$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft File: Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft (raw, json) Hash identifier: 6i4BYadmcTiyjn/WG25yIoMW7zRxwDu9fpAt9J84iok= Subject key identifier: 39:F3:40:67:DF:9B:9F:1B:C0:3F:B3:8F:81:6F:05:60:02:2D:82:E8 Authority key identifier: 15:DF:79:A0:07:39:BC:39:B7:17:89:25:95:8D:FE:E9:9B:E0:0D:42 Certificate issuer: /CN=A916B0EA/serialNumber=15DF79A00739BC39B7178925958DFEE99BE00D42 Certificate serial: 0763 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft Manifest number: 12B9 Signing time: Sat 18 May 2024 19:36:04 +0000 Manifest this update: Sat 18 May 2024 19:36:03 +0000 Manifest next update: Sat 25 May 2024 19:36:03 +0000 Files and hashes: 1: Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl (hash: 0XXDTGpTaTXOb1HCBb/HjjZreLeFPdogeIiRwxf9sRc=) 2: 687DF56A8E2211EEB23A0C6CC4F9AE02.roa (hash: 8hNFjt6860Ps194YD3tqqE18VQShBpsbalp5nYV8/mo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1891 (0x763) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B0EA/serialNumber=15DF79A00739BC39B7178925958DFEE99BE00D42 Validity Not Before: May 18 19:36:03 2024 GMT Not After : May 25 19:36:03 2024 GMT Subject: CN=66490323-3f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d1:e6:04:a2:b0:3c:58:ed:94:2c:f0:02:2d: 6c:16:9d:58:6c:dc:72:d8:ae:46:75:ce:27:6a:85: ba:a0:9f:f5:f2:2d:6a:27:34:16:b7:7b:e5:8f:a5: 1c:d0:6e:a1:22:42:5f:3b:5f:bf:39:89:fd:26:19: 01:27:90:7e:7d:71:24:59:f0:ce:9f:79:9e:cb:ea: 62:05:62:c2:7c:f3:bd:11:9b:bd:0d:15:7c:7d:7e: 29:5f:77:d7:01:ee:57:aa:a2:87:18:ba:a6:76:4b: 5b:08:34:25:27:5e:54:12:ba:f8:a2:6c:32:01:81: 17:38:19:94:6d:17:fd:37:68:35:9b:36:fc:92:a7: eb:3a:70:8f:60:f9:d3:86:e1:84:b8:52:0d:2e:76: 4b:8c:ab:f3:7d:3c:dd:40:28:12:7d:37:e8:cd:50: 9e:19:23:a2:7f:65:be:84:1c:1c:8b:02:1a:0b:58: b0:5e:7c:25:7d:90:27:60:5b:bc:ce:4b:4c:30:fb: 1c:0c:61:16:e1:29:66:48:22:20:f4:09:fb:75:a7: 88:64:d8:7e:4a:f7:35:6a:c4:3e:50:31:05:e9:bb: 6d:ac:75:53:2f:66:a5:d2:94:12:01:84:ce:fe:b6: ed:59:19:9d:7a:94:31:75:68:38:7b:81:00:90:3a: 9c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F3:40:67:DF:9B:9F:1B:C0:3F:B3:8F:81:6F:05:60:02:2D:82:E8 X509v3 Authority Key Identifier: keyid:15:DF:79:A0:07:39:BC:39:B7:17:89:25:95:8D:FE:E9:9B:E0:0D:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:c7:5c:d7:3d:98:9d:67:ce:31:a6:97:11:33:e5:3b:7f:aa: 