$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft File: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft (raw, json) Hash identifier: VuBkvZR0U5SPnrFm9hUX4BtBbJCCfehudySnRffA5Q4= Subject key identifier: D6:6E:6D:D6:56:EB:E5:3C:41:CF:2D:EC:93:35:6A:1F:E2:B2:43:47 Authority key identifier: 7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4 Certificate issuer: /CN=A91E2AE5/serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4 Certificate serial: 140C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft Manifest number: 13FD Signing time: Sat 18 May 2024 15:49:43 +0000 Manifest this update: Sat 18 May 2024 15:49:43 +0000 Manifest next update: Sat 25 May 2024 15:49:43 +0000 Files and hashes: 1: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl (hash: fF77Fp5kLnIjdKnGvdxfgo1ZuQRU5ulE8rm6yI8iLMM=) 2: C163B1881A4711EDA547FE24C4F9AE02.roa (hash: YNZrHGd8UkVm/DTmJOLPzWf76BUdR5xOiCV0HPKmn3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5132 (0x140c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2AE5/serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4 Validity Not Before: May 18 15:49:43 2024 GMT Not After : May 25 15:49:43 2024 GMT Subject: CN=6648ce17-3b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7c:0e:52:ea:d6:b3:a7:40:12:ba:89:29:37: 01:7c:b0:8b:0b:0e:74:61:8e:f6:85:66:3c:30:c5: 5d:40:d7:bd:ba:8a:09:5b:c9:be:25:97:9c:c4:9f: 5a:4c:76:60:f2:28:bd:20:c7:fc:34:dd:3f:83:af: 9b:8c:01:2d:95:0d:51:ba:71:81:87:9b:32:70:62: a4:b3:5a:db:fc:91:82:ca:89:af:df:f3:69:f5:30: 00:8b:59:b4:48:10:1b:5d:d1:f5:0c:a1:6a:4c:e6: 0b:c6:12:a9:5c:3f:13:ec:40:86:3b:6f:ab:89:c1: ee:2a:8f:bc:cd:15:9c:23:c3:c1:c4:6c:ae:44:fe: 5e:e7:3b:06:8c:a9:db:d8:5e:5f:22:04:16:42:2f: d6:c8:68:1c:23:91:23:ab:c4:d5:4b:14:fe:4a:44: de:32:4f:42:5f:ab:35:64:36:8d:2f:d3:43:05:e0: d4:59:3b:d2:cc:d9:fc:a0:b0:11:3f:6c:d0:97:16: 4d:f2:67:38:88:49:08:57:66:12:05:2f:9a:33:1a: ec:49:10:6e:73:a5:ec:3f:0d:ce:f2:eb:e8:6f:ed: 9b:ce:1a:83:56:68:75:97:7b:86:00:3d:8f:b6:f6: 27:3f:bd:b3:f0:f4:fb:f2:1e:07:a9:f2:a7:d1:a7: 89:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6E:6D:D6:56:EB:E5:3C:41:CF:2D:EC:93:35:6A:1F:E2:B2:43:47 X509v3 Authority Key Identifier: keyid:7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:e3:66:de:c0:a9:8d:25:01:1f:c7:80:92:b8:5e:3e:6e:7e: 1b:81:82:e2:44:d8:82:5e:67:a4:28:60:4b:83:46:db:df:d6: 95:85:f8:e3:72:d9:f9:0d:b2:69:f1:b8:30:7d:45:72:57:95: ef:c8:b3:e1:b3:65:fb:f6:ac:5f:8a:b0:9e:83:3d:e5:5f:cb: 27:48:c6:59:8a:18:e8:dd:85:ec:58:00:b0:2a:ab:3e:6e:0f: b9:6e:64:05:fa:89:64:e6:d2:11:2b:fe:74:46:2b:ab:e7:2f: b5:64:c3:fc:58:74:f3:b3:12:fc:d9:d4:5f:71:2e:e0:bf:25: 45:2c:3b:85:0b:e5:20:b9:ae:a9:cf:50:81:a4:ee:88:2a:3e: 9c:32:42:f0:df:d6:bf:95:b8:85:22:e4:5d:c8:8a:d5:26:d1: 37:d4:f6:c2:ad:ec:63:44:c1:e5:b1:e1:49:e7:c0:65:d8:da: cb:64:80:cf:92:9a:c2:8c:15:03:a5:e7:63:e4:d5:4c:fc:8a: 12:dc:56:2e:52:8c:62:81:c3:e2:ff:93:6c:50:1c:e7:bc:96: 36:d6:e7:cc:21:22:83:79:ea:80:08:35:f4:d6:a5:57:c8:58: 63:ac:19:fe:a9:c9:af:a1:02:6c:48:47:77:08:2e:72:4a:ff: 1f:91:97:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJBRTUxMTAvBgNVBAUTKDdDNjNCMjgzRDlCOEEwNkVFQUQwNjIxQjgyM0VEMEY0 RTY5OURERjQwHhcNMjQwNTE4MTU0OTQzWhcNMjQwNTI1MTU0OTQzWjAYMRYwFAYD VQQDEw02NjQ4Y2UxNy0zYjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXwOUurWs6dAErqJKTcBfLCLCw50YY72hWY8MMVdQNe9uooJW8m+JZecxJ9a THZg8ii9IMf8NN0/g6+bjAEtlQ1RunGBh5sycGKks1rb/JGCyomv3/Np9TAAi1m0 SBAbXdH1DKFqTOYLxhKpXD8T7ECGO2+ricHuKo+8zRWcI8PBxGyuRP5e5zsGjKnb 2F5fIgQWQi/WyGgcI5Ejq8TVSxT+SkTeMk9CX6s1ZDaNL9NDBeDUWTvSzNn8oLAR P2zQlxZN8mc4iEkIV2YSBS+aMxrsSRBuc6XsPw3O8uvob+2bzhqDVmh1l3uGAD2P tvYnP72z8PT78h4HqfKn0aeJyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZubdZW 6+U8Qc8t7JM1ah/iskNHMB8GA1UdIwQYMBaAFHxjsoPZuKBu6tBiG4I+0PTmmd30 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkFFNS85RDcyNzZCNjVD QTkxMUU4QUE0MkEzNDZDNEY5QUUwMi9mR095ZzltNG9HN3EwR0liZ2o3UTlPYVoz ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZHT3lnOW00b0c3cTBHSWJnajdROU9hWjNmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkFFNS85RDcyNzZCNjVDQTkxMUU4QUE0MkEzNDZDNEY5QUUwMi9mR095ZzltNG9H N3EwR0liZ2o3UTlPYVozZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCc42bewKmNJQEfx4CSuF4+bn4bgYLiRNiCXmekKGBLg0bb39aVhfjj ctn5DbJp8bgwfUVyV5XvyLPhs2X79qxfirCegz3lX8snSMZZihjo3YXsWACwKqs+ bg+5bmQF+olk5tIRK/50Riur5y+1ZMP8WHTzsxL82dRfcS7gvyVFLDuFC+Ugua6p z1CBpO6IKj6cMkLw39a/lbiFIuRdyIrVJtE31PbCrexjRMHlseFJ58Bl2NrLZIDP kprCjBUDpedj5NVM/IoS3FYuUoxigcPi/5NsUBznvJY21ufMISKDeeqACDX01qVX yFhjrBn+qcmvoQJsSEd3CC5ySv8fkZd8 -----END CERTIFICATE-----Generated at Sat May 18 17:20:36 2024 by rpki-client on console-ams.rpki-client.org