$ rpki-client -vvf rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft File: FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft (raw, json) Hash identifier: QiBkEuHbsdcwhOLwAcAKCS+oQOYenSOEn6/s+AGtwk0= Subject key identifier: 5E:95:1D:D5:27:08:A6:C2:4E:0C:1E:8D:3E:05:86:2D:C5:46:63:BA Authority key identifier: 14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27 Certificate issuer: /CN=A91193C1/serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727 Certificate serial: 0454 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft Manifest number: 044C Signing time: Sat 27 Apr 2024 01:51:06 +0000 Manifest this update: Sat 27 Apr 2024 01:51:05 +0000 Manifest next update: Sat 04 May 2024 01:51:05 +0000 Files and hashes: 1: FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl (hash: YLy1v7PfmnoXGaR6+DZXbP9dBRHj/YlSKtEM0OpXBmU=) 2: C8900982059611ECB2896C55C4F9AE02.roa (hash: bIMYMjOpvGyj0B6cZVHQ4lY8ZhaqHOmnJbG7zwxui+E=) 3: 86CCE406CF2611ED8AA9236BC4F9AE02.roa (hash: C3Z+vF7HoXMnTdVUm9DKjUuSYSfQfKGMp1K856t1zp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 01:51:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1108 (0x454) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91193C1/serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727 Validity Not Before: Apr 27 01:51:05 2024 GMT Not After : May 4 01:51:05 2024 GMT Subject: CN=662c5a09-e9af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:59:b8:47:13:91:a1:cf:d3:bb:67:0e:7a:db: a0:77:8e:a5:b9:72:7d:5e:d1:84:3f:db:db:17:f7: 9d:67:7e:d8:ca:1d:93:3b:70:46:41:aa:95:83:5b: 32:e3:ad:5f:e2:a0:e8:49:5f:81:6e:00:a7:cd:01: 32:b9:bc:76:cc:c9:f1:57:00:99:ac:92:8a:71:e2: 66:ce:59:bc:a1:a3:bd:b0:a9:e2:5a:c6:6a:a7:60: ca:41:9a:12:a5:c6:89:f5:24:fe:e6:3e:6d:60:72: 10:c7:4f:18:66:7c:80:5c:8a:1a:76:20:ab:db:89: 69:fa:2c:d0:01:be:50:37:ff:dc:db:51:a6:4e:8c: ed:34:57:3a:4e:6e:47:d7:2c:a4:5c:01:dc:71:d3: 2d:e7:96:be:17:22:20:f9:5a:8c:c5:7e:f9:a5:3f: 81:b9:51:c3:c2:bb:c4:fc:bb:f6:f8:72:b8:23:6d: 43:9a:a1:a6:a7:10:d2:46:b7:52:a5:61:d3:fe:9d: e5:17:63:77:02:5f:ad:f1:f1:7f:5b:0b:30:5e:24: f0:19:64:2f:c0:da:64:a8:bc:cc:2b:ef:c7:a4:cf: 86:70:f8:30:0a:94:70:b5:0f:7a:87:0c:c6:28:2d: 2d:45:12:3f:0b:95:06:87:cb:87:ea:f5:04:e7:ef: 18:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:95:1D:D5:27:08:A6:C2:4E:0C:1E:8D:3E:05:86:2D:C5:46:63:BA X509v3 Authority Key Identifier: