$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft File: FKbKvDAuwePc503pi_VYoEK-rFY.mft (raw, json) Hash identifier: 3tNjIJu+EsMgJ0q9ivQYM6ImAq6EccBtF/S8B3R48kw= Subject key identifier: D3:13:29:DC:3B:9B:AA:EA:E6:29:3A:34:4F:64:F3:E6:9B:7E:F8:44 Authority key identifier: 14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56 Certificate issuer: /CN=A91409DC/serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56 Certificate serial: 078E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft Manifest number: 12D6 Signing time: Wed 24 Apr 2024 19:35:20 +0000 Manifest this update: Wed 24 Apr 2024 19:35:20 +0000 Manifest next update: Wed 01 May 2024 19:35:20 +0000 Files and hashes: 1: FKbKvDAuwePc503pi_VYoEK-rFY.crl (hash: VlpC8VjwoGSE6nLPcwqfkp3F3JUo1x3+T1dfK6TAwAE=) 2: 3E35840C523211EE84408677C4F9AE02.roa (hash: nokZkU4aOWXZRmDCxEGcPpnUqxr7bcu4DjpeatKOnyE=) 3: DB78B2684BCD11EE8F976B7EC4F9AE02.roa (hash: L49PmYMBuweCa+oO7x1ek7ZYTFhah1VhhvOrTppiUJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 18:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1934 (0x78e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91409DC/serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56 Validity Not Before: Apr 24 19:35:20 2024 GMT Not After : May 1 19:35:20 2024 GMT Subject: CN=66295ef8-4733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f3:f0:27:90:96:0b:99:07:62:5a:99:52:82: 19:3b:11:ff:a6:e8:34:d2:2d:cd:94:70:61:03:c7: c7:6f:d4:8d:79:80:5c:84:50:9f:0c:7d:05:c7:e2: dc:59:57:5a:51:b6:45:74:49:61:4b:10:ed:b1:80: 55:e6:69:f2:74:f8:92:de:69:30:11:1f:9f:74:99: 75:01:39:8a:e6:dd:64:61:1e:8f:24:69:90:32:70: f8:4a:c9:a2:6a:c2:1b:9b:9b:b8:b5:25:ed:a4:06: 70:2c:ed:47:64:c2:0d:47:89:3b:37:de:93:a9:08: 0f:24:bc:09:89:9f:d0:13:f9:1e:94:89:b0:95:83: e4:9a:32:0c:85:f4:3d:79:a5:cb:bb:09:1b:44:0e: 84:0f:8e:18:0c:76:35:2c:95:a3:8f:70:a1:da:b2: c6:0a:a1:7f:2c:36:ff:c3:a2:a0:09:45:f9:65:4d: 96:b3:27:1a:0d:e3:3d:c3:a1:49:a2:62:ba:c2:57: be:fe:23:7f:02:8b:ca:2d:53:6d:d8:27:37:8f:2e: 67:06:22:fa:7f:40:95:86:bc:51:cf:11:ab:e3:ef: 33:45:41:0e:39:80:b8:52:f5:46:eb:bd:95:18:3c: c5:fb:ef:ea:61:59:6d:3f:96:9b:82:9c:36:f2:70: bd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:13:29:DC:3B:9B:AA:EA:E6:29:3A:34:4F:64:F3:E6:9B:7E:F8:44 X509v3 Authority Key Identifier: keyid:14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:bc:ce:f7:26:fb:8f:2c:90:3b:57:59:f7:bc:1c:7a:af:6b: 