$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft File: FnnqBmaD8qFVDecPRYQy3RqDJw8.mft (raw, json) Hash identifier: ZtBjRsV4scJtXA3opWV7di57fsnkBmHJiObAzjG0dWw= Subject key identifier: D5:FF:B5:15:CA:58:96:E1:C2:73:10:E0:E9:D5:49:37:4C:3D:47:E5 Authority key identifier: 16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F Certificate issuer: /CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F Certificate serial: 0A0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft Manifest number: 0A04 Signing time: Thu 02 May 2024 20:45:25 +0000 Manifest this update: Thu 02 May 2024 20:45:24 +0000 Manifest next update: Thu 09 May 2024 20:45:24 +0000 Files and hashes: 1: FnnqBmaD8qFVDecPRYQy3RqDJw8.crl (hash: 71bnebt5okN4S16sDuUHDJxk1Eu/K6D5Gi2Hfi0KJZg=) 2: D825A42E4E6D11EAA3D8784AC4F9AE02.roa (hash: Dq+tw4dzxkssEA+bsXNc4uWtrrN7bI8wxUhISXXnAuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2571 (0xa0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F Validity Not Before: May 2 20:45:24 2024 GMT Not After : May 9 20:45:24 2024 GMT Subject: CN=6633fb64-370c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1a:7c:54:2c:4a:a7:60:a2:37:4b:c8:de:7c: 88:64:6f:f5:12:eb:23:a8:5f:c0:cf:25:0d:81:dd: 5c:a9:5f:a4:85:6f:56:67:7c:8a:f7:9c:60:0c:6b: 48:1a:29:84:58:4f:9b:92:87:21:d1:82:94:5c:73: 0c:8a:65:86:3c:e7:84:17:9b:1e:96:e9:e0:f3:7e: 72:9b:cc:20:06:85:47:69:e5:07:54:d3:f7:44:29: df:65:c5:a5:88:0e:40:2b:ce:77:f4:75:ae:0e:26: e2:09:8b:17:06:26:ee:b7:2b:a5:e8:92:0a:77:fc: cf:22:b7:98:93:74:52:13:7b:03:26:fb:8d:9f:ce: 0f:9b:83:85:26:d1:59:f9:8d:e0:85:31:e9:f5:54: c2:b2:6d:be:97:04:de:61:be:44:6d:6f:32:26:f2: e7:a9:79:db:3e:69:78:a0:a5:e6:70:77:4c:0f:b5: d7:68:7f:73:ff:0f:43:0d:d5:21:81:fa:03:89:ac: 9f:fb:0e:d5:fd:16:b0:0c:74:7b:92:7b:e9:08:6a: 3d:3d:ad:9c:80:67:2e:6f:c1:fc:a9:b1:7f:8b:64: 46:88:af:d0:e0:21:cf:4d:36:d0:2b:63:23:ba:50: 2a:ff:6d:b6:d4:c6:02:62:da:9b:85:f1:90:c5:be: cd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FF:B5:15:CA:58:96:E1:C2:73:10:E0:E9:D5:49:37:4C:3D:47:E5 X509v3 Authority Key Identifier: keyid:16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:ce:87:13:39:39:50:ac:c1:33:c9:f1:7c:e4:e3:1c:11:7b: a2:d7:1b:85:57:5d:ba:50:55:6e:0a:c6:a4:ea:f9:fb:7e:3f: f8:75:47:85:40:7c:ec:95:a9:c3:e6:e8:fd:12:ea:3f:85:cf: e1:11:47:9a:e4:63:d7:55:5f:e0:c8:e9:89:b7:a8:45:19:91: 57:9b:4f:9c:9e:55:6e:dd:b6:4d:57:e9:82:b7:7b:41:fa:ab: 91:57:05:41:80:ac:93:38:c7:6e:f9:fa:83:44:62:d1:80:3f: 30:a2:ca:93:6b:df:bd:c4:86:7b:d0:af:ac:15:93:46:86:9c: 13:d9:12:da:44:ab:93:6d:0b:bf:1f:0e:b3:12:48:7f:f4:a8: 73:0d:92:4a:55:ab:ca:d0:53:44:55:cb:e5:73:3d:79:8e:a7: 5b:49:49:6c:66:77:b1:4e:d6:51:ac:db:5d:19:b7:ca:ee:5b: f3:7b:48:dc:c8:8c:53:e8:46:45:81:17:65:fc:aa:e8:ae:be: 08:45:6d:7e:12:b2:5f:b4:c2:08:ed:47:ef:d2:2f:a9:ec:80: ae:4e:fe:73:60:75:c2:44:a5:79:2e:08:fc:34:2c:39:54:b1: 4d:70:d4:6d:ae:62:b4:5c:39:36:54:11:a1:de:ad:a9:4b:d2: f0:15:43:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDRDkxMTAvBgNVBAUTKDE2NzlFQTA2NjY4M0YyQTE1NTBERTcwRjQ1ODQzMkRE MUE4MzI3MEYwHhcNMjQwNTAyMjA0NTI0WhcNMjQwNTA5MjA0NTI0WjAYMRYwFAYD VQQDEw02NjMzZmI2NC0zNzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhp8VCxKp2CiN0vI3nyIZG/1EusjqF/AzyUNgd1cqV+khW9WZ3yK95xgDGtI GimEWE+bkoch0YKUXHMMimWGPOeEF5selung835ym8wgBoVHaeUHVNP3RCnfZcWl iA5AK8539HWuDibiCYsXBibutyul6JIKd/zPIreYk3RSE3sDJvuNn84Pm4OFJtFZ +Y3ghTHp9VTCsm2+lwTeYb5EbW8yJvLnqXnbPml4oKXmcHdMD7XXaH9z/w9DDdUh gfoDiayf+w7V/RawDHR7knvpCGo9Pa2cgGcub8H8qbF/i2RGiK/Q4CHPTTbQK2Mj ulAq/2221MYCYtqbhfGQxb7N6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNX/tRXK WJbhwnMQ4OnVSTdMPUflMB8GA1UdIwQYMBaAFBZ56gZmg/KhVQ3nD0WEMt0agycP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENEOS80MTBCQkMxNDRF NkMxMUVBODkwNDk3NDdDNEY5QUUwMi9Gbm5xQm1hRDhxRlZEZWNQUllReTNScURK dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZubnFCbWFEOHFGVkRlY1BSWVF5M1JxREp3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENEOS80MTBCQkMxNDRFNkMxMUVBODkwNDk3NDdDNEY5QUUwMi9Gbm5xQm1hRDhx RlZEZWNQUllReTNScURKdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDzocTOTlQrMEzyfF85OMcEXui1xuFV126UFVuCsak6vn7fj/4dUeF QHzslanD5uj9Euo/hc/hEUea5GPXVV/gyOmJt6hFGZFXm0+cnlVu3bZNV+mCt3tB +quRVwVBgKyTOMdu+fqDRGLRgD8wosqTa9+9xIZ70K+sFZNGhpwT2RLaRKuTbQu/ Hw6zEkh/9KhzDZJKVavK0FNEVcvlcz15jqdbSUlsZnexTtZRrNtdGbfK7lvze0jc yIxT6EZFgRdl/Krorr4IRW1+ErJftMII7Ufv0i+p7ICuTv5zYHXCRKV5Lgj8NCw5 VLFNcNRtrmK0XDk2VBGh3q2pS9LwFUOj -----END CERTIFICATE-----Generated at Thu May 2 22:13:23 2024 by rpki-client on console-fra.rpki-client.org