$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft File: FeAstOfcuwrM4igRnP-ANDhil78.mft (raw, json) Hash identifier: 0ndHWUoW99FxiSNuf2eTLmi8nDKb9JbecYXFElFBraQ= Subject key identifier: 80:BE:18:F7:29:D5:95:20:74:EE:4E:4D:A8:44:8D:C7:C9:0D:E0:63 Authority key identifier: 15:E0:2C:B4:E7:DC:BB:0A:CC:E2:28:11:9C:FF:80:34:38:62:97:BF Certificate issuer: /CN=A91BC15C/serialNumber=15E02CB4E7DCBB0ACCE228119CFF8034386297BF Certificate serial: 33C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft Manifest number: 33C2 Signing time: Sat 18 May 2024 15:18:25 +0000 Manifest this update: Sat 18 May 2024 15:18:24 +0000 Manifest next update: Sat 25 May 2024 15:18:24 +0000 Files and hashes: 1: FeAstOfcuwrM4igRnP-ANDhil78.crl (hash: pqPZ8c6LlaMc8QJPKvpNUTKVhQL+/HJMYUK+KahrWa0=) 2: A88B0898EC9911EE9627923CC4F9AE02.roa (hash: Q6U74OWQee2tozS+dAmpsL+G+700VEvm1Ngpa46boEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.crl rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13251 (0x33c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC15C/serialNumber=15E02CB4E7DCBB0ACCE228119CFF8034386297BF Validity Not Before: May 18 15:18:24 2024 GMT Not After : May 25 15:18:24 2024 GMT Subject: CN=6648c6c0-e64a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7f:b6:be:31:62:1e:e2:37:6e:5f:13:15:d4: cf:ae:79:91:74:02:11:a2:3a:cd:a4:77:54:71:84: d5:d8:24:81:10:8a:bf:ff:66:a3:e8:01:37:69:ce: ff:10:ed:f2:22:f2:41:44:e2:ce:ed:68:aa:e7:06: f2:9d:e7:b3:4f:3e:c9:e6:59:41:2c:7f:95:b5:cb: d0:49:49:b9:2d:48:ff:12:5e:05:9f:f1:df:96:77: 57:2e:74:fc:2c:9a:85:93:10:c4:ab:b7:15:b5:cf: e3:4e:f3:88:d4:5e:09:06:86:c3:bb:49:20:56:46: ee:93:7c:d9:d8:2c:4d:49:bb:ac:10:5f:99:f0:3e: ae:ee:1b:9f:74:f1:48:89:df:6a:94:56:cb:f1:17: fa:05:ee:28:9a:77:10:5f:3b:c6:26:3f:94:9f:d7: 1a:e8:12:65:ff:ed:63:f5:bc:6e:ae:8b:1c:b6:a1: 73:2d:25:9f:ae:03:2c:63:ca:fd:da:7d:c9:24:11: b1:8f:4f:4b:68:94:c1:83:ae:84:a0:6b:ba:0a:dd: 6d:af:bc:a1:14:65:84:9f:67:9e:4f:05:99:ae:3e: 3c:b8:38:2e:87:f0:b1:80:ce:5c:a0:0d:20:e7:09: b7:aa:fb:c4:11:2d:1b:c6:77:79:18:43:5e:3d:12: a7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BE:18:F7:29:D5:95:20:74:EE:4E:4D:A8:44:8D:C7:C9:0D:E0:63 X509v3 Authority Key Identifier: keyid:15:E0:2C:B4:E7:DC:BB:0A:CC:E2:28:11:9C:FF:80:34:38:62:97:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:04:a8:f3:5d:0f:61:e4:83:f8:5d:f3:b5:33:76:4b:f8:f2: 