$ rpki-client -vvf rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft File: FX3bMj02U1BOMIJOaeDbA3U6aM4.mft (raw, json) Hash identifier: wib/bjHv6ODOSU2ztZhLMB+LQldAy8nPufphGKznK50= Subject key identifier: 7D:FC:FB:F6:AB:5C:C6:B9:13:74:FD:B3:8A:72:6B:25:75:6F:2B:31 Authority key identifier: 15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE Certificate issuer: /CN=A91480B2/serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft Manifest number: 74 Signing time: Sun 19 May 2024 07:25:55 +0000 Manifest this update: Sun 19 May 2024 07:25:55 +0000 Manifest next update: Sun 26 May 2024 07:25:55 +0000 Files and hashes: 1: FX3bMj02U1BOMIJOaeDbA3U6aM4.crl (hash: N5tPmyQIgTG3OOEo/Ue9UQZZTQCfwwpiU8N3AjBPZZg=) 2: 93151D5668F911EE9916D146C4F9AE02.roa (hash: 0qsmBJg5UUGr6e1w6S/R56pfS95Y3X7V8TkVGk6lD/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91480B2/serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE Validity Not Before: May 19 07:25:55 2024 GMT Not After : May 26 07:25:55 2024 GMT Subject: CN=6649a983-400c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a3:3a:f9:88:58:80:13:e7:e8:85:c0:25:f2: 72:f5:73:4d:56:36:72:bc:06:a9:16:46:40:0f:86: 5f:d8:c8:b5:1b:c6:63:79:ab:58:6d:16:f6:2f:83: 88:c7:fc:77:f8:7a:d2:a1:56:bc:33:a7:11:6a:36: 04:c4:bd:da:c0:e1:e7:1a:ec:26:0e:97:68:8b:0f: 87:a6:92:3d:b9:29:61:4c:9b:af:02:d4:57:19:56: a5:6c:79:48:d3:3c:0b:22:38:81:f6:cb:53:ac:70: b4:af:88:47:80:1a:7c:e0:1b:99:82:a9:3a:91:de: e0:d0:2b:21:e2:b4:97:af:0b:22:19:d0:b4:93:b6: ab:c8:95:ae:d3:59:40:e2:f5:45:56:30:13:e6:6b: 02:9f:e6:bb:db:fc:c8:3e:6c:69:d9:b5:db:d0:60: 0e:30:37:04:27:a6:4c:7f:47:ca:f6:1c:54:82:66: 1f:0b:d7:aa:8b:99:ef:70:80:3d:ba:5d:1d:f2:33: 0b:2c:3c:58:3c:9c:3e:a4:6a:c8:45:60:05:ff:cf: e4:3f:73:bf:c1:a5:a7:86:80:8e:6d:cb:55:5a:95: 4d:4b:8c:a0:65:cc:9d:ae:3c:ca:28:7b:2b:4a:a0: d5:90:23:ef:77:47:38:ac:8d:f7:fd:eb:55:1d:04: 6a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:FC:FB:F6:AB:5C:C6:B9:13:74:FD:B3:8A:72:6B:25:75:6F:2B:31 X509v3 Authority Key Identifier: keyid:15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:df:fd:7d:9a:43:b5:fd:42:d6:85:ee:9e:07:cb:2a:1c:ea: ae:33:c8:58:82:12:0e:99:25:9c:f5:5a:b1:f4:af:fb:8c:d1: b4:a4:b1:6d:3f:07:88:92:7b:3d:91:c5:3f:72:12:c0:8b:09: 72:bc:72:65:e2:13:f6:8e:cd:b8:8e:56:1f:40:e7:ff:2f:f7: 17:11:00:3e:b7:7b:ea:2b:31:a0:a9:bd:a0:13:a6:9f:c1:ff: 2b:39:8d:32:5a:a4:d8:31:c8:dc:a3:14:dd:96:fe:fc:e3:4b: c6:f8:97:24:42:8c:b7:3e:68:cd:85:64:63:44:d8:20:fa:14: 0f:5f:de:09:30:5a:29:da:8a:d8:a1:08:bb:b4:b0:c5:89:73: c7:d8:dd:8b:04:94:7d:5f:cd:aa:24:88:60:cf:1c:38:8d:d0: c5:46:96:fb:76:62:53:e3:8b:46:98:f9:58:42:f7:1b:7a:4e: ff:74:ab:74:56:6c:0b:ce:14:19:73:d6:1a:44:b2:5c:2a:48: a9:ec:7a:e0:ba:7a:05:1d:01:2f:0b:a1:aa:9e:f1:f0:b4:df: 43:01:07:e1:70:c5:b2:cc:63:30:de:d3:24:b9:a9:2f:ad:c6: 35:8c:90:b6:c4:5e:08:ed:52:71:3c:ce:7e:93:f0:41:2c:db: 38:6b:c8:ff -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 ODBCMjExMC8GA1UEBRMoMTU3RERCMzIzRDM2NTM1MDRFMzA4MjRFNjlFMERCMDM3 NTNBNjhDRTAeFw0yNDA1MTkwNzI1NTVaFw0yNDA1MjYwNzI1NTVaMBgxFjAUBgNV BAMTDTY2NDlhOTgzLTQwMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLozr5iFiAE+fohcAl8nL1c01WNnK8BqkWRkAPhl/YyLUbxmN5q1htFvYvg4jH /Hf4etKhVrwzpxFqNgTEvdrA4eca7CYOl2iLD4emkj25KWFMm68C1FcZVqVseUjT PAsiOIH2y1OscLSviEeAGnzgG5mCqTqR3uDQKyHitJevCyIZ0LSTtqvIla7TWUDi 9UVWMBPmawKf5rvb/Mg+bGnZtdvQYA4wNwQnpkx/R8r2HFSCZh8L16qLme9wgD26 XR3yMwssPFg8nD6kashFYAX/z+Q/c7/BpaeGgI5ty1ValU1LjKBlzJ2uPMooeytK oNWQI+93Rzisjff961UdBGoRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUffz79qtc xrkTdP2zinJrJXVvKzEwHwYDVR0jBBgwFoAUFX3bMj02U1BOMIJOaeDbA3U6aM4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4MEIyLzQxQ0JCNjRFNjhG OTExRUVBRDZDRjYyRUM0RjlBRTAyL0ZYM2JNajAyVTFCT01JSk9hZURiQTNVNmFN NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRlgzYk1qMDJVMUJPTUlKT2FlRGJBM1U2YU00LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4 MEIyLzQxQ0JCNjRFNjhGOTExRUVBRDZDRjYyRUM0RjlBRTAyL0ZYM2JNajAyVTFC T01JSk9hZURiQTNVNmFNNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB3f/X2aQ7X9QtaF7p4Hyyoc6q4zyFiCEg6ZJZz1WrH0r/uM0bSksW0/ B4iSez2RxT9yEsCLCXK8cmXiE/aOzbiOVh9A5/8v9xcRAD63e+orMaCpvaATpp/B /ys5jTJapNgxyNyjFN2W/vzjS8b4lyRCjLc+aM2FZGNE2CD6FA9f3gkwWinaitih CLu0sMWJc8fY3YsElH1fzaokiGDPHDiN0MVGlvt2YlPji0aY+VhC9xt6Tv90q3RW bAvOFBlz1hpEslwqSKnseuC6egUdAS8Loaqe8fC030MBB+FwxbLMYzDe0yS5qS+t xjWMkLbEXgjtUnE8zn6T8EEs2zhryP8= -----END CERTIFICATE-----Generated at Sun May 19 08:25:00 2024 by rpki-client on console-ams.rpki-client.org