$ rpki-client -vvf rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft File: Rfpu6-HepSLAREPPJSnpd5qY2I8.mft (raw, json) Hash identifier: LfPxXqwAInQxifRR0QzevYBo0+gmm6iKFNSpA7E1k4w= Subject key identifier: 9A:B5:16:3F:F2:40:3E:BB:23:1D:2C:B6:5B:21:18:92:04:56:49:AA Authority key identifier: 45:FA:6E:EB:E1:DE:A5:22:C0:44:43:CF:25:29:E9:77:9A:98:D8:8F Certificate issuer: /CN=A916E343/serialNumber=45FA6EEBE1DEA522C04443CF2529E9779A98D88F Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rfpu6-HepSLAREPPJSnpd5qY2I8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft Manifest number: 86 Signing time: Sun 19 May 2024 07:07:58 +0000 Manifest this update: Sun 19 May 2024 07:07:57 +0000 Manifest next update: Sun 26 May 2024 07:07:57 +0000 Files and hashes: 1: Rfpu6-HepSLAREPPJSnpd5qY2I8.crl (hash: j34gL1I+lkbQ1UqbCNqW6uBRJKyZnhaJt9BH7pFA3tQ=) 2: 798F13884BC511EE95462F4FC4F9AE02.roa (hash: Ba0ZZqEoTKVuNAjMC13r7fLSXJxSp0iKDhCqpyuXkAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.crl rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rfpu6-HepSLAREPPJSnpd5qY2I8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E343/serialNumber=45FA6EEBE1DEA522C04443CF2529E9779A98D88F Validity Not Before: May 19 07:07:57 2024 GMT Not After : May 26 07:07:57 2024 GMT Subject: CN=6649a54e-b88c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6d:81:23:41:62:7e:24:29:4c:1d:79:a3:73: 47:a5:8f:4d:e9:28:ac:a8:99:cb:96:44:46:61:b0: da:40:7d:81:a2:9e:53:c2:bf:39:9e:51:b2:df:73: 8f:92:01:3f:00:b8:d1:2f:fa:94:53:e0:06:95:00: 41:51:9d:83:6a:fc:e8:cc:30:b5:93:12:89:3e:21: 6c:a3:4f:b8:41:60:9d:ae:c4:57:a5:d9:b9:de:f5: f5:4d:67:9d:47:6f:de:2a:b3:7d:67:62:da:2d:0b: 7c:41:60:3f:25:31:18:49:d6:b3:32:48:1c:2c:d6: 60:df:87:a6:77:51:5c:8b:ef:6d:3b:4c:f8:82:b8: 23:e3:44:1a:8d:e6:ce:36:5a:71:32:a7:78:6e:4d: 5a:be:85:9d:c8:48:57:68:cf:dc:30:f7:31:0e:bd: 09:a6:99:c3:68:eb:93:10:2d:8a:7f:26:11:42:1a: f5:60:f8:96:a2:67:34:49:7e:eb:79:b2:90:51:0b: a3:34:e6:38:21:b1:e4:10:d0:f8:3b:34:ca:75:94: 86:f5:eb:37:11:14:77:4f:2b:1e:4a:0b:2a:b4:e6: 18:de:12:2f:52:4d:7f:dc:96:b4:c5:c0:8b:4e:d1: 00:65:fb:ff:dd:63:a7:2d:77:fe:23:0e:4d:59:43: 1a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B5:16:3F:F2:40:3E:BB:23:1D:2C:B6:5B:21:18:92:04:56:49:AA X509v3 Authority Key Identifier: keyid:45:FA:6E:EB:E1:DE:A5:22:C0:44:43:CF:25:29:E9:77:9A:98:D8:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rfpu6-HepSLAREPPJSnpd5qY2I8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:fc:2a:96:69:a0:92:69:80:3c:16:ea:7f:4b:55:a7:bd:0c: 