$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft File: FDeI0jX9adsvJbd3Il96t2naNQs.mft (raw, json) Hash identifier: JejRje72tV70vJGMG+MUUgDPT9jRIus2SAYo45i21IM= Subject key identifier: AD:0C:3E:43:29:2E:D3:FD:53:9A:58:16:88:A2:85:B8:E0:BE:3A:E7 Authority key identifier: 14:37:88:D2:35:FD:69:DB:2F:25:B7:77:22:5F:7A:B7:69:DA:35:0B Certificate issuer: /CN=A91C5323/serialNumber=143788D235FD69DB2F25B777225F7AB769DA350B Certificate serial: 04A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDeI0jX9adsvJbd3Il96t2naNQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft Manifest number: 04A5 Signing time: Sun 19 May 2024 01:34:02 +0000 Manifest this update: Sun 19 May 2024 01:34:01 +0000 Manifest next update: Sun 26 May 2024 01:34:01 +0000 Files and hashes: 1: FDeI0jX9adsvJbd3Il96t2naNQs.crl (hash: x/4lwiSDbaoJEKBQr8S1pmSPpdRCBhj6VqDrW0kmeFc=) 2: E07B63B2E56511EBBDFCC829C4F9AE02.roa (hash: WOXGzWN+Cez0pga4v14gugamoOxu9guSl7pw51S5gyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.crl rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDeI0jX9adsvJbd3Il96t2naNQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1193 (0x4a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5323/serialNumber=143788D235FD69DB2F25B777225F7AB769DA350B Validity Not Before: May 19 01:34:01 2024 GMT Not After : May 26 01:34:01 2024 GMT Subject: CN=66495709-25c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:69:95:4a:00:22:24:8c:c7:01:72:14:72:3e: 31:3d:81:4e:cb:e4:fd:0f:67:1f:f0:0f:dc:5a:8b: 3d:6a:61:62:85:f0:57:f8:00:83:f4:e6:a3:cf:03: c8:89:ee:a4:28:5e:6c:db:df:60:4b:9c:72:8d:b4: 9a:71:bd:2b:70:53:6b:45:61:fa:fe:6d:a2:3a:dd: ee:0a:1f:c5:18:67:0b:60:94:67:eb:03:7b:ed:a2: 46:ba:6e:64:98:ea:5a:4c:56:07:4d:e3:a5:ba:b1: 52:08:cd:f4:e2:d3:1a:49:ec:01:75:3b:55:50:50: bd:e5:a9:3e:71:47:fa:c7:a8:c4:7d:66:4c:c1:c2: 4a:db:a0:77:6a:e7:3d:d4:cf:d5:e9:53:ee:fa:ce: 94:4b:ba:53:b5:d5:bb:3f:89:b6:65:32:83:2d:06: ef:7f:25:20:ab:1e:76:24:c2:66:91:90:14:b8:33: d6:a8:4a:7e:80:9f:8d:e6:07:9e:b0:fd:cd:f7:14: 9f:20:69:1e:66:50:19:79:e5:70:ac:bb:b5:4d:cc: e9:d8:fa:de:8e:46:5b:a4:b3:91:4e:79:55:25:90: 84:54:2d:ac:3a:f0:9f:3e:47:fb:0f:50:23:76:84: 43:ce:e4:7a:bf:f5:a6:29:7c:c8:83:e3:e9:2a:48: f4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:0C:3E:43:29:2E:D3:FD:53:9A:58:16:88:A2:85:B8:E0:BE:3A:E7 X509v3 Authority Key Identifier: