$ rpki-client -vvf rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft File: FZbEu-cy2oXLg-incIc-o0E3AaU.mft (raw, json) Hash identifier: yYTEUcu30nLZiPJOcDJinnjxPwcnxwrXxQ8daWpIBTU= Subject key identifier: E7:05:86:38:AE:1E:F5:F9:8B:06:89:6D:1E:EA:13:70:45:B5:D0:6C Authority key identifier: 15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5 Certificate issuer: /CN=A91771E3/serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5 Certificate serial: 128C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft Manifest number: 1267 Signing time: Thu 02 May 2024 17:44:19 +0000 Manifest this update: Thu 02 May 2024 17:44:19 +0000 Manifest next update: Thu 09 May 2024 17:44:19 +0000 Files and hashes: 1: FZbEu-cy2oXLg-incIc-o0E3AaU.crl (hash: senjxaUCT4RHfm4SVflTdBiVi5GNbqZQk/0m0uuZtiA=) 2: 56094384320611EA84C94231C4F9AE02.roa (hash: kdqCU2HWVWtTjP6H/cGVnbQmwJUXbJofXCjwvVuE4iM=) 3: 443241A0321B11EA83044473C4F9AE02.roa (hash: peb0NN3rQarXiwZVSr4hzfm6X65GogoSGj3wgr1dCxc=) 4: 4B18BBA8A9F811EEB85DBD24C4F9AE02.roa (hash: 5dJn6hxxfPSiLw5GQ6SZkYPyS3vVBNlQ6n1n7xqGK10=) 5: 1FD07ED231FB11EAA335E10FC4F9AE02.roa (hash: xEJSSODLa2MxHoWVNA4uEk+1w0R7pBSRyEzoy1l8lR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:44:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4748 (0x128c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91771E3/serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5 Validity Not Before: May 2 17:44:19 2024 GMT Not After : May 9 17:44:19 2024 GMT Subject: CN=6633d0f3-0d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c1:19:99:ad:19:23:f3:d6:0d:2e:78:fb:6d: 2c:0b:d1:43:49:73:26:c2:03:88:87:1c:7e:50:c7: ea:f8:85:ac:5e:7c:b6:4a:d4:b4:4f:7c:5a:46:6c: ad:c4:40:1a:09:74:54:a9:78:c3:db:d7:56:34:51: 04:90:59:de:59:0a:7f:87:b7:7b:ea:ed:f9:d4:97: b6:87:ab:0e:4f:63:b8:72:cc:05:2e:9a:ee:c3:cd: 0e:b3:65:3c:62:36:e3:6b:c0:62:07:3c:40:df:5f: f5:4a:db:96:8e:df:37:14:fc:12:61:22:dd:1d:eb: 03:df:ec:3b:7d:6a:b1:21:46:32:29:47:d3:db:c8: 02:0b:e2:9c:c5:8b:9b:8a:90:00:2f:b4:77:64:6d: 93:3b:09:25:93:26:c1:48:87:97:21:04:a3:a7:9c: 01:2c:da:0b:90:e4:ce:eb:8a:7e:82:50:dd:98:38: f0:80:18:27:3e:8c:02:a7:e1:2a:e1:5a:64:4c:83: 2f:8a:3e:23:6d:fd:11:2b:cf:75:2e:a3:62:c8:9b: 80:07:91:97:2e:a6:b0:a6:5c:4d:f4:fd:79:ba:1e: 1c:ef:18:0e:4a:ef:f3:ac:a0:be:fd:f4:1f:7e:24: b2:31:61:5f:2e:c8:b4:51:a0:10:0b:f8:8e:2d:c4: a3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:05:86:38:AE:1E:F5:F9:8B:06:89:6D:1E:EA:13:70:45:B5:D0:6C