$ rpki-client -vvf rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft File: FGXcLLcCU-31FM1DdyZi_zu49uA.mft (raw, json) Hash identifier: AuZCzm/A5u09DSW/7uTh29W5QMcui6x2+ImVY+7evDo= Subject key identifier: 29:52:46:88:A2:FD:D3:55:A9:4D:05:DD:6E:89:3F:64:C3:71:0F:94 Authority key identifier: 14:65:DC:2C:B7:02:53:ED:F5:14:CD:43:77:26:62:FF:3B:B8:F6:E0 Certificate issuer: /CN=A915280B/serialNumber=1465DC2CB70253EDF514CD43772662FF3BB8F6E0 Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGXcLLcCU-31FM1DdyZi_zu49uA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft Manifest number: 0211 Signing time: Sun 19 May 2024 04:09:24 +0000 Manifest this update: Sun 19 May 2024 04:09:24 +0000 Manifest next update: Sun 26 May 2024 04:09:24 +0000 Files and hashes: 1: FGXcLLcCU-31FM1DdyZi_zu49uA.crl (hash: nuJ/xBuABdniNQVg4nrVu6ltoYY8+lzgZhlAiJF+fxo=) 2: 27EECF18EDF811ECBCAF5567C4F9AE02.roa (hash: qXRgCfqpmS5YPx0WgYTdYL/Q4Pr+cX6tJxmAtbbAn58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.crl rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGXcLLcCU-31FM1DdyZi_zu49uA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915280B/serialNumber=1465DC2CB70253EDF514CD43772662FF3BB8F6E0 Validity Not Before: May 19 04:09:24 2024 GMT Not After : May 26 04:09:24 2024 GMT Subject: CN=66497b74-7301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2b:4e:59:44:66:87:5d:8c:b9:b3:d5:e1:51: ca:80:20:9e:84:ed:c7:0d:fb:72:2c:2d:08:cf:05: 7b:b6:23:96:e3:33:49:50:5f:86:08:3e:59:5d:b6: d4:c0:0b:f5:e1:ca:a2:2f:c4:fd:e6:26:3e:b3:94: a3:ae:36:b0:cd:e3:3c:b6:99:05:71:08:a3:28:68: 23:57:27:7a:2f:c2:bd:92:ac:f7:3d:8a:cc:62:32: e4:1a:05:a8:d3:60:71:36:96:d5:f7:85:cc:0d:ff: 7f:45:c3:a7:60:5e:c6:2f:3d:cf:4a:e0:10:12:b2: fd:62:a5:9d:cd:d8:53:ec:8f:33:dc:a5:ba:6e:57: 47:cd:ea:f9:15:42:ee:e7:45:44:ec:0a:97:c8:f4: ad:84:4f:a4:68:53:17:bf:cf:d0:c1:c6:29:84:ef: dc:6e:e9:2d:1f:63:8d:8b:06:ef:fc:b2:c0:ef:89: 19:b3:64:89:30:bd:f1:35:52:49:a4:68:7d:e0:17: c9:00:9b:71:65:da:39:77:2b:1a:49:cb:af:37:48: 79:2f:3c:48:5d:72:34:c3:eb:0c:35:1d:d6:4f:8c: 2d:2b:e1:96:53:0c:86:42:01:f4:68:a4:c1:3f:bd: 99:86:85:3c:99:6b:e8:b1:9a:29:cd:1e:02:9e:0e: 6d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:52:46:88:A2:FD:D3:55:A9:4D:05:DD:6E:89:3F:64:C3:71:0F:94 X509v3 Authority Key Identifier: keyid:14:65:DC:2C:B7:02:53:ED:F5:14:CD:43:77:26:62:FF:3B:B8:F6:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGXcLLcCU-31FM1DdyZi_zu49uA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915280B/97BC1DB8EDEF11EC896AE740C4F9AE02/FGXcLLcCU-31FM1DdyZi_zu49uA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:bf:f0:b1:83:0f:5f:af:be:6c:52:48:6b:e8:bb:44:24:3e: 