$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft File: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft (raw, json) Hash identifier: RxNsxAaeRDIoQorZe6P4YsKO15vzSe9zdtEBsnyQvVo= Subject key identifier: 1F:00:8B:05:3C:50:6E:D1:48:D6:61:57:2E:26:3E:C2:55:EC:ED:CF Authority key identifier: 7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4 Certificate issuer: /CN=A91E2AE5/serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4 Certificate serial: 1405 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft Manifest number: 13F6 Signing time: Sat 04 May 2024 15:52:17 +0000 Manifest this update: Sat 04 May 2024 15:52:17 +0000 Manifest next update: Sat 11 May 2024 15:52:17 +0000 Files and hashes: 1: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl (hash: 6VIQd5M/pnvY8S0LhuFnuaxZrgRFT8350SIQ/28FiJw=) 2: C163B1881A4711EDA547FE24C4F9AE02.roa (hash: YNZrHGd8UkVm/DTmJOLPzWf76BUdR5xOiCV0HPKmn3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5125 (0x1405) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2AE5/serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4 Validity Not Before: May 4 15:52:17 2024 GMT Not After : May 11 15:52:17 2024 GMT Subject: CN=663659b1-83c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:13:d1:b6:88:b5:dd:dd:0e:f2:ed:c9:c8:dc: 2a:96:fe:ff:05:15:41:56:10:54:32:ad:35:a1:62: 77:19:f6:d5:58:b2:e6:f6:ba:f6:d7:31:e9:1f:ec: 45:3e:00:64:a9:cf:4c:a6:df:33:a9:26:11:a9:92: c2:92:b4:5b:4b:5b:1e:5e:31:4e:e2:68:c6:ee:67: b6:2e:4f:00:ea:4a:01:c7:94:5c:1a:3b:ba:84:d0: 37:09:6c:8b:b0:05:7f:ed:ff:1f:43:3d:2d:da:92: 2e:52:2c:53:27:8a:9f:45:d4:5f:c8:76:8b:07:a6: df:38:c0:24:cf:09:f9:a7:74:fb:87:9b:3a:fa:61: c6:80:82:d0:85:fa:96:25:b7:0b:00:d3:0e:bf:f5: 49:f5:7d:b4:7a:75:d3:fd:d2:8d:ac:8d:f1:75:60: e5:71:00:00:cf:89:54:ae:53:2d:7e:92:f3:67:40: ea:4e:d9:07:27:f2:c7:c0:40:34:b0:41:24:6f:92: 44:2c:1a:cf:b4:17:89:31:ed:e7:fe:e2:8e:df:38: b9:c8:94:6a:24:99:b2:4d:9d:f8:67:94:1d:32:87: 51:99:a7:2e:f4:ee:fc:aa:1e:fd:62:1c:61:2b:fc: 68:69:f5:da:4e:dc:a4:39:8b:4d:e9:e3:40:d3:76: c1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:00:8B:05:3C:50:6E:D1:48:D6:61:57:2E:26:3E:C2:55:EC:ED:CF X509v3 Authority Key Identifier: keyid:7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:bb:25:f3:1d:9d:47:55:d7:17:20:75:0d:fe:ec:fa:58:d3: 63:8a:46:f9:b4:74:55:c5:9e:de:74:51:17:79:c8:50:1d:f4: 43:0d:a2:7a:5b:d1:e9:24:74:c4:18:42:2f:f8:2b:73:9e:4a: 3c:6a:b3:d2:7b:ce:3e:6b:26:8c:2a:25:f8:45:4b:15:a6:1a: e8:e0:2d:df:c5:2c:32:81:fd:78:92:0b:f4:d2:55:1c:69:9b: d6:e3:35:13:c8:2a:82:bc:0c:90:ed:e5:c9:7f:4c:8f:2b:1a: d1:9a:08:54:df:f9:6f:b1:46:f7:76:41:cc:15:d3:7d:38:d9: d3:bf:3a:03:8f:5b:64:f9:49:6f:e5:b8:bd:c9:3f:0e:a0:71: d2:20:e8:51:a9:c6:91:eb:2a:63:0d:ac:ab:b2:77:4f:b8:08: e1:4c:44:2e:a5:ac:40:22:5f:f7:31:63:76:7e:95:8c:2b:86: a0:12:d0:0d:ff:bd:01:80:da:53:81:b2:8e:7a:20:64:68:9d: 8b:98:2d:8a:9c:8b:ff:b1:b3:32:eb:e6:48:c2:d3:00:5b:76: 42:a0:16:d5:30:d6:82:ad:c0:d0:17:5a:2b:1f:b4:0e:74:ae: 3f:23:97:14:d8:59:33:11:fb:42:e8:fa:bb:16:f9:22:f1:69: 0d:da:09:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJBRTUxMTAvBgNVBAUTKDdDNjNCMjgzRDlCOEEwNkVFQUQwNjIxQjgyM0VEMEY0 RTY5OURERjQwHhcNMjQwNTA0MTU1MjE3WhcNMjQwNTExMTU1MjE3WjAYMRYwFAYD VQQDEw02NjM2NTliMS04M2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhPRtoi13d0O8u3JyNwqlv7/BRVBVhBUMq01oWJ3GfbVWLLm9rr21zHpH+xF PgBkqc9Mpt8zqSYRqZLCkrRbS1seXjFO4mjG7me2Lk8A6koBx5RcGju6hNA3CWyL sAV/7f8fQz0t2pIuUixTJ4qfRdRfyHaLB6bfOMAkzwn5p3T7h5s6+mHGgILQhfqW JbcLANMOv/VJ9X20enXT/dKNrI3xdWDlcQAAz4lUrlMtfpLzZ0DqTtkHJ/LHwEA0 sEEkb5JELBrPtBeJMe3n/uKO3zi5yJRqJJmyTZ34Z5QdModRmacu9O78qh79Yhxh K/xoafXaTtykOYtN6eNA03bBdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8AiwU8 UG7RSNZhVy4mPsJV7O3PMB8GA1UdIwQYMBaAFHxjsoPZuKBu6tBiG4I+0PTmmd30 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkFFNS85RDcyNzZCNjVD QTkxMUU4QUE0MkEzNDZDNEY5QUUwMi9mR095ZzltNG9HN3EwR0liZ2o3UTlPYVoz ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZHT3lnOW00b0c3cTBHSWJnajdROU9hWjNmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkFFNS85RDcyNzZCNjVDQTkxMUU4QUE0MkEzNDZDNEY5QUUwMi9mR095ZzltNG9H N3EwR0liZ2o3UTlPYVozZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARuyXzHZ1HVdcXIHUN/uz6WNNjikb5tHRVxZ7edFEXechQHfRDDaJ6 W9HpJHTEGEIv+Ctznko8arPSe84+ayaMKiX4RUsVphro4C3fxSwygf14kgv00lUc aZvW4zUTyCqCvAyQ7eXJf0yPKxrRmghU3/lvsUb3dkHMFdN9ONnTvzoDj1tk+Ulv 5bi9yT8OoHHSIOhRqcaR6ypjDayrsndPuAjhTEQupaxAIl/3MWN2fpWMK4agEtAN /70BgNpTgbKOeiBkaJ2LmC2KnIv/sbMy6+ZIwtMAW3ZCoBbVMNaCrcDQF1orH7QO dK4/I5cU2FkzEftC6Pq7Fvki8WkN2gk6 -----END CERTIFICATE-----Generated at Sat May 4 16:34:32 2024 by rpki-client on console-fra.rpki-client.org