$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft File: _K1GEVffaBwFC9O-7qLqzfttUks.mft (raw, json) Hash identifier: TTloxwcuaqm/El1aSz/QqHDIdkPY5ZIqLtTHvdKLvyI= Subject key identifier: 7D:23:B5:7B:F6:F5:6D:BE:2B:09:2F:BB:4F:92:D5:A4:37:E1:E1:B2 Authority key identifier: FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B Certificate issuer: /CN=A91CE3C4/serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B Certificate serial: 05C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft Manifest number: 05AE Signing time: Wed 01 May 2024 00:39:08 +0000 Manifest this update: Wed 01 May 2024 00:39:07 +0000 Manifest next update: Wed 08 May 2024 00:39:07 +0000 Files and hashes: 1: _K1GEVffaBwFC9O-7qLqzfttUks.crl (hash: jAZo1R4l9MrVaIFWA19asfUI9/ADA2OQU0AchpAz1S0=) 2: D55D5DE2F07011EDAD0F5D62C4F9AE02.roa (hash: RSMVC0D0tBk2Fp59m5jA59HhRZpxrqk4YRYpw+Pzr0g=) 3: 50D705A87FA911EBA8C11D63C4F9AE02.roa (hash: ooqccoiogCkkJFxNvgTBDRvRTl072blE1cY1UXNoB0Q=) 4: 26F87D4A272711EC88E40644C4F9AE02.roa (hash: CzGBbedhAgecHCRQV9ey7WEveHSbAxu1vPyi9BgUKR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 00:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1478 (0x5c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE3C4/serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B Validity Not Before: May 1 00:39:07 2024 GMT Not After : May 8 00:39:07 2024 GMT Subject: CN=66318f2c-71ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:17:82:ea:11:a4:d9:ae:bd:fc:11:64:9a:26: 93:c7:10:91:64:e4:4f:24:5e:c1:ed:a9:24:6f:fc: 3a:9b:84:39:b1:a0:f1:b2:b8:21:3b:a9:3d:05:60: d2:d3:99:02:25:18:fa:6b:e2:8c:8e:0f:f2:e5:a9: 42:5e:3d:9c:11:a9:ea:de:eb:f1:7a:7d:d7:35:15: f6:aa:29:65:d6:69:fe:6c:69:7f:9e:03:e6:5c:5d: 72:10:fb:88:18:5c:31:22:74:ec:e2:fa:d8:cf:46: c9:9f:b7:2f:50:0d:fd:e5:d5:43:43:1a:80:4a:17: 4e:bc:05:79:aa:76:9b:8c:52:f0:c2:4e:3c:64:70: fe:83:4f:d5:fe:05:57:38:76:d3:1b:8b:28:77:46: 61:a6:71:2c:fc:b8:48:de:1c:a0:fe:d4:2b:ff:d0: b2:8e:62:4c:64:a8:1a:2f:3f:24:97:f9:2c:ae:59: 38:8b:19:16:0f:30:89:dc:ed:7d:37:cc:ea:a6:71: 66:22:23:96:ab:7a:ce:a1:4d:a6:3f:c5:69:99:4c: 70:a0:2c:cb:f2:6e:61:d5:55:49:db:df:c3:e8:f2: 14:dd:b7:a2:33:0d:70:14:51:ca:4c:0d:c9:be:02: 03:b7:8b:a1:e7:9e:1c:56:37:ce:60:bc:c2:82:bf: c0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:23:B5:7B:F6:F5:6D:BE:2B:09:2F:BB:4F:92:D5:A4:37:E1:E1:B2 X509v3 Authority Key Identifier: keyid:FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:63:3e:34:e0:df:ef:76:02:31:f6:a0:89:b1:4e:5d:cb:0c: bb:7d:e4:ee:31:68:e9:80:74:39:60:e9:c6:5c:28:67:1a:6d: b5:09:92:2a:a8:78:13:be:b1:55:37:b2:aa:ac:d7:26:10:93: a9:46:4c:ed:87:fe:7b:27:3a:13:51:5c:69:ac:67:3a:9d:26: c7:19:69:6c:eb:a1:8a:3c:0b:6a:ef:7c:29:22:40:6c:ca:fd: 42:9b:c5:46:7e:bf:3e:ef:54:e6:d5:03:bc:6d:30:4b:ff:0b: b0:76:40:7d:f4:7d:39:3f:29:b8:a2:9c:1f:2e:69:ed:93:f6: 14:e1:7f:c6:c7:38:dc:d1:30:e7:30:2b:c8:c8:10:b8:c5:97: d5:09:f2:f7:c2:b2:12:f2:2c:43:2e:20:db:26:af:a6:c3:67: 86:dd:1f:8a:31:ad:30:9a:3a:c6:76:d1:a0:6f:a2:99:a1:53: f5:fc:c1:30:73:39:51:83:a9:ec:81:5a:fb:8b:dc:e2:7d:e0: 05:93:3d:f1:37:2a:1f:3b:a7:18:57:4e:f8:04:7a:b1:92:3c: 12:5f:bc:e9:e9:80:b0:4e:b4:b8:34:dd:1c:6d:fa:d9:04:f2: 3d:52:53:bb:9c:18:5c:4d:84:af:46:a5:a4:36:91:9b:cf:7f: f7:f0:8e:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzQzQxMTAvBgNVBAUTKEZDQUQ0NjExNTdERjY4MUMwNTBCRDNCRUVFQTJFQUNE RkI2RDUyNEIwHhcNMjQwNTAxMDAzOTA3WhcNMjQwNTA4MDAzOTA3WjAYMRYwFAYD VQQDEw02NjMxOGYyYy03MWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmheC6hGk2a69/BFkmiaTxxCRZORPJF7B7akkb/w6m4Q5saDxsrghO6k9BWDS 05kCJRj6a+KMjg/y5alCXj2cEanq3uvxen3XNRX2qill1mn+bGl/ngPmXF1yEPuI GFwxInTs4vrYz0bJn7cvUA395dVDQxqAShdOvAV5qnabjFLwwk48ZHD+g0/V/gVX OHbTG4sod0ZhpnEs/LhI3hyg/tQr/9CyjmJMZKgaLz8kl/ksrlk4ixkWDzCJ3O19 N8zqpnFmIiOWq3rOoU2mP8VpmUxwoCzL8m5h1VVJ29/D6PIU3beiMw1wFFHKTA3J vgIDt4uh554cVjfOYLzCgr/AHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0jtXv2 9W2+Kwkvu0+S1aQ34eGyMB8GA1UdIwQYMBaAFPytRhFX32gcBQvTvu6i6s37bVJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNDNC83NjkyMjc4QTdG OTcxMUVCQUREQzVGMTVDNEY5QUUwMi9fSzFHRVZmZmFCd0ZDOU8tN3FMcXpmdHRV a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19LMUdFVmZmYUJ3RkM5Ty03cUxxemZ0dFVrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTNDNC83NjkyMjc4QTdGOTcxMUVCQUREQzVGMTVDNEY5QUUwMi9fSzFHRVZmZmFC d0ZDOU8tN3FMcXpmdHRVa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsYz404N/vdgIx9qCJsU5dywy7feTuMWjpgHQ5YOnGXChnGm21CZIq qHgTvrFVN7KqrNcmEJOpRkzth/57JzoTUVxprGc6nSbHGWls66GKPAtq73wpIkBs yv1Cm8VGfr8+71Tm1QO8bTBL/wuwdkB99H05Pym4opwfLmntk/YU4X/Gxzjc0TDn MCvIyBC4xZfVCfL3wrIS8ixDLiDbJq+mw2eG3R+KMa0wmjrGdtGgb6KZoVP1/MEw czlRg6nsgVr7i9zifeAFkz3xNyofO6cYV074BHqxkjwSX7zp6YCwTrS4NN0cbfrZ BPI9UlO7nBhcTYSvRqWkNpGbz3/38I6J -----END CERTIFICATE-----Generated at Wed May 1 02:08:06 2024 by rpki-client on console-fra.rpki-client.org