$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft File: FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft (raw, json) Hash identifier: MgRn+QpuxrUQURxZM8TAOFCH6yjB9AEi1DUnUr2umcE= Subject key identifier: 0B:4A:7E:26:8F:C7:BD:6A:2E:B5:8B:B8:80:76:B6:8E:63:9D:60:72 Authority key identifier: 16:41:D1:3F:AD:8A:20:AB:0A:94:F6:25:AE:DA:10:6B:E2:A6:6E:17 Certificate issuer: /CN=A91A4179/serialNumber=1641D13FAD8A20AB0A94F625AEDA106BE2A66E17 Certificate serial: 052C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft Manifest number: 051D Signing time: Sun 19 May 2024 01:03:44 +0000 Manifest this update: Sun 19 May 2024 01:03:44 +0000 Manifest next update: Sun 26 May 2024 01:03:44 +0000 Files and hashes: 1: FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl (hash: 9uyqNREgGpnQEF+7gp+zwdSVx9BciDG8hxn6rJxLwIM=) 2: 62A74238F77711ECB847DF59C4F9AE02.roa (hash: EQy8IoiSwa2Hw+uE0WClFBJeC+YU9K0oIY/hgiHJMKk=) 3: 61A51A9AF77711ECB847DF59C4F9AE02.roa (hash: ssybRiadnYqLalLmVRbd0/DP5QPkMyzKDDU4+VtlEtg=) 4: F4E815CC699611EE81E3E33CC4F9AE02.roa (hash: bUur1057xfT2mdtzsmfEck5AwffmNHwcWwfp/FsGteY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1324 (0x52c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4179/serialNumber=1641D13FAD8A20AB0A94F625AEDA106BE2A66E17 Validity Not Before: May 19 01:03:44 2024 GMT Not After : May 26 01:03:44 2024 GMT Subject: CN=66494ff0-d053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:61:bb:cb:3b:47:89:c3:1a:b0:79:81:79:36: ca:b6:0a:ac:6d:6e:aa:61:6a:fe:f8:b0:65:28:67: 67:98:0e:ee:da:fe:fe:bf:72:18:29:3d:91:53:e8: 82:cf:73:89:c0:6a:27:d6:c8:83:3b:59:a6:d8:d7: 9c:cc:77:82:5b:06:3c:32:38:75:d9:2a:f9:0d:2e: 00:05:75:20:02:e4:78:fe:07:14:fd:76:d5:eb:1f: 32:d6:81:3b:df:67:e3:01:35:14:75:59:87:89:23: a0:b2:63:ed:81:8e:47:c9:5d:99:dc:4e:ba:3e:c3: f7:5e:9b:f8:ac:24:c7:d1:51:34:d0:f4:cd:86:dd: d1:94:16:a3:81:15:8d:2e:7a:f3:7b:d1:80:9c:13: 55:48:46:79:94:85:57:4b:5c:a2:d8:34:37:39:60: 7d:3e:9f:75:38:eb:01:54:28:d7:51:5c:21:59:42: 32:07:33:83:2d:20:33:2d:f1:46:63:a1:77:bd:1c: 22:89:1b:fd:cc:48:52:2a:c4:f1:4b:62:6b:7f:e1: 23:b2:67:3d:ad:ec:b1:6f:d9:17:d3:1f:bc:68:6c: 12:59:cd:bf:75:8a:a2:2f:24:7c:96:4b:02:56:f4: 51:3f:57:a9:f8:62:eb:11:15:88:d0:16:31:9c:a4: 03:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:4A:7E:26:8F:C7:BD:6A:2E:B5:8B:B8:80:76:B6:8E:63:9D:60:72 X509v3 Authority Key Identifier: keyid:16:41:D1:3F:AD:8A:20:AB:0A:94:F6:25:AE:DA:10:6B:E2:A6:6E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:a6:76:53:9a:4f:1d:57:50:c7:97:f4:4d:63:70:1b:88:ce: 23:e4:dd:71:40:a8:49:aa:67:f5:87:fe:fc:2b:49:2e:ed:25: 75:c1:57:42:77:c1:d2:c1:d6:19:dd:74:95:22:89:cc:43:23: 9f:95:f5:cd:f2:42:10:f9:4d:b4:87:ff:80:09:6e:69:51:a3: 35:d8:8a:b0:19:73:8c:2a:3e:b8:9f:c3:21:9e:7a:a0:14:2a: 2a:1f:22:4b:c1:74:ba:51:cf:b4:7c:c3:7f:ad:29:e7:1f:f1: a7:40:a3:13:cb:cb:43:c1:13:53:d8:57:a6:32:ec:cd:4c:6f: aa:e5:75:88:8a:c2:ea:fc:f8:14:e9:ec:07:e7:de:b4:80:a9: 85:1b:c3:b9:32:2f:93:8a:87:9b:64:2a:23:96:45:d2:78:cc: 7e:a3:82:a9:92:83:bd:d6:e0:33:e6:df:7f:4f:fc:ec:a1:82: 52:6c:7b:71:b5:71:20:7c:8f:f0:4b:05:24:ed:bd:b2:93:ce: 21:23:3a:d9:f1:c3:3f:5b:55:87:13:a5:7f:5a:0a:8c:17:51: e1:7b:36:51:47:57:f9:a9:33:3c:85:e8:24:d1:db:0d:71:c9: ea:e8:ae:ce:3b:1f:6b:f4:4d:d3:c1:e2:ab:14:c6:d9:6d:6a: b9:3b:b7:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQxNzkxMTAvBgNVBAUTKDE2NDFEMTNGQUQ4QTIwQUIwQTk0RjYyNUFFREExMDZC RTJBNjZFMTcwHhcNMjQwNTE5MDEwMzQ0WhcNMjQwNTI2MDEwMzQ0WjAYMRYwFAYD VQQDEw02NjQ5NGZmMC1kMDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2G7yztHicMasHmBeTbKtgqsbW6qYWr++LBlKGdnmA7u2v7+v3IYKT2RU+iC z3OJwGon1siDO1mm2NeczHeCWwY8Mjh12Sr5DS4ABXUgAuR4/gcU/XbV6x8y1oE7 32fjATUUdVmHiSOgsmPtgY5HyV2Z3E66PsP3Xpv4rCTH0VE00PTNht3RlBajgRWN Lnrze9GAnBNVSEZ5lIVXS1yi2DQ3OWB9Pp91OOsBVCjXUVwhWUIyBzODLSAzLfFG Y6F3vRwiiRv9zEhSKsTxS2Jrf+Ejsmc9reyxb9kX0x+8aGwSWc2/dYqiLyR8lksC VvRRP1ep+GLrERWI0BYxnKQDWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAtKfiaP x71qLrWLuIB2to5jnWByMB8GA1UdIwQYMBaAFBZB0T+tiiCrCpT2Ja7aEGvipm4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDE3OS80M0U0QUYyNkI5 NTExMUVCQUE2MENEM0NDNEY5QUUwMi9Ga0hSUDYyS0lLc0tsUFlscnRvUWEtS21i aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZrSFJQNjJLSUtzS2xQWWxydG9RYS1LbWJoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDE3OS80M0U0QUYyNkI5NTExMUVCQUE2MENEM0NDNEY5QUUwMi9Ga0hSUDYyS0lL c0tsUFlscnRvUWEtS21iaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBpnZTmk8dV1DHl/RNY3AbiM4j5N1xQKhJqmf1h/78K0ku7SV1wVdC d8HSwdYZ3XSVIonMQyOflfXN8kIQ+U20h/+ACW5pUaM12IqwGXOMKj64n8Mhnnqg FCoqHyJLwXS6Uc+0fMN/rSnnH/GnQKMTy8tDwRNT2FemMuzNTG+q5XWIisLq/PgU 6ewH5960gKmFG8O5Mi+TioebZCojlkXSeMx+o4KpkoO91uAz5t9/T/zsoYJSbHtx tXEgfI/wSwUk7b2yk84hIzrZ8cM/W1WHE6V/WgqMF1HhezZRR1f5qTM8hegk0dsN ccnq6K7OOx9r9E3TweKrFMbZbWq5O7cX -----END CERTIFICATE-----Generated at Sun May 19 01:47:14 2024 by rpki-client on console-fra.rpki-client.org