$ rpki-client -vvf rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft File: FdYNYNak9QCRCZpy4NBe7z6vduk.mft (raw, json) Hash identifier: lrZpDayD9bhwnHisgHACCgvNTzc5hQhHrbwlt/ahSmw= Subject key identifier: F6:08:B4:96:B8:D2:8B:3C:ED:54:9B:35:42:73:0F:B4:5B:28:AD:71 Authority key identifier: 15:D6:0D:60:D6:A4:F5:00:91:09:9A:72:E0:D0:5E:EF:3E:AF:76:E9 Certificate issuer: /CN=A91F61DD/serialNumber=15D60D60D6A4F50091099A72E0D05EEF3EAF76E9 Certificate serial: 03FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft Manifest number: 03F7 Signing time: Sat 01 Jun 2024 03:17:10 +0000 Manifest this update: Sat 01 Jun 2024 03:17:09 +0000 Manifest next update: Sat 08 Jun 2024 03:17:09 +0000 Files and hashes: 1: FdYNYNak9QCRCZpy4NBe7z6vduk.crl (hash: RDviAhuvQRd23jzLwwvr7g/x5u+U/xZ8QLH+CRaFLK8=) 2: BFEEB5E4309D11ECABBBBF25C4F9AE02.roa (hash: /QVVslrMllSP7F9AmwTYq2wLhlMYkZjpCuxsGXQniMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.crl rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 03:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1022 (0x3fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F61DD/serialNumber=15D60D60D6A4F50091099A72E0D05EEF3EAF76E9 Validity Not Before: Jun 1 03:17:09 2024 GMT Not After : Jun 8 03:17:09 2024 GMT Subject: CN=665a92b6-4a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1c:58:60:f4:8c:0e:26:64:5e:5c:58:b1:76: 44:60:8e:ea:16:4c:cd:3c:63:67:df:93:a3:1f:65: b9:af:60:b6:26:03:8c:4f:76:a7:42:89:45:14:40: e9:b4:3e:e3:75:00:8d:9a:c5:55:a6:14:7e:37:3b: 99:7a:be:e1:17:dd:51:34:4b:fc:75:b6:6e:12:a2: 48:c1:d8:7b:01:fa:d5:00:9b:36:88:44:b5:3a:d0: e6:f9:5f:85:68:09:38:85:68:54:6b:74:6c:8c:7b: b7:ae:31:c4:6a:f8:aa:50:73:46:c7:15:ab:41:47: c8:80:55:e0:6d:2e:b9:2a:36:83:c3:df:d9:67:61: a0:58:85:96:eb:d7:d7:47:cf:f6:01:a0:2e:aa:77: 1c:27:02:ee:89:de:37:73:4f:a6:e2:59:a5:e0:8e: 4c:1d:6c:07:4c:4d:6f:d8:61:d8:52:07:9d:69:da: 4a:8d:8b:52:0f:bc:45:6e:0e:b8:7b:8c:c2:78:6a: 96:c7:30:f5:d5:d0:b8:f9:ff:3b:2d:15:18:36:0c: 76:f2:c9:6c:87:51:4f:18:bf:f3:fa:b5:e6:ad:ed: ec:17:9c:9a:e3:4a:68:1a:85:cd:4c:b9:ca:52:2e: b9:e7:b0:24:c9:c0:58:28:aa:ca:73:e9:e4:8c:7f: a6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:08:B4:96:B8:D2:8B:3C:ED:54:9B:35:42:73:0F:B4:5B:28:AD:71 X509v3 Authority Key Identifier: keyid:15:D6:0D:60:D6:A4:F5:00:91:09:9A:72:E0:D0:5E:EF:3E:AF:76:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:b3:48:d0:c7:60:dd:4b:d0:da:cc:1e:30:e1:e3:16:27:f9: 