$ rpki-client -vvf rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft File: fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft (raw, json) Hash identifier: f4Mqc4Ijm7LQSI5ZmYGYLwwFeGNSzgnWc+kv7/541SA= Subject key identifier: 4C:4E:61:43:16:49:7F:6B:8F:14:D9:57:75:CC:2B:47:44:AE:31:4B Authority key identifier: 7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78 Certificate issuer: /CN=A913D02A/serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378 Certificate serial: 0A92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft Manifest number: 0A8F Signing time: Sat 18 May 2024 20:13:02 +0000 Manifest this update: Sat 18 May 2024 20:13:01 +0000 Manifest next update: Sat 25 May 2024 20:13:01 +0000 Files and hashes: 1: fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl (hash: /617jsnmXQ/PofF+CGI5Dmm17mCEPhMem8fOj0eGfoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2706 (0xa92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D02A/serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378 Validity Not Before: May 18 20:13:01 2024 GMT Not After : May 25 20:13:01 2024 GMT Subject: CN=66490bcd-33d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:0c:40:75:1a:6e:87:14:89:8b:3b:d6:16:2f: c3:77:9f:e0:c0:6b:55:0c:99:1e:01:22:0a:49:4d: 48:20:65:1b:ec:68:24:ea:ea:24:70:d7:a2:e4:a0: 76:65:82:f8:cd:2d:d5:7b:bb:4f:52:4f:ab:71:ee: 7b:50:c9:73:c1:c3:88:7a:7a:b2:d2:84:5e:0f:0b: b1:e2:8d:0a:8c:c5:21:c4:4b:4a:d8:76:e9:26:82: c5:57:f7:d1:bc:24:26:9d:66:23:d5:78:8c:bd:e8: 67:88:d6:2c:2b:70:25:03:77:7d:70:be:81:ed:88: 9d:d4:a5:50:6c:54:cb:13:cf:45:b3:1f:a9:41:62: e9:05:ee:64:7e:ed:ba:49:7d:18:47:dd:d2:9b:9a: c7:6c:05:fe:4c:7d:66:c6:a3:99:07:a9:1e:50:f3: 00:bf:86:bc:16:e1:27:fa:fb:fa:65:fa:df:ba:bd: 3c:15:8c:a2:85:6a:74:fa:0c:8f:e4:2b:b6:c6:d6: f7:a5:84:7e:63:62:91:d1:26:46:e9:81:d9:03:92: c4:07:8f:28:97:ed:1f:f8:2b:ef:63:c0:69:82:b1: d8:29:50:17:96:8a:ea:ba:50:23:2e:36:d8:fb:8c: 67:c7:b4:fb:5c:8e:d1:de:93:9e:c1:11:02:c7:52: 10:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:4E:61:43:16:49:7F:6B:8F:14:D9:57:75:CC:2B:47:44:AE:31:4B X509v3 Authority Key Identifier: keyid:7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:62:6d:16:9e:c7:af:80:95:fe:8c:7c:c8:5c:f6:7f:ce:8f: 09:65:9b:bc:ec:20:ca:26:b5:d2:05:6e:42:4a:bb:e4:44:a4: 8e:91:29:99:9a:67:11:32:ab:88:04:85:26:1b:9b:a5:d9:5f: d1:97:30:05:24:a8:1e:81:cd:bd:fe:a2:20:d5:1a:de:7d:69: 06:06:0f:06:b8:b6:11:92:a2:1e:d3:c3:10:d0:f7:96:a5:50: e6:62:47:42:47:60:58:db:07:2b:9b:d1:cf:6f:9a:20:17:ac: 96:42:de:0a:8c:a3:da:55:e6:ab:6b:2e:09:d0:c2:ec:e5:24: b6:da:76:06:73:8d:53:e7:49:3e:d0:24:5b:69:10:85:94:e8: 66:ad:f9:96:3e:3c:a6:30:4b:ba:e8:a6:87:b3:6e:a0:17:96: 58:3a:74:5d:4a:2d:48:84:82:f1:da:11:f4:92:85:00:13:39: fa:5c:e4:41:5d:23:04:33:79:cc:84:68:5c:d3:d6:84:bd:d5: 59:d6:c0:f9:5a:bc:94:e4:46:f5:e2:d3:11:92:e6:6d:12:27: 1c:8b:3b:ff:6d:48:4e:13:be:aa:8c:2d:48:42:dc:70:70:23: 64:5c:a3:17:85:ca:25:05:66:32:d3:c8:76:94:d9:2c:87:d5: 03:d5:18:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QwMkExMTAvBgNVBAUTKDdDQkY4MUM1OUUzMjVFRjAwNjk3MzEwQjM5NDVGRUEx QzEwNkIzNzgwHhcNMjQwNTE4MjAxMzAxWhcNMjQwNTI1MjAxMzAxWjAYMRYwFAYD VQQDEw02NjQ5MGJjZC0zM2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7gxAdRpuhxSJizvWFi/Dd5/gwGtVDJkeASIKSU1IIGUb7Ggk6uokcNei5KB2 ZYL4zS3Ve7tPUk+rce57UMlzwcOIenqy0oReDwux4o0KjMUhxEtK2HbpJoLFV/fR vCQmnWYj1XiMvehniNYsK3AlA3d9cL6B7Yid1KVQbFTLE89Fsx+pQWLpBe5kfu26 SX0YR93Sm5rHbAX+TH1mxqOZB6keUPMAv4a8FuEn+vv6Zfrfur08FYyihWp0+gyP 5Cu2xtb3pYR+Y2KR0SZG6YHZA5LEB48ol+0f+CvvY8BpgrHYKVAXlorqulAjLjbY +4xnx7T7XI7R3pOewRECx1IQCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExOYUMW SX9rjxTZV3XMK0dErjFLMB8GA1UdIwQYMBaAFHy/gcWeMl7wBpcxCzlF/qHBBrN4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDAyQS83N0ExRDk1RTMz QkMxMUVBODM0OTg1MEJDNEY5QUUwMi9mTC1CeFo0eVh2QUdsekVMT1VYLW9jRUdz M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZMLUJ4WjR5WHZBR2x6RUxPVVgtb2NFR3MzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDAyQS83N0ExRDk1RTMzQkMxMUVBODM0OTg1MEJDNEY5QUUwMi9mTC1CeFo0eVh2 QUdsekVMT1VYLW9jRUdzM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByYm0WnsevgJX+jHzIXPZ/zo8JZZu87CDKJrXSBW5CSrvkRKSOkSmZ mmcRMquIBIUmG5ul2V/RlzAFJKgegc29/qIg1RrefWkGBg8GuLYRkqIe08MQ0PeW pVDmYkdCR2BY2wcrm9HPb5ogF6yWQt4KjKPaVearay4J0MLs5SS22nYGc41T50k+ 0CRbaRCFlOhmrfmWPjymMEu66KaHs26gF5ZYOnRdSi1IhILx2hH0koUAEzn6XORB XSMEM3nMhGhc09aEvdVZ1sD5WryU5Eb14tMRkuZtEiccizv/bUhOE76qjC1IQtxw cCNkXKMXhcolBWYy08h2lNksh9UD1Rhw -----END CERTIFICATE-----Generated at Sat May 18 20:48:17 2024 by rpki-client on console-fra.rpki-client.org