$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft File: fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft (raw, json) Hash identifier: ph06/9wIYNnnzpuFvqvDIUQmgdFH3wekdWSxkKJjpg4= Subject key identifier: 4E:0A:DE:00:9A:AD:AE:71:BB:87:44:D7:C5:F6:75:4F:89:EE:9D:31 Authority key identifier: 7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B Certificate issuer: /CN=A91CFCF8/serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B Certificate serial: 0323 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft Manifest number: 0310 Signing time: Sun 05 May 2024 03:21:41 +0000 Manifest this update: Sun 05 May 2024 03:21:40 +0000 Manifest next update: Sun 12 May 2024 03:21:40 +0000 Files and hashes: 1: fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl (hash: Ud7WKDu4FAV/5IWGKCSxR9SsJgbnwORG0UB634B0tik=) 2: C76E25524B1711EE8CE6C778C4F9AE02.roa (hash: up3g4qtJ9ZMvIsOtDsouhFbDzhKJ4y9yk6alGerKnUM=) 3: 844FB44036A211EEAE901A49C4F9AE02.roa (hash: INiCagy0vcmCTPmYcGBpbqzBxIR9/gsh7a6DBH9yiqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 02:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 803 (0x323) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFCF8/serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B Validity Not Before: May 5 03:21:40 2024 GMT Not After : May 12 03:21:40 2024 GMT Subject: CN=6636fb44-5c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:18:df:36:3e:4f:dc:dd:fc:96:b3:7e:0f:fe: 58:9d:e2:be:22:b3:d5:6d:0f:89:e3:32:47:5b:24: c7:b6:f1:88:37:5f:f4:bc:9d:da:e8:63:b0:99:49: 2f:a8:ef:65:5d:c9:7f:ec:96:14:85:55:27:20:d2: 2f:e9:b8:db:00:74:1f:10:62:02:13:3d:89:08:09: c9:4b:3d:f5:67:cb:a8:29:ad:93:1c:7f:4a:11:82: ab:87:e2:64:64:0d:03:e1:ad:db:42:cb:92:e3:aa: 1a:2a:42:0f:19:f3:08:b1:53:74:70:ac:5f:57:bc: 51:5a:8b:25:59:21:7d:91:a3:03:fe:35:54:f7:fc: 93:6c:c9:1c:0b:32:5c:fb:cd:91:77:dd:00:30:38: 9b:3c:76:d0:d3:5f:26:7a:a2:d5:ce:f0:0c:96:06: 73:77:e7:16:ee:ef:66:97:18:81:91:dc:83:6f:f4: e4:3f:6c:00:6c:de:01:4c:25:3e:14:2a:af:1d:27: 39:85:a2:08:e8:1e:67:ea:f8:9c:86:1a:fd:d0:de: 3f:20:46:38:46:c6:22:f6:c5:4a:d9:69:3d:9f:5e: b2:8c:86:6c:a8:19:57:4d:c7:c3:66:ff:45:68:ef: bc:5a:29:04:89:ff:94:79:51:52:96:35:9c:ad:27: 2f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:0A:DE:00:9A:AD:AE:71:BB:87:44:D7:C5:F6:75:4F:89:EE:9D:31 X509v3 Authority Key Identifier: keyid:7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:6b:f9:52:88:30:57:a1:3b:04:42:5a:ec:7f:64:61:db:92: 63:f3:2c:c6:ae:38:24:7b:bf:6e:71:c8:d8:71:40:72:ac:59: 5e:90:71:1a:6b:19:5f:c5:e2:b1:e8:76:9f:bb:77:2b:de:fa: 5c:5c:7e:73:78:d1:eb:37:34:86:dc:fa:3a:05:fd:b6:3e:d9: db:81:93:9c:90:70:f6:01:cf:54:f9:6c:86:38:b6:3b:a9:57: cd:07:31:16:64:a1:91:1f:51:55:60:6f:4b:e5:60:cf:03:ce: 89:3e:55:7b:ed:8e:d9:57:25:18:fa:7f:a3:b2:99:05:bf:7a: 3b:41:fb:75:b2:9b:f6:ae:b8:01:df:c9:5e:2e:5d:e5:d2:89: d6:75:8e:1a:59:b2:e7:b9:34:ed:a1:a8:39:5b:7c:a1:d8:5b: 7d:cf:ec:ef:56:37:8e:b8:fa:92:69:2c:c0:44:aa:ea:bc:1e: 49:80:08:36:93:b9:c0:74:9d:32:51:ce:7d:ba:99:8b:c2:77: d3:0b:18:4d:3a:c5:8b:33:c1:e5:85:ce:7e:49:f0:e2:65:2e: 3c:fa:da:8e:2d:07:72:37:7a:9c:ae:f0:4d:af:82:a4:fc:b8: ba:8c:f4:7f:a4:e3:a3:11:e4:90:e1:35:69:59:18:66:c1:48: f9:67:e1:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDRjgxMTAvBgNVBAUTKDdDNUUwRERDNEY1ODY5NzQ3QjJBMzU4QzlCN0MwRjMx RThEOEREOEIwHhcNMjQwNTA1MDMyMTQwWhcNMjQwNTEyMDMyMTQwWjAYMRYwFAYD VQQDEw02NjM2ZmI0NC01Yzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnBjfNj5P3N38lrN+D/5YneK+IrPVbQ+J4zJHWyTHtvGIN1/0vJ3a6GOwmUkv qO9lXcl/7JYUhVUnINIv6bjbAHQfEGICEz2JCAnJSz31Z8uoKa2THH9KEYKrh+Jk ZA0D4a3bQsuS46oaKkIPGfMIsVN0cKxfV7xRWoslWSF9kaMD/jVU9/yTbMkcCzJc +82Rd90AMDibPHbQ018meqLVzvAMlgZzd+cW7u9mlxiBkdyDb/TkP2wAbN4BTCU+ FCqvHSc5haII6B5n6vichhr90N4/IEY4RsYi9sVK2Wk9n16yjIZsqBlXTcfDZv9F aO+8WikEif+UeVFSljWcrScv7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4K3gCa ra5xu4dE18X2dU+J7p0xMB8GA1UdIwQYMBaAFHxeDdxPWGl0eyo1jJt8DzHo2N2L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkNGOC8wNUU0QzJEMjhC MDIxMUVDODVGMkQwNzRDNEY5QUUwMi9mRjROM0U5WWFYUjdLaldNbTN3UE1lalkz WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGNE4zRTlZYVhSN0tqV01tM3dQTWVqWTNZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkNGOC8wNUU0QzJEMjhCMDIxMUVDODVGMkQwNzRDNEY5QUUwMi9mRjROM0U5WWFY UjdLaldNbTN3UE1lalkzWXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3a/lSiDBXoTsEQlrsf2Rh25Jj8yzGrjgke79uccjYcUByrFlekHEa axlfxeKx6Hafu3cr3vpcXH5zeNHrNzSG3Po6Bf22PtnbgZOckHD2Ac9U+WyGOLY7 qVfNBzEWZKGRH1FVYG9L5WDPA86JPlV77Y7ZVyUY+n+jspkFv3o7Qft1spv2rrgB 38leLl3l0onWdY4aWbLnuTTtoag5W3yh2Ft9z+zvVjeOuPqSaSzARKrqvB5JgAg2 k7nAdJ0yUc59upmLwnfTCxhNOsWLM8Hlhc5+SfDiZS48+tqOLQdyN3qcrvBNr4Kk /Li6jPR/pOOjEeSQ4TVpWRhmwUj5Z+EK -----END CERTIFICATE-----Generated at Sun May 5 03:52:21 2024 by rpki-client on console-ams.rpki-client.org