$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft File: fToi3tGr8M05CSgLibI3bFRfbwc.mft (raw, json) Hash identifier: wuUJoB115Aa9+eigcqKVJBpEmCoMIFgRgwEc7m8ai7Y= Subject key identifier: F2:D7:AE:B9:02:3A:12:F7:8D:84:8D:3F:3E:29:60:89:22:1B:86:94 Authority key identifier: 7D:3A:22:DE:D1:AB:F0:CD:39:09:28:0B:89:B2:37:6C:54:5F:6F:07 Certificate issuer: /CN=A91AC232/serialNumber=7D3A22DED1ABF0CD3909280B89B2376C545F6F07 Certificate serial: 060A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft Manifest number: 0604 Signing time: Sun 05 May 2024 00:04:41 +0000 Manifest this update: Sun 05 May 2024 00:04:40 +0000 Manifest next update: Sun 12 May 2024 00:04:40 +0000 Files and hashes: 1: fToi3tGr8M05CSgLibI3bFRfbwc.crl (hash: +KRJsdsxsMRoeCZ2GH/1Q2qbVE7NxCXuzUyuyOIp+I8=) 2: D93244BAF2EF11ED91F08A4FC4F9AE02.roa (hash: D16o+NTqhZB9ZmrcWWhDq4HIPFstG+zKZ35O8FcVmm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.crl rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1546 (0x60a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC232/serialNumber=7D3A22DED1ABF0CD3909280B89B2376C545F6F07 Validity Not Before: May 5 00:04:40 2024 GMT Not After : May 12 00:04:40 2024 GMT Subject: CN=6636cd19-78d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:7a:1c:dd:e0:96:6c:00:19:75:0b:82:66:cd: 3e:34:65:dc:ce:4e:51:65:f1:0a:a3:41:8a:4d:df: 49:13:32:90:b6:9f:e8:a2:74:31:71:33:b5:da:45: 1d:a0:05:15:e0:ed:d3:5f:c2:66:af:56:c9:6f:83: 3f:48:0f:df:f9:8f:77:c8:a3:4a:4f:ca:74:5b:a4: 41:13:6c:a0:ba:9e:24:ca:cd:4f:99:a5:2e:f0:41: 30:94:66:bd:86:80:fe:d1:ef:98:c6:e3:29:af:f2: cd:bf:1d:7b:34:43:5c:51:cd:07:14:7a:d9:1d:ae: fa:be:c4:51:52:f9:94:79:7a:5b:88:9b:26:84:66: 36:5c:b6:56:cd:e1:b5:7c:10:76:f7:e8:1e:2a:56: ee:89:ee:22:01:0c:1f:83:fc:97:32:b1:f7:a3:66: 46:88:32:57:88:ef:eb:d1:02:f5:74:b2:8a:fe:29: c4:dc:1e:23:21:4c:70:66:0e:54:2b:cd:dc:b1:b9: 4c:e6:14:b8:50:89:e8:db:4a:2f:7f:dc:aa:49:c6: 32:8f:bf:06:6a:9b:28:70:27:c1:77:a0:ee:2f:0b: d9:5d:b1:40:1c:6c:65:ec:47:22:42:5d:92:82:fb: cc:8f:d7:c5:9e:46:62:d5:c1:74:b8:31:9c:12:c3: 0e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D7:AE:B9:02:3A:12:F7:8D:84:8D:3F:3E:29:60:89:22:1B:86:94 X509v3 Authority Key Identifier: keyid:7D:3A:22:DE:D1:AB:F0:CD:39:09:28:0B:89:B2:37:6C:54:5F:6F:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:2c:d8:76:d2:97:59:f8:7b:fe:4d:6a:94:eb:91:70:97:f0: 