$ rpki-client -vvf rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft File: fBMe4KgLg01I0X1pZVpbx75mi2o.mft (raw, json) Hash identifier: WjE16zFqHBNedZsoyAQQPPNV1Jizn7Wk6rvtn8MM/dM= Subject key identifier: 94:17:99:64:1B:27:8C:C7:B3:3C:8F:B9:EE:BA:97:51:3E:CB:61:43 Authority key identifier: 7C:13:1E:E0:A8:0B:83:4D:48:D1:7D:69:65:5A:5B:C7:BE:66:8B:6A Certificate issuer: /CN=A91637DD/serialNumber=7C131EE0A80B834D48D17D69655A5BC7BE668B6A Certificate serial: 0381 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft Manifest number: 0378 Signing time: Sat 27 Apr 2024 02:44:45 +0000 Manifest this update: Sat 27 Apr 2024 02:44:44 +0000 Manifest next update: Sat 04 May 2024 02:44:44 +0000 Files and hashes: 1: fBMe4KgLg01I0X1pZVpbx75mi2o.crl (hash: t0+WgAclGV1NemZLfpV86r1bYWjedIFofkjKAeuQYhE=) 2: CA95FB0EA1E611EDABFD7D7FC4F9AE02.roa (hash: OEnucU7WB79BgWJcZIYtLK91Wx7xdFzqVYUne1/YDjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.crl rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 02:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 897 (0x381) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91637DD/serialNumber=7C131EE0A80B834D48D17D69655A5BC7BE668B6A Validity Not Before: Apr 27 02:44:44 2024 GMT Not After : May 4 02:44:44 2024 GMT Subject: CN=662c669c-63a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f9:f6:49:e7:30:27:bf:41:97:e6:d2:86:c1: 09:ab:f0:8d:73:56:34:d7:1d:39:d5:d7:5f:41:3d: 31:03:88:52:9e:8f:61:8b:e5:81:1d:93:0e:ba:62: df:58:69:f8:30:68:55:78:e9:b3:26:94:6e:26:b5: 31:81:0f:5b:b9:6b:d9:6b:04:92:1d:a1:e1:9f:16: 8c:ce:e2:c9:9e:6f:50:fd:66:1b:48:14:c3:03:74: 30:82:8e:38:f6:b8:c6:8c:e0:2d:d9:25:e8:94:ca: 46:ff:1e:d0:e5:5f:d4:f1:37:88:1e:eb:20:ff:54: 1b:5d:93:e0:9f:a0:87:a9:5b:67:90:c9:37:33:e0: 73:f2:08:ca:5a:5e:76:1f:bc:61:0f:d9:e7:17:86: df:e7:73:b7:26:d6:97:be:e3:cb:37:83:83:75:31: 4d:2c:06:b8:ab:c4:ea:77:50:a9:79:47:f7:e7:47: bd:ac:56:d9:44:cd:72:6c:63:c4:35:b1:cf:f6:f1: 36:63:39:76:95:d2:e8:2c:3c:27:9a:12:20:99:48: 89:17:d8:99:7a:d1:57:7a:e6:8e:06:8e:fe:dc:ad: d4:92:b0:19:a1:11:41:69:8a:c6:64:0b:f1:b5:8e: fb:15:ce:a1:d8:4f:27:27:f1:a6:f5:5a:d6:69:20: f1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:17:99:64:1B:27:8C:C7:B3:3C:8F:B9:EE:BA:97:51:3E:CB:61:43 X509v3 Authority Key Identifier: keyid:7C:13:1E:E0:A8:0B:83:4D:48:D1:7D:69:65:5A:5B:C7:BE:66:8B:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:5a:f5:80:c6:9f:07:2e:40:55:9e:b8:ee:cc:71:24:18:85: 