$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft File: faWJztV_HlzEhgPROEIjk24WAn4.mft (raw, json) Hash identifier: X6yw0uAAHMat19O9KyzGXMR7YWluplZ/EGfBmcrWnus= Subject key identifier: A0:29:17:30:7A:15:4B:1D:DD:66:E7:0E:87:42:A0:F2:24:49:AA:DE Authority key identifier: 7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E Certificate issuer: /CN=A91E9721/serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E Certificate serial: 0F75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft Manifest number: 0F6C Signing time: Mon 06 May 2024 18:14:25 +0000 Manifest this update: Mon 06 May 2024 18:14:25 +0000 Manifest next update: Mon 13 May 2024 18:14:25 +0000 Files and hashes: 1: faWJztV_HlzEhgPROEIjk24WAn4.crl (hash: JwWQD7XGw2mxOsiLj9HlUC7HXDjtr+FS8dfBMGmM4sM=) 2: 16EA264C3FC611E9A0E68A30C4F9AE02.roa (hash: NL02ywKjeKtGgKrynz587r/KaAhwoL9/ivVp/Q30Ou8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 18:14:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3957 (0xf75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9721/serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E Validity Not Before: May 6 18:14:25 2024 GMT Not After : May 13 18:14:25 2024 GMT Subject: CN=66391e01-418e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:90:0c:38:e2:fe:4a:23:f5:71:fc:b2:93:1c: 64:e7:da:48:5e:0f:4d:ad:d9:b5:41:c3:89:f7:33: 94:e9:e3:6c:ba:8d:7e:70:3b:d5:c8:b4:86:dc:da: 97:9d:f3:ef:f5:ad:4b:f4:09:29:9d:ea:88:1a:7d: 16:d1:14:2a:97:6d:75:dd:49:e1:06:d8:58:b5:75: c2:d5:ba:2a:b4:d7:9c:97:8d:bf:95:19:32:06:51: 8b:a4:e4:43:45:49:07:18:82:ce:cd:7a:6d:ae:f1: c9:49:5c:d9:d5:64:f8:d1:3d:bb:4e:c1:a8:c8:d8: 0e:42:d3:a2:a2:c0:80:b9:6b:05:04:e5:3e:e3:49: 3a:73:a2:ad:e5:f4:a1:49:86:a6:2c:04:05:67:2c: f3:31:a5:67:71:2b:5f:3a:f9:16:4a:45:f9:26:96: d4:94:b8:a4:e4:22:06:8b:aa:75:eb:5c:b0:4c:5b: c2:15:d3:b9:5e:3e:a6:14:aa:bd:7f:90:3e:1a:9d: 90:fe:d4:57:d9:32:95:9c:ec:f7:2f:d4:52:55:a8: 3e:bd:81:15:37:1f:0e:08:a5:96:8f:de:ab:20:0f: b1:13:e6:fe:c5:4b:47:e9:a1:a3:3a:c4:03:e9:5d: 3e:0e:9d:fa:de:eb:60:32:08:e9:22:01:9c:91:e0: ff:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:29:17:30:7A:15:4B:1D:DD:66:E7:0E:87:42:A0:F2:24:49:AA:DE X509v3 Authority Key Identifier: keyid:7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:cd:d6:9b:15:40:af:23:6d:98:5d:9f:18:0d:dc:d4:2b:6b: b4:ce:38:8b:4a:81:1f:22:8c:31:a8:11:a0:43:a6:63:60:0e: 5d:79:18:81:c1:a5:d6:e0:2a:6f:c0:ac:b6:b2:08:a9:51:fc: 19:c9:a7:ed:c1:dc:f8:9d:f5:3e:c9:75:c7:a8:90:59:41:c9: e6:eb:8c:f9:38:13:e6:85:d1:75:f3:a6:40:8c:f6:46:53:d1: f2:0f:55:f5:40:b3:13:0a:de:c3:02:6f:db:9b:1a:c3:93:28: e0:fd:6b:59:e7:4c:44:33:e8:38:79:e1:2c:b8:7d:8d:c3:bd: 88:be:93:00:54:a9:23:56:f3:43:44:3a:e5:95:5d:6a:a9:c6: f6:f2:ac:41:a3:a5:08:b0:26:1e:33:9d:c3:45:7a:85:c9:dd: 17:ff:b8:3f:a1:ac:7c:ac:c7:ee:5c:61:f1:29:68:6e:1e:c3: 1b:14:28:2b:60:96:5e:b7:6d:5a:ae:96:37:7d:64:61:a1:ca: 55:e5:e8:de:41:67:54:24:ff:64:a8:cf:84:f2:90:2b:6c:16: b5:29:75:1a:4b:ae:6c:0a:e6:c1:dc:04:fc:46:83:9a:cb:c0: 3f:d3:93:bd:f8:2d:fd:9c:17:12:f7:27:c1:3d:3d:1d:d8:e7: 8f:9e:12:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk3MjExMTAvBgNVBAUTKDdEQTU4OUNFRDU3RjFFNUNDNDg2MDNEMTM4NDIyMzkz NkUxNjAyN0UwHhcNMjQwNTA2MTgxNDI1WhcNMjQwNTEzMTgxNDI1WjAYMRYwFAYD VQQDEw02NjM5MWUwMS00MThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1JAMOOL+SiP1cfyykxxk59pIXg9Nrdm1QcOJ9zOU6eNsuo1+cDvVyLSG3NqX nfPv9a1L9AkpneqIGn0W0RQql2113UnhBthYtXXC1boqtNecl42/lRkyBlGLpORD RUkHGILOzXptrvHJSVzZ1WT40T27TsGoyNgOQtOiosCAuWsFBOU+40k6c6Kt5fSh SYamLAQFZyzzMaVncStfOvkWSkX5JpbUlLik5CIGi6p161ywTFvCFdO5Xj6mFKq9 f5A+Gp2Q/tRX2TKVnOz3L9RSVag+vYEVNx8OCKWWj96rIA+xE+b+xUtH6aGjOsQD 6V0+Dp363utgMgjpIgGckeD/0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKApFzB6 FUsd3WbnDodCoPIkSareMB8GA1UdIwQYMBaAFH2lic7Vfx5cxIYD0ThCI5NuFgJ+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTcyMS84QUVDMkFDNDNG QzQxMUU5OTJBM0U2MkRDNEY5QUUwMi9mYVdKenRWX0hsekVoZ1BST0VJamsyNFdB bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZhV0p6dFZfSGx6RWhnUFJPRUlqazI0V0FuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTcyMS84QUVDMkFDNDNGQzQxMUU5OTJBM0U2MkRDNEY5QUUwMi9mYVdKenRWX0hs ekVoZ1BST0VJamsyNFdBbjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnzdabFUCvI22YXZ8YDdzUK2u0zjiLSoEfIowxqBGgQ6ZjYA5deRiB waXW4CpvwKy2sgipUfwZyaftwdz4nfU+yXXHqJBZQcnm64z5OBPmhdF186ZAjPZG U9HyD1X1QLMTCt7DAm/bmxrDkyjg/WtZ50xEM+g4eeEsuH2Nw72IvpMAVKkjVvND RDrllV1qqcb28qxBo6UIsCYeM53DRXqFyd0X/7g/oax8rMfuXGHxKWhuHsMbFCgr YJZet21arpY3fWRhocpV5ejeQWdUJP9kqM+E8pArbBa1KXUaS65sCubB3AT8RoOa y8A/05O9+C39nBcS9yfBPT0d2OePnhKP -----END CERTIFICATE-----Generated at Mon May 6 20:19:45 2024 by rpki-client on console-ams.rpki-client.org