$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft File: fPkomAMwIeA7O5PA7riCE8f7XsU.mft (raw, json) Hash identifier: nDa6YqXYm2etQ79+fObWPw9WuHKVXqgBt+0TmTmWEls= Subject key identifier: F7:38:F5:D5:83:68:47:5B:57:D7:F6:93:6B:E8:2B:7B:F5:FE:9B:62 Authority key identifier: 7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 Certificate issuer: /CN=A91BDA06/serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Certificate serial: 0E6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft Manifest number: 0E69 Signing time: Thu 02 May 2024 18:28:08 +0000 Manifest this update: Thu 02 May 2024 18:28:07 +0000 Manifest next update: Thu 09 May 2024 18:28:07 +0000 Files and hashes: 1: fPkomAMwIeA7O5PA7riCE8f7XsU.crl (hash: DoO5m2c1CL5C5WMd4E9qdR9FSDw1A8CA7y+YaA3lGYs=) 2: DCE5E9CA713611E9A71D3311C4F9AE02.roa (hash: MfoY7jUmOisar1psO6c2ywlJIDw6cqEA61WVzaSNP5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:28:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3695 (0xe6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDA06/serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Validity Not Before: May 2 18:28:07 2024 GMT Not After : May 9 18:28:07 2024 GMT Subject: CN=6633db38-6d3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:85:ff:d6:a4:e3:7a:97:85:1c:00:94:f0:50: e8:f9:8e:b6:8b:0f:87:ba:17:6b:5b:6b:f8:e7:5a: b6:ad:fb:fc:aa:f7:3c:80:af:53:4b:a0:29:c7:61: fa:18:37:0f:14:94:d5:1d:fa:cd:8b:09:68:9a:1f: 40:eb:1a:78:b2:1d:a4:c8:fa:3a:55:8e:6d:57:69: 10:3d:0b:2b:b0:b4:ba:06:94:5e:e9:ac:56:4d:b0: ff:35:6c:00:21:74:fe:22:d3:33:93:d6:94:94:cf: 45:eb:ac:fa:c6:a5:f5:96:71:f8:1a:fd:3e:83:c5: 4c:07:16:28:84:fa:99:ce:a6:bf:da:16:d4:49:ce: ab:d5:ea:04:94:9b:1c:9e:b2:53:1e:6c:d1:5d:c2: b2:06:b2:41:76:95:f7:f5:41:25:ac:63:81:cd:82: fa:6f:a9:28:c6:2b:e5:16:aa:90:e7:de:be:a1:c8: 9e:80:e2:c7:d3:49:63:16:b8:4f:96:39:df:cf:d9: 95:0d:6b:ed:a0:49:93:c8:d6:9d:68:34:a8:6f:3f: e2:96:c1:98:a4:e5:78:fa:b8:e8:ed:3d:78:c7:e6: 23:27:4c:7d:e3:09:1c:33:3d:6a:25:1c:ce:12:29: ed:71:7e:52:c9:99:86:d8:0f:7d:1c:9e:7f:bb:f4: ad:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:38:F5:D5:83:68:47:5B:57:D7:F6:93:6B:E8:2B:7B:F5:FE:9B:62 X509v3 Authority Key Identifier: keyid:7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c1:ff:2c:9e:9d:6f:2d:a0:00:14:22:6d:d4:00:fa:03:68: 22:62:33:35:14:5f:da:1c:5f:df:e2:b3:d4:9e:6c:df:25:77: 14:70:e0:0e:ce:f7:75:61:f6:bf:15:d8:c7:34:82:e2:b0:ef: 48:5c:5e:a5:fa:60:e5:86:14:23:18:73:1a:24:cf:c8:1d:98: 3f:66:8b:e3:6e:ef:c3:02:b8:b8:51:13:29:25:b9:5c:09:b6: 23:61:88:ba:71:f1:83:2a:e5:df:a7:43:eb:4b:c0:ee:54:39: fb:bf:fc:4a:bf:02:57:8a:f5:6f:7e:8b:f7:f6:15:d3:67:27: 02:36:77:a2:38:a2:6f:ee:23:4e:04:60:fb:6f:34:59:ed:8b: b7:9a:26:75:76:b4:87:61:76:08:aa:16:63:de:3a:a1:46:52: 52:1f:ad:14:fa:ee:55:bc:79:d9:39:77:c3:7f:39:83:35:d2: 1a:7d:b0:47:cc:47:68:24:35:fb:a9:59:7a:93:28:9a:e4:02: cf:1d:95:f0:3c:45:32:89:e3:cb:bc:ca:11:b8:32:30:2a:de: c9:ad:ce:d2:88:6c:e2:e5:d7:20:2a:f5:72:ba:11:c0:df:b2: 2e:e0:75:7d:a2:a4:fe:91:41:01:05:d2:bf:fa:48:bf:56:6b: 53:32:cb:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRBMDYxMTAvBgNVBAUTKDdDRjkyODk4MDMzMDIxRTAzQjNCOTNDMEVFQjg4MjEz QzdGQjVFQzUwHhcNMjQwNTAyMTgyODA3WhcNMjQwNTA5MTgyODA3WjAYMRYwFAYD VQQDEw02NjMzZGIzOC02ZDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIX/1qTjepeFHACU8FDo+Y62iw+HuhdrW2v451q2rfv8qvc8gK9TS6Apx2H6 GDcPFJTVHfrNiwlomh9A6xp4sh2kyPo6VY5tV2kQPQsrsLS6BpRe6axWTbD/NWwA IXT+ItMzk9aUlM9F66z6xqX1lnH4Gv0+g8VMBxYohPqZzqa/2hbUSc6r1eoElJsc nrJTHmzRXcKyBrJBdpX39UElrGOBzYL6b6koxivlFqqQ596+ociegOLH00ljFrhP ljnfz9mVDWvtoEmTyNadaDSobz/ilsGYpOV4+rjo7T14x+YjJ0x94wkcMz1qJRzO EintcX5SyZmG2A99HJ5/u/StnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPc49dWD aEdbV9f2k2voK3v1/ptiMB8GA1UdIwQYMBaAFHz5KJgDMCHgOzuTwO64ghPH+17F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREEwNi8yQkZDODk0ODcx MzYxMUU5ODY5REJGMTBDNEY5QUUwMi9mUGtvbUFNd0llQTdPNVBBN3JpQ0U4ZjdY c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZQa29tQU13SWVBN081UEE3cmlDRThmN1hzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REEwNi8yQkZDODk0ODcxMzYxMUU5ODY5REJGMTBDNEY5QUUwMi9mUGtvbUFNd0ll QTdPNVBBN3JpQ0U4ZjdYc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+wf8snp1vLaAAFCJt1AD6A2giYjM1FF/aHF/f4rPUnmzfJXcUcOAO zvd1Yfa/FdjHNILisO9IXF6l+mDlhhQjGHMaJM/IHZg/Zovjbu/DAri4URMpJblc CbYjYYi6cfGDKuXfp0PrS8DuVDn7v/xKvwJXivVvfov39hXTZycCNneiOKJv7iNO BGD7bzRZ7Yu3miZ1drSHYXYIqhZj3jqhRlJSH60U+u5VvHnZOXfDfzmDNdIafbBH zEdoJDX7qVl6kyia5ALPHZXwPEUyiePLvMoRuDIwKt7Jrc7SiGzi5dcgKvVyuhHA 37Iu4HV9oqT+kUEBBdK/+ki/VmtTMsuX -----END CERTIFICATE-----Generated at Thu May 2 20:04:53 2024 by rpki-client on console-ams.rpki-client.org