$ rpki-client -vvf rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft File: fuca2Efp1WgQzUnid4XGOFzM-Ws.mft (raw, json) Hash identifier: NCa5XAyRfWzWeOijgsXtUzBW83ANTcwTklTVrhAgmnQ= Subject key identifier: 0B:D7:A5:34:9D:BC:1B:38:5F:05:97:89:EA:D3:9F:81:FF:34:38:69 Authority key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B Certificate issuer: /CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B Certificate serial: 0909 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft Manifest number: 08EC Signing time: Tue 30 Apr 2024 21:40:09 +0000 Manifest this update: Tue 30 Apr 2024 21:40:09 +0000 Manifest next update: Tue 07 May 2024 21:40:09 +0000 Files and hashes: 1: fuca2Efp1WgQzUnid4XGOFzM-Ws.crl (hash: RvSsDjfmP5i/IGhEHbB9wAG3uWu/vb3Or9GqkYoS3Nk=) 2: D9C66AFC845A11EA928C8E1EC4F9AE02.roa (hash: 2Ib0mEmNtyH0pmvyTsRaRkZ6O4iEaD9wNty9zBe61NU=) 3: D1E5207E623E11EEB730FC4FC4F9AE02.roa (hash: 6e1fT52wxl//Nm17I3C3FvnnbEoqH7Q5JnYOOWEkMTM=) 4: DA6E4B50845A11EA928C8E1EC4F9AE02.roa (hash: zgCKDUQwRFNSS9dG6AvSnJwfse8HzzbOw09zYQ2hf0k=) 5: 9746A47821DD11EBBEEF997DC4F9AE02.roa (hash: pr7m+D7SykxUkKmJQQ4/ELXCqqOkh9LqbSAC/lmnnK0=) 6: 96CBB6F021DD11EBBEEF997DC4F9AE02.roa (hash: H+5nWgNCVmwRvz71gZoRnMWgnFyAQ3RypJPob0rRVdY=) 7: 009A70D0232311EB8E8FB50AC4F9AE02.roa (hash: Rli58ho50LQVQ3F2P72G/aG90DCH8STYcuKaIo1bK7Y=) 8: 3489F9BE7A5411EB9AC2283DC4F9AE02.roa (hash: GBZ3Q2vNZygrQUuHNAXckgha7qlzSUvt/A0mpzXTxBI=) 9: 458D9132027011EB98FEC44BC4F9AE02.roa (hash: 3lvsux39IPdyxlOanRVOLTGFhlg/1PqvJSmtWb17z4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 21:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2313 (0x909) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B Validity Not Before: Apr 30 21:40:09 2024 GMT Not After : May 7 21:40:09 2024 GMT Subject: CN=66316539-8cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:69:98:f0:77:46:e1:1c:e7:a4:a5:46:ce:0d: 05:01:9e:1f:ad:d3:39:fd:e2:49:78:10:b6:db:0e: 2f:da:70:a7:ff:60:77:76:2e:96:51:a9:4e:64:5f: 3e:7e:4f:b9:eb:07:c5:ef:92:1c:f8:fb:a1:41:3e: 03:33:51:a9:5b:bc:18:f7:2c:46:d6:84:32:1f:00: 02:01:73:59:30:99:12:48:82:82:33:d5:70:2f:d7: 65:fc:99:f5:c3:c3:bd:cd:2d:3e:c9:77:1e:f5:88: 95:8f:40:78:e3:dd:9f:df:cf:19:2b:ed:a6:d6:6c: ae:97:5f:79:4a:fd:0d:4f:4c:56:71:61:f8:67:f0: 6a:45:a6:48:9d:cf:33:e0:40:ac:1e:1b:7e:e6:64: 35:04:cd:86:fc:c7:c1:8b:f6:ac:d3:d5:bb:01:8a: ac:86:a1:45:80:0c:30:e7:64:c9:80:d0:69:97:c7: e4:25:c4:21:f1:b0:c2:5b:8a:36:d6:86:17:7b:de: 07:49:99:bb:29:f7:0a:53:f5:99:2e:15:5d:3e:3a: dd:d5:a2:5f:76:36:5e:35:3a:fb:6c:db:ea:cd:23: d5:c3:3f:0e:fe:5b:45:13:34:ad:dd:ff:04:23:3d: 