$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft File: F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft (raw, json) Hash identifier: FSHHWSqWzTGfD8wNbmpmcPfPBGRno6G5kzCXvfEkunE= Subject key identifier: 46:C8:E0:4B:91:D9:A4:F6:D9:C7:62:04:9A:3E:7E:34:83:44:90:53 Authority key identifier: 17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 Certificate issuer: /CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767 Certificate serial: 04E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft Manifest number: 04DA Signing time: Fri 03 May 2024 01:29:42 +0000 Manifest this update: Fri 03 May 2024 01:29:42 +0000 Manifest next update: Fri 10 May 2024 01:29:42 +0000 Files and hashes: 1: F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl (hash: n64R+13/LW5+BjzPKfoqpAkSs7VYmYwWCdYYrLuDnn0=) 2: 73E21BB0FB3D11EEB154B874C4F9AE02.roa (hash: kqqR1HSDt0uDdqsz+1KTHpSrrX1Yf4eiV6wSUaDpLu4=) 3: D0E99D44FBF411EE80C07F6BC4F9AE02.roa (hash: 8kfFUWGJgUWiZWz3uHYQP6iGmCyJngjBO9SM/sjkUqQ=) 4: 68F716A2BDD911EE9CAAD86BC4F9AE02.roa (hash: FnpQpyzWbteeN9FJ8udai22nEEuelFbZLq7rco5tO7I=) 5: 695C5050C27D11EEB0AE466DC4F9AE02.roa (hash: uVlDTnz2bIEagbol/EhwZySomOjIAn/ev5X06DX165A=) 6: D05B0C5AFBF411EE80C07F6BC4F9AE02.roa (hash: 7QVKHuO3Ev8VAIwWMMzY/pRt4P8zU7C+u9V4nkqKhPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1251 (0x4e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767 Validity Not Before: May 3 01:29:42 2024 GMT Not After : May 10 01:29:42 2024 GMT Subject: CN=66343e06-03ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:57:2e:1f:37:4e:b4:d1:c2:77:74:06:2e:bc: 54:fc:71:b8:fc:b1:03:f6:00:08:88:9e:43:f4:f8: bb:67:2f:99:61:7d:73:e5:0f:c6:6d:d5:5b:44:75: c9:0f:bf:66:54:7e:77:ee:40:77:d5:a1:0b:f9:63: 84:50:26:9e:10:93:cf:3e:e7:4b:a0:50:3d:a1:1c: 78:a3:59:86:93:69:09:4e:15:c5:2d:7b:f1:ed:45: 4b:c9:72:85:53:33:d7:7f:d1:d4:37:37:75:f5:74: f2:41:92:9d:34:75:14:b0:a7:b7:f6:a7:54:97:91: 4a:d4:2d:03:0c:e4:7a:77:db:43:07:83:27:5b:1e: b9:25:90:f0:9c:08:3b:f0:3b:cb:d4:0e:79:ad:1a: 07:84:ee:a7:85:56:bc:80:3c:97:82:cc:09:0c:02: ec:db:df:9f:6f:cb:ff:e4:30:a8:6f:70:cb:f3:1e: 3e:f8:3e:55:d5:7d:82:59:5d:55:28:7a:dc:f5:7e: 17:dd:04:9b:84:55:3c:53:1e:69:32:22:2b:b7:47: 5a:e4:a6:0e:46:aa:1f:9d:07:c7:32:f3:f4:b3:5c: 33:c8:a9:8f:c8:ec:2d:b5:eb:a6:06:91:9a:e3:ce: d4:e1:c0:48:98:e3:81:be:21:ae:be:3b:ee:58:d0: 24:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C8:E0:4B:91:D9:A4:F6:D9:C7:62:04:9A:3E:7E:34:83:44:90:53 X509v3 Authority Key