$ rpki-client -vvf rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft File: fkTc6XLxPIDlNLLmhf4dKg12FRI.mft (raw, json) Hash identifier: VFZkqnhWVtyaY96+kgS8O72DkpqVKc1dAykRpJP762w= Subject key identifier: F2:94:97:DE:BA:25:4B:75:F2:81:66:8D:C1:E3:BF:09:AB:FB:19:CA Authority key identifier: 7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12 Certificate issuer: /CN=A917270F/serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512 Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft Manifest number: 01BD Signing time: Fri 03 May 2024 04:35:11 +0000 Manifest this update: Fri 03 May 2024 04:35:11 +0000 Manifest next update: Fri 10 May 2024 04:35:11 +0000 Files and hashes: 1: fkTc6XLxPIDlNLLmhf4dKg12FRI.crl (hash: Q8+fq/JtF4bmIIT5NGxDRdLRJ4ApTKvpqqg1pFNuzfQ=) 2: FC30C80A34EF11EEB8AE456DC4F9AE02.roa (hash: N3cOFHb0uCiPeuu/37pwn8vkx9Zpt6TeJbKhwrin6l0=) 3: 4B0B5F9434F011EEBB58A637C4F9AE02.roa (hash: uU6/IpU1DxEBqRCwO7LCFA2XtYeatD3hsh1AAU+h4h8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917270F/serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512 Validity Not Before: May 3 04:35:11 2024 GMT Not After : May 10 04:35:11 2024 GMT Subject: CN=6634697f-0f06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a4:24:23:f7:b1:69:8a:0c:d3:bb:85:f7:61: d5:27:4a:b2:b2:fd:63:b2:bf:96:fd:9a:21:09:81: ed:dc:58:ba:52:9e:79:58:f4:c1:06:f5:27:01:33: 7e:87:a1:b6:e0:7a:2b:ca:fe:9e:07:89:66:7e:cd: 5d:b0:a9:8b:9e:4e:15:59:e4:13:0e:01:23:c6:00: 19:cb:48:82:2c:b8:d3:cb:26:4d:85:12:b9:da:20: 19:4c:4a:6a:9d:2d:46:5c:a5:f8:5b:e9:55:e2:3e: 85:f5:64:6f:93:4e:7f:5a:85:b8:6b:bf:41:4f:43: 3e:f1:56:48:8e:86:31:78:e4:0b:6d:2a:7e:69:5e: c0:f6:40:82:03:3a:a5:3c:65:96:f0:f0:a2:59:43: 24:52:6c:2c:40:d2:45:69:2a:cf:81:75:ae:e9:c0: e8:57:f3:b5:45:f5:72:2d:17:3e:7a:3d:72:0c:7c: 4f:e7:1c:a1:61:69:a7:9c:2a:00:7e:29:f2:55:38: 77:6b:2d:9c:a6:9a:74:3a:16:ec:70:b6:04:26:33: a4:21:cc:64:d0:17:bc:f3:cf:79:ee:c0:59:4d:7f: e3:68:86:1d:d4:c1:76:53:23:2b:74:28:93:98:67: fe:e9:56:f1:70:7b:ec:97:a6:69:21:af:78:8c:90: cc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:94:97:DE:BA:25:4B:75:F2:81:66:8D:C1:E3:BF:09:AB:FB:19:CA X509v3 Authority Key Identifier: keyid:7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:9d:20:71:90:53:9a:3f:e9:89:05:6f:27:c4:8e:18:a0:02: 