$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft File: fd2N3PFW56GBobc5eyTUIJY1Pdg.mft (raw, json) Hash identifier: 7/cnpw7GFfUfYZBH1dvn0Fhq8xlCyIGrYSrfHcRQ844= Subject key identifier: 3C:F9:24:69:58:BB:04:89:E2:62:D4:FD:3A:DA:8C:07:AD:DC:4E:CE Authority key identifier: 7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8 Certificate issuer: /CN=A91A55EC/serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8 Certificate serial: 038C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft Manifest number: 0386 Signing time: Sun 05 May 2024 03:05:26 +0000 Manifest this update: Sun 05 May 2024 03:05:25 +0000 Manifest next update: Sun 12 May 2024 03:05:25 +0000 Files and hashes: 1: fd2N3PFW56GBobc5eyTUIJY1Pdg.crl (hash: wlbVC+AQr2KkYx4XukiIlWpSB2A2XpT+SoP1x6vfcFE=) 2: 8E15FBF25CFF11ECB5477E0BC4F9AE02.roa (hash: EJYgzer8+vXx8u7MJTCTkYBHErTwzRTpiwQcsCSE90E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 908 (0x38c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55EC/serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8 Validity Not Before: May 5 03:05:25 2024 GMT Not After : May 12 03:05:25 2024 GMT Subject: CN=6636f775-9c93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:21:13:ce:a7:c6:6f:69:fd:b1:12:45:1c:ea: d8:00:c7:a6:88:49:b6:45:0b:7f:70:bc:19:eb:dd: 74:82:c0:5f:cf:d2:74:18:94:01:bb:24:a9:98:05: 24:f4:11:fd:61:cf:00:8f:11:6a:a2:81:36:83:f5: 34:c6:d3:fd:d1:12:f9:dd:ab:1d:31:f2:d2:03:ec: a2:6b:74:cb:10:0d:fd:f4:5e:5e:a9:cb:63:bc:6a: 7b:95:ed:fa:67:4c:d8:03:ce:ea:d0:ac:73:dc:bb: ed:c8:1f:55:0a:d5:f3:61:19:dc:bb:d6:d4:59:af: a1:71:76:e4:8c:39:dd:52:d8:b0:cf:5f:f8:fa:c4: 72:e5:a0:9d:41:90:5e:b4:8f:bf:a1:83:d5:66:fa: 74:21:40:0c:3f:56:cc:ea:aa:c7:1b:61:15:b0:6b: 28:99:6f:10:2f:4c:1a:04:db:10:05:2c:e2:42:b6: a7:43:b5:7a:05:d2:48:e2:7d:2a:69:2f:8f:2f:54: a3:a1:2e:b8:d2:b7:ff:98:1e:a1:d0:09:be:89:4b: 08:66:1f:a1:4f:08:76:1a:68:93:99:f0:f6:96:80: 77:46:6a:7c:02:5a:d7:94:18:c8:03:95:b5:d7:8f: b7:5c:1e:89:dc:65:d4:46:d7:c1:e8:0e:b3:9d:7d: 6f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F9:24:69:58:BB:04:89:E2:62:D4:FD:3A:DA:8C:07:AD:DC:4E:CE X509v3 Authority Key Identifier: keyid:7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:c7:9c:d4:71:ef:77:a8:ae:4b:56:a5:ce:3a:04:8b:bb:ca: f3:14:64:a8:fb:9a:ea:de:9f:a9:e4:79:bc:04:da:63:24:47: a9:cd:c0:5f:56:41:18:4c:89:11:9b:71:0b:f7:4b:18:bc:74: cc:b7:78:f3:bf:2b:93:d6:39:a7:35:3e:9d:e6:05:13:94:c7: 8b:4c:cc:2d:46:23:8d:c3:59:8c:9d:58:36:43:5a:96:79:f2: 93:2f:f4:ff:24:66:35:60:04:07:07:ec:d6:02:df:4e:6c:24: 1d:a8:22:ec:56:29:55:39:8c:d5:1e:27:75:78:e2:ce:b4:fc: af:1c:1a:e5:d7:13:b8:91:b8:c6:7f:4b:5c:b4:ed:2a:cc:99: b4:24:e1:66:fa:2e:8a:63:f5:d3:87:3e:81:2c:ca:42:d5:ab: 06:32:98:87:ba:b5:17:d6:e3:00:c3:bc:03:8c:ae:0c:c2:42: c6:ef:0e:2f:ff:d8:16:23:08:c3:a6:e4:f9:ca:aa:b9:d4:94: 65:d9:99:f1:62:49:bf:7c:96:11:ee:2c:98:c7:d8:a9:a3:67: 94:e6:ca:c7:32:b8:fe:2a:5e:e7:b3:6d:ff:01:55:79:64:b7: c5:d0:dc:3f:70:dd:6a:c0:00:8d:11:f8:dc:52:d1:05:ee:4f: 24:c5:79:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1RUMxMTAvBgNVBAUTKDdEREQ4RERDRjE1NkU3QTE4MUExQjczOTdCMjRENDIw OTYzNTNERDgwHhcNMjQwNTA1MDMwNTI1WhcNMjQwNTEyMDMwNTI1WjAYMRYwFAYD VQQDEw02NjM2Zjc3NS05YzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7iETzqfGb2n9sRJFHOrYAMemiEm2RQt/cLwZ6910gsBfz9J0GJQBuySpmAUk 9BH9Yc8AjxFqooE2g/U0xtP90RL53asdMfLSA+yia3TLEA399F5eqctjvGp7le36 Z0zYA87q0Kxz3LvtyB9VCtXzYRncu9bUWa+hcXbkjDndUtiwz1/4+sRy5aCdQZBe tI+/oYPVZvp0IUAMP1bM6qrHG2EVsGsomW8QL0waBNsQBSziQranQ7V6BdJI4n0q aS+PL1SjoS640rf/mB6h0Am+iUsIZh+hTwh2GmiTmfD2loB3Rmp8AlrXlBjIA5W1 14+3XB6J3GXURtfB6A6znX1vvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDz5JGlY uwSJ4mLU/TrajAet3E7OMB8GA1UdIwQYMBaAFH3djdzxVuehgaG3OXsk1CCWNT3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVFQy9ERjY1REU5MjU3 ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2R0JvYmM1ZXlUVUlKWTFQ ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZkMk4zUEZXNTZHQm9iYzVleVRVSUpZMVBkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTVFQy9ERjY1REU5MjU3ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2 R0JvYmM1ZXlUVUlKWTFQZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHx5zUce93qK5LVqXOOgSLu8rzFGSo+5rq3p+p5Hm8BNpjJEepzcBf VkEYTIkRm3EL90sYvHTMt3jzvyuT1jmnNT6d5gUTlMeLTMwtRiONw1mMnVg2Q1qW efKTL/T/JGY1YAQHB+zWAt9ObCQdqCLsVilVOYzVHid1eOLOtPyvHBrl1xO4kbjG f0tctO0qzJm0JOFm+i6KY/XThz6BLMpC1asGMpiHurUX1uMAw7wDjK4MwkLG7w4v /9gWIwjDpuT5yqq51JRl2ZnxYkm/fJYR7iyYx9ipo2eU5srHMrj+Kl7ns23/AVV5 ZLfF0Nw/cN1qwACNEfjcUtEF7k8kxXku -----END CERTIFICATE-----Generated at Sun May 5 03:47:47 2024 by rpki-client on console-fra.rpki-client.org