$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft File: FsAdnKD_vvrguwEOUURQeupBDQM.mft (raw, json) Hash identifier: TUmxRJ8RyvVs8zgKMil6dTLEDT8K+SZOm5K5e4k2KEQ= Subject key identifier: 5F:6F:A4:B0:1D:7F:81:E3:83:A3:79:DD:3B:30:29:43:6C:3C:25:2F Authority key identifier: 16:C0:1D:9C:A0:FF:BE:FA:E0:BB:01:0E:51:44:50:7A:EA:41:0D:03 Certificate issuer: /CN=A91415AA/serialNumber=16C01D9CA0FFBEFAE0BB010E5144507AEA410D03 Certificate serial: 07B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft Manifest number: 1146 Signing time: Sat 18 May 2024 20:51:40 +0000 Manifest this update: Sat 18 May 2024 20:51:40 +0000 Manifest next update: Sat 25 May 2024 20:51:40 +0000 Files and hashes: 1: FsAdnKD_vvrguwEOUURQeupBDQM.crl (hash: tBlpteHXjY0N3KcF3Jx3DZxgAzADAsY5vJd4zrGn7vA=) 2: 92CF8C78D49711EEB1F29E51C4F9AE02.roa (hash: cxibNan7ElxE1tnazxmzgw6bQ/N+bhDSSmvx94QIG8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.crl rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1976 (0x7b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415AA/serialNumber=16C01D9CA0FFBEFAE0BB010E5144507AEA410D03 Validity Not Before: May 18 20:51:40 2024 GMT Not After : May 25 20:51:40 2024 GMT Subject: CN=664914dc-e65c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cc:91:e4:b1:6a:dc:58:e2:43:27:f5:ba:76: d7:76:3e:eb:21:b0:54:45:e9:a4:90:66:71:84:f9: ef:c8:42:bd:77:e6:a9:de:f8:3c:ba:d2:4e:a8:ab: af:76:74:70:0d:e0:86:e0:44:c6:24:0d:5a:1d:3d: 89:50:f7:d7:4a:50:2f:43:76:20:3a:ba:34:57:b1: aa:42:85:d9:1f:4e:9e:a6:e3:a1:38:49:35:35:0f: 9b:85:1c:93:de:b6:80:f4:d2:1d:f7:72:89:7f:8f: b6:d7:75:aa:04:cc:81:a4:04:7c:f1:4d:1a:12:c5: 47:2f:43:53:f0:f6:ca:26:b0:ac:07:e8:96:95:81: 5d:cd:ac:58:c5:2e:f2:6e:24:09:e4:8a:70:37:6d: 32:e3:09:a2:16:01:82:e9:86:53:b0:79:7e:f1:62: 26:5a:5a:d4:ce:65:43:a0:32:63:20:d7:24:2a:c3: 5f:47:05:09:1e:05:4e:19:40:af:97:56:84:23:29: bc:c3:77:f5:22:13:5e:23:fe:d7:1e:34:83:36:d5: 83:e6:d1:36:64:97:00:4e:86:99:78:50:2b:7e:56: 83:7a:13:6f:a9:b0:73:e1:bb:73:23:72:b7:8d:98: f5:ff:93:3b:14:5d:1a:db:52:3e:c3:46:3a:d4:6d: 2e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:6F:A4:B0:1D:7F:81:E3:83:A3:79:DD:3B:30:29:43:6C:3C:25:2F X509v3 Authority Key Identifier: keyid:16:C0:1D:9C:A0:FF:BE:FA:E0:BB:01:0E:51:44:50:7A:EA:41:0D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:be:d1:55:67:d7:dd:26:50:00:be:5f:09:c7:46:cc:f7:f5: aa:38:00:f3:1d:42:0d:28:b5:ae:d5:af:23:b9:7a:93:f7:04: 8b:51:99:90:f1:12:7e:26:f2:34:34:d4:a4:c1:5d:99:7a:5e: 66:d2:c8:04:ea:70:94:7a:c5:6e:be:98:9d:76:fb:2c:de:cf: 45:0a:99:13:3f:c7:69:90:a4:e7:16:13:4d:90:96:ce:46:b5: 53:c2:3f:00:a7:f7:81:16:24:e0:e4:81:8c:57:52:34:31:a0: 86:e8:31:88:81:b7:34:bb:78:0a:0c:be:16:e7:f9:c8:9e:9a: 14:31:5a:68:6b:13:bc:fe:58:4e:e4:85:82:f2:d8:99:bc:d3: 4e:20:4e:35:95:a0:a4:28:c6:40:15:61:20:f2:32:28:4a:ed: cd:e8:64:60:04:46:c0:c4:ba:7b:4b:e3:15:21:f7:c9:b0:de: f3:c9:3c:9e:bf:5c:6f:c1:20:29:d3:78:c3:46:fc:dd:06:b2: 8e:8e:b5:3f:62:46:c6:4c:f7:99:4f:4d:ca:d8:a5:66:c1:fd: d2:bd:09:e0:61:fb:73:13:ca:77:a1:cb:cb:97:9c:75:79:6a: b9:86:e1:bf:43:c3:bf:e8:fe:96:09:0d:61:9f:31:62:59:cc: c7:c5:48:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1QUExMTAvBgNVBAUTKDE2QzAxRDlDQTBGRkJFRkFFMEJCMDEwRTUxNDQ1MDdB RUE0MTBEMDMwHhcNMjQwNTE4MjA1MTQwWhcNMjQwNTI1MjA1MTQwWjAYMRYwFAYD VQQDEw02NjQ5MTRkYy1lNjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMyR5LFq3FjiQyf1unbXdj7rIbBURemkkGZxhPnvyEK9d+ap3vg8utJOqKuv dnRwDeCG4ETGJA1aHT2JUPfXSlAvQ3YgOro0V7GqQoXZH06epuOhOEk1NQ+bhRyT 3raA9NId93KJf4+213WqBMyBpAR88U0aEsVHL0NT8PbKJrCsB+iWlYFdzaxYxS7y biQJ5IpwN20y4wmiFgGC6YZTsHl+8WImWlrUzmVDoDJjINckKsNfRwUJHgVOGUCv l1aEIym8w3f1IhNeI/7XHjSDNtWD5tE2ZJcAToaZeFArflaDehNvqbBz4btzI3K3 jZj1/5M7FF0a21I+w0Y61G0uFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9vpLAd f4Hjg6N53TswKUNsPCUvMB8GA1UdIwQYMBaAFBbAHZyg/7764LsBDlFEUHrqQQ0D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVBQS8zRUZBMjQxNDYy RTAxMUVBQTZENTlBMkNDNEY5QUUwMi9Gc0FkbktEX3Z2cmd1d0VPVVVSUWV1cEJE UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZzQWRuS0RfdnZyZ3V3RU9VVVJRZXVwQkRRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTVBQS8zRUZBMjQxNDYyRTAxMUVBQTZENTlBMkNDNEY5QUUwMi9Gc0FkbktEX3Z2 cmd1d0VPVVVSUWV1cEJEUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAvtFVZ9fdJlAAvl8Jx0bM9/WqOADzHUINKLWu1a8juXqT9wSLUZmQ 8RJ+JvI0NNSkwV2Zel5m0sgE6nCUesVuvpiddvss3s9FCpkTP8dpkKTnFhNNkJbO RrVTwj8Ap/eBFiTg5IGMV1I0MaCG6DGIgbc0u3gKDL4W5/nInpoUMVpoaxO8/lhO 5IWC8tiZvNNOIE41laCkKMZAFWEg8jIoSu3N6GRgBEbAxLp7S+MVIffJsN7zyTye v1xvwSAp03jDRvzdBrKOjrU/YkbGTPeZT03K2KVmwf3SvQngYftzE8p3ocvLl5x1 eWq5huG/Q8O/6P6WCQ1hnzFiWczHxUhE -----END CERTIFICATE-----Generated at Sat May 18 21:24:21 2024 by rpki-client on console-fra.rpki-client.org