$ rpki-client -vvf rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft File: fLBjBy0uSJJZhhStW6tT4d6v9wE.mft (raw, json) Hash identifier: g4EhLXqX1G78K9jBWyvGjEfGGezc1PyHwfV2job2zR4= Subject key identifier: 83:AB:38:1F:92:28:E6:F5:DB:79:FB:55:58:1C:7A:FA:65:DC:97:9B Authority key identifier: 7C:B0:63:07:2D:2E:48:92:59:86:14:AD:5B:AB:53:E1:DE:AF:F7:01 Certificate issuer: /CN=A91B994F/serialNumber=7CB063072D2E4892598614AD5BAB53E1DEAFF701 Certificate serial: 0738 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft Manifest number: 072F Signing time: Thu 02 May 2024 22:37:41 +0000 Manifest this update: Thu 02 May 2024 22:37:41 +0000 Manifest next update: Thu 09 May 2024 22:37:41 +0000 Files and hashes: 1: fLBjBy0uSJJZhhStW6tT4d6v9wE.crl (hash: ABLEU++h3yF0RTb6El30eEFEk1KlJkQvVIyaN0WD3qw=) 2: 2B24D5DC854511EB9B57240FC4F9AE02.roa (hash: pddSesMHzjwu6JCf3PlAW1/YPkIYpAu0oAR4eat3olg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.crl rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1848 (0x738) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B994F/serialNumber=7CB063072D2E4892598614AD5BAB53E1DEAFF701 Validity Not Before: May 2 22:37:41 2024 GMT Not After : May 9 22:37:41 2024 GMT Subject: CN=663415b5-25b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:85:81:4f:bb:a8:0f:39:a2:bb:f9:cf:f4:77: 4d:4c:c2:32:77:a1:5c:73:46:09:58:54:2f:6e:c3: db:ac:78:45:75:d9:0e:b5:ed:64:ff:67:c1:91:36: 1d:5e:2b:85:1b:6d:ea:3f:18:44:86:4d:da:13:94: 5a:d8:84:58:29:54:eb:d7:37:31:24:c5:48:4c:fa: 7f:a1:50:cf:90:06:f9:23:33:2f:58:9b:5c:fb:0b: 29:8e:fe:c8:1d:bc:44:a9:30:b2:58:d2:26:97:8c: 71:0c:a5:d9:ad:13:24:b4:6c:7a:c1:48:54:5f:89: d3:24:86:de:89:27:b7:c9:b8:68:61:95:37:47:70: fe:a2:94:54:36:ed:96:05:97:14:90:d9:f2:da:b9: f5:49:cc:ea:f8:2c:7b:f0:17:96:1c:60:2c:73:20: 40:8a:2b:95:8f:57:20:65:71:0d:ad:7d:22:55:aa: aa:99:31:89:f9:e9:6c:61:13:8b:18:3b:46:f6:b7: 4a:87:17:dd:44:53:39:4b:41:fd:6b:7c:61:48:1a: 2e:f9:50:6e:2f:bb:d9:28:3a:1d:8c:b9:94:6d:96: 94:68:e8:7d:15:c9:b0:ef:cc:a3:2c:9d:19:7d:35: 87:3a:37:cb:66:44:ce:fa:46:f4:29:4b:54:a6:cb: 37:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:AB:38:1F:92:28:E6:F5:DB:79:FB:55:58:1C:7A:FA:65:DC:97:9B X509v3 Authority Key Identifier: keyid:7C:B0:63:07:2D:2E:48:92:59:86:14:AD:5B:AB:53:E1:DE:AF:F7:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:f6:dc:bd:dd:db:55:99:a7:38:6d:2c:16:69:76:ac:c8:df: c9:54:43:05:c9:10:8e:c2:9e:ac:c6:e7:71:59:03:31:ee:20: 59:62:dc:a2:37:2e:19:3f:9b:34:f1:3a:ec:7a:28:3f:9a:75: 5f:f3:ec:90:0f:ac:a3:91:74:c0:3b:a2:a4:6f:a0:24:c3:18: 1a:0c:85:37:a0:0a:eb:e5:88:47:5b:ef:40:77:6c:14:66:6e: a7:b5:fe:ad:7c:c7:b6:53:78:c3:9e:b5:90:7b:f8:21:78:2c: 4e:08:86:ec:cb:47:aa:3f:45:e6:d1:99:20:0e:91:d6:a2:a9: c6:2a:e5:ba:19:3e:41:a8:ad:89:fa:2a:1b:1d:5d:3e:6d:40: 52:36:b8:32:f9:87:d5:6f:11:6e:2d:24:92:ec:6d:41:39:1b: 50:0d:a7:a8:6c:ae:e6:50:01:20:d3:02:3a:45:f7:b0:37:00: 97:53:2a:cd:29:47:28:5b:89:ba:e0:cb:05:e0:3c:33:93:18: 67:fb:81:7f:df:65:a0:54:68:d5:0b:a1:a6:c6:f1:ea:7a:ea: 99:4d:94:45:6a:d7:fa:a5:f6:c5:7e:02:fa:b5:32:7a:66:9f: 9d:db:e7:4e:00:ab:9b:4b:2d:db:53:80:b0:77:1a:5c:d4:72: 0b:f4:ae:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk5NEYxMTAvBgNVBAUTKDdDQjA2MzA3MkQyRTQ4OTI1OTg2MTRBRDVCQUI1M0Ux REVBRkY3MDEwHhcNMjQwNTAyMjIzNzQxWhcNMjQwNTA5MjIzNzQxWjAYMRYwFAYD VQQDEw02NjM0MTViNS0yNWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYWBT7uoDzmiu/nP9HdNTMIyd6Fcc0YJWFQvbsPbrHhFddkOte1k/2fBkTYd XiuFG23qPxhEhk3aE5Ra2IRYKVTr1zcxJMVITPp/oVDPkAb5IzMvWJtc+wspjv7I HbxEqTCyWNIml4xxDKXZrRMktGx6wUhUX4nTJIbeiSe3ybhoYZU3R3D+opRUNu2W BZcUkNny2rn1Sczq+Cx78BeWHGAscyBAiiuVj1cgZXENrX0iVaqqmTGJ+elsYROL GDtG9rdKhxfdRFM5S0H9a3xhSBou+VBuL7vZKDodjLmUbZaUaOh9Fcmw78yjLJ0Z fTWHOjfLZkTO+kb0KUtUpss3lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIOrOB+S KOb123n7VVgcevpl3JebMB8GA1UdIwQYMBaAFHywYwctLkiSWYYUrVurU+Her/cB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTk0Ri9BQUZEMTRFQ0U1 QTIxMUVBODlBMzYwNkRDNEY5QUUwMi9mTEJqQnkwdVNKSlpoaFN0VzZ0VDRkNnY5 d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZMQmpCeTB1U0pKWmhoU3RXNnRUNGQ2djl3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTk0Ri9BQUZEMTRFQ0U1QTIxMUVBODlBMzYwNkRDNEY5QUUwMi9mTEJqQnkwdVNK SlpoaFN0VzZ0VDRkNnY5d0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM9ty93dtVmac4bSwWaXasyN/JVEMFyRCOwp6sxudxWQMx7iBZYtyi Ny4ZP5s08Trseig/mnVf8+yQD6yjkXTAO6Kkb6AkwxgaDIU3oArr5YhHW+9Ad2wU Zm6ntf6tfMe2U3jDnrWQe/gheCxOCIbsy0eqP0Xm0ZkgDpHWoqnGKuW6GT5BqK2J +iobHV0+bUBSNrgy+YfVbxFuLSSS7G1BORtQDaeobK7mUAEg0wI6RfewNwCXUyrN KUcoW4m64MsF4Dwzkxhn+4F/32WgVGjVC6GmxvHqeuqZTZRFatf6pfbFfgL6tTJ6 Zp+d2+dOAKubSy3bU4Cwdxpc1HIL9K40 -----END CERTIFICATE-----Generated at Thu May 2 23:19:02 2024 by rpki-client on console-ams.rpki-client.org