keyid:14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:17:f7:05:51:31:1f:54:d1:ab:b1:e7:01:a5:ea:76:86:5c: 69:ad:23:c0:5a:cd:d2:2a:4f:a7:6d:1f:f9:da:f3:80:23:fa: 7b:3f:a7:50:d3:d7:51:2a:17:31:ae:ec:2e:2b:e0:31:c6:28: ea:c5:d8:9d:97:cb:48:5c:50:7a:73:22:67:bc:2f:6a:de:4c: f8:c8:cf:43:3f:ba:ed:19:9b:45:ad:2b:b7:70:c5:3e:18:5d: 0d:dc:f0:78:99:90:77:ea:32:7c:fe:b0:e1:fd:ff:d2:a1:b3: 58:da:63:e9:12:20:3c:fd:f0:e5:c5:02:c9:88:f7:d8:50:95: 1e:4a:12:e9:d5:56:27:46:7f:7e:e9:02:88:51:db:82:84:b7: 20:75:7a:73:f0:0b:57:96:73:47:29:80:2b:08:b2:3b:b7:4b: 6b:20:9c:af:60:c7:df:df:00:b7:49:24:20:11:f0:7d:ba:b7: 06:05:0a:a4:46:51:3f:11:34:01:45:c8:5f:9d:c4:f3:ea:ee: 5f:92:bb:70:a5:0b:1e:c1:e0:52:e8:93:ad:1c:3e:9c:98:49: 99:c5:c9:3d:d9:25:c4:67:86:e6:a0:56:3b:e6:98:f3:9e:9c: b6:8c:f5:c3:b9:63:b9:42:a6:40:cf:1d:58:38:fa:09:7c:71: a5:eb:5f:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzQzExMTAvBgNVBAUTKDE0NTQ4RTcwOTQ5RTUwNUY4QkE4QTUzOTFFNDY2RTFF OTlEM0I3MjcwHhcNMjQwNDI3MDE1MTA1WhcNMjQwNTA0MDE1MTA1WjAYMRYwFAYD VQQDEw02NjJjNWEwOS1lOWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0lm4RxORoc/Tu2cOetugd46luXJ9XtGEP9vbF/edZ37Yyh2TO3BGQaqVg1sy 461f4qDoSV+BbgCnzQEyubx2zMnxVwCZrJKKceJmzlm8oaO9sKniWsZqp2DKQZoS pcaJ9ST+5j5tYHIQx08YZnyAXIoadiCr24lp+izQAb5QN//c21GmToztNFc6Tm5H 1yykXAHccdMt55a+FyIg+VqMxX75pT+BuVHDwrvE/Lv2+HK4I21DmqGmpxDSRrdS pWHT/p3lF2N3Al+t8fF/WwswXiTwGWQvwNpkqLzMK+/HpM+GcPgwCpRwtQ96hwzG KC0tRRI/C5UGh8uH6vUE5+8YQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6VHdUn CKbCTgwejT4Fhi3FRmO6MB8GA1UdIwQYMBaAFBRUjnCUnlBfi6ilOR5Gbh6Z07cn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTNDMS83MzZFM0I0ODA1 OTMxMUVDODkyMUVEODVDNEY5QUUwMi9GRlNPY0pTZVVGLUxxS1U1SGtadUhwblR0 eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZGU09jSlNlVUYtTHFLVTVIa1p1SHBuVHR5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTNDMS83MzZFM0I0ODA1OTMxMUVDODkyMUVEODVDNEY5QUUwMi9GRlNPY0pTZVVG LUxxS1U1SGtadUhwblR0eWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTF/cFUTEfVNGrsecBpep2hlxprSPAWs3SKk+nbR/52vOAI/p7P6dQ 09dRKhcxruwuK+Axxijqxdidl8tIXFB6cyJnvC9q3kz4yM9DP7rtGZtFrSu3cMU+ GF0N3PB4mZB36jJ8/rDh/f/SobNY2mPpEiA8/fDlxQLJiPfYUJUeShLp1VYnRn9+ 6QKIUduChLcgdXpz8AtXlnNHKYArCLI7t0trIJyvYMff3wC3SSQgEfB9urcGBQqk RlE/ETQBRchfncTz6u5fkrtwpQseweBS6JOtHD6cmEmZxck92SXEZ4bmoFY75pjz npy2jPXDuWO5QqZAzx1YOPoJfHGl6181 -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:27 2024 by rpki-client on console-ams.rpki-client.org