$ rpki-client -vvf rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft File: Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft (raw, json) Hash identifier: Z562j/uOyeW+isC5ls+cTZ2SxXLiHn3fggxFx8zA4zA= Subject key identifier: CA:45:87:63:27:08:1B:26:4B:3C:A2:9B:E0:0E:50:01:0B:8C:DB:C1 Authority key identifier: 17:0E:9C:76:76:43:C3:C1:F6:05:79:40:86:48:A3:F0:DA:84:04:5A Certificate issuer: /CN=A917EFB8/serialNumber=170E9C767643C3C1F60579408648A3F0DA84045A Certificate serial: 33CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft Manifest number: 33C8 Signing time: Sat 18 May 2024 14:56:55 +0000 Manifest this update: Sat 18 May 2024 14:56:55 +0000 Manifest next update: Sat 25 May 2024 14:56:55 +0000 Files and hashes: 1: Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl (hash: tiaxfuwsIBEfpMSrWNs61I5cQRzlMGgLOnCWqKY/S/I=) 2: E68E0FD4077B11EB98CA5D1CC4F9AE02.roa (hash: do/t1hxLNAObKeP+h7lIyAYLzs1i37SVx22K4ntYzxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13261 (0x33cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EFB8/serialNumber=170E9C767643C3C1F60579408648A3F0DA84045A Validity Not Before: May 18 14:56:55 2024 GMT Not After : May 25 14:56:55 2024 GMT Subject: CN=6648c1b7-f5d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d3:9f:a2:0f:b2:ec:37:99:d5:96:8f:6d:10: b4:56:2b:68:db:15:05:89:f9:9c:c5:63:f1:19:c4: 42:8c:91:e8:62:5d:e4:c0:f1:79:7e:bf:2d:02:75: 4e:43:8e:e8:82:ad:57:3c:db:39:63:30:52:0d:f3: d7:31:eb:9e:54:20:44:b0:54:1c:15:1a:0d:1f:45: 95:2f:16:62:2f:b8:49:75:d7:ba:97:30:c5:fc:d6: 17:9e:2a:93:13:74:00:b7:a3:d2:46:aa:35:93:d9: b6:2f:e5:16:ca:8c:09:19:c2:2b:d4:d2:e2:38:30: b3:ce:b0:8c:9b:61:4a:e7:21:b1:ad:06:07:46:6b: f0:af:ae:30:d0:5b:a1:c3:0a:0c:41:54:7c:06:ea: 31:07:fa:67:1d:b7:4b:2a:a7:6e:4a:c3:ae:50:de: 68:59:95:b7:8b:d7:c3:ad:51:68:31:3c:39:e7:d6: 37:d8:36:95:81:8f:ee:5a:74:22:f3:f5:fb:fc:9c: a9:a1:b0:66:3f:15:55:48:c4:24:63:6a:83:60:f5: 8f:87:c6:8d:b7:f6:4f:35:f0:01:8d:c1:14:18:c0: 4e:32:17:fc:d6:57:ad:0e:5f:86:e5:c7:05:f5:7c: 8e:f3:d9:22:82:f3:a3:8a:09:2e:01:0a:6b:9c:cc: c5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:45:87:63:27:08:1B:26:4B:3C:A2:9B:E0:0E:50:01:0B:8C:DB:C1 X509v3 Authority Key Identifier: keyid:17:0E:9C:76:76:43:C3:C1:F6:05:79:40:86:48:A3:F0:DA:84:04:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:1d:74:4a:a6:07:9c:9a:31:26:a0:a0:a2:08:57:11:a1:01: 