$ rpki-client -vvf rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft File: FSze4Zs7fRcbTKrQNbUymFTTbcI.mft (raw, json) Hash identifier: BX+qqY5w2KXLQy5qsxoGOADjkpkJydGckADj0MFJxeI= Subject key identifier: 12:7D:A0:9F:A0:4C:DD:3C:D3:AC:17:25:B6:D0:94:4D:DF:65:1A:F3 Authority key identifier: 15:2C:DE:E1:9B:3B:7D:17:1B:4C:AA:D0:35:B5:32:98:54:D3:6D:C2 Certificate issuer: /CN=A91627F3/serialNumber=152CDEE19B3B7D171B4CAAD035B5329854D36DC2 Certificate serial: 0317 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft Manifest number: 0313 Signing time: Tue 07 May 2024 03:06:51 +0000 Manifest this update: Tue 07 May 2024 03:06:50 +0000 Manifest next update: Tue 14 May 2024 03:06:50 +0000 Files and hashes: 1: FSze4Zs7fRcbTKrQNbUymFTTbcI.crl (hash: IqWwLSwVCSnPIWw5rn4lvz8dCom+Qi7zoM1zYTjHXAk=) 2: 6F51887283FA11EC9C033067C4F9AE02.roa (hash: UM+NlN+/uOD4LuYQsjCz2PUBb9iT9Zle8XWRP/wNAZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.crl rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 02:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 791 (0x317) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91627F3/serialNumber=152CDEE19B3B7D171B4CAAD035B5329854D36DC2 Validity Not Before: May 7 03:06:50 2024 GMT Not After : May 14 03:06:50 2024 GMT Subject: CN=66399acb-508b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:68:47:63:97:1a:85:73:1c:2f:e6:51:06:b3: 89:22:da:a0:a7:0b:dc:c9:0e:3c:0f:14:dc:b8:79: 2b:70:96:a0:3c:63:19:9f:c4:f9:88:8e:b6:43:72: 46:80:df:c6:99:ce:1d:60:12:85:d1:bf:f9:ce:ae: f3:e4:3a:62:a2:48:36:97:96:e8:9b:7f:cc:54:f6: ca:fc:e7:e8:dc:95:e5:f5:f0:43:23:5b:41:5a:9f: 50:d3:57:74:da:d3:35:60:8e:d9:d6:8f:72:38:61: a5:91:69:d9:d8:5a:fd:73:5a:2e:bc:d8:89:43:d0: 2c:e2:46:1c:16:e6:25:20:26:19:f4:97:5e:25:df: b6:34:9d:b4:f9:78:a3:f8:4c:9e:65:f4:97:4a:f1: fd:02:22:fc:26:ae:fa:50:cb:d4:58:f8:42:79:dc: 86:18:b8:a7:d6:11:5c:e9:1f:31:ba:3f:60:ae:23: 39:ec:71:2b:93:5e:ff:bf:bd:71:4a:02:c6:ae:1d: bb:66:61:cf:23:65:f4:d7:97:9c:0b:c8:77:08:6f: 68:0b:3a:1c:fb:4a:74:78:8d:ed:ea:3d:cf:7a:a9: ed:f2:54:b3:33:e9:58:71:29:59:91:9d:50:ae:2e: 7b:0c:06:77:45:a8:78:3d:5b:ee:86:ed:93:76:cb: 27:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:7D:A0:9F:A0:4C:DD:3C:D3:AC:17:25:B6:D0:94:4D:DF:65:1A:F3 X509v3 Authority Key Identifier: keyid:15:2C:DE:E1:9B:3B:7D:17:1B:4C:AA:D0:35:B5:32:98:54:D3:6D:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:52:f6:cc:5f:dc:f1:12:cd:3e:2e:ff:94:cb:c8:ac:de:ac: 