$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft File: FiENxlKhYN7k5AFbvLQJ-odyRkA.mft (raw, json) Hash identifier: aLvqOFXh+LPPPkAuffsTyq4XWSVr/5UWXHQDBkLR8qQ= Subject key identifier: C2:6D:50:CF:BF:F4:3B:EC:03:B7:2A:36:03:B7:F9:A2:86:AD:B4:03 Authority key identifier: 16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40 Certificate issuer: /CN=A91983BD/serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640 Certificate serial: 33C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft Manifest number: 3738 Signing time: Sat 18 May 2024 14:40:49 +0000 Manifest this update: Sat 18 May 2024 14:40:49 +0000 Manifest next update: Sat 25 May 2024 14:40:49 +0000 Files and hashes: 1: FiENxlKhYN7k5AFbvLQJ-odyRkA.crl (hash: WoKM6tvXdNqrsyJDiRMjCRNxLb5XAB8l8V+YxMFXZdw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:40:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13252 (0x33c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983BD/serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640 Validity Not Before: May 18 14:40:49 2024 GMT Not After : May 25 14:40:49 2024 GMT Subject: CN=6648bdf1-4495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a0:2b:5b:51:18:49:e4:c9:dd:6d:04:f5:ca: 35:86:68:c3:4f:65:9a:2f:e1:31:14:00:55:fe:ea: 13:f5:b9:37:96:6e:2b:ff:c7:be:d4:63:ff:f7:4e: 67:1e:ee:38:32:f7:df:f9:22:fe:4a:a1:25:2e:d1: f7:b4:17:f3:03:99:5b:a6:0b:ec:85:0e:fb:f9:dc: d0:66:5f:d2:f9:2e:d6:75:c0:56:2a:76:c2:10:25: d4:7b:c7:84:4f:eb:10:f5:0a:50:b4:48:5a:b1:cf: b3:1e:f9:b1:22:19:92:74:a2:0e:d2:c2:49:71:c8: 28:05:9a:4a:97:87:b1:be:37:5f:49:4b:2b:6f:70: b1:72:9d:64:65:cf:68:48:09:ed:fd:35:6b:c2:dc: 32:db:7e:d6:5b:cb:a0:8f:f6:6d:24:64:76:4b:81: 09:f6:1c:23:75:c5:e6:77:1b:32:da:89:3d:d1:e7: 48:f0:99:34:a3:e7:4d:a0:18:c7:06:bb:9d:79:e8: 00:d9:d6:66:d7:af:30:0b:08:72:74:1e:7d:ab:4b: 69:0d:87:00:42:bf:08:66:a6:bd:ef:14:15:f3:16: eb:6d:0b:38:87:f3:fb:79:e5:0a:58:db:a2:1f:16: 83:f4:69:bb:d1:25:fe:3c:73:1d:4c:de:18:89:52: 8f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:6D:50:CF:BF:F4:3B:EC:03:B7:2A:36:03:B7:F9:A2:86:AD:B4:03 X509v3 Authority Key Identifier: keyid:16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:06:c5:a2:1f:f6:d7:12:06:46:ff:a9:2d:7d:ee:ad:e7:d6: d9:7b:bf:9f:b4:bd:09:db:83:31:88:f1:0e:7e:6b:30:e5:df: 05:58:47:94:2f:8d:73:c9:3e:8c:a1:32:fe:89:8e:51:50:7c: 75:70:26:44:b5:90:dd:57:dd:ef:83:8f:9a:3f:e5:35:39:b8: 2d:d9:0b:7b:97:e0:fb:5b:72:dc:c5:af:8c:7a:ea:3a:f5:e4: a0:d6:4e:0a:1f:aa:02:a1:38:c7:b5:9d:5e:44:f3:9a:8d:af: 52:bb:db:43:4e:04:bd:a5:17:69:d0:8d:da:05:5a:bf:01:97: 0f:94:0f:22:4a:d7:32:70:7f:ef:81:6b:d4:1c:17:61:6e:8c: 52:a2:33:25:27:64:90:06:d2:78:45:3a:73:c5:fb:83:86:05: 79:88:af:8f:36:4d:5c:64:1e:16:c8:fb:3d:7d:c1:d2:c6:ac: dd:cc:6e:14:77:5a:81:da:da:b0:c0:85:99:9b:e7:9f:10:93: 52:e8:aa:65:b9:45:b5:6d:d5:6c:cc:64:39:60:c0:43:49:5c: 3f:27:22:39:bb:1b:d1:d1:d5:4f:e2:dd:65:7e:5a:36:c5:0b: 95:18:02:b3:67:b7:59:d6:08:cd:d2:76:72:7d:01:1b:e9:5a: b7:74:b2:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQkQxMTAvBgNVBAUTKDE2MjEwREM2NTJBMTYwREVFNEU0MDE1QkJDQjQwOUZB ODc3MjQ2NDAwHhcNMjQwNTE4MTQ0MDQ5WhcNMjQwNTI1MTQ0MDQ5WjAYMRYwFAYD VQQDEw02NjQ4YmRmMS00NDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqArW1EYSeTJ3W0E9co1hmjDT2WaL+ExFABV/uoT9bk3lm4r/8e+1GP/905n Hu44Mvff+SL+SqElLtH3tBfzA5lbpgvshQ77+dzQZl/S+S7WdcBWKnbCECXUe8eE T+sQ9QpQtEhasc+zHvmxIhmSdKIO0sJJccgoBZpKl4exvjdfSUsrb3Cxcp1kZc9o SAnt/TVrwtwy237WW8ugj/ZtJGR2S4EJ9hwjdcXmdxsy2ok90edI8Jk0o+dNoBjH BrudeegA2dZm168wCwhydB59q0tpDYcAQr8IZqa97xQV8xbrbQs4h/P7eeUKWNui HxaD9Gm70SX+PHMdTN4YiVKP+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJtUM+/ 9DvsA7cqNgO3+aKGrbQDMB8GA1UdIwQYMBaAFBYhDcZSoWDe5OQBW7y0CfqHckZA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNCRC9CRTdDRDAyQTFE OEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9GaUVOeGxLaFlON2s1QUZidkxRSi1vZHlS a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZpRU54bEtoWU43azVBRmJ2TFFKLW9keVJrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNCRC9CRTdDRDAyQTFEOEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9GaUVOeGxLaFlO N2s1QUZidkxRSi1vZHlSa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKBsWiH/bXEgZG/6ktfe6t59bZe7+ftL0J24MxiPEOfmsw5d8FWEeU L41zyT6MoTL+iY5RUHx1cCZEtZDdV93vg4+aP+U1Obgt2Qt7l+D7W3Lcxa+Meuo6 9eSg1k4KH6oCoTjHtZ1eRPOaja9Su9tDTgS9pRdp0I3aBVq/AZcPlA8iStcycH/v gWvUHBdhboxSojMlJ2SQBtJ4RTpzxfuDhgV5iK+PNk1cZB4WyPs9fcHSxqzdzG4U d1qB2tqwwIWZm+efEJNS6KpluUW1bdVszGQ5YMBDSVw/JyI5uxvR0dVP4t1lflo2 xQuVGAKzZ7dZ1gjN0nZyfQEb6Vq3dLLX -----END CERTIFICATE-----Generated at Sat May 18 15:26:05 2024 by rpki-client on console-fra.rpki-client.org