$ rpki-client -vvf rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft File: FfB_78oF6EbUU4USXou0J3WDAPk.mft (raw, json) Hash identifier: zvIsiLE59QIx0hDDVndEhJgtFuhbjA9NRiZNoWt9Zfw= Subject key identifier: 51:FD:57:53:60:C1:A4:54:DD:DE:EC:AD:30:68:7A:6A:AE:83:9F:C8 Authority key identifier: 15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9 Certificate issuer: /CN=A91503BB/serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9 Certificate serial: 0AED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft Manifest number: 0AE8 Signing time: Mon 06 May 2024 20:07:09 +0000 Manifest this update: Mon 06 May 2024 20:07:08 +0000 Manifest next update: Mon 13 May 2024 20:07:08 +0000 Files and hashes: 1: FfB_78oF6EbUU4USXou0J3WDAPk.crl (hash: mcc4Ntr4GgTz1FZTohQCFVI+oOz0wZPfOTuN7iSPHC4=) 2: FC90C520213411EA8D675645C4F9AE02.roa (hash: 9NvzWfuX4Bm6lLKBNi345zQjC/sUvzkDcjV2c+Vt2QE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2797 (0xaed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91503BB/serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9 Validity Not Before: May 6 20:07:08 2024 GMT Not After : May 13 20:07:08 2024 GMT Subject: CN=6639386c-1ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4f:09:8d:fe:6d:b7:e5:36:55:81:bc:7f:a2: 81:9f:ef:a7:75:66:71:08:f5:76:82:ed:29:6f:19: 0d:1b:08:91:4c:a1:82:43:95:e9:e3:18:1a:ae:ed: 73:12:f4:0a:ba:5d:1e:3c:73:f3:e5:ea:44:71:3e: 7a:a5:95:20:2c:5d:3f:9a:e6:fe:81:17:f2:aa:3e: 83:37:04:07:89:3c:e9:2d:cd:e7:9a:a4:bc:9f:62: ea:1f:b1:c8:3e:6a:ea:5c:a4:84:b1:96:ad:8e:72: bf:ef:a0:9b:b0:b2:72:2e:d2:48:ce:dd:df:51:b5: 76:10:e8:dd:2f:f8:04:12:38:d1:60:3e:24:7b:2b: 21:90:d9:0c:52:a6:15:2f:d7:51:97:eb:5e:85:54: 90:57:df:70:62:59:cd:b1:78:63:05:a6:5c:57:8a: e6:a1:29:d2:28:10:2d:20:12:d6:81:7f:d3:5d:94: b2:ba:db:05:d4:bf:2f:97:10:31:ea:74:fe:b6:6a: fd:ec:42:e4:f1:11:a1:c1:2f:41:76:b5:22:aa:90: e2:ab:0a:75:ad:2a:e3:c3:5c:4f:26:bb:74:77:c0: 1f:cc:00:e0:f9:10:e0:23:d4:92:94:53:b4:92:9e: ee:68:3f:52:cb:06:d5:87:d8:49:3b:f5:ff:d7:f6: 7e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:FD:57:53:60:C1:A4:54:DD:DE:EC:AD:30:68:7A:6A:AE:83:9F:C8 X509v3 Authority Key Identifier: keyid:15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ab:98:5d:5f:6d:92:4b:8c:9b:c1:e5:cc:0f:7e:2f:8c:a4: 