X509v3 Authority Key Identifier: keyid:15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:a1:74:1d:bf:72:8d:4a:0d:b8:cc:4c:2c:1b:cf:a6:e7:e0: 2e:91:15:1a:96:72:ee:4a:e5:2c:ff:c9:dd:2d:ee:5b:f2:6c: 21:73:5c:49:a6:d9:dd:cd:a0:df:58:cb:50:70:61:6d:b7:d3: 6b:65:a2:d3:44:2f:5a:54:80:3d:34:35:49:b8:ec:27:cd:e5: 3d:8e:56:e1:63:b4:b1:ba:16:2f:fe:e0:11:6b:6b:eb:3a:d8: b9:85:bf:e1:46:76:32:30:3f:27:56:03:68:89:e7:a4:3c:be: 8a:9a:23:6c:25:6f:45:81:b3:23:03:27:c1:8d:d2:9c:0d:86: 3a:ce:74:85:88:f2:c0:58:dd:be:f8:69:0e:b1:33:8a:34:a5: b3:2b:91:13:c6:62:72:c8:5e:87:d2:fd:45:a4:21:5b:35:69: 17:47:3c:0e:53:0a:79:2d:31:de:15:16:5c:dc:17:92:d4:79: 3e:7c:03:d0:6d:d2:1e:8c:27:06:a5:e3:ef:cb:ac:c8:31:e4: d2:d8:79:59:65:cb:cd:3e:d7:46:81:05:20:f0:b8:61:ba:2f: 84:92:11:c5:01:8f:a9:45:3f:58:6b:f8:9d:74:3a:8f:28:a6: 9e:bf:56:d5:ff:0b:48:8a:e2:ba:a9:76:d8:b4:68:47:fd:42: e0:3f:2a:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzcxRTMxMTAvBgNVBAUTKDE1OTZDNEJCRTczMkRBODVDQjgzRThBNzcwODczRUEz NDEzNzAxQTUwHhcNMjQwNTAyMTc0NDE5WhcNMjQwNTA5MTc0NDE5WjAYMRYwFAYD VQQDEw02NjMzZDBmMy0wZDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8EZma0ZI/PWDS54+20sC9FDSXMmwgOIhxx+UMfq+IWsXny2StS0T3xaRmyt xEAaCXRUqXjD29dWNFEEkFneWQp/h7d76u351Je2h6sOT2O4cswFLpruw80Os2U8 Yjbja8BiBzxA31/1StuWjt83FPwSYSLdHesD3+w7fWqxIUYyKUfT28gCC+KcxYub ipAAL7R3ZG2TOwklkybBSIeXIQSjp5wBLNoLkOTO64p+glDdmDjwgBgnPowCp+Eq 4VpkTIMvij4jbf0RK891LqNiyJuAB5GXLqawplxN9P15uh4c7xgOSu/zrKC+/fQf fiSyMWFfLsi0UaAQC/iOLcSjhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcFhjiu HvX5iwaJbR7qE3BFtdBsMB8GA1UdIwQYMBaAFBWWxLvnMtqFy4Pop3CHPqNBNwGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzFFMy85MzgzRTY0NkFE NjUxMUU4QUNCRDBENkFDNEY5QUUwMi9GWmJFdS1jeTJvWExnLWluY0ljLW8wRTNB YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZaYkV1LWN5Mm9YTGctaW5jSWMtbzBFM0FhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzFFMy85MzgzRTY0NkFENjUxMUU4QUNCRDBENkFDNEY5QUUwMi9GWmJFdS1jeTJv WExnLWluY0ljLW8wRTNBYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeoXQdv3KNSg24zEwsG8+m5+AukRUalnLuSuUs/8ndLe5b8mwhc1xJ ptndzaDfWMtQcGFtt9NrZaLTRC9aVIA9NDVJuOwnzeU9jlbhY7SxuhYv/uARa2vr Oti5hb/hRnYyMD8nVgNoieekPL6KmiNsJW9FgbMjAyfBjdKcDYY6znSFiPLAWN2+ +GkOsTOKNKWzK5ETxmJyyF6H0v1FpCFbNWkXRzwOUwp5LTHeFRZc3BeS1Hk+fAPQ bdIejCcGpePvy6zIMeTS2HlZZcvNPtdGgQUg8Lhhui+EkhHFAY+pRT9Ya/iddDqP KKaev1bV/wtIiuK6qXbYtGhH/ULgPyrc -----END CERTIFICATE-----Generated at Thu May 2 20:04:39 2024 by rpki-client on console-ams.rpki-client.org