06:1c:79:bd:15:55:d8:1b:25:66:1c:59:87:35:32:67:da:ef: 39:f9:be:56:4a:bc:e2:76:44:e9:64:f6:09:05:e1:f2:3c:6e: 79:52:f8:c4:56:1c:f9:5c:c0:1b:8e:59:36:4d:65:39:1e:df: ba:61:3c:07:31:60:7e:77:62:cb:17:db:9e:84:bc:45:17:3a: 7d:e4:48:4d:d3:0f:14:9a:0b:53:25:e3:15:01:1b:ae:d9:c9: d7:77:f8:20:ae:54:ef:de:86:b6:dd:a4:23:5c:7e:6d:81:1c: a2:33:b8:3c:78:e7:45:c2:66:73:ec:da:cb:95:3d:f1:18:73: 24:51:72:1e:64:4d:cd:69:f2:ce:ae:d1:0a:cc:be:8c:fa:20: 90:27:d3:7c:9e:08:18:6e:49:84:36:db:0d:3f:7d:ea:89:24: 1c:71:38:57:ff:83:54:e0:b1:23:30:65:29:4a:40:76:99:66: ad:80:64:3a:57:aa:d7:f3:5e:85:ea:c8:a6:ad:de:11:39:38: 8d:c7:c9:0a:09:86:35:cc:52:00:b3:b4:d2:08:16:95:65:64: ed:43:64:94:67:b0:1b:54:b5:12:07:2a:81:1e:88:0f:54:c8: 90:1c:a3:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM3REQxMTAvBgNVBAUTKDdDMTMxRUUwQTgwQjgzNEQ0OEQxN0Q2OTY1NUE1QkM3 QkU2NjhCNkEwHhcNMjQwNDI3MDI0NDQ0WhcNMjQwNTA0MDI0NDQ0WjAYMRYwFAYD VQQDEw02NjJjNjY5Yy02M2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vn2SecwJ79Bl+bShsEJq/CNc1Y01x051ddfQT0xA4hSno9hi+WBHZMOumLf WGn4MGhVeOmzJpRuJrUxgQ9buWvZawSSHaHhnxaMzuLJnm9Q/WYbSBTDA3Qwgo44 9rjGjOAt2SXolMpG/x7Q5V/U8TeIHusg/1QbXZPgn6CHqVtnkMk3M+Bz8gjKWl52 H7xhD9nnF4bf53O3JtaXvuPLN4ODdTFNLAa4q8Tqd1CpeUf350e9rFbZRM1ybGPE NbHP9vE2Yzl2ldLoLDwnmhIgmUiJF9iZetFXeuaOBo7+3K3UkrAZoRFBaYrGZAvx tY77Fc6h2E8nJ/Gm9VrWaSDxQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQXmWQb J4zHszyPue66l1E+y2FDMB8GA1UdIwQYMBaAFHwTHuCoC4NNSNF9aWVaW8e+Zotq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzdERC9ERTU5RjYwMjVF NzMxMUVDOEJFNENDNEVDNEY5QUUwMi9mQk1lNEtnTGcwMUkwWDFwWlZwYng3NW1p Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZCTWU0S2dMZzAxSTBYMXBaVnBieDc1bWkyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzdERC9ERTU5RjYwMjVFNzMxMUVDOEJFNENDNEVDNEY5QUUwMi9mQk1lNEtnTGcw MUkwWDFwWlZwYng3NW1pMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgWvWAxp8HLkBVnrjuzHEkGIUGHHm9FVXYGyVmHFmHNTJn2u85+b5W SrzidkTpZPYJBeHyPG55UvjEVhz5XMAbjlk2TWU5Ht+6YTwHMWB+d2LLF9uehLxF Fzp95EhN0w8UmgtTJeMVARuu2cnXd/ggrlTv3oa23aQjXH5tgRyiM7g8eOdFwmZz 7NrLlT3xGHMkUXIeZE3NafLOrtEKzL6M+iCQJ9N8nggYbkmENtsNP33qiSQccThX /4NU4LEjMGUpSkB2mWatgGQ6V6rX816F6simrd4ROTiNx8kKCYY1zFIAs7TSCBaV ZWTtQ2SUZ7AbVLUSByqBHogPVMiQHKPR -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:02 2024 by rpki-client on console-ams.rpki-client.org