$ rpki-client -vvf rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft File: fBoPSOpDIx-jND1ZKCHvKejSsxs.mft (raw, json) Hash identifier: cc2W8UgPa0teuHmG6jVxsndxHsOM/jiHEKVQGAUEgNg= Subject key identifier: 29:BC:44:4C:36:09:0C:E2:6F:9F:42:BB:00:E9:E0:C5:54:91:FF:81 Authority key identifier: 7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B Certificate issuer: /CN=A91798AD/serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B Certificate serial: 1B74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft Manifest number: 1B33 Signing time: Sat 18 May 2024 16:42:01 +0000 Manifest this update: Sat 18 May 2024 16:42:00 +0000 Manifest next update: Sat 25 May 2024 16:42:00 +0000 Files and hashes: 1: fBoPSOpDIx-jND1ZKCHvKejSsxs.crl (hash: UjUAG8nltMG4ZqN2ChbPdnjoeEqJTy/6Ua1wnt00DMk=) 2: AD3B2582EF9A11EDA4E50366C4F9AE02.roa (hash: 9hP/dOJZ68J9wG9WujkuydAwcpbwE5GTRmYGdVkPk84=) 3: 98E30C12DCE411EDB446D65DC4F9AE02.roa (hash: 49FU6Pqskd0STwLV8L+AU1hOaoW163NMNfvwI6EbZ1I=) 4: 398B3186FE5111E6BCEC6E72C4F9AE02.roa (hash: qGMPhkXUvwPd3kty4wB7soxvYFhUVT8gwc1IiwWOXGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7028 (0x1b74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91798AD/serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B Validity Not Before: May 18 16:42:00 2024 GMT Not After : May 25 16:42:00 2024 GMT Subject: CN=6648da59-e879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c5:1c:4f:6b:9c:00:b3:a9:d9:0d:35:07:d7: 75:9b:6f:9a:9e:45:4b:67:7a:27:c2:3e:18:7c:a6: 75:87:a1:f5:24:85:44:05:7d:18:e5:fc:ed:c6:f9: 25:59:64:d9:f2:70:00:3f:ef:a7:c4:6a:ed:ee:97: ab:f6:7e:ee:8a:17:01:bc:22:be:a2:9a:12:0e:0c: e8:0b:bc:25:43:7b:62:07:43:b0:fa:19:fc:ac:47: 12:8f:c4:a8:62:d9:62:cd:14:c0:d0:77:2a:2a:4e: 5a:b7:e0:09:76:1e:cf:4e:18:35:ca:2b:d4:1e:01: a0:80:e3:f2:00:99:fe:a7:27:4a:4a:f4:b2:13:f9: 63:2d:bd:54:5d:5f:a3:82:bb:76:6f:73:7f:c8:44: 74:b2:21:f2:24:3b:d0:6d:8a:d5:7b:89:6b:4d:59: 29:04:53:0f:e6:fb:28:29:05:f8:10:85:74:13:b2: d4:d8:cf:e8:80:c1:47:c9:b1:ba:44:6b:f6:80:27: 72:ae:77:5a:70:70:cb:de:8e:bc:8d:bb:c2:25:8d: bd:ca:3c:e1:1a:3e:3f:48:00:9b:8d:87:bf:a5:1f: 2c:06:02:8c:35:32:0c:33:2c:56:42:b5:63:9d:b8: 5c:90:74:3c:ed:31:96:93:d5:f1:cc:f3:2e:53:a4: eb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:BC:44:4C:36:09:0C:E2:6F:9F:42:BB:00:E9:E0:C5:54:91:FF:81 X509v3 Authority Key Identifier: keyid:7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:23:62:1b:7b:29:97:e3:e0:12:8d:81:d1:d3:e5:0a:90:e7: 7f:a6:5e:c6:d5:fa:78:23:96:19:50:53:51:bc:60:bc:6e:53: 4d:e1:01:07:35:53:5c:ff:5c:77:90:e8:4d:ec:0e:0a:61:a8: 7e:89:4f:f1:68:69:96:ce:ef:78:33:e2:bb:4f:db:1c:d0:3b: 6c:e6:22:fa:52:a6:ff:b5:eb:89:4e:36:32:12:17:fb:75:5c: 14:5a:01:5c:d8:db:6a:ac:d2:41:de:39:6c:21:ca:ae:93:08: 20:ef:48:e7:77:6d:fa:3c:bd:d5:ab:8c:2d:34:9f:89:86:79: 0c:af:dc:56:f0:90:4d:74:6e:da:d5:a7:36:25:4b:bb:79:ac: 86:03:9b:be:58:89:41:bd:14:89:6a:16:16:67:84:ef:53:82: 84:18:99:e1:37:bf:c5:fa:08:df:e0:b1:7f:b6:16:ee:d8:d1: 21:63:09:33:a5:6c:3f:f8:c1:86:86:9b:c8:93:95:b3:49:95: d0:54:84:3f:87:f7:70:52:a5:27:a6:60:ba:79:f9:56:dd:7d: 29:55:49:c6:24:37:45:4d:06:c7:b9:f2:55:ed:4f:c1:8f:d7: ec:dc:e6:8b:52:4a:8b:fc:e7:9a:93:e7:82:6e:1c:e9:71:d8: 93:46:53:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk4QUQxMTAvBgNVBAUTKDdDMUEwRjQ4RUE0MzIzMUZBMzM0M0Q1OTI4MjFFRjI5 RThEMkIzMUIwHhcNMjQwNTE4MTY0MjAwWhcNMjQwNTI1MTY0MjAwWjAYMRYwFAYD VQQDEw02NjQ4ZGE1OS1lODc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcUcT2ucALOp2Q01B9d1m2+ankVLZ3onwj4YfKZ1h6H1JIVEBX0Y5fztxvkl WWTZ8nAAP++nxGrt7per9n7uihcBvCK+opoSDgzoC7wlQ3tiB0Ow+hn8rEcSj8So YtlizRTA0HcqKk5at+AJdh7PThg1yivUHgGggOPyAJn+pydKSvSyE/ljLb1UXV+j grt2b3N/yER0siHyJDvQbYrVe4lrTVkpBFMP5vsoKQX4EIV0E7LU2M/ogMFHybG6 RGv2gCdyrndacHDL3o68jbvCJY29yjzhGj4/SACbjYe/pR8sBgKMNTIMMyxWQrVj nbhckHQ87TGWk9XxzPMuU6TrnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCm8REw2 CQzib59CuwDp4MVUkf+BMB8GA1UdIwQYMBaAFHwaD0jqQyMfozQ9WSgh7yno0rMb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OThBRC83MEVGQjRBQ0ZF MkExMUU2OEYyQzVBMTNDNEY5QUUwMi9mQm9QU09wREl4LWpORDFaS0NIdktlalNz eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZCb1BTT3BESXgtak5EMVpLQ0h2S2VqU3N4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OThBRC83MEVGQjRBQ0ZFMkExMUU2OEYyQzVBMTNDNEY5QUUwMi9mQm9QU09wREl4 LWpORDFaS0NIdktlalNzeHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyI2IbeymX4+ASjYHR0+UKkOd/pl7G1fp4I5YZUFNRvGC8blNN4QEH NVNc/1x3kOhN7A4KYah+iU/xaGmWzu94M+K7T9sc0Dts5iL6Uqb/teuJTjYyEhf7 dVwUWgFc2NtqrNJB3jlsIcqukwgg70jnd236PL3Vq4wtNJ+JhnkMr9xW8JBNdG7a 1ac2JUu7eayGA5u+WIlBvRSJahYWZ4TvU4KEGJnhN7/F+gjf4LF/thbu2NEhYwkz pWw/+MGGhpvIk5WzSZXQVIQ/h/dwUqUnpmC6eflW3X0pVUnGJDdFTQbHufJV7U/B j9fs3OaLUkqL/Oeak+eCbhzpcdiTRlPj -----END CERTIFICATE-----Generated at Sat May 18 17:37:33 2024 by rpki-client on console-fra.rpki-client.org