$ rpki-client -vvf rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.mft File: FL-reUJuPSK-w_xh7kMv6ggnKUY.mft (raw, json) Hash identifier: q7JIU5NZ4+IQe0XkcyF9JZya4b+0MxYhpwzVKg6pYM8= Subject key identifier: B0:7F:27:EC:1B:19:14:20:20:28:F1:7C:52:ED:F8:40:BF:E5:15:2A Authority key identifier: 14:BF:AB:79:42:6E:3D:22:BE:C3:FC:61:EE:43:2F:EA:08:27:29:46 Certificate issuer: /CN=A919F46B/serialNumber=14BFAB79426E3D22BEC3FC61EE432FEA08272946 Certificate serial: 0EFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FL-reUJuPSK-w_xh7kMv6ggnKUY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.mft Manifest number: 0EF3 Signing time: Thu 30 May 2024 18:36:48 +0000 Manifest this update: Thu 30 May 2024 18:36:47 +0000 Manifest next update: Thu 06 Jun 2024 18:36:47 +0000 Files and hashes: 1: FL-reUJuPSK-w_xh7kMv6ggnKUY.crl (hash: na95RA1qbxg/ElvADHE3+DSJbdU7qPYvNSuEcRID9UI=) 2: CB6BD978592811E9AD7CEF21C4F9AE02.roa (hash: d3iKBN/pQBRUxq2eDgsI/qAywHYud8F3niAf0eyxsaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.crl rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FL-reUJuPSK-w_xh7kMv6ggnKUY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 18:36:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3834 (0xefa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F46B/serialNumber=14BFAB79426E3D22BEC3FC61EE432FEA08272946 Validity Not Before: May 30 18:36:47 2024 GMT Not After : Jun 6 18:36:47 2024 GMT Subject: CN=6658c740-8dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d6:e8:e8:a9:18:73:83:d0:7d:3e:2f:82:97: e2:48:3e:05:66:51:13:da:da:53:35:f7:19:f0:c9: 7a:7d:bd:b3:4d:c0:4e:d2:68:6d:bb:17:47:fd:3e: 23:70:75:42:de:46:da:ab:ad:e2:ad:c0:bf:09:d6: 55:83:53:69:ec:fc:1f:7e:0a:48:f8:2c:ca:1a:c6: 87:bd:26:20:97:29:7f:ce:70:cb:29:39:76:79:1c: 4f:f3:5f:b4:0c:58:b1:7e:0a:a6:24:de:97:c1:8f: 79:f8:49:f1:b7:08:14:ec:9f:99:8c:c3:19:63:4d: 2b:38:03:9e:15:d2:a0:b3:5c:d5:06:e2:31:4d:6d: 7e:c5:b8:73:2c:ae:c7:8e:59:90:6a:07:6e:fd:d0: 05:b4:da:f7:eb:c7:6d:e9:4b:ee:81:d2:39:eb:d8: c7:dd:bc:62:83:b0:58:44:88:3e:dc:2c:ca:e1:5b: 48:b2:7b:d7:8f:02:9d:73:d0:cb:cc:95:ce:36:0d: 01:37:a6:01:c5:ad:81:d3:ef:fa:85:35:cc:9c:fe: 9a:7b:16:c8:8e:0b:64:5d:5c:4d:73:6e:4b:6d:19: 79:05:39:c8:e5:83:b9:f3:4c:2d:6c:a8:d3:1c:04: 7c:1c:11:41:57:c5:c7:f9:a4:2d:7d:97:a0:c5:d1: 14:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7F:27:EC:1B:19:14:20:20:28:F1:7C:52:ED:F8:40:BF:E5:15:2A X509v3 Authority Key Identifier: keyid:14:BF:AB:79:42:6E:3D:22:BE:C3:FC:61:EE:43:2F:EA:08:27:29:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FL-reUJuPSK-w_xh7kMv6ggnKUY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:d3:15:bb:1b:78:9b:04:d0:a4:aa:ad:8b:e2:59:73:b9:9b: 47:5d:dc:b4:c5:08:1d:27:4c:65:3f:21:94:62:c3:1c:e4:26: 32:b5:6a:80:12:0f:8d:7b:68:7a:6a:98:30:25:9a:78:93:9a: a4:ce:88:cd:3a:3b:59:7e:51:c7:26:bc:c8:e2:ba:97:c8:6e: 10:8c:19:e1:21:01:70:b8:14:d6:f9:d0:e4:48:c3:7f:1b:47: ee:16:54:56:94:7b:84:d2:c5:5f:f1:15:04:9a:69:28:0e:6f: cc:df:50:3d:27:6c:41:2b:19:1d:1f:91:95:3c:b1:6d:7d:e1: fe:98:ae:cc:db:c8:06:eb:01:32:fd:cb:79:d1:d3:fc:c1:ba: c4:3b:7b:28:21:80:3b:07:2d:fa:e2:a8:9d:76:7e:f0:7b:2a: 28:09:91:99:4f:f4:c4:68:14:25:5b:d8:7c:24:ec:a1:92:42: a8:cd:9e:e3:71:71:ea:5d:cf:6f:ec:88:10:7b:51:43:a3:a7: 16:31:91:f2:09:bd:73:28:8f:28:d7:3d:11:3d:7d:e7:4c:d4: 82:70:52:14:5e:1a:b3:86:7d:97:8d:03:95:06:97:a5:c7:d1: f3:d2:9b:6b:b8:80:66:a7:48:f8:e1:e1:53:c2:90:de:50:a0: 50:29:23:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY0NkIxMTAvBgNVBAUTKDE0QkZBQjc5NDI2RTNEMjJCRUMzRkM2MUVFNDMyRkVB MDgyNzI5NDYwHhcNMjQwNTMwMTgzNjQ3WhcNMjQwNjA2MTgzNjQ3WjAYMRYwFAYD VQQDEw02NjU4Yzc0MC04ZGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9bo6KkYc4PQfT4vgpfiSD4FZlET2tpTNfcZ8Ml6fb2zTcBO0mhtuxdH/T4j cHVC3kbaq63ircC/CdZVg1Np7PwffgpI+CzKGsaHvSYglyl/znDLKTl2eRxP81+0 DFixfgqmJN6XwY95+EnxtwgU7J+ZjMMZY00rOAOeFdKgs1zVBuIxTW1+xbhzLK7H jlmQagdu/dAFtNr368dt6UvugdI569jH3bxig7BYRIg+3CzK4VtIsnvXjwKdc9DL zJXONg0BN6YBxa2B0+/6hTXMnP6aexbIjgtkXVxNc25LbRl5BTnI5YO580wtbKjT HAR8HBFBV8XH+aQtfZegxdEU/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLB/J+wb GRQgICjxfFLt+EC/5RUqMB8GA1UdIwQYMBaAFBS/q3lCbj0ivsP8Ye5DL+oIJylG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjQ2Qi81NkVFQkFFODU5 MjgxMUU5OUZGRjdBMjFDNEY5QUUwMi9GTC1yZVVKdVBTSy13X3hoN2tNdjZnZ25L VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZMLXJlVUp1UFNLLXdfeGg3a012NmdnbktVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjQ2Qi81NkVFQkFFODU5MjgxMUU5OUZGRjdBMjFDNEY5QUUwMi9GTC1yZVVKdVBT Sy13X3hoN2tNdjZnZ25LVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCm0xW7G3ibBNCkqq2L4llzuZtHXdy0xQgdJ0xlPyGUYsMc5CYytWqA Eg+Ne2h6apgwJZp4k5qkzojNOjtZflHHJrzI4rqXyG4QjBnhIQFwuBTW+dDkSMN/ G0fuFlRWlHuE0sVf8RUEmmkoDm/M31A9J2xBKxkdH5GVPLFtfeH+mK7M28gG6wEy /ct50dP8wbrEO3soIYA7By364qiddn7weyooCZGZT/TEaBQlW9h8JOyhkkKozZ7j cXHqXc9v7IgQe1FDo6cWMZHyCb1zKI8o1z0RPX3nTNSCcFIUXhqzhn2XjQOVBpel x9Hz0ptruIBmp0j44eFTwpDeUKBQKSPU -----END CERTIFICATE-----Generated at Thu May 30 20:35:35 2024 by rpki-client on console-fra.rpki-client.org