$ rpki-client -vvf rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft File: fcRirz5ieKghiQWhs-fbN_LveoI.mft (raw, json) Hash identifier: wN7Ym0y0IfBB3hbJ6wEtR2VtDHlDqxacHdXX2IYTjvs= Subject key identifier: 54:89:8A:87:D7:1A:C8:A0:D7:CA:45:B6:A0:D8:D1:D7:CD:88:68:36 Authority key identifier: 7D:C4:62:AF:3E:62:78:A8:21:89:05:A1:B3:E7:DB:37:F2:EF:7A:82 Certificate issuer: /CN=A915B598/serialNumber=7DC462AF3E6278A8218905A1B3E7DB37F2EF7A82 Certificate serial: 0B89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft Manifest number: 0B83 Signing time: Sat 18 May 2024 19:20:07 +0000 Manifest this update: Sat 18 May 2024 19:20:06 +0000 Manifest next update: Sat 25 May 2024 19:20:06 +0000 Files and hashes: 1: fcRirz5ieKghiQWhs-fbN_LveoI.crl (hash: OU8TpBHA9bkavtwDI6WCzNUxSV3XzLpV+eac5jlYOQk=) 2: ED6D9A0C047211EAA9BAFB77C4F9AE02.roa (hash: jKTKGdkANXZVlrLeHH7OepSq70NIAtohryIKS45aoIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.crl rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2953 (0xb89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B598/serialNumber=7DC462AF3E6278A8218905A1B3E7DB37F2EF7A82 Validity Not Before: May 18 19:20:06 2024 GMT Not After : May 25 19:20:06 2024 GMT Subject: CN=6648ff67-b2db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:29:ca:a5:e9:ff:c6:37:c7:d3:d5:7f:5e:02: bf:ec:24:01:e7:bf:d1:df:a1:61:27:9e:df:96:ed: 75:14:dd:71:f8:2d:1d:b7:11:ef:dd:65:b3:35:79: bc:70:60:81:c2:a3:13:c8:a5:e3:34:a7:a3:15:9b: ab:57:8c:6b:c9:c1:d8:d2:6b:10:72:7f:d0:d6:7d: b0:35:ea:0f:6c:0e:f5:49:32:e2:b7:b3:f3:4b:d0: ba:18:36:a1:fa:c2:a9:c4:67:52:c4:b0:8d:57:d2: c2:02:0e:d1:9f:85:00:da:0e:3f:2b:b6:64:90:02: b2:42:49:b3:3c:92:4d:10:61:5f:82:31:47:9c:b4: 21:3c:70:5a:72:62:c5:43:e1:ba:f6:18:49:e5:07: e6:52:a3:44:7a:72:9e:2c:9a:ec:89:c5:29:e3:64: 36:b4:93:63:73:51:10:f8:97:98:b7:0e:b7:41:69: 38:73:57:8d:18:da:25:8c:00:74:3f:5c:1f:31:3e: 34:04:5a:be:11:30:e6:45:22:3e:f2:d3:79:b2:f8: 22:53:59:99:25:de:c2:64:ac:eb:ac:72:97:62:47: 19:fb:c7:b6:66:e4:ab:61:72:cd:1d:ff:16:7c:73: c0:d0:2e:0a:22:48:25:3c:64:68:70:bc:6f:b0:57: 01:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:89:8A:87:D7:1A:C8:A0:D7:CA:45:B6:A0:D8:D1:D7:CD:88:68:36 X509v3 Authority Key Identifier: keyid:7D:C4:62:AF:3E:62:78:A8:21:89:05:A1:B3:E7:DB:37:F2:EF:7A:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:14:e2:ac:89:ff:da:58:e3:40:0d:bd:2b:35:e5:4c:87:05: 