75:8a:78:4e:bf:31:b4:b7:11:15:d0:9f:ab:57:bf:5b:62:93: 8b:03:f9:ea:7b:23:47:08:76:54:e5:49:6f:c8:f4:f2:31:d5: e1:bf:69:06:97:70:f1:f3:6d:e6:99:93:96:51:76:c6:6a:d5: 3b:ad:4e:fb:63:31:7f:f5:3a:e5:58:00:26:33:54:fb:0c:21: cb:be:45:a1:40:6b:c4:33:3f:15:43:66:70:f9:85:d9:23:20: c4:37:6e:16:08:26:b5:e5:4a:35:06:b4:c7:a3:7b:2d:a8:e2: 88:4c:dd:81:58:d0:3f:a1:70:5a:53:20:e4:72:59:15:f0:d8: ed:6c:2b:d9:b5:1f:67:1a:79:02:1a:6f:bb:e6:4d:32:4b:38: f3:f1:2a:9a:84:e2:0c:d5:3f:ba:ee:22:ae:6a:2a:1d:b9:de: 1e:19:a1:fc:40:ee:01:bb:68:7b:51:b3:42:98:b5:5d:66:42: 20:bd:d4:82:93:d8:b4:27:a2:b0:ed:1a:93:a4:e9:6e:37:93: 0e:bd:2e:20:fb:04:19:64:8a:0e:15:d5:02:bd:7e:82:c2:0d: 2c:43:da:58:a1:ba:8d:52:2e:66:c2:11:bb:a6:22:a2:ef:79: 75:55:9f:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI3MEYxMTAvBgNVBAUTKDdFNDREQ0U5NzJGMTNDODBFNTM0QjJFNjg1RkUxRDJB MEQ3NjE1MTIwHhcNMjQwNTAzMDQzNTExWhcNMjQwNTEwMDQzNTExWjAYMRYwFAYD VQQDEw02NjM0Njk3Zi0wZjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqQkI/exaYoM07uF92HVJ0qysv1jsr+W/ZohCYHt3Fi6Up55WPTBBvUnATN+ h6G24Horyv6eB4lmfs1dsKmLnk4VWeQTDgEjxgAZy0iCLLjTyyZNhRK52iAZTEpq nS1GXKX4W+lV4j6F9WRvk05/WoW4a79BT0M+8VZIjoYxeOQLbSp+aV7A9kCCAzql PGWW8PCiWUMkUmwsQNJFaSrPgXWu6cDoV/O1RfVyLRc+ej1yDHxP5xyhYWmnnCoA finyVTh3ay2cppp0OhbscLYEJjOkIcxk0Be888957sBZTX/jaIYd1MF2UyMrdCiT mGf+6VbxcHvsl6ZpIa94jJDMDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKUl966 JUt18oFmjcHjvwmr+xnKMB8GA1UdIwQYMBaAFH5E3Oly8TyA5TSy5oX+HSoNdhUS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjcwRi9EQzVFNzRDQTA4 RTgxMUVEQjlFMUI2MzNDNEY5QUUwMi9ma1RjNlhMeFBJRGxOTExtaGY0ZEtnMTJG UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZrVGM2WEx4UElEbE5MTG1oZjRkS2cxMkZSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjcwRi9EQzVFNzRDQTA4RTgxMUVEQjlFMUI2MzNDNEY5QUUwMi9ma1RjNlhMeFBJ RGxOTExtaGY0ZEtnMTJGUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsnSBxkFOaP+mJBW8nxI4YoAJ1inhOvzG0txEV0J+rV79bYpOLA/nq eyNHCHZU5UlvyPTyMdXhv2kGl3Dx823mmZOWUXbGatU7rU77YzF/9TrlWAAmM1T7 DCHLvkWhQGvEMz8VQ2Zw+YXZIyDEN24WCCa15Uo1BrTHo3stqOKITN2BWNA/oXBa UyDkclkV8NjtbCvZtR9nGnkCGm+75k0ySzjz8SqahOIM1T+67iKuaiodud4eGaH8 QO4Bu2h7UbNCmLVdZkIgvdSCk9i0J6Kw7RqTpOluN5MOvS4g+wQZZIoOFdUCvX6C wg0sQ9pYobqNUi5mwhG7piKi73l1VZ+e -----END CERTIFICATE-----Generated at Fri May 3 06:28:41 2024 by rpki-client on console-fra.rpki-client.org