$ rpki-client -vvf rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.mft File: fXiohwseVXPWM8mnsAQKLuQF2VE.mft (raw, json) Hash identifier: YQWzOES15MjRwVmdMpyabsiDH5Uj9LP6aCsXeXMsj3s= Subject key identifier: 74:6F:CC:39:98:1B:36:04:CF:D7:E9:7D:15:E1:C9:EC:F3:AB:DA:74 Authority key identifier: 7D:78:A8:87:0B:1E:55:73:D6:33:C9:A7:B0:04:0A:2E:E4:05:D9:51 Certificate issuer: /CN=A91C162D/serialNumber=7D78A8870B1E5573D633C9A7B0040A2EE405D951 Certificate serial: 06A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXiohwseVXPWM8mnsAQKLuQF2VE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.mft Manifest number: 069C Signing time: Tue 30 Apr 2024 23:35:08 +0000 Manifest this update: Tue 30 Apr 2024 23:35:08 +0000 Manifest next update: Tue 07 May 2024 23:35:08 +0000 Files and hashes: 1: fXiohwseVXPWM8mnsAQKLuQF2VE.crl (hash: zSdSX0SeDuhZsuD92hubDrAzFDEiUwqL1YuAFdtMJvI=) 2: 460D934A1C1611EB8BD35065C4F9AE02.roa (hash: 2Kzzml3IuWpEvRQ47ssyoSnwBmxgKETDz4EMv3F+qYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.crl rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXiohwseVXPWM8mnsAQKLuQF2VE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 23:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1698 (0x6a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C162D/serialNumber=7D78A8870B1E5573D633C9A7B0040A2EE405D951 Validity Not Before: Apr 30 23:35:08 2024 GMT Not After : May 7 23:35:08 2024 GMT Subject: CN=6631802c-d800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:17:0f:e9:a7:5a:17:8b:cb:56:06:e6:d5:bc: 5e:02:24:c9:8e:7a:4b:bc:b2:94:c2:4f:10:90:de: dd:5a:c3:dd:6e:6a:82:c3:3a:51:10:c3:49:3f:6f: 31:ae:70:af:d6:38:99:c0:89:e4:bb:d1:75:a0:aa: e0:04:b5:28:ca:38:70:1b:94:f4:f3:ad:d7:11:b6: cb:a6:ab:c9:79:c9:ed:ee:6a:4e:78:57:af:13:d7: 3a:cd:18:d4:24:43:83:19:79:72:9a:64:8f:e1:2d: 31:a8:f2:09:ed:76:b4:12:9e:e2:f7:5f:c8:1e:66: 84:01:17:d6:4c:b0:fd:b8:74:a1:d1:cb:5e:89:e1: af:4b:f3:7c:f5:71:de:d4:0c:8a:80:71:8a:71:10: 17:83:4f:ee:7a:00:2e:c6:d3:4c:1a:9c:70:f2:74: 6f:72:dd:b8:b4:dc:07:64:05:55:d5:5a:29:78:bd: 90:63:86:53:06:d5:28:59:9f:4d:94:87:0a:eb:b3: 17:aa:fb:b1:d1:78:9b:1a:17:3d:95:f7:2c:67:0f: f3:1a:0c:c7:61:d7:3a:31:29:61:02:b0:79:b2:5e: e8:4b:d7:2d:84:88:d4:fa:da:84:47:ae:ee:7c:8b: b7:fc:5a:20:51:48:79:17:2b:35:d7:01:47:0c:57: df:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:6F:CC:39:98:1B:36:04:CF:D7:E9:7D:15:E1:C9:EC:F3:AB:DA:74 X509v3 Authority Key Identifier: keyid:7D:78:A8:87:0B:1E:55:73:D6:33:C9:A7:B0:04:0A:2E:E4:05:D9:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXiohwseVXPWM8mnsAQKLuQF2VE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:3e:86:6c:50:97:58:5a:b4:db:41:88:f9:d3:78:aa:29:69: 5e:67:65:d8:9b:d6:4d:20:94:89:04:cd:7b:a1:13:78:52:a0: 86:10:c9:15:61:c9:be:2e:aa:76:34:db:03:63:2c:c2:62:65: f9:b9:9a:27:32:0b:77:80:cc:26:65:1b:9e:96:d8:ae:30:5d: 49:89:e9:77:6d:d9:b7:21:23:46:03:d9:c6:71:ea:32:c5:a2: ab:3d:6a:05:66:b5:0a:eb:66:10:93:60:5c:b1:06:23:7c:71: 9c:e9:9a:30:e5:4c:08:74:31:c6:a2:24:b2:02:d5:f7:5d:8f: ee:9f:c1:af:01:94:2e:18:be:60:fa:71:b0:57:b8:a9:c5:82: c7:07:33:a0:10:a7:8d:e2:e4:af:ea:47:3f:0a:d7:ba:92:18: b5:bf:2b:c1:24:87:e2:8c:30:41:f5:18:88:1d:5f:bd:28:eb: 07:be:6d:1f:79:5f:8d:c4:09:1c:cd:a6:fb:71:07:9d:7b:a4: df:43:b2:b5:dd:79:05:48:d3:a8:65:ff:77:bc:ec:a6:f2:da: 73:0d:51:91:6d:e9:a8:33:97:08:1d:5b:e7:94:47:9b:b3:b7: 93:76:7a:c7:23:db:4a:92:c8:3f:9c:8f:82:7d:ea:c5:9f:1a: 2f:4a:d4:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2MkQxMTAvBgNVBAUTKDdENzhBODg3MEIxRTU1NzNENjMzQzlBN0IwMDQwQTJF RTQwNUQ5NTEwHhcNMjQwNDMwMjMzNTA4WhcNMjQwNTA3MjMzNTA4WjAYMRYwFAYD VQQDEw02NjMxODAyYy1kODAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBcP6adaF4vLVgbm1bxeAiTJjnpLvLKUwk8QkN7dWsPdbmqCwzpREMNJP28x rnCv1jiZwInku9F1oKrgBLUoyjhwG5T0863XEbbLpqvJecnt7mpOeFevE9c6zRjU JEODGXlymmSP4S0xqPIJ7Xa0Ep7i91/IHmaEARfWTLD9uHSh0cteieGvS/N89XHe 1AyKgHGKcRAXg0/uegAuxtNMGpxw8nRvct24tNwHZAVV1VopeL2QY4ZTBtUoWZ9N lIcK67MXqvux0XibGhc9lfcsZw/zGgzHYdc6MSlhArB5sl7oS9cthIjU+tqER67u fIu3/FogUUh5Fys11wFHDFffyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHRvzDmY GzYEz9fpfRXhyezzq9p0MB8GA1UdIwQYMBaAFH14qIcLHlVz1jPJp7AECi7kBdlR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTYyRC82QTBDRkU5MDFD MTQxMUVCODJDMDlBNjJDNEY5QUUwMi9mWGlvaHdzZVZYUFdNOG1uc0FRS0x1UUYy VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZYaW9od3NlVlhQV004bW5zQVFLTHVRRjJWRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTYyRC82QTBDRkU5MDFDMTQxMUVCODJDMDlBNjJDNEY5QUUwMi9mWGlvaHdzZVZY UFdNOG1uc0FRS0x1UUYyVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOPoZsUJdYWrTbQYj503iqKWleZ2XYm9ZNIJSJBM17oRN4UqCGEMkV Ycm+Lqp2NNsDYyzCYmX5uZonMgt3gMwmZRueltiuMF1Jiel3bdm3ISNGA9nGceoy xaKrPWoFZrUK62YQk2BcsQYjfHGc6Zow5UwIdDHGoiSyAtX3XY/un8GvAZQuGL5g +nGwV7ipxYLHBzOgEKeN4uSv6kc/Cte6khi1vyvBJIfijDBB9RiIHV+9KOsHvm0f eV+NxAkczab7cQede6TfQ7K13XkFSNOoZf93vOym8tpzDVGRbemoM5cIHVvnlEeb s7eTdnrHI9tKksg/nI+CferFnxovStRU -----END CERTIFICATE-----Generated at Wed May 1 00:24:03 2024 by rpki-client on console-fra.rpki-client.org