$ rpki-client -vvf rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft File: ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft (raw, json) Hash identifier: B18okWwKhVjxJJJfKtTSCEtaZw94bEeXG4Gj0Zv/Yww= Subject key identifier: F4:00:35:D8:AC:87:07:56:81:C9:82:D4:CA:32:EA:2D:A1:8F:CA:C0 Authority key identifier: 7E:DE:27:65:36:54:14:EA:5C:1D:9E:49:F1:78:8D:09:4E:AB:FB:74 Certificate issuer: /CN=A91803B8/serialNumber=7EDE2765365414EA5C1D9E49F1788D094EABFB74 Certificate serial: 09F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft Manifest number: 09EE Signing time: Tue 30 Apr 2024 21:03:36 +0000 Manifest this update: Tue 30 Apr 2024 21:03:36 +0000 Manifest next update: Tue 07 May 2024 21:03:36 +0000 Files and hashes: 1: ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl (hash: KX1s05Toz9OQVBsCbt9gprpU2JMGL5nDAC5Zo8xkbQ8=) 2: 378397D8539A11EAAA519470C4F9AE02.roa (hash: GblOnvimhRhM9wmDAJ0TPkoEjzxIQCa4Y3teaol4cAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 20:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2553 (0x9f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803B8/serialNumber=7EDE2765365414EA5C1D9E49F1788D094EABFB74 Validity Not Before: Apr 30 21:03:36 2024 GMT Not After : May 7 21:03:36 2024 GMT Subject: CN=66315ca8-4bfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:69:b8:d6:9a:af:10:23:75:b6:df:13:5e:52: fa:99:2a:78:06:08:2f:40:b1:e6:d4:7d:fa:91:ef: c8:9f:da:84:f1:ef:77:b5:21:38:a0:1d:5d:12:f2: 88:89:df:f8:92:c9:6b:f1:72:ea:ce:db:d9:81:0f: 90:59:c7:d7:7a:56:44:80:0a:1c:68:6c:91:5c:e4: 95:35:4a:cf:61:95:99:02:a0:8e:7d:9f:0a:d5:d7: be:2c:6f:22:e5:cc:e4:77:91:35:09:a4:9c:58:2b: fe:41:d8:26:dc:51:3e:d1:a4:f4:a3:42:c2:9e:d5: 7b:92:cb:36:5e:92:c8:d8:35:1d:1a:df:dc:1c:5d: 2b:01:f8:6a:26:a1:ae:a4:bb:0f:d0:82:ad:1a:82: 51:16:56:57:4b:d3:14:16:28:bc:bc:49:02:e7:0e: 7a:15:87:cd:68:fd:46:12:77:e7:7e:84:15:ff:b5: 64:1b:de:64:c6:18:6b:58:94:f5:61:7f:a8:ae:a4: 54:ba:b5:b5:0b:c7:f4:d6:03:02:e4:d6:a1:05:c3: 09:fe:bb:4f:12:38:9e:6d:40:1e:0d:9a:df:42:5a: db:ea:b3:3e:1d:b6:84:99:b1:21:07:47:1e:f6:d4: ff:44:a4:6f:f1:16:c2:5e:6c:39:ca:32:1c:35:b3: 61:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:00:35:D8:AC:87:07:56:81:C9:82:D4:CA:32:EA:2D:A1:8F:CA:C0 X509v3 Authority Key Identifier: keyid:7E:DE:27:65:36:54:14:EA:5C:1D:9E:49:F1:78:8D:09:4E:AB:FB:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ed:60:f2:48:4f:bc:c9:f8:1c:60:09:ff:67:d7:a6:f9:46: 