43:53:aa:47:e6:69:e1:27:0f:12:10:76:3c:d9:04:64:a7:a8: bc:f0:fa:ba:10:01:59:59:c1:ae:f7:2c:75:6b:11:b5:12:52: 95:a9:c1:e1:37:51:d9:02:d5:bc:5d:fa:ff:10:59:c5:68:55: 47:d4:c0:9e:cc:32:0e:64:45:08:ec:9d:71:4a:9b:0d:7b:03: 27:ed:2d:7e:77:43:ab:63:46:ca:07:ef:da:01:69:32:71:ba: b4:7c:32:a2:8f:01:77:2c:45:6b:0e:0e:a3:62:5b:f5:00:a1: ae:4d:a9:e9:5a:63:2a:95:e9:30:80:50:fd:ef:6d:ce:8c:d3: 5c:f3:87:5e:80:6b:cd:19:53:7d:ec:23:b4:d7:e5:82:b3:b4: f7:46:f6:f5:06:ac:ef:79:92:14:24:64:c8:5a:9b:c1:f8:0f: 47:86:fa:43:66:69:c8:bc:68:f2:c7:63:71:08:28:24:af:a9: 1a:04:df:be:f9:cc:b4:2a:42:b9:d0:68:c1:36:64:8a:e8:20: f4:f5:0f:0c:9b:f5:40:55:39:dc:a2:ac:16:2d:f0:8c:89:d6: 6e:3f:57:35:34:ee:51:8c:9f:52:e8:9c:ea:8f:e8:c0:02:d2: fa:57:02:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUzNDMxMTAvBgNVBAUTKDQ1RkE2RUVCRTFERUE1MjJDMDQ0NDNDRjI1MjlFOTc3 OUE5OEQ4OEYwHhcNMjQwNTE5MDcwNzU3WhcNMjQwNTI2MDcwNzU3WjAYMRYwFAYD VQQDEw02NjQ5YTU0ZS1iODhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtW2BI0FifiQpTB15o3NHpY9N6SisqJnLlkRGYbDaQH2Bop5Twr85nlGy33OP kgE/ALjRL/qUU+AGlQBBUZ2DavzozDC1kxKJPiFso0+4QWCdrsRXpdm53vX1TWed R2/eKrN9Z2LaLQt8QWA/JTEYSdazMkgcLNZg34emd1Fci+9tO0z4grgj40QajebO NlpxMqd4bk1avoWdyEhXaM/cMPcxDr0JppnDaOuTEC2KfyYRQhr1YPiWomc0SX7r ebKQUQujNOY4IbHkEND4OzTKdZSG9es3ERR3TyseSgsqtOYY3hIvUk1/3Ja0xcCL TtEAZfv/3WOnLXf+Iw5NWUMaGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJq1Fj/y QD67Ix0stlshGJIEVkmqMB8GA1UdIwQYMBaAFEX6buvh3qUiwERDzyUp6XeamNiP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTM0My8wRDEwRjdCMjRC QzUxMUVFQjY2RTZENEVDNEY5QUUwMi9SZnB1Ni1IZXBTTEFSRVBQSlNucGQ1cVky STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JmcHU2LUhlcFNMQVJFUFBKU25wZDVxWTJJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTM0My8wRDEwRjdCMjRCQzUxMUVFQjY2RTZENEVDNEY5QUUwMi9SZnB1Ni1IZXBT TEFSRVBQSlNucGQ1cVkySTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm/CqWaaCSaYA8Fup/S1WnvQxDU6pH5mnhJw8SEHY82QRkp6i88Pq6 EAFZWcGu9yx1axG1ElKVqcHhN1HZAtW8Xfr/EFnFaFVH1MCezDIOZEUI7J1xSpsN ewMn7S1+d0OrY0bKB+/aAWkycbq0fDKijwF3LEVrDg6jYlv1AKGuTanpWmMqlekw gFD9723OjNNc84degGvNGVN97CO01+WCs7T3Rvb1BqzveZIUJGTIWpvB+A9HhvpD ZmnIvGjyx2NxCCgkr6kaBN+++cy0KkK50GjBNmSK6CD09Q8Mm/VAVTncoqwWLfCM idZuP1c1NO5RjJ9S6Jzqj+jAAtL6VwIn -----END CERTIFICATE-----Generated at Sun May 19 08:25:02 2024 by rpki-client on console-ams.rpki-client.org