2d:b0:f9:d1:01:6b:fb:50:2d:78:b8:04:c8:cf:9e:8b:48:3b: 42:b6:51:e8:06:12:06:04:71:0e:d2:47:4c:8b:57:50:50:df: 71:4d:d7:fa:a9:4c:38:67:2c:59:83:ab:51:fc:ae:ba:ef:10: 0b:b8:71:bd:6c:11:9d:35:dd:98:f3:df:a1:f2:42:00:4f:35: b0:aa:ae:28:9f:b2:04:8c:d0:6c:63:4a:09:f1:f1:a3:9f:cc: e3:ed:3f:bf:a0:fa:92:af:6a:d9:51:7f:37:ee:b5:57:db:bd: 89:ba:13:6d:cb:9f:8e:5e:c2:e1:6a:10:28:12:6d:ff:e7:02: 78:f5:fe:cc:d7:79:ea:e8:95:eb:f2:a0:5c:d3:57:16:29:da: a4:fe:6a:5b:47:14:a5:70:97:a6:be:48:56:ee:7f:ed:ac:9d: 6a:70:af:b2:fa:75:56:60:1b:c6:f8:3b:91:e4:c0:3b:af:9c: ea:74:ef:43:50:6d:ab:30:42:1d:55:e9:6c:ae:b4:b3:c3:3e: 49:3f:98:7e:9b:c2:6e:1d:ad:68:21:a0:6c:bd:25:bd:51:3a: fb:73:b7:50:c6:d5:fa:03:d5:91:ac:42:21:ad:1d:5e:c4:21: ab:99:81:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI3RjMxMTAvBgNVBAUTKDE1MkNERUUxOUIzQjdEMTcxQjRDQUFEMDM1QjUzMjk4 NTREMzZEQzIwHhcNMjQwNTA3MDMwNjUwWhcNMjQwNTE0MDMwNjUwWjAYMRYwFAYD VQQDEw02NjM5OWFjYi01MDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAomhHY5cahXMcL+ZRBrOJItqgpwvcyQ48DxTcuHkrcJagPGMZn8T5iI62Q3JG gN/Gmc4dYBKF0b/5zq7z5Dpiokg2l5bom3/MVPbK/Ofo3JXl9fBDI1tBWp9Q01d0 2tM1YI7Z1o9yOGGlkWnZ2Fr9c1ouvNiJQ9As4kYcFuYlICYZ9JdeJd+2NJ20+Xij +EyeZfSXSvH9AiL8Jq76UMvUWPhCedyGGLin1hFc6R8xuj9griM57HErk17/v71x SgLGrh27ZmHPI2X015ecC8h3CG9oCzoc+0p0eI3t6j3Peqnt8lSzM+lYcSlZkZ1Q ri57DAZ3Rah4PVvuhu2TdssneQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJ9oJ+g TN0806wXJbbQlE3fZRrzMB8GA1UdIwQYMBaAFBUs3uGbO30XG0yq0DW1MphU023C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjdGMy83NzlGNkU5Mjgz RjgxMUVDODE2QjAzNjdDNEY5QUUwMi9GU3plNFpzN2ZSY2JUS3JRTmJVeW1GVFRi Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTemU0WnM3ZlJjYlRLclFOYlV5bUZUVGJjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjdGMy83NzlGNkU5MjgzRjgxMUVDODE2QjAzNjdDNEY5QUUwMi9GU3plNFpzN2ZS Y2JUS3JRTmJVeW1GVFRiY0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4UvbMX9zxEs0+Lv+Uy8is3qwtsPnRAWv7UC14uATIz56LSDtCtlHo BhIGBHEO0kdMi1dQUN9xTdf6qUw4ZyxZg6tR/K667xALuHG9bBGdNd2Y89+h8kIA TzWwqq4on7IEjNBsY0oJ8fGjn8zj7T+/oPqSr2rZUX837rVX272JuhNty5+OXsLh ahAoEm3/5wJ49f7M13nq6JXr8qBc01cWKdqk/mpbRxSlcJemvkhW7n/trJ1qcK+y +nVWYBvG+DuR5MA7r5zqdO9DUG2rMEIdVelsrrSzwz5JP5h+m8JuHa1oIaBsvSW9 UTr7c7dQxtX6A9WRrEIhrR1exCGrmYHO -----END CERTIFICATE-----Generated at Tue May 7 03:49:59 2024 by rpki-client on console-ams.rpki-client.org