$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft File: FnnqBmaD8qFVDecPRYQy3RqDJw8.mft (raw, json) Hash identifier: lhx9Orfq9kmmm9/1bTqUXxrUSVRz8tFThPkZ4LRKr6s= Subject key identifier: 8D:F1:A1:71:14:D3:A9:4D:D1:35:93:C1:BC:7D:7D:81:67:DE:32:B0 Authority key identifier: 16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F Certificate issuer: /CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F Certificate serial: 0A12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft Manifest number: 0A0B Signing time: Sat 18 May 2024 20:37:36 +0000 Manifest this update: Sat 18 May 2024 20:37:35 +0000 Manifest next update: Sat 25 May 2024 20:37:35 +0000 Files and hashes: 1: FnnqBmaD8qFVDecPRYQy3RqDJw8.crl (hash: YbNAMOmbUBntVcLYih1uPl6dCrpbxm90dqr3S4N+XpA=) 2: D825A42E4E6D11EAA3D8784AC4F9AE02.roa (hash: Dq+tw4dzxkssEA+bsXNc4uWtrrN7bI8wxUhISXXnAuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2578 (0xa12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F Validity Not Before: May 18 20:37:35 2024 GMT Not After : May 25 20:37:35 2024 GMT Subject: CN=66491190-f012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9a:69:bc:80:f7:2c:dc:d7:b4:44:e2:f9:79: d5:eb:db:10:56:60:3e:5a:a2:73:6b:d0:e2:2d:44: d8:42:21:e4:82:f9:d2:4b:ff:a6:6b:6a:52:e4:3e: ad:25:15:16:ba:9d:7d:9a:67:c6:4e:7f:7c:d6:41: 5e:71:1f:44:ac:44:d7:d0:7a:7c:45:80:c9:23:20: 43:14:85:69:5c:cb:54:11:a3:10:56:fe:35:96:9c: 16:c8:8c:1e:e0:f5:a5:9a:2b:f7:59:45:0d:ad:7c: 2a:a7:e7:51:10:ef:a8:83:55:02:76:cf:61:88:45: 0b:96:95:4a:49:8d:51:09:23:d0:f9:2e:01:5c:61: 32:c4:a1:90:4b:fc:dd:96:a3:60:7b:e9:db:97:c0: a3:c2:59:d3:69:54:e3:27:78:23:f3:03:7d:5e:c6: 1b:5c:54:37:9d:b4:02:0b:ce:6a:0b:b7:d7:1e:9f: ba:17:df:c0:d9:3a:94:3c:27:ad:3d:2e:22:10:a4: df:99:a1:5d:56:9e:49:b6:fb:ef:05:10:99:55:0f: c8:71:61:c7:82:e6:f5:c2:f4:ca:39:02:5d:46:d9: 49:ec:a9:05:fd:3d:54:1f:4f:f5:46:b3:72:9b:4c: 7c:8c:89:9b:d3:21:b9:14:f3:b1:26:85:b2:c6:00: 9a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F1:A1:71:14:D3:A9:4D:D1:35:93:C1:BC:7D:7D:81:67:DE:32:B0 X509v3 Authority Key Identifier: keyid:16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:4c:48:0d:5f:cf:19:38:04:69:12:2b:0b:cf:8a:81:b8:82: eb:36:d1:6d:2e:a0:af:64:35:4e:6f:3b:fa:de:8a:bb:65:65: 1a:f0:a9:cd:7e:f5:2b:c1:97:b8:87:55:bf:44:16:7f:fa:e3: 1b:0f:ab:e1:36:05:34:fc:91:f1:ae:54:10:df:85:d3:6d:59: 2c:2e:4d:aa:40:f4:92:d2:7e:aa:d5:db:6a:75:3f:da:d5:24: 97:c9:71:b1:2d:7b:49:35:da:e1:b1:42:17:fa:1e:62:e4:d4: b4:11:3c:d7:94:01:46:75:48:3d:35:0f:8b:a3:60:f7:92:d2: 29:5a:4b:37:67:27:94:97:85:0c:7f:fd:ea:df:43:40:84:0f: 26:09:df:5e:9a:01:4d:10:b7:fc:5d:d9:04:c6:9b:d7:82:38: 98:6b:51:08:1b:9a:c0:99:d7:44:72:78:73:41:2c:f5:e4:c4: f3:08:23:80:e8:20:8c:b4:86:e9:71:8d:d4:cc:b8:e8:58:0e: 4f:13:a3:18:9e:b2:48:df:f1:d1:a4:aa:6e:4d:c7:62:79:ba: fa:19:62:c4:2a:cb:61:b7:8c:cc:26:e8:82:e9:4e:48:50:4c: 90:a1:31:3a:f6:8a:66:61:5c:7b:19:fa:7b:cf:f8:4c:ce:82: b0:af:06:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDRDkxMTAvBgNVBAUTKDE2NzlFQTA2NjY4M0YyQTE1NTBERTcwRjQ1ODQzMkRE MUE4MzI3MEYwHhcNMjQwNTE4MjAzNzM1WhcNMjQwNTI1MjAzNzM1WjAYMRYwFAYD VQQDEw02NjQ5MTE5MC1mMDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpppvID3LNzXtETi+XnV69sQVmA+WqJza9DiLUTYQiHkgvnSS/+ma2pS5D6t JRUWup19mmfGTn981kFecR9ErETX0Hp8RYDJIyBDFIVpXMtUEaMQVv41lpwWyIwe 4PWlmiv3WUUNrXwqp+dREO+og1UCds9hiEULlpVKSY1RCSPQ+S4BXGEyxKGQS/zd lqNge+nbl8CjwlnTaVTjJ3gj8wN9XsYbXFQ3nbQCC85qC7fXHp+6F9/A2TqUPCet PS4iEKTfmaFdVp5JtvvvBRCZVQ/IcWHHgub1wvTKOQJdRtlJ7KkF/T1UH0/1RrNy m0x8jImb0yG5FPOxJoWyxgCa9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3xoXEU 06lN0TWTwbx9fYFn3jKwMB8GA1UdIwQYMBaAFBZ56gZmg/KhVQ3nD0WEMt0agycP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENEOS80MTBCQkMxNDRF NkMxMUVBODkwNDk3NDdDNEY5QUUwMi9Gbm5xQm1hRDhxRlZEZWNQUllReTNScURK dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZubnFCbWFEOHFGVkRlY1BSWVF5M1JxREp3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENEOS80MTBCQkMxNDRFNkMxMUVBODkwNDk3NDdDNEY5QUUwMi9Gbm5xQm1hRDhx RlZEZWNQUllReTNScURKdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeTEgNX88ZOARpEisLz4qBuILrNtFtLqCvZDVObzv63oq7ZWUa8KnN fvUrwZe4h1W/RBZ/+uMbD6vhNgU0/JHxrlQQ34XTbVksLk2qQPSS0n6q1dtqdT/a 1SSXyXGxLXtJNdrhsUIX+h5i5NS0ETzXlAFGdUg9NQ+Lo2D3ktIpWks3ZyeUl4UM f/3q30NAhA8mCd9emgFNELf8XdkExpvXgjiYa1EIG5rAmddEcnhzQSz15MTzCCOA 6CCMtIbpcY3UzLjoWA5PE6MYnrJI3/HRpKpuTcdiebr6GWLEKstht4zMJuiC6U5I UEyQoTE69opmYVx7Gfp7z/hMzoKwrwaH -----END CERTIFICATE-----Generated at Sat May 18 21:31:32 2024 by rpki-client on console-ams.rpki-client.org