$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft File: FrVkt1jfzVLFzokRkuMbcVscv-g.mft (raw, json) Hash identifier: KSBRYOxU5uuxXJK1Brtr9L9eIskH5q/Q7m3QHQC64j0= Subject key identifier: 65:6A:12:CA:6F:DE:B2:04:9E:68:88:AA:7F:C8:F2:71:80:51:1E:57 Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 Certificate issuer: /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Certificate serial: 343F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft Manifest number: 33FE Signing time: Thu 02 May 2024 14:27:55 +0000 Manifest this update: Thu 02 May 2024 14:27:54 +0000 Manifest next update: Thu 09 May 2024 14:27:54 +0000 Files and hashes: 1: FrVkt1jfzVLFzokRkuMbcVscv-g.crl (hash: kh1vR4pW2oCT2JBlMCN4pCIUTbl7il0qtVV/Cl36Lk0=) 2: 10DAE05EB04811EABB4AEF61C4F9AE02.roa (hash: 78gdh99UZKTxTLqq433Oe99T4dYdzlmohoo3kOaH8l8=) 3: FBE279DAA3ED11E99F59303AC4F9AE02.roa (hash: 12jNFwIOSxFt4Q26sLiqGPF6xM8mbtcS0r5VdmPlKzg=) 4: 534379FCEE1611ECA6DE1824C4F9AE02.roa (hash: IXwPelFphEjwXzLKdDLjQ1M4IFH3NmjU6fYwFmkOlzM=) 5: 427BAA66E23211E8BD132210C4F9AE02.roa (hash: KJ3NI1fNIhBaaFLNZhlCWQ8tWEe65xfTnUKAOZ3K1sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 14:27:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13375 (0x343f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Validity Not Before: May 2 14:27:54 2024 GMT Not After : May 9 14:27:54 2024 GMT Subject: CN=6633a2eb-2882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fc:51:f4:a6:db:32:14:29:5d:14:18:82:a0: 1d:88:15:f4:80:2a:41:ab:0e:13:7a:e2:65:54:1e: 14:80:23:4d:0f:7c:59:e6:ef:bb:28:c4:42:ae:dd: 78:04:4b:f2:4d:6c:5c:ae:e9:1f:fa:6a:d7:15:11: 7c:d8:b3:ef:58:21:95:e0:b2:aa:ad:e0:73:a3:d0: c8:7c:97:c4:b4:aa:44:d2:5b:11:da:55:3e:4f:1b: d9:64:c9:bf:c6:2a:65:7b:63:8f:14:77:4e:57:1c: a7:1e:e4:c0:62:16:7e:a4:cc:50:e1:14:33:5c:73: 84:ec:e3:0f:84:5e:51:fd:88:24:51:18:9a:48:ec: fd:30:04:97:70:28:c5:54:b8:fd:e8:42:d8:71:ae: 41:c6:fe:2c:59:2f:89:e9:a7:a7:f8:eb:c4:28:6c: 78:09:9c:ff:12:7a:c0:de:c2:6c:9b:71:cf:ed:28: e8:3a:4b:cc:93:49:ad:f1:03:ad:8d:62:d5:1b:13: 6f:66:22:c8:61:c1:d4:af:4e:68:90:2e:54:ab:9a: 74:2a:29:7c:99:be:b9:b1:af:7f:52:5c:0c:2d:8c: 4b:20:93:ed:d6:d0:41:f1:bf:18:9f:99:de:83:0f: 33:9f:3a:de:80:36:c7:3a:e3:c4:87:fd:94:27:6f: 08:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6A:12:CA:6F:DE:B2:04:9E:68:88:AA:7F:C8:F2:71:80:51:1E:57 X509v3 Authority Key Identifier: keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:dd:5e:4b:ac:35:96:b9:cd:04:47:52:c1:18:34:d2:44:6c: 