7e:de:69:9b:78:10:97:3d:a7:c7:59:3f:74:8d:41:36:3b:c7: bb:c0:08:21:46:12:4e:4b:c0:56:aa:1a:f3:27:1d:f5:f6:95: 5c:6e:ee:b5:aa:fb:d2:37:d3:54:38:14:03:65:33:a2:b6:3f: 9d:c8:7e:01:8c:c1:47:03:50:0d:fa:46:c5:47:7f:47:e5:31: bc:fc:2d:c1:57:dc:10:2e:f9:ae:e3:a0:16:16:7c:cd:af:23: 7d:1f:0f:ee:1e:8c:0c:57:4e:f5:3e:6c:4f:19:75:bc:90:8e: 67:c9:c1:f2:63:e4:7e:75:e2:a9:ab:67:f0:91:3d:69:70:04: 56:31:04:98:68:c6:f4:81:af:2e:4f:e7:cb:d6:d1:3e:6b:37: a0:ef:7e:49:20:cc:e4:98:1a:53:d3:dc:92:0c:af:7a:4a:d2: 1b:cf:3c:11:93:1f:db:36:20:27:85:3a:6b:74:3a:39:4c:57: 2c:b9:b6:2d:59:9b:fb:48:44:f9:7a:1a:ed:73:c9:8a:4c:34: 47:71:56:27:c9:d8:d3:7b:80:bf:bf:a1:2c:b5:34:2d:3b:65: 63:c4:d7:a3:41:49:c1:48:54:ab:6c:2b:0c:b5:e0:1c:f6:50: 4c:d3:90:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI4MEIxMTAvBgNVBAUTKDE0NjVEQzJDQjcwMjUzRURGNTE0Q0Q0Mzc3MjY2MkZG M0JCOEY2RTAwHhcNMjQwNTE5MDQwOTI0WhcNMjQwNTI2MDQwOTI0WjAYMRYwFAYD VQQDEw02NjQ5N2I3NC03MzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCtOWURmh12MubPV4VHKgCCehO3HDftyLC0IzwV7tiOW4zNJUF+GCD5ZXbbU wAv14cqiL8T95iY+s5SjrjawzeM8tpkFcQijKGgjVyd6L8K9kqz3PYrMYjLkGgWo 02BxNpbV94XMDf9/RcOnYF7GLz3PSuAQErL9YqWdzdhT7I8z3KW6bldHzer5FULu 50VE7AqXyPSthE+kaFMXv8/QwcYphO/cbuktH2ONiwbv/LLA74kZs2SJML3xNVJJ pGh94BfJAJtxZdo5dysaScuvN0h5LzxIXXI0w+sMNR3WT4wtK+GWUwyGQgH0aKTB P72ZhoU8mWvosZopzR4Cng5tOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClSRoii /dNVqU0F3W6JP2TDcQ+UMB8GA1UdIwQYMBaAFBRl3Cy3AlPt9RTNQ3cmYv87uPbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjgwQi85N0JDMURCOEVE RUYxMUVDODk2QUU3NDBDNEY5QUUwMi9GR1hjTExjQ1UtMzFGTTFEZHlaaV96dTQ5 dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZHWGNMTGNDVS0zMUZNMURkeVppX3p1NDl1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjgwQi85N0JDMURCOEVERUYxMUVDODk2QUU3NDBDNEY5QUUwMi9GR1hjTExjQ1Ut MzFGTTFEZHlaaV96dTQ5dUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpv/Cxgw9fr75sUkhr6LtEJD5+3mmbeBCXPafHWT90jUE2O8e7wAgh RhJOS8BWqhrzJx319pVcbu61qvvSN9NUOBQDZTOitj+dyH4BjMFHA1AN+kbFR39H 5TG8/C3BV9wQLvmu46AWFnzNryN9Hw/uHowMV071PmxPGXW8kI5nycHyY+R+deKp q2fwkT1pcARWMQSYaMb0ga8uT+fL1tE+azeg735JIMzkmBpT09ySDK96StIbzzwR kx/bNiAnhTprdDo5TFcsubYtWZv7SET5ehrtc8mKTDRHcVYnydjTe4C/v6EstTQt O2VjxNejQUnBSFSrbCsMteAc9lBM05Bq -----END CERTIFICATE-----Generated at Sun May 19 05:08:04 2024 by rpki-client on console-ams.rpki-client.org