1c:a7:3e:4e:3e:d0:56:08:45:10:58:4e:4a:b7:11:35:45:07: 1b:a2:9e:d0:3f:2a:c4:ac:b4:8f:3c:1e:98:59:f8:26:05:5b: d1:94:aa:41:97:14:16:19:cf:dc:78:33:81:d0:f4:01:55:d2: 88:b1:01:e5:5e:4c:97:c6:68:ae:f7:e0:5d:78:6e:3d:1c:be: 50:d3:e6:93:62:7b:63:a4:a9:cb:fa:2c:0a:d7:96:55:5b:3d: ab:34:08:8a:5f:d0:ad:49:d1:d0:77:34:ab:ab:0e:86:e8:c6: e2:86:64:e1:2f:f9:aa:4b:3d:e9:c5:5f:fd:7d:60:08:38:c7: c9:6a:73:3c:69:77:a6:93:ed:50:10:0b:f5:74:94:95:09:59: ce:32:99:bf:14:bf:90:00:19:2b:b1:9c:1f:a3:52:bc:d6:3c: 91:c0:c1:7e:5f:1f:c7:02:b8:19:d4:8e:a3:7b:ce:81:67:7a: 36:3c:95:77:a2:13:4e:70:44:a2:08:07:83:db:2c:28:e4:b7: e8:37:78:8c:96:2e:11:62:f2:31:86:46:b0:7f:7d:19:eb:13: d6:12:50:3a:d1:ec:53:c1:fe:d5:72:c2:e1:5f:a0:9e:07:7c: e9:e5:0a:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIwRUExMTAvBgNVBAUTKDE1REY3OUEwMDczOUJDMzlCNzE3ODkyNTk1OERGRUU5 OUJFMDBENDIwHhcNMjQwNTE4MTkzNjAzWhcNMjQwNTI1MTkzNjAzWjAYMRYwFAYD VQQDEw02NjQ5MDMyMy0zZjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNHmBKKwPFjtlCzwAi1sFp1YbNxy2K5Gdc4naoW6oJ/18i1qJzQWt3vlj6Uc 0G6hIkJfO1+/OYn9JhkBJ5B+fXEkWfDOn3mey+piBWLCfPO9EZu9DRV8fX4pX3fX Ae5XqqKHGLqmdktbCDQlJ15UErr4omwyAYEXOBmUbRf9N2g1mzb8kqfrOnCPYPnT huGEuFINLnZLjKvzfTzdQCgSfTfozVCeGSOif2W+hBwciwIaC1iwXnwlfZAnYFu8 zktMMPscDGEW4SlmSCIg9An7daeIZNh+Svc1asQ+UDEF6bttrHVTL2al0pQSAYTO /rbtWRmdepQxdWg4e4EAkDqcxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnzQGff m58bwD+zj4FvBWACLYLoMB8GA1UdIwQYMBaAFBXfeaAHObw5txeJJZWN/umb4A1C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjBFQS80RDhFNDlCMDBC NzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9GZDk1b0FjNXZEbTNGNGtsbFkzLTZadmdE VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZkOTVvQWM1dkRtM0Y0a2xsWTMtNlp2Z0RVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjBFQS80RDhFNDlCMDBCNzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9GZDk1b0FjNXZE bTNGNGtsbFkzLTZadmdEVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUx1zXPZidZ84xppcRM+U7f6ocpz5OPtBWCEUQWE5KtxE1RQcbop7Q PyrErLSPPB6YWfgmBVvRlKpBlxQWGc/ceDOB0PQBVdKIsQHlXkyXxmiu9+BdeG49 HL5Q0+aTYntjpKnL+iwK15ZVWz2rNAiKX9CtSdHQdzSrqw6G6MbihmThL/mqSz3p xV/9fWAIOMfJanM8aXemk+1QEAv1dJSVCVnOMpm/FL+QABkrsZwfo1K81jyRwMF+ Xx/HArgZ1I6je86BZ3o2PJV3ohNOcESiCAeD2ywo5LfoN3iMli4RYvIxhkawf30Z 6xPWElA60exTwf7VcsLhX6CeB3zp5QqD -----END CERTIFICATE-----Generated at Sat May 18 20:48:19 2024 by rpki-client on console-fra.rpki-client.org