33:8e:71:2b:5c:9b:af:6d:54:fe:fb:59:bf:1f:f9:7b:6d:e0: f7:b3:8b:1c:04:ed:55:ee:f5:eb:6c:4d:b9:23:03:4c:8e:55: 95:dd:bc:0a:48:52:9d:65:56:b1:e1:24:cf:78:44:a8:97:3b: 23:fc:41:50:74:7c:7f:4c:22:02:15:59:9b:36:5a:d1:83:58: 3f:e4:3a:c2:22:6e:5a:67:cd:03:d7:a4:cc:95:46:8a:3c:cf: 60:37:3b:b4:40:a3:e7:c4:61:f7:cc:d7:73:07:07:4d:f4:d9: 53:d0:73:57:04:22:fc:ec:df:10:29:7c:1d:d1:92:8d:84:a6: ad:ca:c6:b1:f4:36:76:f4:ce:78:3c:75:18:1c:21:c7:fb:92: 36:29:11:bf:d2:93:8c:15:9b:c3:7b:7e:87:b9:ba:d8:ee:b8: fb:a4:3a:c6:bd:bb:02:1c:a9:34:6c:32:0d:04:1f:12:ad:e4: 25:b7:a1:d3:d8:03:5b:d1:e4:97:25:43:09:56:0a:5f:98:0e: 87:ca:04:f1:ca:d4:c3:02:90:9a:03:e6:27:df:4f:8b:6d:fd: 58:02:32:f0:8f:c2:27:89:fa:86:22:32:50:e9:f8:7c:2e:3a: 0e:2a:5b:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1OTgxMTAvBgNVBAUTKDdEQzQ2MkFGM0U2Mjc4QTgyMTg5MDVBMUIzRTdEQjM3 RjJFRjdBODIwHhcNMjQwNTE4MTkyMDA2WhcNMjQwNTI1MTkyMDA2WjAYMRYwFAYD VQQDEw02NjQ4ZmY2Ny1iMmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsynKpen/xjfH09V/XgK/7CQB57/R36FhJ57flu11FN1x+C0dtxHv3WWzNXm8 cGCBwqMTyKXjNKejFZurV4xrycHY0msQcn/Q1n2wNeoPbA71STLit7PzS9C6GDah +sKpxGdSxLCNV9LCAg7Rn4UA2g4/K7ZkkAKyQkmzPJJNEGFfgjFHnLQhPHBacmLF Q+G69hhJ5QfmUqNEenKeLJrsicUp42Q2tJNjc1EQ+JeYtw63QWk4c1eNGNoljAB0 P1wfMT40BFq+ETDmRSI+8tN5svgiU1mZJd7CZKzrrHKXYkcZ+8e2ZuSrYXLNHf8W fHPA0C4KIkglPGRocLxvsFcBmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFSJiofX Gsig18pFtqDY0dfNiGg2MB8GA1UdIwQYMBaAFH3EYq8+YnioIYkFobPn2zfy73qC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU5OC84MTJDRTlENDA0 NzExMUVBQjZBRDg3NzVDNEY5QUUwMi9mY1Jpcno1aWVLZ2hpUVdocy1mYk5fTHZl b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZjUmlyejVpZUtnaGlRV2hzLWZiTl9MdmVvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjU5OC84MTJDRTlENDA0NzExMUVBQjZBRDg3NzVDNEY5QUUwMi9mY1Jpcno1aWVL Z2hpUVdocy1mYk5fTHZlb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7FOKsif/aWONADb0rNeVMhwUzjnErXJuvbVT++1m/H/l7beD3s4sc BO1V7vXrbE25IwNMjlWV3bwKSFKdZVax4STPeESolzsj/EFQdHx/TCICFVmbNlrR g1g/5DrCIm5aZ80D16TMlUaKPM9gNzu0QKPnxGH3zNdzBwdN9NlT0HNXBCL87N8Q KXwd0ZKNhKatysax9DZ29M54PHUYHCHH+5I2KRG/0pOMFZvDe36HubrY7rj7pDrG vbsCHKk0bDINBB8SreQlt6HT2ANb0eSXJUMJVgpfmA6HygTxytTDApCaA+Yn30+L bf1YAjLwj8InifqGIjJQ6fh8LjoOKluA -----END CERTIFICATE-----Generated at Sat May 18 19:56:05 2024 by rpki-client on console-fra.rpki-client.org