHNNREoxur5jNAMDUZCubXpOHtoI= Subject key identifier: 9B:7A:6F:8A:A4:36:97:44:33:12:2A:50:06:FE:72:F4:4D:FA:1D:71 Authority key identifier: 7E:DE:FA:D6:56:FD:88:32:6F:6D:FA:E2:48:70:10:58:04:02:A3:5F Certificate issuer: /CN=A91D9785/serialNumber=7EDEFAD656FD88326F6DFAE2487010580402A35F Certificate serial: 1948 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft Manifest number: 1936 Signing time: Sat 18 May 2024 16:51:36 +0000 Manifest this update: Sat 18 May 2024 16:51:35 +0000 Manifest next update: Sat 25 May 2024 16:51:35 +0000 Files and hashes: 1: ft761lb9iDJvbfriSHAQWAQCo18.crl (hash: 5EDK9WEXO1ftZVZyhfgHjnhPuKl9EwXcMjlBoLbQilQ=) 2: 1B6F9C4A7D9711EB9152BD09C4F9AE02.roa (hash: glVwGQB5KtTKYAdzRS6sfrMAnx1m8cPue7rLPMHU62Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.crl rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6472 (0x1948) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9785/serialNumber=7EDEFAD656FD88326F6DFAE2487010580402A35F Validity Not Before: May 18 16:51:35 2024 GMT Not After : May 25 16:51:35 2024 GMT Subject: CN=6648dc98-b488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:35:a3:6e:d4:31:41:22:08:3c:4a:19:6a:3e: 77:93:fd:61:c2:a6:9e:10:e0:79:c6:92:f1:d1:b4: 95:2d:80:5f:4e:30:23:f9:68:e1:f2:51:ba:46:a9: a1:69:37:02:95:30:ce:69:fd:ed:36:f6:27:34:63: 52:2d:6e:4f:d0:14:d4:0b:3c:91:cf:5f:12:a6:23: eb:8c:83:3a:a9:fa:79:71:14:af:e5:c2:31:ea:74: 86:61:09:e0:2d:ac:5e:ac:0e:24:d8:79:49:1a:34: 8c:ff:26:bb:15:f9:4a:d9:b5:27:e3:85:e6:aa:8b: 3e:a9:eb:cd:c8:fa:05:5c:3b:ec:f7:54:70:14:fa: ff:88:13:6a:f4:a0:ae:b1:1d:b3:3d:9a:0b:c7:da: bd:06:17:7a:84:a7:ca:88:9b:36:74:e7:5a:39:6b: a5:ea:9d:26:55:84:93:5e:4f:f1:5c:84:ac:3e:b1: 25:36:c2:ee:56:06:69:3f:5e:d9:a7:1e:b7:c5:53: 10:58:42:c1:a0:02:20:ad:42:5f:27:a2:50:cb:06: 29:e1:c1:42:0c:7c:d4:fe:87:d5:ac:ec:68:5b:1b: 02:16:5d:e7:f5:71:ba:5e:2d:85:7c:93:06:e4:4d: 5d:85:59:ec:1b:06:27:17:67:d3:00:0d:38:2c:3e: d8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:7A:6F:8A:A4:36:97:44:33:12:2A:50:06:FE:72:F4:4D:FA:1D:71 X509v3 Authority Key Identifier: keyid:7E:DE:FA:D6:56:FD:88:32:6F:6D:FA:E2:48:70:10:58:04:02:A3:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:64:c1:42:90:98:39:e9:15:bf:e8:ab:30:2b:c1:7a:b7:58: 2d:cd:a1:5f:bc:56:09:e5:72:dd:e3:76:0b:38:aa:2d:45:5f: e5:18:59:2c:43:25:6d:15:bd:b0:c2:90:27:e6:12:ea:8b:18: 8b:11:2e:ef:18:37:55:3b:7d:43:01:f1:63:f3:22:25:37:9e: 7b:63:43:ca:f7:66:24:97:4c:18:2d:75:49:47:48:03:4a:56: 8d:be:e6:96:c9:81:e9:67:fd:fa:d9:15:28:a4:6c:a7:92:8e: d5:c7:f5:82:e3:a5:87:4d:74:00:11:e0:56:dc:9f:09:ef:98: 54:2c:29:8a:5f:a9:98:27:f5:8d:89:ae:f2:3b:5b:21:fe:41: 5b:dc:66:93:37:0d:99:25:6b:72:27:ff:d6:00:71:64:69:c3: 6c:4f:e4:35:ce:db:53:d5:6f:a3:de:ed:42:d4:5a:5a:9f:3f: 09:b5:ed:38:4e:5c:ed:af:08:53:8c:92:fa:05:e0:fa:39:cd: 59:73:36:2b:d1:a5:f0:ec:55:f8:38:36:94:03:e4:db:6b:2e: aa:ba:07:97:5b:a4:f7:48:fd:bc:1c:35:53:8f:ff:04:d4:c3: 3f:03:84:02:66:dd:54:4a:d8:6e:2b:52:4c:d8:fe:ab:d8:d1: 23:3f:16:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk3ODUxMTAvBgNVBAUTKDdFREVGQUQ2NTZGRDg4MzI2RjZERkFFMjQ4NzAxMDU4 MDQwMkEzNUYwHhcNMjQwNTE4MTY1MTM1WhcNMjQwNTI1MTY1MTM1WjAYMRYwFAYD VQQDEw02NjQ4ZGM5OC1iNDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8jWjbtQxQSIIPEoZaj53k/1hwqaeEOB5xpLx0bSVLYBfTjAj+Wjh8lG6Rqmh aTcClTDOaf3tNvYnNGNSLW5P0BTUCzyRz18SpiPrjIM6qfp5cRSv5cIx6nSGYQng LaxerA4k2HlJGjSM/ya7FflK2bUn44Xmqos+qevNyPoFXDvs91RwFPr/iBNq9KCu sR2zPZoLx9q9Bhd6hKfKiJs2dOdaOWul6p0mVYSTXk/xXISsPrElNsLuVgZpP17Z px63xVMQWELBoAIgrUJfJ6JQywYp4cFCDHzU/ofVrOxoWxsCFl3n9XG6Xi2FfJMG 5E1dhVnsGwYnF2fTAA04LD7YDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJt6b4qk NpdEMxIqUAb+cvRN+h1xMB8GA1UdIwQYMBaAFH7e+tZW/Ygyb2364khwEFgEAqNf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTc4NS80N0RGOUNFQzU2 RUMxMUU3QkFENDhEM0JDNEY5QUUwMi9mdDc2MWxiOWlESnZiZnJpU0hBUVdBUUNv MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0NzYxbGI5aURKdmJmcmlTSEFRV0FRQ28xOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTc4NS80N0RGOUNFQzU2RUMxMUU3QkFENDhEM0JDNEY5QUUwMi9mdDc2MWxiOWlE SnZiZnJpU0hBUVdBUUNvMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6ZMFCkJg56RW/6KswK8F6t1gtzaFfvFYJ5XLd43YLOKotRV/lGFks QyVtFb2wwpAn5hLqixiLES7vGDdVO31DAfFj8yIlN557Y0PK92Ykl0wYLXVJR0gD SlaNvuaWyYHpZ/362RUopGynko7Vx/WC46WHTXQAEeBW3J8J75hULCmKX6mYJ/WN ia7yO1sh/kFb3GaTNw2ZJWtyJ//WAHFkacNsT+Q1zttT1W+j3u1C1Fpanz8Jte04 TlztrwhTjJL6BeD6Oc1ZczYr0aXw7FX4ODaUA+Tbay6qugeXW6T3SP28HDVTj/8E 1MM/A4QCZt1USthuK1JM2P6r2NEjPxbY -----END CERTIFICATE-----Generated at Sat May 18 17:37:34 2024 by rpki-client on console-fra.rpki-client.org