keyid:14:37:88:D2:35:FD:69:DB:2F:25:B7:77:22:5F:7A:B7:69:DA:35:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDeI0jX9adsvJbd3Il96t2naNQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:81:92:b5:4a:67:8e:91:22:02:c5:0a:61:87:c4:cd:5e:0f: 50:86:1b:4a:54:cc:53:e0:d1:11:4a:72:92:18:ab:7d:72:da: 45:02:a3:7f:15:5a:36:2f:5c:f1:ab:d3:ab:28:e5:1d:c6:5c: 0e:5f:94:20:0d:2c:23:ac:e5:81:8a:c2:a7:a3:e6:f7:78:5b: a4:0b:13:4d:34:bd:7c:a8:8f:da:f1:30:e7:ee:f2:3f:6c:37: f1:3c:33:bf:fe:4c:48:cd:08:1d:a5:2d:cf:ae:62:9e:b8:31: ed:67:cf:f2:b5:6c:cf:79:ae:5a:9a:89:a2:aa:fb:10:0a:4f: d6:9e:60:2c:09:f0:7f:cd:0e:53:20:3a:5d:60:16:8b:64:9b: bc:6c:dd:6f:d3:e3:cf:4b:f4:78:46:2d:3c:9d:70:53:bf:d4: 3c:9f:89:01:08:6c:2c:97:fc:a6:7a:a7:fb:80:d9:b7:b2:69: 59:25:d9:4e:32:b6:1e:34:0f:2a:f5:a0:63:98:dd:6e:17:11: 44:6c:9f:a8:14:8e:c2:89:65:fa:34:50:0d:b0:46:2e:22:af: 0c:b9:fe:95:f2:f1:93:8e:75:73:35:7c:8c:ee:9c:18:ec:db: b3:7e:b1:09:76:e6:28:6c:6e:91:87:8a:c3:0b:ea:b3:b9:49: 5b:f4:7d:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUzMjMxMTAvBgNVBAUTKDE0Mzc4OEQyMzVGRDY5REIyRjI1Qjc3NzIyNUY3QUI3 NjlEQTM1MEIwHhcNMjQwNTE5MDEzNDAxWhcNMjQwNTI2MDEzNDAxWjAYMRYwFAYD VQQDEw02NjQ5NTcwOS0yNWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9WmVSgAiJIzHAXIUcj4xPYFOy+T9D2cf8A/cWos9amFihfBX+ACD9OajzwPI ie6kKF5s299gS5xyjbSacb0rcFNrRWH6/m2iOt3uCh/FGGcLYJRn6wN77aJGum5k mOpaTFYHTeOlurFSCM304tMaSewBdTtVUFC95ak+cUf6x6jEfWZMwcJK26B3auc9 1M/V6VPu+s6US7pTtdW7P4m2ZTKDLQbvfyUgqx52JMJmkZAUuDPWqEp+gJ+N5gee sP3N9xSfIGkeZlAZeeVwrLu1Tczp2PrejkZbpLORTnlVJZCEVC2sOvCfPkf7D1Aj doRDzuR6v/WmKXzIg+PpKkj0LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK0MPkMp LtP9U5pYFoiihbjgvjrnMB8GA1UdIwQYMBaAFBQ3iNI1/WnbLyW3dyJferdp2jUL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTMyMy9ERjY2REUyNEU1 NjExMUVCODRCRkU4MjBDNEY5QUUwMi9GRGVJMGpYOWFkc3ZKYmQzSWw5NnQybmFO UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZEZUkwalg5YWRzdkpiZDNJbDk2dDJuYU5Rcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTMyMy9ERjY2REUyNEU1NjExMUVCODRCRkU4MjBDNEY5QUUwMi9GRGVJMGpYOWFk c3ZKYmQzSWw5NnQybmFOUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBegZK1SmeOkSICxQphh8TNXg9QhhtKVMxT4NERSnKSGKt9ctpFAqN/ FVo2L1zxq9OrKOUdxlwOX5QgDSwjrOWBisKno+b3eFukCxNNNL18qI/a8TDn7vI/ bDfxPDO//kxIzQgdpS3PrmKeuDHtZ8/ytWzPea5amomiqvsQCk/WnmAsCfB/zQ5T IDpdYBaLZJu8bN1v0+PPS/R4Ri08nXBTv9Q8n4kBCGwsl/ymeqf7gNm3smlZJdlO MrYeNA8q9aBjmN1uFxFEbJ+oFI7CiWX6NFANsEYuIq8Muf6V8vGTjnVzNXyM7pwY 7NuzfrEJduYobG6Rh4rDC+qzuUlb9H0x -----END CERTIFICATE-----Generated at Sun May 19 02:39:37 2024 by rpki-client on console-fra.rpki-client.org