$ rpki-client -vvf rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft File: Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft (raw, json) Hash identifier: Z3S0eIhkwGqgXV/Ff18y+t7dCIFi86zZz5z34iC92PY= Subject key identifier: 81:37:80:3B:AB:24:48:45:FF:A7:D8:18:FE:C0:BA:21:D6:7B:FA:F9 Authority key identifier: 16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47 Certificate issuer: /CN=A916223F/serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247 Certificate serial: 0BBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft Manifest number: 0BB9 Signing time: Sat 18 May 2024 19:09:43 +0000 Manifest this update: Sat 18 May 2024 19:09:43 +0000 Manifest next update: Sat 25 May 2024 19:09:43 +0000 Files and hashes: 1: Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl (hash: /b1OKe7zfKHXObpN8faWnI44dTTAkSLejcgEsKB3Erk=) 2: 80392340F95D11E9ABF14387C4F9AE02.roa (hash: /karXHORf2+bzNF7YGlxUcjlijjurkc//gM0e/4KtEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3006 (0xbbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916223F/serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247 Validity Not Before: May 18 19:09:43 2024 GMT Not After : May 25 19:09:43 2024 GMT Subject: CN=6648fcf7-2fb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f6:8a:30:b5:c5:4b:f6:87:00:3f:3a:48:ba: 95:21:41:03:5b:c1:27:a3:45:d0:66:26:3b:ee:87: f1:ff:ce:a7:0a:80:5c:c5:a3:8a:ba:ff:b0:8d:a4: b1:7a:71:cf:1d:9a:d7:d6:1a:8d:8c:cc:df:a4:ef: 18:bb:dd:55:eb:b7:04:c6:cc:b9:ae:71:2e:3e:7e: 61:4e:a0:dc:91:da:3f:b8:7a:7d:5c:8f:99:e0:eb: cc:36:64:08:1f:69:e9:c6:a8:8b:60:7a:53:29:4f: b8:64:fd:45:0c:27:ab:e3:c1:25:99:6b:b8:32:75: cf:4c:72:e6:2e:eb:33:84:5a:87:fe:b0:0e:5c:64: f7:22:64:a8:e3:94:1b:70:4b:ab:f2:e5:d8:e6:1a: 10:54:46:97:62:1d:50:57:6c:9e:da:99:54:1b:db: e1:0f:16:07:d2:6f:69:aa:02:8e:d3:88:cc:e8:c7: 8b:c6:54:af:78:e6:77:d6:c1:f6:ad:2b:3c:93:a3: 7a:23:24:6b:1e:08:c7:d7:8c:b4:f8:35:24:1e:fd: af:ae:76:32:ca:80:b3:12:10:46:47:ba:82:5f:d3: e6:c6:31:f8:2c:5f:78:97:f8:7c:44:ac:cd:41:5b: 81:b4:96:f0:d7:81:b1:19:32:dd:b2:49:8a:cd:7b: c7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:37:80:3B:AB:24:48:45:FF:A7:D8:18:FE:C0:BA:21:D6:7B:FA:F9 X509v3 Authority Key Identifier: keyid:16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:df:85:60:2c:b3:32:3b:0c:96:76:47:36:98:4c:6e:44:dc: 67:cb:0c:66:14:cf:fd:5c:77:17:3b:af:fa:0e:31:e7:1f:1e: c1:31:11:1b:94:bf:65:26:cc:33:12:a8:4a:3f:00:5f:bc:98: b4:ee:9f:82:eb:e5:59:0a:e1:0d:03:f5:27:13:08:f7:2b:16: 91:49:62:a3:77:4c:91:ee:41:f0:8e:75:75:32:da:d5:77:7e: 39:24:63:dd:83:7b:a5:14:02:07:6e:98:23:8a:59:dc:0d:8a: 55:92:bf:2e:5d:e2:e6:b9:37:5e:bf:f8:17:8b:6d:4d:c1:fd: fd:45:83:99:18:ea:b6:da:13:c6:bc:d7:65:58:28:f4:85:a7: ae:f8:69:89:7b:df:c0:ad:26:09:fd:c1:3a:bb:9c:8d:5a:1c: 11:18:da:e9:01:fa:16:f2:ac:85:d5:01:62:e8:53:fe:51:12: d2:4a:80:db:37:17:ac:6f:c3:73:a4:0e:fd:70:3a:9f:81:3a: 6b:39:06:a8:c9:c2:f6:4a:60:56:bc:29:07:da:d3:90:60:f9: 2c:d5:3c:d5:67:2c:7b:07:33:1d:a5:48:12:9a:55:05:59:3c: 84:c4:27:f8:a7:3a:55:a6:9d:ed:f9:d7:7f:4d:77:79:b1:88: 6a:a7:b4:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIyM0YxMTAvBgNVBAUTKDE2RURDODk1NkJDNDEzQzlDNTAyMTkyOEIwM0JDODUw RkM3RTcyNDcwHhcNMjQwNTE4MTkwOTQzWhcNMjQwNTI1MTkwOTQzWjAYMRYwFAYD VQQDEw02NjQ4ZmNmNy0yZmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqPaKMLXFS/aHAD86SLqVIUEDW8Eno0XQZiY77ofx/86nCoBcxaOKuv+wjaSx enHPHZrX1hqNjMzfpO8Yu91V67cExsy5rnEuPn5hTqDckdo/uHp9XI+Z4OvMNmQI H2npxqiLYHpTKU+4ZP1FDCer48ElmWu4MnXPTHLmLuszhFqH/rAOXGT3ImSo45Qb cEur8uXY5hoQVEaXYh1QV2ye2plUG9vhDxYH0m9pqgKO04jM6MeLxlSveOZ31sH2 rSs8k6N6IyRrHgjH14y0+DUkHv2vrnYyyoCzEhBGR7qCX9PmxjH4LF94l/h8RKzN QVuBtJbw14GxGTLdskmKzXvHBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIE3gDur JEhF/6fYGP7AuiHWe/r5MB8GA1UdIwQYMBaAFBbtyJVrxBPJxQIZKLA7yFD8fnJH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjIzRi80RUJGMjdCNkY5 NUMxMUU5QjYyNzIyODVDNEY5QUUwMi9GdTNJbFd2RUU4bkZBaGtvc0R2SVVQeC1j a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z1M0lsV3ZFRThuRkFoa29zRHZJVVB4LWNrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjIzRi80RUJGMjdCNkY5NUMxMUU5QjYyNzIyODVDNEY5QUUwMi9GdTNJbFd2RUU4 bkZBaGtvc0R2SVVQeC1ja2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAi34VgLLMyOwyWdkc2mExuRNxnywxmFM/9XHcXO6/6DjHnHx7BMREb lL9lJswzEqhKPwBfvJi07p+C6+VZCuENA/UnEwj3KxaRSWKjd0yR7kHwjnV1MtrV d345JGPdg3ulFAIHbpgjilncDYpVkr8uXeLmuTdev/gXi21Nwf39RYOZGOq22hPG vNdlWCj0haeu+GmJe9/ArSYJ/cE6u5yNWhwRGNrpAfoW8qyF1QFi6FP+URLSSoDb Nxesb8NzpA79cDqfgTprOQaoycL2SmBWvCkH2tOQYPks1TzVZyx7BzMdpUgSmlUF WTyExCf4pzpVpp3t+dd/TXd5sYhqp7SM -----END CERTIFICATE-----Generated at Sat May 18 19:56:05 2024 by rpki-client on console-fra.rpki-client.org