$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft File: FBD9h4cUD_mXb-nB-lhE7V3R48U.mft (raw, json) Hash identifier: PRzU7fojm9Tbsi4RO9DEOTElVV/PIH7anNFgTWqOurI= Subject key identifier: 44:87:FB:82:8B:D8:D1:EC:3B:41:4C:5B:43:CB:FD:AF:94:48:FF:2A Authority key identifier: 14:10:FD:87:87:14:0F:F9:97:6F:E9:C1:FA:58:44:ED:5D:D1:E3:C5 Certificate issuer: /CN=A91FDD88/serialNumber=1410FD8787140FF9976FE9C1FA5844ED5DD1E3C5 Certificate serial: 0450 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft Manifest number: 044C Signing time: Sat 27 Apr 2024 01:50:09 +0000 Manifest this update: Sat 27 Apr 2024 01:50:08 +0000 Manifest next update: Sat 04 May 2024 01:50:08 +0000 Files and hashes: 1: FBD9h4cUD_mXb-nB-lhE7V3R48U.crl (hash: q5OB4p5qapheCPYOX5OevJy1f5roNPxvG+6V+vDhE1w=) 2: A2835264049511ECB774BA31C4F9AE02.roa (hash: Ylfs7EK5RTvqOTDzyp1EvOHpd+EWi2jGm1bZViVOrWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.crl rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 01:50:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1104 (0x450) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD88/serialNumber=1410FD8787140FF9976FE9C1FA5844ED5DD1E3C5 Validity Not Before: Apr 27 01:50:08 2024 GMT Not After : May 4 01:50:08 2024 GMT Subject: CN=662c59d0-43a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9a:73:e9:ff:3b:be:c5:c2:25:86:a8:37:e3: 42:c2:a8:8f:7a:c9:b0:ce:89:f4:2e:7c:30:87:28: 14:97:4f:92:00:9b:47:b9:d9:12:75:b4:4c:80:a6: f3:a3:39:75:df:28:85:25:9c:f2:62:95:55:39:13: 41:7a:8f:47:13:45:ad:04:75:85:07:7d:03:2f:f1: 14:88:8d:b8:eb:2c:95:58:b4:91:db:d0:54:dc:18: 5c:de:22:7a:4c:ba:61:f7:bf:aa:21:66:c0:15:13: fb:f7:ed:2a:5b:98:80:74:27:db:b5:7b:aa:95:86: ed:cd:90:44:47:f0:f5:e6:1c:e9:82:9a:fe:30:af: bd:0d:bf:70:bc:2f:8f:46:71:e2:52:ca:8f:77:8f: a5:9f:6a:84:0a:82:62:97:df:68:24:a0:d7:c0:ad: 16:e9:e0:50:10:d3:90:de:4e:79:47:ae:1d:7a:e3: 3e:2b:db:2a:78:84:0a:47:2c:59:b6:8b:61:cc:21: f6:e1:9c:4f:e7:fc:ca:82:56:e8:e7:32:2a:c9:44: 18:4e:73:45:61:7d:4a:d0:3b:d6:07:ca:4e:1d:5a: 1a:25:8a:79:0d:de:2f:ac:09:09:13:ec:f3:89:ee: ee:73:7a:7c:28:4c:e9:db:9f:37:4a:76:70:39:05: 79:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:87:FB:82:8B:D8:D1:EC:3B:41:4C:5B:43:CB:FD:AF:94:48:FF:2A X509v3 Authority Key Identifier: keyid:14:10:FD:87:87:14:0F:F9:97:6F:E9:C1:FA:58:44:ED:5D:D1:E3:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:1d:8b:9d:a8:f3:46:c0:05:ce:e4:2c:76:e7:38:db:15:7b: d7:05:66:ab:7b:47:07:54:82:4c:57:79:8d:84:46:8e:22:74: ac:ed:6e:40:d2:ca:04:7e:18:fe:19:b1:0a:77:7d:46:db:be: cd:aa:ca:3d:45:88:2c:36:1d:a6:ab:3c:17:aa:93:22:c3:ed: c9:f1:d6:a8:4c:54:ef:54:59:20:67:b5:e7:eb:98:c8:33:41: 6d:02:2e:b1:e0:2d:da:22:74:3d:2e:40:3b:50:1c:6c:66:58: 79:00:aa:0a:75:3d:94:45:a3:25:e0:1f:c2:f7:3b:5c:0c:56: e9:ac:43:a3:1a:18:70:ae:8d:b9:8f:25:40:bf:a3:68:5f:0e: d7:38:23:7a:ea:46:3a:e1:fa:67:70:6a:fa:61:37:75:a9:dd: 0d:50:06:e0:12:f8:a3:f6:c9:e6:47:d5:55:b1:eb:e8:55:e8: 46:40:a8:1f:20:1a:0d:a1:ba:16:8a:de:e2:a1:0b:cb:09:05: 9a:73:ec:fc:1b:d3:48:e5:dc:1b:44:d3:2b:fa:bd:e0:e0:fa: 68:40:de:73:10:52:3b:9d:12:df:10:15:dc:a0:26:e0:93:01: cd:50:6a:91:97:67:f4:c7:44:3d:6e:c7:36:7e:1a:6b:c1:01: 91:60:ad:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkREODgxMTAvBgNVBAUTKDE0MTBGRDg3ODcxNDBGRjk5NzZGRTlDMUZBNTg0NEVE NUREMUUzQzUwHhcNMjQwNDI3MDE1MDA4WhcNMjQwNTA0MDE1MDA4WjAYMRYwFAYD VQQDEw02NjJjNTlkMC00M2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ppz6f87vsXCJYaoN+NCwqiPesmwzon0LnwwhygUl0+SAJtHudkSdbRMgKbz ozl13yiFJZzyYpVVORNBeo9HE0WtBHWFB30DL/EUiI246yyVWLSR29BU3Bhc3iJ6 TLph97+qIWbAFRP79+0qW5iAdCfbtXuqlYbtzZBER/D15hzpgpr+MK+9Db9wvC+P RnHiUsqPd4+ln2qECoJil99oJKDXwK0W6eBQENOQ3k55R64deuM+K9sqeIQKRyxZ tothzCH24ZxP5/zKglbo5zIqyUQYTnNFYX1K0DvWB8pOHVoaJYp5Dd4vrAkJE+zz ie7uc3p8KEzp2583SnZwOQV58wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFESH+4KL 2NHsO0FMW0PL/a+USP8qMB8GA1UdIwQYMBaAFBQQ/YeHFA/5l2/pwfpYRO1d0ePF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ4OC9DODIzNkFDMjA0 OTAxMUVDOENDMUEzODZDNEY5QUUwMi9GQkQ5aDRjVURfbVhiLW5CLWxoRTdWM1I0 OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZCRDloNGNVRF9tWGItbkItbGhFN1YzUjQ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQ4OC9DODIzNkFDMjA0OTAxMUVDOENDMUEzODZDNEY5QUUwMi9GQkQ5aDRjVURf bVhiLW5CLWxoRTdWM1I0OFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWHYudqPNGwAXO5Cx25zjbFXvXBWare0cHVIJMV3mNhEaOInSs7W5A 0soEfhj+GbEKd31G277Nqso9RYgsNh2mqzwXqpMiw+3J8daoTFTvVFkgZ7Xn65jI M0FtAi6x4C3aInQ9LkA7UBxsZlh5AKoKdT2URaMl4B/C9ztcDFbprEOjGhhwro25 jyVAv6NoXw7XOCN66kY64fpncGr6YTd1qd0NUAbgEvij9snmR9VVsevoVehGQKgf IBoNoboWit7ioQvLCQWac+z8G9NI5dwbRNMr+r3g4PpoQN5zEFI7nRLfEBXcoCbg kwHNUGqRl2f0x0Q9bsc2fhprwQGRYK2R -----END CERTIFICATE-----Generated at Sat Apr 27 10:21:02 2024 by rpki-client on console-ams.rpki-client.org