21:95:fe:8b:77:a1:0c:09:1d:e9:b6:f3:95:69:c4: 8c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D7:A5:34:9D:BC:1B:38:5F:05:97:89:EA:D3:9F:81:FF:34:38:69 X509v3 Authority Key Identifier: keyid:7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:34:1a:cf:92:bb:24:9a:fb:5e:f4:0f:68:c9:3b:a0:76:76: 93:0e:18:c8:96:a3:94:d5:2b:14:e4:6d:b1:a9:c4:83:4d:b6: ee:6d:fb:93:92:fc:a9:a6:85:d4:66:a5:67:ad:69:1f:65:0d: 4d:b6:e5:d9:d6:a3:e0:49:b7:80:c1:00:30:88:8b:07:45:63: d6:69:34:31:81:37:5e:90:14:4e:b7:06:49:a5:86:bd:6c:52: 83:2b:2d:73:bf:fa:1b:9e:77:d4:b4:cb:42:04:07:cf:3f:18: bc:91:15:47:59:08:41:22:92:be:b0:fa:56:84:2d:eb:16:2b: 12:1b:5d:c8:30:34:42:16:85:ea:30:b3:67:18:d3:d5:a3:58: ac:10:10:48:ec:0c:fb:f3:7c:a8:bb:6a:05:ea:28:36:2e:c1: 93:09:98:56:05:a7:d0:dc:30:50:ad:d2:24:c6:83:d3:98:db: 3b:2a:63:a2:ff:b4:9d:06:17:c9:6d:e5:69:d9:89:98:2e:07: 66:94:c3:79:99:c1:10:8a:1d:eb:42:53:4d:10:02:32:89:cb: 62:bc:18:28:36:3d:e4:5e:50:02:b0:1a:8c:b3:7e:1d:f8:9c: 14:9e:f5:a9:82:7d:40:af:d4:d9:a0:11:9f:4e:7a:3d:c6:60: d7:0d:02:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQxRDIxMTAvBgNVBAUTKDdFRTcxQUQ4NDdFOUQ1NjgxMENENDlFMjc3ODVDNjM4 NUNDQ0Y5NkIwHhcNMjQwNDMwMjE0MDA5WhcNMjQwNTA3MjE0MDA5WjAYMRYwFAYD VQQDEw02NjMxNjUzOS04Y2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7mmY8HdG4RznpKVGzg0FAZ4frdM5/eJJeBC22w4v2nCn/2B3di6WUalOZF8+ fk+56wfF75Ic+PuhQT4DM1GpW7wY9yxG1oQyHwACAXNZMJkSSIKCM9VwL9dl/Jn1 w8O9zS0+yXce9YiVj0B4492f388ZK+2m1myul195Sv0NT0xWcWH4Z/BqRaZInc8z 4ECsHht+5mQ1BM2G/MfBi/as09W7AYqshqFFgAww52TJgNBpl8fkJcQh8bDCW4o2 1oYXe94HSZm7KfcKU/WZLhVdPjrd1aJfdjZeNTr7bNvqzSPVwz8O/ltFEzSt3f8E Iz0hlf6Ld6EMCR3ptvOVacSMxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvXpTSd vBs4XwWXierTn4H/NDhpMB8GA1UdIwQYMBaAFH7nGthH6dVoEM1J4neFxjhczPlr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDFEMi9GNzIyM0ZCNDg0 NTQxMUVBOEQ2RTM1MEVDNEY5QUUwMi9mdWNhMkVmcDFXZ1F6VW5pZDRYR09Gek0t V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1Y2EyRWZwMVdnUXpVbmlkNFhHT0Z6TS1Xcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDFEMi9GNzIyM0ZCNDg0NTQxMUVBOEQ2RTM1MEVDNEY5QUUwMi9mdWNhMkVmcDFX Z1F6VW5pZDRYR09Gek0tV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArNBrPkrskmvte9A9oyTugdnaTDhjIlqOU1SsU5G2xqcSDTbbubfuT kvyppoXUZqVnrWkfZQ1NtuXZ1qPgSbeAwQAwiIsHRWPWaTQxgTdekBROtwZJpYa9 bFKDKy1zv/obnnfUtMtCBAfPPxi8kRVHWQhBIpK+sPpWhC3rFisSG13IMDRCFoXq MLNnGNPVo1isEBBI7Az783you2oF6ig2LsGTCZhWBafQ3DBQrdIkxoPTmNs7KmOi /7SdBhfJbeVp2YmYLgdmlMN5mcEQih3rQlNNEAIyictivBgoNj3kXlACsBqMs34d +JwUnvWpgn1Ar9TZoBGfTno9xmDXDQJ+ -----END CERTIFICATE-----Generated at Tue Apr 30 23:05:08 2024 by rpki-client on console-ams.rpki-client.org