49:a3:c9:f2:ce:e4:73:6d:3d:a0:e9:bd:04:85:1b:25:96:bc: ed:9d:89:de:b2:91:a9:18:56:53:5f:62:ed:b3:70:66:2f:59: 2a:bf:a7:a0:aa:f1:8a:5b:34:58:c9:b6:1c:dc:04:92:42:98: df:55:72:cb:e0:c9:9a:b0:68:41:50:03:2f:3e:44:69:f1:f5: 30:bb:ec:d6:da:44:69:8a:46:45:80:2c:31:1c:70:8c:1d:ff: 02:0d:2d:80:e0:08:f5:1b:1a:7c:d8:b4:a0:b1:3e:a1:85:ad: 24:5b:54:8c:ca:09:28:b8:c1:0e:9d:a6:98:44:34:fb:67:65: f5:10:cc:cd:14:c9:92:1e:fd:d9:22:07:2f:ee:93:16:7a:12: 36:2e:92:a8:19:e3:b6:9a:6f:2f:76:e8:01:7c:64:31:07:4d: a3:d8:aa:6f:c3:97:ff:9d:85:53:ed:90:64:2a:ec:8d:3c:cf: 1b:6c:c7:66:05:8c:ee:8f:68:3c:da:91:50:97:3a:01:ad:25: 98:d7:c2:54:d0:98:b1:f9:53:f0:e8:9d:4c:54:8c:f2:2c:f5: a6:20:86:ba:08:c8:69:4a:c5:13:9b:6c:bb:ff:12:81:89:7c: 71:17:a0:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYxREQxMTAvBgNVBAUTKDE1RDYwRDYwRDZBNEY1MDA5MTA5OUE3MkUwRDA1RUVG M0VBRjc2RTkwHhcNMjQwNjAxMDMxNzA5WhcNMjQwNjA4MDMxNzA5WjAYMRYwFAYD VQQDEw02NjVhOTJiNi00YTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0RxYYPSMDiZkXlxYsXZEYI7qFkzNPGNn35OjH2W5r2C2JgOMT3anQolFFEDp tD7jdQCNmsVVphR+NzuZer7hF91RNEv8dbZuEqJIwdh7AfrVAJs2iES1OtDm+V+F aAk4hWhUa3RsjHu3rjHEaviqUHNGxxWrQUfIgFXgbS65KjaDw9/ZZ2GgWIWW69fX R8/2AaAuqnccJwLuid43c0+m4lml4I5MHWwHTE1v2GHYUgedadpKjYtSD7xFbg64 e4zCeGqWxzD11dC4+f87LRUYNgx28slsh1FPGL/z+rXmre3sF5ya40poGoXNTLnK Ui6557AkycBYKKrKc+nkjH+mrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPYItJa4 0os87VSbNUJzD7RbKK1xMB8GA1UdIwQYMBaAFBXWDWDWpPUAkQmacuDQXu8+r3bp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjFERC83Qzc4RTJCQzMw OTMxMUVDQUI2ODQzM0ZDNEY5QUUwMi9GZFlOWU5hazlRQ1JDWnB5NE5CZTd6NnZk dWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZkWU5ZTmFrOVFDUkNacHk0TkJlN3o2dmR1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjFERC83Qzc4RTJCQzMwOTMxMUVDQUI2ODQzM0ZDNEY5QUUwMi9GZFlOWU5hazlR Q1JDWnB5NE5CZTd6NnZkdWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzs0jQx2DdS9DazB4w4eMWJ/lJo8nyzuRzbT2g6b0EhRsllrztnYne spGpGFZTX2Lts3BmL1kqv6egqvGKWzRYybYc3ASSQpjfVXLL4MmasGhBUAMvPkRp 8fUwu+zW2kRpikZFgCwxHHCMHf8CDS2A4Aj1Gxp82LSgsT6hha0kW1SMygkouMEO naaYRDT7Z2X1EMzNFMmSHv3ZIgcv7pMWehI2LpKoGeO2mm8vdugBfGQxB02j2Kpv w5f/nYVT7ZBkKuyNPM8bbMdmBYzuj2g82pFQlzoBrSWY18JU0Jix+VPw6J1MVIzy LPWmIIa6CMhpSsUTm2y7/xKBiXxxF6B+ -----END CERTIFICATE-----Generated at Sat Jun 1 04:07:33 2024 by rpki-client on console-ams.rpki-client.org