0c:95:6c:0d:c2:f8:92:c6:0a:9a:3b:70:27:77:d1:59:22:84: 42:7c:d8:7e:09:a8:1b:aa:1c:d0:d6:66:d5:56:35:1f:24:e3: 01:f7:e3:97:04:a0:b3:f8:54:4f:4b:e5:72:5d:7a:5a:c4:7f: 0c:c0:66:a9:97:7b:61:0f:f8:f7:7d:68:e8:a5:04:46:e6:a6: 21:88:8e:f0:01:92:58:9d:08:f4:2c:2e:a9:e2:7a:87:99:e2: 42:f6:4e:9a:5b:08:7d:7e:0b:8c:1f:11:d1:5f:2f:dc:6c:32: ed:b1:15:e1:1d:74:7d:85:72:40:49:38:e8:1c:ab:21:c9:9b: c1:01:ce:19:fb:16:40:32:a3:0e:71:ad:35:ab:6d:40:34:d7: 28:c4:d2:ef:53:d7:2c:12:c7:89:bb:fe:75:6f:a6:ca:e9:3d: 74:23:26:b4:d7:48:b7:b4:cc:44:17:fa:25:4b:ff:c8:e0:d4: 9d:d8:18:e6:16:fd:b2:f0:9c:20:9b:d0:88:0b:f5:95:c4:9f: 8f:6c:37:98:e4:14:6d:45:90:d6:f0:4b:2e:d3:c1:e7:c0:69: d4:44:c0:54:1a:cf:05:43:e5:00:8c:46:5f:3b:ba:f9:50:53: 17:fa:db:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA5REMxMTAvBgNVBAUTKDE0QTZDQUJDMzAyRUMxRTNEQ0U3NERFOThCRjU1OEEw NDJCRUFDNTYwHhcNMjQwNDI0MTkzNTIwWhcNMjQwNTAxMTkzNTIwWjAYMRYwFAYD VQQDEw02NjI5NWVmOC00NzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxfPwJ5CWC5kHYlqZUoIZOxH/pug00i3NlHBhA8fHb9SNeYBchFCfDH0Fx+Lc WVdaUbZFdElhSxDtsYBV5mnydPiS3mkwER+fdJl1ATmK5t1kYR6PJGmQMnD4Ssmi asIbm5u4tSXtpAZwLO1HZMINR4k7N96TqQgPJLwJiZ/QE/kelImwlYPkmjIMhfQ9 eaXLuwkbRA6ED44YDHY1LJWjj3Ch2rLGCqF/LDb/w6KgCUX5ZU2WsycaDeM9w6FJ omK6wle+/iN/AovKLVNt2Cc3jy5nBiL6f0CVhrxRzxGr4+8zRUEOOYC4UvVG672V GDzF++/qYVltP5abgpw28nC96wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMTKdw7 m6rq5ik6NE9k8+abfvhEMB8GA1UdIwQYMBaAFBSmyrwwLsHj3OdN6Yv1WKBCvqxW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDlEQy9BNUJCRkFBNjA5 MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi9GS2JLdkRBdXdlUGM1MDNwaV9WWW9FSy1y RlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZLYkt2REF1d2VQYzUwM3BpX1ZZb0VLLXJGWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDlEQy9BNUJCRkFBNjA5MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi9GS2JLdkRBdXdl UGM1MDNwaV9WWW9FSy1yRlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuvM73JvuPLJA7V1n3vBx6r2sMlWwNwviSxgqaO3And9FZIoRCfNh+ CagbqhzQ1mbVVjUfJOMB9+OXBKCz+FRPS+VyXXpaxH8MwGapl3thD/j3fWjopQRG 5qYhiI7wAZJYnQj0LC6p4nqHmeJC9k6aWwh9fguMHxHRXy/cbDLtsRXhHXR9hXJA STjoHKshyZvBAc4Z+xZAMqMOca01q21ANNcoxNLvU9csEseJu/51b6bK6T10Iya0 10i3tMxEF/olS//I4NSd2BjmFv2y8Jwgm9CIC/WVxJ+PbDeY5BRtRZDW8Esu08Hn wGnURMBUGs8FQ+UAjEZfO7r5UFMX+tvj -----END CERTIFICATE-----Generated at Wed Apr 24 20:29:47 2024 by rpki-client on console-fra.rpki-client.org