40:68:0e:33:38:50:05:a3:d7:b5:52:7e:bd:52:d6:aa:61:b7: ee:58:1a:a8:ed:56:30:bb:83:93:9f:79:cd:28:17:cb:a3:65: 55:a5:53:a3:13:d9:5b:25:01:2c:43:48:6e:68:b7:a7:6f:65: 73:1c:f6:bc:2d:82:09:f4:98:26:e6:8b:f9:b2:93:b6:75:5f: 9c:75:57:8c:55:1e:12:5c:f4:de:c6:23:93:f0:a7:8c:82:97: c6:60:fc:ee:61:88:a2:ec:b6:08:75:26:29:2c:35:44:4f:e7: 5f:df:11:89:b2:fe:9b:2b:99:56:1f:e1:c7:18:f1:f6:26:35: 6d:d7:22:6d:04:ac:45:fa:0e:83:8c:b6:39:56:14:b9:83:f4: 9d:64:54:67:1f:f1:ae:66:d9:55:ae:38:74:90:0a:85:d0:53: 9f:09:07:cb:22:bd:c8:d4:33:91:1a:fe:15:24:bc:6e:b1:5d: 4b:f7:75:c1:11:ca:0e:2c:23:f6:5d:ef:07:d8:c8:72:c8:c6: 18:4a:6c:52:73:26:fb:22:a6:75:1b:97:49:1a:17:ee:1b:8d: 35:e8:cf:ce:74:35:c2:64:6c:60:30:3c:b0:d5:c7:c0:d1:dc: a9:8f:b3:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUMyMzIxMTAvBgNVBAUTKDdEM0EyMkRFRDFBQkYwQ0QzOTA5MjgwQjg5QjIzNzZD NTQ1RjZGMDcwHhcNMjQwNTA1MDAwNDQwWhcNMjQwNTEyMDAwNDQwWjAYMRYwFAYD VQQDEw02NjM2Y2QxOS03OGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6noc3eCWbAAZdQuCZs0+NGXczk5RZfEKo0GKTd9JEzKQtp/oonQxcTO12kUd oAUV4O3TX8Jmr1bJb4M/SA/f+Y93yKNKT8p0W6RBE2ygup4kys1PmaUu8EEwlGa9 hoD+0e+YxuMpr/LNvx17NENcUc0HFHrZHa76vsRRUvmUeXpbiJsmhGY2XLZWzeG1 fBB29+geKlbuie4iAQwfg/yXMrH3o2ZGiDJXiO/r0QL1dLKK/inE3B4jIUxwZg5U K83csblM5hS4UIno20ovf9yqScYyj78GapsocCfBd6DuLwvZXbFAHGxl7EciQl2S gvvMj9fFnkZi1cF0uDGcEsMOqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLXrrkC OhL3jYSNPz4pYIkiG4aUMB8GA1UdIwQYMBaAFH06It7Rq/DNOQkoC4myN2xUX28H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzIzMi80MTczMDA4NjU5 OEQxMUVCQUVDQzgzMjFDNEY5QUUwMi9mVG9pM3RHcjhNMDVDU2dMaWJJM2JGUmZi d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZUb2kzdEdyOE0wNUNTZ0xpYkkzYkZSZmJ3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzIzMi80MTczMDA4NjU5OEQxMUVCQUVDQzgzMjFDNEY5QUUwMi9mVG9pM3RHcjhN MDVDU2dMaWJJM2JGUmZid2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7LNh20pdZ+Hv+TWqU65Fwl/BAaA4zOFAFo9e1Un69UtaqYbfuWBqo 7VYwu4OTn3nNKBfLo2VVpVOjE9lbJQEsQ0huaLenb2VzHPa8LYIJ9Jgm5ov5spO2 dV+cdVeMVR4SXPTexiOT8KeMgpfGYPzuYYii7LYIdSYpLDVET+df3xGJsv6bK5lW H+HHGPH2JjVt1yJtBKxF+g6DjLY5VhS5g/SdZFRnH/GuZtlVrjh0kAqF0FOfCQfL Ir3I1DORGv4VJLxusV1L93XBEcoOLCP2Xe8H2MhyyMYYSmxScyb7IqZ1G5dJGhfu G4016M/OdDXCZGxgMDyw1cfA0dypj7MZ -----END CERTIFICATE-----Generated at Sun May 5 01:13:20 2024 by rpki-client on console-ams.rpki-client.org