$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.mft File: ftF6_XNwpqkI2CYrhtq8fu09YUA.mft (raw, json) Hash identifier: EP0f9JCvrrHiV9hvbCBwYJpAnHT9E9HUk6Q9qvAQ+Wg= Subject key identifier: D9:EA:0D:74:F3:F3:9D:E7:86:8D:D4:98:4F:99:9E:33:2C:65:CC:34 Authority key identifier: 7E:D1:7A:FD:73:70:A6:A9:08:D8:26:2B:86:DA:BC:7E:ED:3D:61:40 Certificate issuer: /CN=A91B6F87/serialNumber=7ED17AFD7370A6A908D8262B86DABC7EED3D6140 Certificate serial: 068D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ftF6_XNwpqkI2CYrhtq8fu09YUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.mft Manifest number: 0687 Signing time: Tue 30 Apr 2024 23:42:41 +0000 Manifest this update: Tue 30 Apr 2024 23:42:40 +0000 Manifest next update: Tue 07 May 2024 23:42:40 +0000 Files and hashes: 1: ftF6_XNwpqkI2CYrhtq8fu09YUA.crl (hash: BZ1npwN0oqzLvlm11CxQO2PX5PrR/iAVNlKZNxQqs1k=) 2: 69BA51482C9C11EBB49A3A32C4F9AE02.roa (hash: SEMS9CgMi0WFji/dONro0zR7UviDEHY1Dcvs+9uFv78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.crl rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ftF6_XNwpqkI2CYrhtq8fu09YUA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 17:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1677 (0x68d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6F87/serialNumber=7ED17AFD7370A6A908D8262B86DABC7EED3D6140 Validity Not Before: Apr 30 23:42:40 2024 GMT Not After : May 7 23:42:40 2024 GMT Subject: CN=663181f1-1a26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8a:44:3c:13:3d:8a:7c:bb:27:3a:28:0c:8b: 0b:39:b4:ec:87:49:13:d2:c9:9e:1e:45:60:05:c3: bb:fb:eb:ed:b8:b8:f3:73:10:ea:77:50:22:3c:31: 03:4e:ae:30:3e:1e:77:13:e8:54:40:40:01:9c:2e: 73:73:b9:e4:7b:f6:cf:83:96:5d:f6:02:19:b6:2c: 68:00:e9:2d:35:3d:d1:21:70:db:0b:a9:e4:d4:36: ca:55:a6:92:ad:db:83:6a:49:da:cb:bc:fa:72:98: 33:9d:7d:d1:a0:43:cf:6f:99:04:92:c4:d5:12:3f: 00:d3:2c:dd:57:31:c0:68:f0:19:d2:a8:92:d1:3a: 62:b9:9e:1b:ea:6a:d0:38:c9:21:25:ea:e4:41:fc: 1f:85:36:e9:73:9e:f4:9a:31:6d:f0:ea:fb:62:f5: 5b:6e:b8:93:b9:a7:eb:c0:5b:3f:af:a2:ec:03:59: 39:f5:78:61:f6:29:fa:dd:b8:48:f1:95:e0:7f:9f: 84:35:09:af:8a:d8:0a:74:85:9b:f5:5f:28:91:af: 5a:51:a4:ec:30:a3:17:65:49:93:53:18:65:9f:f1: dd:52:c2:ba:e8:ed:e6:4a:76:e5:c6:bd:4b:d1:0d: f0:ac:a1:25:fb:b4:8b:18:4d:10:a2:42:51:c8:78: 87:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:EA:0D:74:F3:F3:9D:E7:86:8D:D4:98:4F:99:9E:33:2C:65:CC:34 X509v3 Authority Key Identifier: keyid:7E:D1:7A:FD:73:70:A6:A9:08:D8:26:2B:86:DA:BC:7E:ED:3D:61:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ftF6_XNwpqkI2CYrhtq8fu09YUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:2b:8a:aa:c9:b7:f3:65:c0:f2:f8:ec:7a:e4:54:d5:0b:0d: eb:14:d3:d5:4a:62:e0:f9:9c:49:5e:ca:67:83:1b:91:a6:6c: 70:09:bf:66:70:1a:fd:28:32:2a:ef:1f:0c:e7:95:64:33:75: a7:c2:14:f9:31:a0:a8:cd:bd:fc:0e:d2:ff:2d:ea:0c:6f:ef: bd:d6:54:7d:63:3f:71:69:54:4c:99:5a:82:1d:fa:bf:83:a4: f4:08:9b:77:65:a4:da:c5:3c:c0:59:41:e8:ac:ba:4a:5d:d2: e7:ee:80:9d:b3:94:d0:c2:df:36:8d:d2:37:6a:ca:d5:02:88: 3d:cd:33:b0:1a:6b:71:34:bb:ce:5e:ad:03:c6:2e:55:35:6b: e0:08:7e:55:06:0c:18:d8:0b:c2:6a:3d:5c:04:2c:f2:9c:a3: 62:51:42:00:8e:bc:22:2a:12:08:02:01:63:f0:bb:28:2a:a6: 3a:a4:1e:18:7c:24:d0:e5:49:12:25:64:ed:72:15:83:fd:49: 4a:50:c8:6b:58:8f:5a:ba:3f:df:bf:ab:c3:8f:6a:f2:8c:92: f4:86:a7:19:60:bd:37:8f:f5:6c:00:b4:38:65:7b:ec:0a:42: 1a:74:cc:4e:ed:0b:9c:73:b7:ab:d4:1f:a1:a4:b5:d2:dd:ae: 73:5f:a8:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZGODcxMTAvBgNVBAUTKDdFRDE3QUZENzM3MEE2QTkwOEQ4MjYyQjg2REFCQzdF RUQzRDYxNDAwHhcNMjQwNDMwMjM0MjQwWhcNMjQwNTA3MjM0MjQwWjAYMRYwFAYD VQQDEw02NjMxODFmMS0xYTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxopEPBM9iny7JzooDIsLObTsh0kT0smeHkVgBcO7++vtuLjzcxDqd1AiPDED Tq4wPh53E+hUQEABnC5zc7nke/bPg5Zd9gIZtixoAOktNT3RIXDbC6nk1DbKVaaS rduDaknay7z6cpgznX3RoEPPb5kEksTVEj8A0yzdVzHAaPAZ0qiS0TpiuZ4b6mrQ OMkhJerkQfwfhTbpc570mjFt8Or7YvVbbriTuafrwFs/r6LsA1k59Xhh9in63bhI 8ZXgf5+ENQmvitgKdIWb9V8oka9aUaTsMKMXZUmTUxhln/HdUsK66O3mSnblxr1L 0Q3wrKEl+7SLGE0QokJRyHiHZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnqDXTz 853nho3UmE+ZnjMsZcw0MB8GA1UdIwQYMBaAFH7Rev1zcKapCNgmK4bavH7tPWFA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY4Ny9BN0VBNzU1QzI2 ODgxMUVCQkU3QzY4MkJDNEY5QUUwMi9mdEY2X1hOd3Bxa0kyQ1lyaHRxOGZ1MDlZ VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2Z0RjZfWE53cHFrSTJDWXJodHE4ZnUwOVlVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkY4Ny9BN0VBNzU1QzI2ODgxMUVCQkU3QzY4MkJDNEY5QUUwMi9mdEY2X1hOd3Bx a0kyQ1lyaHRxOGZ1MDlZVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0K4qqybfzZcDy+Ox65FTVCw3rFNPVSmLg+ZxJXspngxuRpmxwCb9m cBr9KDIq7x8M55VkM3WnwhT5MaCozb38DtL/LeoMb++91lR9Yz9xaVRMmVqCHfq/ g6T0CJt3ZaTaxTzAWUHorLpKXdLn7oCds5TQwt82jdI3asrVAog9zTOwGmtxNLvO Xq0Dxi5VNWvgCH5VBgwY2AvCaj1cBCzynKNiUUIAjrwiKhIIAgFj8LsoKqY6pB4Y fCTQ5UkSJWTtchWD/UlKUMhrWI9auj/fv6vDj2ryjJL0hqcZYL03j/VsALQ4ZXvs CkIadMxO7Qucc7er1B+hpLXS3a5zX6ic -----END CERTIFICATE-----Generated at Wed May 1 00:35:51 2024 by rpki-client on console-ams.rpki-client.org