$ rpki-client -vvf rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft File: _Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft (raw, json) Hash identifier: yTEIKDWr/vq2IkTk3uGwV6E/EWDNMFiwY68EmQiKkQo= Subject key identifier: A6:49:F6:82:B5:3E:B2:03:96:7B:56:FF:F5:54:41:17:E8:C3:A1:DB Authority key identifier: FC:56:E7:E0:76:F7:FD:0A:84:BE:CC:9C:3E:22:91:42:A0:90:1F:EC Certificate issuer: /CN=A91C93EE/serialNumber=FC56E7E076F7FD0A84BECC9C3E229142A0901FEC Certificate serial: 0B87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft Manifest number: 0B6C Signing time: Thu 02 May 2024 19:46:32 +0000 Manifest this update: Thu 02 May 2024 19:46:32 +0000 Manifest next update: Thu 09 May 2024 19:46:32 +0000 Files and hashes: 1: _Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl (hash: x8cIiMFrU1SW5fFnnVbxvrhpfcmOvGn8XlZrzYzO4Zo=) 2: 4235AE44DE6A11EB868CD437C4F9AE02.roa (hash: ebCJ3y0v96ySTaXbyeVE9+p/k4nLT4KDJBJCxL/h01A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 19:46:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2951 (0xb87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C93EE/serialNumber=FC56E7E076F7FD0A84BECC9C3E229142A0901FEC Validity Not Before: May 2 19:46:32 2024 GMT Not After : May 9 19:46:32 2024 GMT Subject: CN=6633ed98-8e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4e:5b:a0:49:24:ca:d6:4a:64:38:c3:43:ea: 9a:ff:5d:fe:f6:8d:1c:2d:1b:0f:f8:79:ec:81:3f: ec:69:8c:3f:63:71:90:86:50:72:75:cb:ea:3e:3d: 3e:57:ed:4a:76:01:f0:fe:35:8c:2f:0e:f6:09:c1: b3:bb:48:69:36:07:54:d1:09:fc:08:1c:b9:6d:90: 05:06:8e:f7:67:ad:09:c0:e9:e2:60:f0:44:bd:eb: 58:43:3f:e0:18:bf:d2:bb:57:06:ce:39:bc:4d:98: e0:40:f3:f1:bd:02:ff:2d:18:e0:7e:91:24:d0:bb: 0b:e9:76:b4:c8:62:03:48:50:6a:82:af:91:11:c6: 71:da:40:b9:fb:a9:9f:0a:c3:42:83:4d:44:94:1a: 39:f8:cd:6b:25:9f:1b:c4:2f:5d:dd:ac:92:ef:98: d4:6d:83:39:67:53:32:f0:eb:b5:a1:67:a0:f7:24: 2c:be:0a:0c:a5:d8:46:a4:a4:ff:83:e9:ed:c5:e2: 25:72:f7:9c:de:28:c6:62:ff:dc:cb:02:df:44:ae: cb:5f:29:d2:e3:6f:9c:0e:52:0c:04:17:f3:ef:ee: e1:26:54:fd:cf:0b:74:55:02:3c:ed:63:af:33:2d: 35:c7:15:b1:1a:98:16:d1:95:23:36:cd:d7:37:bc: ff:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:49:F6:82:B5:3E:B2:03:96:7B:56:FF:F5:54:41:17:E8:C3:A1:DB X509v3 Authority Key Identifier: keyid:FC:56:E7:E0:76:F7:FD:0A:84:BE:CC:9C:3E:22:91:42:A0:90:1F:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:1d:97:55:8a:67:49:cd:fe:06:35:b9:e8:5c:bc:45:f0:89: aa:0b:26:73:71:6a:48:da:0c:4a:f8:a0:75:68:af:11:31:75: a9:3c:33:c1:39:b7:65:84:5d:35:18:6e:01:20:b2:eb:0e:3b: b8:bc:14:a7:38:43:59:4f:89:13:d0:78:16:c1:2d:d5:da:fe: 5d:89:bf:a6:bf:9c:ac:dd:de:fd:34:48:52:dd:d8:01:1d:71: b1:21:f2:f4:05:89:bd:85:4f:a4:47:39:4b:f9:f4:45:d8:e5: 01:64:0d:8c:85:0d:21:93:3c:a9:a2:d3:63:d2:46:69:98:f5: b1:c3:6a:34:bd:e3:bb:70:c0:f8:e2:ee:c1:88:0f:dd:98:73: c4:3d:90:db:70:84:2a:4c:c9:8f:8f:d2:78:cd:41:4e:d7:69: 48:01:22:54:b7:fe:f4:bc:94:f5:93:6d:79:85:1e:2e:e7:6d: b6:0a:fe:02:e4:60:ae:33:55:a9:ad:ce:d4:1e:ca:e7:0d:b1: d4:b7:f2:88:11:73:69:2b:0d:16:0d:e9:86:c6:20:6c:27:3f: f6:9c:32:ce:49:d8:43:85:8f:2b:0b:ff:ff:2c:ce:9c:e4:30: 3c:86:38:d0:09:a5:21:77:9a:34:d1:ef:ee:eb:07:b4:7c:9e: 38:d9:4d:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzRUUxMTAvBgNVBAUTKEZDNTZFN0UwNzZGN0ZEMEE4NEJFQ0M5QzNFMjI5MTQy QTA5MDFGRUMwHhcNMjQwNTAyMTk0NjMyWhcNMjQwNTA5MTk0NjMyWjAYMRYwFAYD VQQDEw02NjMzZWQ5OC04ZTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtE5boEkkytZKZDjDQ+qa/13+9o0cLRsP+HnsgT/saYw/Y3GQhlBydcvqPj0+ V+1KdgHw/jWMLw72CcGzu0hpNgdU0Qn8CBy5bZAFBo73Z60JwOniYPBEvetYQz/g GL/Su1cGzjm8TZjgQPPxvQL/LRjgfpEk0LsL6Xa0yGIDSFBqgq+REcZx2kC5+6mf CsNCg01ElBo5+M1rJZ8bxC9d3ayS75jUbYM5Z1My8Ou1oWeg9yQsvgoMpdhGpKT/ g+ntxeIlcvec3ijGYv/cywLfRK7LXynS42+cDlIMBBfz7+7hJlT9zwt0VQI87WOv My01xxWxGpgW0ZUjNs3XN7z//QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZJ9oK1 PrIDlntW//VUQRfow6HbMB8GA1UdIwQYMBaAFPxW5+B29/0KhL7MnD4ikUKgkB/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTNFRS82ODU4RjY4ODBF MDIxMUVBQTlCMURCNjVDNEY5QUUwMi9fRmJuNEhiM19RcUV2c3ljUGlLUlFxQ1FI LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19GYm40SGIzX1FxRXZzeWNQaUtSUXFDUUgtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTNFRS82ODU4RjY4ODBFMDIxMUVBQTlCMURCNjVDNEY5QUUwMi9fRmJuNEhiM19R cUV2c3ljUGlLUlFxQ1FILXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNHZdVimdJzf4GNbnoXLxF8ImqCyZzcWpI2gxK+KB1aK8RMXWpPDPB ObdlhF01GG4BILLrDju4vBSnOENZT4kT0HgWwS3V2v5dib+mv5ys3d79NEhS3dgB HXGxIfL0BYm9hU+kRzlL+fRF2OUBZA2MhQ0hkzypotNj0kZpmPWxw2o0veO7cMD4 4u7BiA/dmHPEPZDbcIQqTMmPj9J4zUFO12lIASJUt/70vJT1k215hR4u5222Cv4C 5GCuM1Wprc7UHsrnDbHUt/KIEXNpKw0WDemGxiBsJz/2nDLOSdhDhY8rC///LM6c 5DA8hjjQCaUhd5o00e/u6we0fJ442U1D -----END CERTIFICATE-----Generated at Thu May 2 22:28:57 2024 by rpki-client on console-ams.rpki-client.org