98:68:60:f7:0f:e6:19:64:8b:54:83:49:6d:60:3a:09:b0:b6: 2d:4f:3d:cb:5a:be:85:37:0c:97:bd:39:c2:60:c1:a6:94:9a: 56:7b:a0:41:00:dc:be:9a:66:01:ba:2f:db:2a:6e:b9:6a:62: b7:96:f2:36:bf:19:ef:af:3a:e1:27:92:a1:7e:48:f5:79:d0: 47:0a:dc:94:77:bb:6c:a6:0c:9d:a0:4b:df:d1:e2:df:9d:fc: b1:00:d3:af:b4:de:1d:4f:97:49:bd:8b:c2:a7:21:41:f3:e0: 6b:5f:4d:8d:c9:a3:43:ac:e5:0a:0c:50:fb:ce:d7:2a:50:f7: 7d:9e:72:72:70:29:4b:87:c2:31:63:84:29:cf:cc:c2:c9:d7: 5e:ff:05:59:73:83:d4:bd:67:4a:c6:bb:05:4b:99:a5:ea:60: 01:cc:fe:34:df:48:41:0d:9d:67:f6:03:ce:5a:9b:b2:0f:c1: e5:77:85:7a:94:c6:11:38:ed:ce:31:a6:61:14:1c:49:ee:f4: f8:b1:0c:97:c0:f8:99:af:09:a7:24:45:05:70:9b:20:51:be: ba:57:1e:b4:f7:32:a3:5e:69:61:c0:bd:2a:ad:38:8b:e9:88: b8:92:90:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMxNUMxMTAvBgNVBAUTKDE1RTAyQ0I0RTdEQ0JCMEFDQ0UyMjgxMTlDRkY4MDM0 Mzg2Mjk3QkYwHhcNMjQwNTE4MTUxODI0WhcNMjQwNTI1MTUxODI0WjAYMRYwFAYD VQQDEw02NjQ4YzZjMC1lNjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3+2vjFiHuI3bl8TFdTPrnmRdAIRojrNpHdUcYTV2CSBEIq//2aj6AE3ac7/ EO3yIvJBROLO7Wiq5wbyneezTz7J5llBLH+VtcvQSUm5LUj/El4Fn/HflndXLnT8 LJqFkxDEq7cVtc/jTvOI1F4JBobDu0kgVkbuk3zZ2CxNSbusEF+Z8D6u7hufdPFI id9qlFbL8Rf6Be4omncQXzvGJj+Un9ca6BJl/+1j9bxurosctqFzLSWfrgMsY8r9 2n3JJBGxj09LaJTBg66EoGu6Ct1tr7yhFGWEn2eeTwWZrj48uDguh/CxgM5coA0g 5wm3qvvEES0bxnd5GENePRKntQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIC+GPcp 1ZUgdO5OTahEjcfJDeBjMB8GA1UdIwQYMBaAFBXgLLTn3LsKzOIoEZz/gDQ4Ype/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzE1Qy82QkEzNTkzMDFE QTIxMUUyQjRCNjQ0OTUwOEIwMkNEMi9GZUFzdE9mY3V3ck00aWdSblAtQU5EaGls NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZlQXN0T2ZjdXdyTTRpZ1JuUC1BTkRoaWw3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzE1Qy82QkEzNTkzMDFEQTIxMUUyQjRCNjQ0OTUwOEIwMkNEMi9GZUFzdE9mY3V3 ck00aWdSblAtQU5EaGlsNzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqBKjzXQ9h5IP4XfO1M3ZL+PKYaGD3D+YZZItUg0ltYDoJsLYtTz3L Wr6FNwyXvTnCYMGmlJpWe6BBANy+mmYBui/bKm65amK3lvI2vxnvrzrhJ5Khfkj1 edBHCtyUd7tspgydoEvf0eLfnfyxANOvtN4dT5dJvYvCpyFB8+BrX02NyaNDrOUK DFD7ztcqUPd9nnJycClLh8IxY4Qpz8zCydde/wVZc4PUvWdKxrsFS5ml6mABzP40 30hBDZ1n9gPOWpuyD8Hld4V6lMYROO3OMaZhFBxJ7vT4sQyXwPiZrwmnJEUFcJsg Ub66Vx609zKjXmlhwL0qrTiL6Yi4kpCm -----END CERTIFICATE-----Generated at Sat May 18 16:20:16 2024 by rpki-client on console-fra.rpki-client.org