$ rpki-client -vvf rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft File: FOvueS5AUhzVGx8DIDp_jiq7EtI.mft (raw, json) Hash identifier: cKKU4p2cjc9iXjrXgNVdC3mknXUsX5fpVsaaT/6rOzg= Subject key identifier: BA:51:F2:7C:51:F0:F1:32:ED:2C:C6:78:45:9C:BB:6F:7B:95:6F:91 Authority key identifier: 14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2 Certificate issuer: /CN=A912F40E/serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2 Certificate serial: 097B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft Manifest number: 0975 Signing time: Sat 18 May 2024 20:59:38 +0000 Manifest this update: Sat 18 May 2024 20:59:38 +0000 Manifest next update: Sat 25 May 2024 20:59:38 +0000 Files and hashes: 1: FOvueS5AUhzVGx8DIDp_jiq7EtI.crl (hash: xwUkZRgVS+rmxBOOjNuJ480NZi3qvAuQPZRbS6j4lxA=) 2: 6677438E6B7B11EA908F7C82C4F9AE02.roa (hash: MSUgG3YpJNbihj2Swmi1mDO3TB3FswBz5L2+dcR+N7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2427 (0x97b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F40E/serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2 Validity Not Before: May 18 20:59:38 2024 GMT Not After : May 25 20:59:38 2024 GMT Subject: CN=664916ba-54a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2a:8a:6e:8b:fa:e6:2e:66:78:10:60:f4:f5: 14:fb:47:eb:20:ad:61:9f:63:b7:72:d0:ea:e0:61: 65:3a:42:44:d6:3b:ff:cf:e0:d4:8d:b6:62:1e:cb: 30:c9:24:e3:89:28:b8:cb:d8:43:d6:b0:cd:c4:76: 02:f8:20:0b:47:84:b3:c8:aa:68:10:58:46:08:36: 4b:11:8f:6f:a0:07:98:ed:3f:e0:bd:83:a4:71:da: 60:8e:3f:4e:20:44:d9:e3:8d:bc:5d:d6:38:a3:8a: b0:e8:5f:6a:a3:48:48:c9:91:83:3c:a0:20:a2:7c: 43:59:d3:dd:0c:2a:6d:d6:24:26:b6:fc:37:d2:32: be:bd:80:f6:a3:e4:cd:f3:eb:70:9f:27:99:dd:d7: 85:57:85:cd:a5:d3:1a:07:4d:90:79:a4:df:a2:74: 3e:95:af:d2:4a:09:bd:dd:a0:b3:34:20:16:00:69: 1c:0d:56:f7:d0:bf:2e:00:cf:52:3d:7b:c4:cb:08: 88:92:67:6d:43:ff:3d:4e:8b:12:71:b6:72:55:52: ab:63:39:15:3d:08:08:18:fd:42:12:cf:fb:49:29: d5:e7:c5:7a:2b:9b:5d:30:cd:0f:86:f9:62:73:2d: fc:d3:d1:27:af:5b:4d:dc:07:f8:0c:36:f8:75:64: 84:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:51:F2:7C:51:F0:F1:32:ED:2C:C6:78:45:9C:BB:6F:7B:95:6F:91 X509v3 Authority Key Identifier: keyid:14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:be:46:c1:f6:d4:54:f8:80:75:58:e4:e2:b2:89:0b:bb:53: 30:31:a7:a5:dc:37:b3:e2:4c:b0:43:32:6a:62:f1:80:3e:98: 83:fd:02:db:7c:17:bf:fc:99:29:28:3b:f6:b8:48:ad:e4:6d: 3f:07:ae:5a:8a:bd:fa:a7:c1:d2:75:d3:b0:74:1d:f3:a9:a1: b0:01:70:db:ad:d6:9c:0c:ee:9b:39:2a:d9:68:ab:66:dd:e4: b4:b9:6e:4f:26:e5:78:ec:9a:79:87:17:a5:5f:af:2b:7c:ed: ee:55:b4:e3:9c:17:25:ad:fd:be:66:10:a9:b7:2f:70:48:df: f0:f8:f5:b8:26:74:60:ac:51:18:3f:60:a8:85:6d:d2:d7:45: 29:d7:c3:99:61:42:06:a7:70:d4:18:16:14:d7:33:da:d7:35: ae:59:a3:83:0f:d7:33:fb:f1:c1:ad:6d:37:5c:8b:fc:1e:47: 77:f3:cb:25:7c:5d:7b:a9:69:2c:b4:c7:4a:2f:14:7f:4e:bc: 83:46:47:af:c1:88:b9:07:a2:70:34:cd:12:0f:80:fd:f4:25: 79:6b:9b:05:07:e6:9d:23:f7:c7:ba:e1:4c:aa:8f:46:01:fe: af:c2:35:bd:ee:b7:d3:3a:01:a4:a2:9d:3e:1f:ae:0f:d2:50: 56:fc:d8:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY0MEUxMTAvBgNVBAUTKDE0RUJFRTc5MkU0MDUyMUNENTFCMUYwMzIwM0E3RjhF MkFCQjEyRDIwHhcNMjQwNTE4MjA1OTM4WhcNMjQwNTI1MjA1OTM4WjAYMRYwFAYD VQQDEw02NjQ5MTZiYS01NGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCqKbov65i5meBBg9PUU+0frIK1hn2O3ctDq4GFlOkJE1jv/z+DUjbZiHssw ySTjiSi4y9hD1rDNxHYC+CALR4SzyKpoEFhGCDZLEY9voAeY7T/gvYOkcdpgjj9O IETZ4428XdY4o4qw6F9qo0hIyZGDPKAgonxDWdPdDCpt1iQmtvw30jK+vYD2o+TN 8+twnyeZ3deFV4XNpdMaB02QeaTfonQ+la/SSgm93aCzNCAWAGkcDVb30L8uAM9S PXvEywiIkmdtQ/89TosScbZyVVKrYzkVPQgIGP1CEs/7SSnV58V6K5tdMM0Phvli cy3809Enr1tN3Af4DDb4dWSEOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpR8nxR 8PEy7SzGeEWcu297lW+RMB8GA1UdIwQYMBaAFBTr7nkuQFIc1RsfAyA6f44quxLS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjQwRS8zMDNCM0Q3ODZC NzgxMUVBQTcxM0Q3NzhDNEY5QUUwMi9GT3Z1ZVM1QVVoelZHeDhESURwX2ppcTdF dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZPdnVlUzVBVWh6Vkd4OERJRHBfamlxN0V0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjQwRS8zMDNCM0Q3ODZCNzgxMUVBQTcxM0Q3NzhDNEY5QUUwMi9GT3Z1ZVM1QVVo elZHeDhESURwX2ppcTdFdEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtvkbB9tRU+IB1WOTisokLu1MwMael3Dez4kywQzJqYvGAPpiD/QLb fBe//JkpKDv2uEit5G0/B65air36p8HSddOwdB3zqaGwAXDbrdacDO6bOSrZaKtm 3eS0uW5PJuV47Jp5hxelX68rfO3uVbTjnBclrf2+ZhCpty9wSN/w+PW4JnRgrFEY P2CohW3S10Up18OZYUIGp3DUGBYU1zPa1zWuWaODD9cz+/HBrW03XIv8Hkd388sl fF17qWkstMdKLxR/TryDRkevwYi5B6JwNM0SD4D99CV5a5sFB+adI/fHuuFMqo9G Af6vwjW97rfTOgGkop0+H64P0lBW/Ngu -----END CERTIFICATE-----Generated at Sat May 18 21:31:26 2024 by rpki-client on console-ams.rpki-client.org