07:e8:67:9b:fb:39:fd:d3:bf:84:2a:46:1b:ff:78:c8:88:9c: d3:ae:71:ac:dc:f3:13:3d:bd:f7:35:26:8e:f7:5f:65:1e:86: 90:45:52:4e:02:80:ff:71:a4:f8:f0:1e:00:4d:a9:33:50:8a: 3d:d1:59:3f:93:dc:52:db:e0:3b:49:0e:33:f4:05:d6:fe:e6: 57:ca:f0:55:c3:06:92:4b:17:fa:c1:ed:c5:04:35:5c:b7:89: 16:ba:ec:6c:5c:bf:ef:14:ff:8f:b5:1c:38:40:a5:fd:de:d0: 69:51:6a:3e:b5:84:c7:87:47:f0:30:59:25:24:ee:26:5e:ff: d5:63:61:cd:28:60:49:00:6e:8e:8b:b5:77:76:95:66:5b:e7: d1:2d:20:fa:0f:10:5f:73:b6:13:91:8a:e7:18:de:ac:c0:68: a5:c1:83:a5:cb:d5:23:07:f5:47:53:0b:c5:32:f7:2f:4d:6b: a1:79:cc:28:66:3e:8f:42:6d:93:96:6d:13:52:9c:05:45:fb: 73:d1:c2:18:39:aa:b8:ee:25:09:d0:3e:a7:f1:e5:c2:b9:ce: bc:41:fc:fa:d1:ed:b9:8d:63:85:28:75:32:05:55:09:57:0c: 26:85:66:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzQjgxMTAvBgNVBAUTKDdFREUyNzY1MzY1NDE0RUE1QzFEOUU0OUYxNzg4RDA5 NEVBQkZCNzQwHhcNMjQwNDMwMjEwMzM2WhcNMjQwNTA3MjEwMzM2WjAYMRYwFAYD VQQDEw02NjMxNWNhOC00YmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmm41pqvECN1tt8TXlL6mSp4BggvQLHm1H36ke/In9qE8e93tSE4oB1dEvKI id/4kslr8XLqztvZgQ+QWcfXelZEgAocaGyRXOSVNUrPYZWZAqCOfZ8K1de+LG8i 5czkd5E1CaScWCv+Qdgm3FE+0aT0o0LCntV7kss2XpLI2DUdGt/cHF0rAfhqJqGu pLsP0IKtGoJRFlZXS9MUFii8vEkC5w56FYfNaP1GEnfnfoQV/7VkG95kxhhrWJT1 YX+orqRUurW1C8f01gMC5NahBcMJ/rtPEjiebUAeDZrfQlrb6rM+HbaEmbEhB0ce 9tT/RKRv8RbCXmw5yjIcNbNh3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPQANdis hwdWgcmC1Moy6i2hj8rAMB8GA1UdIwQYMBaAFH7eJ2U2VBTqXB2eSfF4jQlOq/t0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNCOC8zRDZCNTkzNDUz OTkxMUVBOUVBRDRCNkZDNEY5QUUwMi9mdDRuWlRaVUZPcGNIWjVKOFhpTkNVNnIt M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0NG5aVFpVRk9wY0haNUo4WGlOQ1U2ci0zUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDNCOC8zRDZCNTkzNDUzOTkxMUVBOUVBRDRCNkZDNEY5QUUwMi9mdDRuWlRaVUZP cGNIWjVKOFhpTkNVNnItM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM7WDySE+8yfgcYAn/Z9em+UYH6Geb+zn907+EKkYb/3jIiJzTrnGs 3PMTPb33NSaO919lHoaQRVJOAoD/caT48B4ATakzUIo90Vk/k9xS2+A7SQ4z9AXW /uZXyvBVwwaSSxf6we3FBDVct4kWuuxsXL/vFP+PtRw4QKX93tBpUWo+tYTHh0fw MFklJO4mXv/VY2HNKGBJAG6Oi7V3dpVmW+fRLSD6DxBfc7YTkYrnGN6swGilwYOl y9UjB/VHUwvFMvcvTWuhecwoZj6PQm2Tlm0TUpwFRftz0cIYOaq47iUJ0D6n8eXC uc68Qfz60e25jWOFKHUyBVUJVwwmhWaf -----END CERTIFICATE-----Generated at Tue Apr 30 21:38:00 2024 by rpki-client on console-fra.rpki-client.org