$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft File: fsx3osytqtpjQvwPRGkYdeo_koc.mft (raw, json) Hash identifier: 7yOCA8LARemxP2gOSCJ2uixPd/+hoRBTp3lxVL8+RZM= Subject key identifier: 06:9B:F4:86:48:9F:21:B3:BA:70:F2:7F:F5:A9:5D:37:BE:55:4F:12 Authority key identifier: 7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87 Certificate issuer: /CN=A91B2BC9/serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft Manifest number: FE Signing time: Sun 19 May 2024 05:38:49 +0000 Manifest this update: Sun 19 May 2024 05:38:49 +0000 Manifest next update: Sun 26 May 2024 05:38:49 +0000 Files and hashes: 1: fsx3osytqtpjQvwPRGkYdeo_koc.crl (hash: wLAz9bvRNCjWnhsrWwS9HT1MPKpV/CRe5tobEZPLPeg=) 2: 044E6658915A11ED8D2FBE43C4F9AE02.roa (hash: +c/zc2M6EaCjZss6KyiDiaF5vMET6QNIUwZ2J66ySBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2BC9/serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287 Validity Not Before: May 19 05:38:49 2024 GMT Not After : May 26 05:38:49 2024 GMT Subject: CN=66499069-8be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:48:58:6c:d9:2e:9b:8c:b9:6b:5d:31:78:b7: 1f:bc:03:9f:c1:9b:58:cc:fa:41:9e:33:0b:bf:9d: 55:cf:bb:0e:df:3f:ca:9e:9a:88:a7:dc:f7:3a:bb: 2c:84:fe:c2:68:d4:af:ca:69:77:f8:6e:ca:6c:a0: b6:81:e1:c3:e6:c2:98:a4:cf:97:c6:c7:d2:5f:99: 0e:db:1f:1e:4f:fc:95:84:ae:3c:a5:3d:9e:68:ad: 05:42:7c:f9:de:ac:82:f4:db:ff:70:a4:9e:6f:77: ce:1c:f0:d2:64:79:5d:d9:f5:8d:1b:98:a1:2c:77: 8b:40:32:f5:d9:66:92:69:70:14:71:0f:dd:ec:dd: 7e:27:37:6c:bc:d1:33:3a:89:db:97:de:2a:fe:86: ce:01:07:81:1a:2a:d6:8d:b9:89:8a:af:a5:19:c1: c2:fc:eb:d9:2e:3c:55:13:8b:39:61:ba:15:ff:be: f7:a3:c3:3f:d6:9e:5c:34:3e:e0:3f:8f:1a:d9:c5: aa:26:15:c6:56:84:ea:b0:70:98:4c:61:da:f5:cb: 49:cf:b1:92:9b:85:86:3e:f4:99:68:86:03:01:90: 4d:c9:a8:12:35:ce:e2:64:46:6d:64:c0:c0:70:bb: 1e:e6:2d:11:08:0a:74:1a:99:1c:fb:f3:43:75:5e: 0a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:9B:F4:86:48:9F:21:B3:BA:70:F2:7F:F5:A9:5D:37:BE:55:4F:12 X509v3 Authority Key Identifier: keyid:7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:80:d5:6c:92:25:ca:15:a9:2e:f8:71:97:1e:a9:6b:d8:74: 7c:9c:92:96:8d:f4:ef:24:1e:66:b9:00:0c:1c:53:1b:e9:71: a7:0d:82:a2:2c:2e:ce:4a:9d:2c:c5:0f:7e:c7:6b:e2:61:75: a2:1f:c3:63:7b:42:85:5f:b0:3a:01:6c:3d:84:cf:f2:15:24: 94:50:d3:d8:ef:7c:16:2f:5f:0f:93:e1:d5:c9:84:e7:b7:7a: a0:22:a5:a3:86:fa:80:7d:7d:43:0a:6d:e6:8b:30:7c:8d:67: 7f:fa:c1:ba:aa:c3:2e:80:ea:43:95:fd:e6:7a:56:4b:6f:66: 37:6e:62:12:d9:76:d8:c6:9b:3b:3d:3e:28:3d:08:3b:c7:c9: 2d:4b:05:75:07:79:91:f3:af:b8:1e:58:5d:8f:66:7c:2c:93: ad:e0:19:d9:61:53:e5:4e:ac:92:02:12:c5:85:0e:d7:89:0f: be:b0:20:eb:5c:cd:03:a5:63:30:85:83:17:94:5d:ee:f2:fd: d6:a4:e3:d0:3d:7a:72:a9:61:f3:32:63:89:95:ee:6b:f2:3c: 39:88:7b:d7:b0:ba:3e:ee:cc:1a:75:0a:64:d1:5a:e2:20:6e: c1:15:6f:d3:66:c3:a4:48:63:37:84:d9:f7:c5:00:98:1f:e3: 3b:f3:0c:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJCQzkxMTAvBgNVBAUTKDdFQ0M3N0EyQ0NBREFBREE2MzQyRkMwRjQ0NjkxODc1 RUEzRjkyODcwHhcNMjQwNTE5MDUzODQ5WhcNMjQwNTI2MDUzODQ5WjAYMRYwFAYD VQQDEw02NjQ5OTA2OS04YmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUhYbNkum4y5a10xeLcfvAOfwZtYzPpBnjMLv51Vz7sO3z/KnpqIp9z3Orss hP7CaNSvyml3+G7KbKC2geHD5sKYpM+XxsfSX5kO2x8eT/yVhK48pT2eaK0FQnz5 3qyC9Nv/cKSeb3fOHPDSZHld2fWNG5ihLHeLQDL12WaSaXAUcQ/d7N1+JzdsvNEz Oonbl94q/obOAQeBGirWjbmJiq+lGcHC/OvZLjxVE4s5YboV/773o8M/1p5cND7g P48a2cWqJhXGVoTqsHCYTGHa9ctJz7GSm4WGPvSZaIYDAZBNyagSNc7iZEZtZMDA cLse5i0RCAp0Gpkc+/NDdV4KTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAab9IZI nyGzunDyf/WpXTe+VU8SMB8GA1UdIwQYMBaAFH7Md6LMraraY0L8D0RpGHXqP5KH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkJDOS82NkQzN0FBNjkx NTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0cGpRdndQUkdrWWRlb19r b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZzeDNvc3l0cXRwalF2d1BSR2tZZGVvX2tvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkJDOS82NkQzN0FBNjkxNTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0 cGpRdndQUkdrWWRlb19rb2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUgNVskiXKFaku+HGXHqlr2HR8nJKWjfTvJB5muQAMHFMb6XGnDYKi LC7OSp0sxQ9+x2viYXWiH8Nje0KFX7A6AWw9hM/yFSSUUNPY73wWL18Pk+HVyYTn t3qgIqWjhvqAfX1DCm3mizB8jWd/+sG6qsMugOpDlf3melZLb2Y3bmIS2XbYxps7 PT4oPQg7x8ktSwV1B3mR86+4Hlhdj2Z8LJOt4BnZYVPlTqySAhLFhQ7XiQ++sCDr XM0DpWMwhYMXlF3u8v3WpOPQPXpyqWHzMmOJle5r8jw5iHvXsLo+7swadQpk0Vri IG7BFW/TZsOkSGM3hNn3xQCYH+M78wzI -----END CERTIFICATE-----Generated at Sun May 19 06:14:36 2024 by rpki-client on console-ams.rpki-client.org