Identifier: keyid:17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e8:e7:d5:5b:ed:37:cb:3e:76:9e:24:ee:02:b3:ea:b7:cf:e8: 22:be:a1:66:d7:16:45:1c:8f:ef:e7:e4:32:54:6d:79:68:14: bb:61:48:01:f3:1d:66:1a:88:5a:15:83:78:44:e7:3d:76:d8: f1:84:03:a2:57:1e:c3:47:07:db:41:5b:99:9a:3e:63:1c:84: 9c:5b:24:2a:1a:eb:d5:a4:32:08:df:25:2d:fa:0b:fd:8a:27: 9c:51:c3:b2:34:e4:45:30:a3:e3:59:ca:58:3c:82:49:32:e0: 5b:77:a1:7f:3f:13:41:73:90:ed:f3:5a:6f:e7:3b:22:dd:67: 65:64:ae:bd:1c:01:06:87:d3:39:1b:ef:c5:94:04:2d:5f:2a: 53:5f:49:00:b9:35:1c:18:91:ca:ab:a5:bf:47:97:d8:d3:40: ac:ca:17:14:d7:17:1f:05:2f:48:4d:ae:fb:07:59:ef:c7:88: 9e:fc:66:17:89:17:17:32:07:85:b1:7f:e6:7f:32:b9:98:56: 11:04:c8:83:db:3e:13:cc:40:30:1d:3b:fa:25:ef:b2:ad:33: d2:8d:24:74:8e:ff:8f:fb:9f:b0:f3:69:d9:94:d8:ad:84:f6: cb:ee:21:c1:7c:db:5f:d6:67:98:18:7f:f5:88:a6:d6:01:f8: 1a:c9:e2:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwOUUxMTAvBgNVBAUTKDE3NjBGRjcxRTE2QkNGRUVFN0I4RDY3MTBENjM2MDY3 OTlBRUY3NjcwHhcNMjQwNTAzMDEyOTQyWhcNMjQwNTEwMDEyOTQyWjAYMRYwFAYD VQQDEw02NjM0M2UwNi0wM2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlcuHzdOtNHCd3QGLrxU/HG4/LED9gAIiJ5D9Pi7Zy+ZYX1z5Q/GbdVbRHXJ D79mVH537kB31aEL+WOEUCaeEJPPPudLoFA9oRx4o1mGk2kJThXFLXvx7UVLyXKF UzPXf9HUNzd19XTyQZKdNHUUsKe39qdUl5FK1C0DDOR6d9tDB4MnWx65JZDwnAg7 8DvL1A55rRoHhO6nhVa8gDyXgswJDALs29+fb8v/5DCob3DL8x4++D5V1X2CWV1V KHrc9X4X3QSbhFU8Ux5pMiIrt0da5KYORqofnQfHMvP0s1wzyKmPyOwtteumBpGa 487U4cBImOOBviGuvjvuWNAkaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbI4EuR 2aT22cdiBJo+fjSDRJBTMB8GA1UdIwQYMBaAFBdg/3Hha8/u57jWcQ1jYGeZrvdn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA5RS80NzExOUQwMEQw MEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnotN251Tlp4RFdOZ1o1bXU5 MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YyRF9jZUZyei03bnVOWnhEV05nWjVtdTkyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjA5RS80NzExOUQwMEQwMEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnot N251Tlp4RFdOZ1o1bXU5MmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDo59Vb7TfLPnaeJO4Cs+q3z+givqFm1xZFHI/v5+QyVG15aBS7YUgB 8x1mGohaFYN4ROc9dtjxhAOiVx7DRwfbQVuZmj5jHIScWyQqGuvVpDII3yUt+gv9 iiecUcOyNORFMKPjWcpYPIJJMuBbd6F/PxNBc5Dt81pv5zsi3WdlZK69HAEGh9M5 G+/FlAQtXypTX0kAuTUcGJHKq6W/R5fY00CsyhcU1xcfBS9ITa77B1nvx4ie/GYX iRcXMgeFsX/mfzK5mFYRBMiD2z4TzEAwHTv6Je+yrTPSjSR0jv+P+5+w82nZlNit hPbL7iHBfNtf1meYGH/1iKbWAfgayeJe -----END CERTIFICATE-----Generated at Fri May 3 03:10:56 2024 by rpki-client on console-ams.rpki-client.org