$ rpki-client -vvf rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft File: FWV3K3tOvoUEnSr5syrMh4AxGl0.mft (raw, json) Hash identifier: dvwEKWxEvSYUyoDA0RaEUiyva/NUQDoKnbdqfkRlbX4= Subject key identifier: BD:81:DD:26:4B:9A:EA:7F:A2:9A:AB:25:90:FE:4B:A9:90:4F:DA:B5 Authority key identifier: 15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D Certificate issuer: /CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D Certificate serial: 02E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft Manifest number: 02E1 Signing time: Sun 19 May 2024 03:19:34 +0000 Manifest this update: Sun 19 May 2024 03:19:34 +0000 Manifest next update: Sun 26 May 2024 03:19:34 +0000 Files and hashes: 1: FWV3K3tOvoUEnSr5syrMh4AxGl0.crl (hash: 4PnCRObyh2RY65sdO7A/8tIobndBGKh/M0iNrmLMgTY=) 2: 2106E428992111EC99E0095AC4F9AE02.roa (hash: PcKJkGwaK4o171v3EBWrcFnHzSRmJYq7ZGQ7KxepW58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 741 (0x2e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D Validity Not Before: May 19 03:19:34 2024 GMT Not After : May 26 03:19:34 2024 GMT Subject: CN=66496fc6-d365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ad:bb:b2:10:91:b8:07:ef:04:5e:d7:54:18: 51:92:05:11:25:08:38:f8:98:dc:79:37:26:3c:24: bf:10:18:4b:8b:15:8e:34:f8:8e:d5:84:5a:a4:3b: a0:5d:b6:d9:d7:be:c6:e4:00:5d:af:e9:ba:97:29: 81:32:03:6b:06:11:e6:e5:4a:2f:3a:fb:f4:1c:f9: 26:3a:da:f0:b0:a9:fe:05:e9:a4:ed:5a:9b:57:e4: a3:84:03:2f:05:ad:d4:07:d8:76:55:c1:c4:8f:65: 2c:bb:a6:60:c7:d1:0d:76:04:51:28:16:51:76:ed: 85:94:c0:9e:74:6a:68:84:1c:9c:b8:da:ab:f9:58: f6:25:f6:7e:fa:1c:62:0b:e8:3d:f2:99:f5:72:5f: e7:11:dd:83:3f:2a:da:87:72:15:b9:bb:d4:81:06: 38:4a:58:43:92:ad:64:fe:27:4f:e3:51:3e:38:e3: 31:ae:66:ab:f8:72:c1:70:7d:e4:8e:dc:79:99:20: cb:76:3f:53:1e:fd:c9:a2:fd:53:66:d1:6d:1c:ae: 87:c3:92:29:0d:5b:20:a7:5a:fb:df:0b:85:2a:a1: 41:77:c1:e9:66:b8:30:36:5e:7b:b8:95:34:a1:7e: 7f:97:96:30:e3:75:05:ed:f4:12:38:88:57:5b:d3: e2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:81:DD:26:4B:9A:EA:7F:A2:9A:AB:25:90:FE:4B:A9:90:4F:DA:B5 X509v3 Authority Key Identifier: keyid:15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:f8:6e:41:d8:fa:96:1d:5d:c5:e2:d6:42:cd:6f:f7:25:70: bc:dc:48:e9:33:6d:41:c1:e4:64:00:9d:c9:ac:89:76:93:4e: 2d:1c:47:80:59:0e:d8:bd:1e:f8:61:a8:dd:43:32:59:d7:81: 02:21:cd:8a:7b:a5:5c:40:64:cd:71:df:be:6b:77:76:21:eb: d9:ef:d9:0e:50:63:eb:53:e3:d4:cf:ec:6a:f3:33:f1:35:0c: 3e:04:a9:e1:a2:42:d5:4d:e2:68:b3:4c:68:52:b4:ed:6b:5c: 01:b1:fc:5a:6b:ee:db:f6:e2:65:99:be:52:ec:2f:91:45:8c: d5:0a:28:0b:ed:60:b7:e9:df:75:59:fb:5b:09:ca:48:45:b5: 87:c3:80:a9:d5:1c:3d:fc:4b:ed:af:33:76:60:ed:6e:cf:5a: 5b:0c:58:c9:5c:ea:d7:7e:bf:ed:aa:d8:9b:90:dd:2a:e9:92: 6e:47:42:40:64:2b:5b:8e:59:86:1a:2d:6d:98:bb:88:8a:c2: fb:de:bf:f6:19:0f:dd:69:73:1e:ce:05:9d:80:39:54:b9:01: a4:65:42:96:71:dc:46:1b:b1:34:8b:53:95:6a:1e:6d:f2:1c: b8:f3:14:c3:7e:a4:5c:55:25:e3:be:4f:31:f6:5b:c9:ea:22: f5:80:39:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxQUQxMTAvBgNVBAUTKDE1NjU3NzJCN0I0RUJFODUwNDlEMkFGOUIzMkFDQzg3 ODAzMTFBNUQwHhcNMjQwNTE5MDMxOTM0WhcNMjQwNTI2MDMxOTM0WjAYMRYwFAYD VQQDEw02NjQ5NmZjNi1kMzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAua27shCRuAfvBF7XVBhRkgURJQg4+JjceTcmPCS/EBhLixWONPiO1YRapDug XbbZ177G5ABdr+m6lymBMgNrBhHm5UovOvv0HPkmOtrwsKn+Bemk7VqbV+SjhAMv Ba3UB9h2VcHEj2Usu6Zgx9ENdgRRKBZRdu2FlMCedGpohBycuNqr+Vj2JfZ++hxi C+g98pn1cl/nEd2DPyrah3IVubvUgQY4SlhDkq1k/idP41E+OOMxrmar+HLBcH3k jtx5mSDLdj9THv3Jov1TZtFtHK6Hw5IpDVsgp1r73wuFKqFBd8HpZrgwNl57uJU0 oX5/l5Yw43UF7fQSOIhXW9PiPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2B3SZL mup/opqrJZD+S6mQT9q1MB8GA1UdIwQYMBaAFBVldyt7Tr6FBJ0q+bMqzIeAMRpd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTFBRC84RkRERjVFODk5 MUQxMUVDODA5MzlBNTRDNEY5QUUwMi9GV1YzSzN0T3ZvVUVuU3I1c3lyTWg0QXhH bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXVjNLM3RPdm9VRW5TcjVzeXJNaDRBeEdsMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTFBRC84RkRERjVFODk5MUQxMUVDODA5MzlBNTRDNEY5QUUwMi9GV1YzSzN0T3Zv VUVuU3I1c3lyTWg0QXhHbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8+G5B2PqWHV3F4tZCzW/3JXC83EjpM21BweRkAJ3JrIl2k04tHEeA WQ7YvR74YajdQzJZ14ECIc2Ke6VcQGTNcd++a3d2IevZ79kOUGPrU+PUz+xq8zPx NQw+BKnhokLVTeJos0xoUrTta1wBsfxaa+7b9uJlmb5S7C+RRYzVCigL7WC36d91 WftbCcpIRbWHw4Cp1Rw9/EvtrzN2YO1uz1pbDFjJXOrXfr/tqtibkN0q6ZJuR0JA ZCtbjlmGGi1tmLuIisL73r/2GQ/daXMezgWdgDlUuQGkZUKWcdxGG7E0i1OVah5t 8hy48xTDfqRcVSXjvk8x9lvJ6iL1gDk9 -----END CERTIFICATE-----Generated at Sun May 19 03:48:50 2024 by rpki-client on console-fra.rpki-client.org