59:17:dd:07:4a:7c:37:06:7c:d6:5a:17:dc:5c:99:82:f1:83: 3d:31:c2:3d:6c:2a:f6:ae:58:80:3a:68:8b:2a:ce:a2:d4:97: c3:6c:f6:55:5e:92:ff:1b:ca:46:f0:c6:07:d2:44:aa:dc:47: 47:83:3c:7b:29:a3:d7:7a:49:38:ef:78:2e:61:ce:3f:d8:54: a0:85:45:df:4d:8a:e2:6d:15:0a:5e:57:5f:f9:46:f3:5b:ce: 07:30:71:c0:36:62:98:4c:d9:b5:7b:5a:9b:a5:ea:b9:08:24: da:4f:d1:6c:a9:8b:dd:7a:a7:53:c2:0d:31:bf:98:09:76:87: 2f:49:51:e2:49:03:74:bc:5d:04:c0:fc:fb:78:63:2f:9f:ae: 10:9c:fe:cb:1a:75:24:35:b9:27:55:ab:ae:b8:1b:3f:af:ce: 3f:a7:56:ad:99:24:b1:cc:60:23:2d:5a:f7:b4:d2:3b:dc:fa: 3c:6c:b8:49:f9:a0:20:8d:96:9a:af:24:76:17:98:1d:70:79: 95:9f:df:bb:5c:88:0e:2a:cb:d1:b3:41:af:85:34:72:9b:92: 12:22:42:b6:9e:ab:f3:80:4e:56:a9:26:c6:de:d5:13:58:58: f9:19:aa:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAzQkIxMTAvBgNVBAUTKDE1RjA3RkVGQ0EwNUU4NDZENDUzODUxMjVFOEJCNDI3 NzU4MzAwRjkwHhcNMjQwNTA2MjAwNzA4WhcNMjQwNTEzMjAwNzA4WjAYMRYwFAYD VQQDEw02NjM5Mzg2Yy0xYWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvk8Jjf5tt+U2VYG8f6KBn++ndWZxCPV2gu0pbxkNGwiRTKGCQ5Xp4xgaru1z EvQKul0ePHPz5epEcT56pZUgLF0/mub+gRfyqj6DNwQHiTzpLc3nmqS8n2LqH7HI PmrqXKSEsZatjnK/76CbsLJyLtJIzt3fUbV2EOjdL/gEEjjRYD4keyshkNkMUqYV L9dRl+tehVSQV99wYlnNsXhjBaZcV4rmoSnSKBAtIBLWgX/TXZSyutsF1L8vlxAx 6nT+tmr97ELk8RGhwS9BdrUiqpDiqwp1rSrjw1xPJrt0d8AfzADg+RDgI9SSlFO0 kp7uaD9SywbVh9hJO/X/1/Z+cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFH9V1Ng waRU3d7srTBoemqug5/IMB8GA1UdIwQYMBaAFBXwf+/KBehG1FOFEl6LtCd1gwD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDNCQi80NzI1RkM3ODIx MkYxMUVBODMwRTBBMzVDNEY5QUUwMi9GZkJfNzhvRjZFYlVVNFVTWG91MEozV0RB UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZmQl83OG9GNkViVVU0VVNYb3UwSjNXREFQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDNCQi80NzI1RkM3ODIxMkYxMUVBODMwRTBBMzVDNEY5QUUwMi9GZkJfNzhvRjZF YlVVNFVTWG91MEozV0RBUGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqq5hdX22SS4ybweXMD34vjKRZF90HSnw3BnzWWhfcXJmC8YM9McI9 bCr2rliAOmiLKs6i1JfDbPZVXpL/G8pG8MYH0kSq3EdHgzx7KaPXekk473guYc4/ 2FSghUXfTYribRUKXldf+UbzW84HMHHANmKYTNm1e1qbpeq5CCTaT9FsqYvdeqdT wg0xv5gJdocvSVHiSQN0vF0EwPz7eGMvn64QnP7LGnUkNbknVauuuBs/r84/p1at mSSxzGAjLVr3tNI73Po8bLhJ+aAgjZaaryR2F5gdcHmVn9+7XIgOKsvRs0GvhTRy m5ISIkK2nqvzgE5WqSbG3tUTWFj5Gao0 -----END CERTIFICATE-----Generated at Mon May 6 22:40:55 2024 by rpki-client on console-ams.rpki-client.org