4d:b8:f1:d5:13:91:06:5d:37:5a:01:2c:d7:cf:de:45:3b:97: 67:ad:9c:e0:dd:a1:cd:59:db:04:7b:41:16:b0:67:85:c6:fc: 9c:2c:11:57:c5:75:72:b4:a0:fe:a0:93:cf:fa:d7:ef:ee:74: e9:a5:fd:bb:07:88:dd:76:79:a7:2d:12:ea:68:4c:07:33:31: ec:0a:1e:8b:01:33:57:38:d1:6d:9f:84:f9:aa:ea:53:7b:fd: 80:fd:c3:13:dd:a8:6e:01:c2:5b:92:b5:24:f2:a7:c5:04:fe: d1:d9:a9:f3:67:11:c6:75:ca:33:76:a6:e4:b4:b8:20:ce:fa: b6:1a:29:11:71:37:bd:d0:25:05:63:1d:09:6e:b1:6c:14:30: f8:6c:60:63:92:90:b6:f5:c5:46:6c:fc:8d:3f:35:33:90:cd: 31:d9:d3:a4:fa:51:72:50:34:e3:b5:98:2a:d2:eb:6a:a1:a5: 0d:e4:89:f5:0f:be:db:55:82:70:59:f0:98:0c:16:de:47:03: ce:22:0d:05:b7:5c:d3:e9:d8:18:88:11:36:89:47:7e:53:f1: 96:c1:af:da:8b:56:2d:cf:3a:52:80:79:bc:3c:a8:b4:95:c1: 84:5a:44:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VGQjgxMTAvBgNVBAUTKDE3MEU5Qzc2NzY0M0MzQzFGNjA1Nzk0MDg2NDhBM0Yw REE4NDA0NUEwHhcNMjQwNTE4MTQ1NjU1WhcNMjQwNTI1MTQ1NjU1WjAYMRYwFAYD VQQDEw02NjQ4YzFiNy1mNWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAotOfog+y7DeZ1ZaPbRC0Vito2xUFifmcxWPxGcRCjJHoYl3kwPF5fr8tAnVO Q47ogq1XPNs5YzBSDfPXMeueVCBEsFQcFRoNH0WVLxZiL7hJdde6lzDF/NYXniqT E3QAt6PSRqo1k9m2L+UWyowJGcIr1NLiODCzzrCMm2FK5yGxrQYHRmvwr64w0Fuh wwoMQVR8BuoxB/pnHbdLKqduSsOuUN5oWZW3i9fDrVFoMTw559Y32DaVgY/uWnQi 8/X7/JypobBmPxVVSMQkY2qDYPWPh8aNt/ZPNfABjcEUGMBOMhf81letDl+G5ccF 9XyO89kigvOjigkuAQprnMzFMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMpFh2Mn CBsmSzyim+AOUAELjNvBMB8GA1UdIwQYMBaAFBcOnHZ2Q8PB9gV5QIZIo/DahARa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUZCOC9EOTgwQTE3MjFE OTUxMUUyOTIxNTBFN0UwOEIwMkNEMi9GdzZjZG5aRHc4SDJCWGxBaGtpajhOcUVC Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z3NmNkblpEdzhIMkJYbEFoa2lqOE5xRUJGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUZCOC9EOTgwQTE3MjFEOTUxMUUyOTIxNTBFN0UwOEIwMkNEMi9GdzZjZG5aRHc4 SDJCWGxBaGtpajhOcUVCRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFHXRKpgecmjEmoKCiCFcRoQFNuPHVE5EGXTdaASzXz95FO5dnrZzg 3aHNWdsEe0EWsGeFxvycLBFXxXVytKD+oJPP+tfv7nTppf27B4jddnmnLRLqaEwH MzHsCh6LATNXONFtn4T5qupTe/2A/cMT3ahuAcJbkrUk8qfFBP7R2anzZxHGdcoz dqbktLggzvq2GikRcTe90CUFYx0JbrFsFDD4bGBjkpC29cVGbPyNPzUzkM0x2dOk +lFyUDTjtZgq0utqoaUN5In1D77bVYJwWfCYDBbeRwPOIg0Ft1zT6dgYiBE2iUd+ U/GWwa/ai1YtzzpSgHm8PKi0lcGEWkSa -----END CERTIFICATE-----Generated at Sat May 18 15:26:05 2024 by rpki-client on console-fra.rpki-client.org