6b:a9:1e:d5:77:47:e0:4d:dc:b1:90:cb:2d:9b:00:9c:56:c6: c0:70:cd:79:35:ab:e7:05:c9:a5:04:a1:10:2e:aa:64:6e:b0: 0e:8f:cd:9d:d7:97:a7:df:cb:17:f0:ad:5d:b9:5b:68:39:c6: f7:99:c2:7a:84:09:fc:a4:e1:1d:dc:ab:11:8f:52:39:d5:3c: 70:aa:12:be:e0:10:24:84:8d:a9:c4:49:1f:6c:a0:47:ee:13: bd:0b:b6:fd:42:d2:14:38:91:12:25:d9:ca:f8:bf:2e:f1:e4: 31:d7:fd:21:ee:0f:41:5e:80:8e:91:f2:87:2f:f5:58:16:44: b8:15:7b:97:77:72:1d:80:8f:93:00:49:2d:6e:a3:f8:fe:ba: 41:62:de:89:5c:7a:17:bb:d3:a6:55:83:3c:be:92:56:e9:2a: 40:bc:d7:b5:50:c0:06:4e:1d:e1:71:0c:75:64:bc:a7:8a:31: 93:aa:cf:07:18:ef:a3:ca:02:a5:de:ff:cb:27:98:5e:56:af: a3:27:2b:7c:15:5e:6b:c2:d2:d8:cc:75:98:14:40:1d:94:ce: 79:93:95:0a:e0:37:75:da:7e:a7:ca:c4:82:12:fc:81:40:0e: b4:2b:b0:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICND8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y0RkUxMTAvBgNVBAUTKDE2QjU2NEI3NThERkNENTJDNUNFODkxMTkyRTMxQjcx NUIxQ0JGRTgwHhcNMjQwNTAyMTQyNzU0WhcNMjQwNTA5MTQyNzU0WjAYMRYwFAYD VQQDEw02NjMzYTJlYi0yODgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPxR9KbbMhQpXRQYgqAdiBX0gCpBqw4TeuJlVB4UgCNND3xZ5u+7KMRCrt14 BEvyTWxcrukf+mrXFRF82LPvWCGV4LKqreBzo9DIfJfEtKpE0lsR2lU+TxvZZMm/ xiple2OPFHdOVxynHuTAYhZ+pMxQ4RQzXHOE7OMPhF5R/YgkURiaSOz9MASXcCjF VLj96ELYca5Bxv4sWS+J6aen+OvEKGx4CZz/EnrA3sJsm3HP7SjoOkvMk0mt8QOt jWLVGxNvZiLIYcHUr05okC5Uq5p0Kil8mb65sa9/UlwMLYxLIJPt1tBB8b8Yn5ne gw8znzregDbHOuPEh/2UJ28IpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVqEspv 3rIEnmiIqn/I8nGAUR5XMB8GA1UdIwQYMBaAFBa1ZLdY381Sxc6JEZLjG3FbHL/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjRGRS9CQTEzMTI0RTFE ODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpWTEZ6b2tSa3VNYmNWc2N2 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyVmt0MWpmelZMRnpva1JrdU1iY1ZzY3YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjRGRS9CQTEzMTI0RTFEODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpW TEZ6b2tSa3VNYmNWc2N2LWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB3V5LrDWWuc0ER1LBGDTSRGxrqR7Vd0fgTdyxkMstmwCcVsbAcM15 NavnBcmlBKEQLqpkbrAOj82d15en38sX8K1duVtoOcb3mcJ6hAn8pOEd3KsRj1I5 1TxwqhK+4BAkhI2pxEkfbKBH7hO9C7b9QtIUOJESJdnK+L8u8eQx1/0h7g9BXoCO kfKHL/VYFkS4FXuXd3IdgI+TAEktbqP4/rpBYt6JXHoXu9OmVYM8vpJW6SpAvNe1 UMAGTh3hcQx1ZLynijGTqs8HGO+jygKl3v/LJ5heVq+jJyt8FV5rwtLYzHWYFEAd lM55k5UK4Dd12n6nysSCEvyBQA60K7CP -----END CERTIFICATE-----Generated at Thu May 2 17:18:57 2024 by rpki-client on console-ams.rpki-client.org