$ rpki-client -vvf rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft File: fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft (raw, json) Hash identifier: rqVL6y9yGbad9Yh57M+eEgO7ZqLpgIJRGEpHGN7XlDI= Subject key identifier: DB:68:B8:E1:E8:68:BC:5C:F3:3B:61:55:EA:F3:A5:F9:D9:C6:A3:38 Authority key identifier: 7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B Certificate issuer: /CN=A91C96A7/serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B Certificate serial: 0F04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft Manifest number: 0EF9 Signing time: Sat 18 May 2024 18:15:57 +0000 Manifest this update: Sat 18 May 2024 18:15:56 +0000 Manifest next update: Sat 25 May 2024 18:15:56 +0000 Files and hashes: 1: fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl (hash: InjA7pQuPojT7kjw2JIJ+6cFJ6kgwovIWdJBLwEnDHk=) 2: 1BB9CAB6578011E99E80631AC4F9AE02.roa (hash: DJClFjNtaOvQ/Ujp6J8xeRJYTDwT4UiI5JTW6w5mbHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3844 (0xf04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C96A7/serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B Validity Not Before: May 18 18:15:56 2024 GMT Not After : May 25 18:15:56 2024 GMT Subject: CN=6648f05c-dad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9d:db:98:77:4d:58:7d:c3:12:b9:5b:18:d4: e9:1c:17:46:c5:85:59:2b:0b:6b:b8:a4:3a:fb:b5: 2f:4c:c7:7f:28:97:d0:6c:85:3c:b0:fd:ca:31:b5: 86:e7:dc:a7:a9:21:9f:bf:41:7c:27:3c:6d:4c:ab: 67:6b:e7:ec:b5:4d:04:9c:70:01:b9:0d:44:f6:f9: 64:49:a9:59:a7:b1:ba:9a:7a:aa:f7:94:61:b9:5e: 42:bb:cb:e2:5c:31:0f:90:72:56:47:61:f2:9c:8b: 81:4e:75:7d:8d:7b:7a:b1:52:93:68:98:0d:c5:20: ee:32:35:05:65:f4:a2:ba:aa:48:b2:52:56:c7:49: d5:81:b6:3c:99:58:9f:e9:b5:cf:58:ef:31:a7:d9: ec:20:c1:25:10:5d:a1:da:41:36:c1:72:e0:fe:11: bb:1c:68:1d:81:85:c0:c8:01:86:a0:ec:44:d5:c8: 37:cb:96:9f:58:eb:ae:e6:d7:2e:fb:af:10:b2:20: 41:39:23:17:c7:d1:60:ac:3f:bf:ec:5b:4e:a3:a0: d5:a5:5e:d0:64:4d:7a:af:05:af:83:91:4a:14:c1: 03:33:f6:26:85:e3:96:e6:09:b1:dd:20:3e:da:ef: c6:a0:53:40:dc:ef:07:1e:6a:08:22:33:7d:37:b5: 98:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:68:B8:E1:E8:68:BC:5C:F3:3B:61:55:EA:F3:A5:F9:D9:C6:A3:38 X509v3 Authority Key Identifier: keyid:7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:3f:c9:6a:c2:38:ac:7f:86:6a:79:11:33:91:e8:7a:cf:c7: 82:f5:98:97:31:4c:73:0e:89:74:35:5e:6b:1d:9f:ef:85:a9: 64:f9:91:9b:01:20:da:2f:52:6d:72:fe:72:b1:12:13:b5:9d: 28:20:56:e9:d6:e5:f7:69:ec:7c:f1:68:3e:a2:34:dd:00:33: 79:1e:18:8f:6c:a8:cf:58:3e:f6:2e:9a:97:b3:31:b8:c0:b6: d9:99:52:53:59:bf:ae:ce:cb:76:03:a6:8b:26:40:5e:2f:90: 84:1a:f3:02:95:69:ef:67:59:31:eb:7d:46:c2:12:4e:d1:6a: 82:1f:55:94:34:3d:2f:37:db:a9:85:d2:54:5f:16:52:9e:84: fc:3d:d2:89:43:fc:12:9d:b7:00:e8:8a:c5:cd:ce:ee:7d:c9: 98:08:b3:1f:1e:45:dc:84:77:62:9c:0f:de:ee:0e:01:a0:09: b2:91:56:f6:07:f4:55:f1:9b:19:e0:22:5f:b4:ed:c4:19:07: 0a:ef:7b:75:7e:2f:5f:d1:9c:5a:19:68:d9:a4:81:62:0f:da: 70:4b:97:de:77:24:12:a7:54:29:61:4a:d2:d1:f4:cf:21:0f: 53:b0:ac:0d:cb:af:a5:e4:52:ce:e8:0f:0c:f2:0c:89:be:82: 58:44:56:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2QTcxMTAvBgNVBAUTKDdEQzU2ODkzREEzNTQ4M0ZEOTA5NERGMDM1MDRERTIx N0I2RTNCM0IwHhcNMjQwNTE4MTgxNTU2WhcNMjQwNTI1MTgxNTU2WjAYMRYwFAYD VQQDEw02NjQ4ZjA1Yy1kYWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJ3bmHdNWH3DErlbGNTpHBdGxYVZKwtruKQ6+7UvTMd/KJfQbIU8sP3KMbWG 59ynqSGfv0F8JzxtTKtna+fstU0EnHABuQ1E9vlkSalZp7G6mnqq95RhuV5Cu8vi XDEPkHJWR2HynIuBTnV9jXt6sVKTaJgNxSDuMjUFZfSiuqpIslJWx0nVgbY8mVif 6bXPWO8xp9nsIMElEF2h2kE2wXLg/hG7HGgdgYXAyAGGoOxE1cg3y5afWOuu5tcu +68QsiBBOSMXx9FgrD+/7FtOo6DVpV7QZE16rwWvg5FKFMEDM/YmheOW5gmx3SA+ 2u/GoFNA3O8HHmoIIjN9N7WY5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNtouOHo aLxc8zthVerzpfnZxqM4MB8GA1UdIwQYMBaAFH3FaJPaNUg/2QlN8DUE3iF7bjs7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTZBNy8yNkU3NDk5NjU3 N0YxMUU5OEU5MENBMThDNEY5QUUwMi9mY1ZvazlvMVNEX1pDVTN3TlFUZUlYdHVP enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZjVm9rOW8xU0RfWkNVM3dOUVRlSVh0dU96cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTZBNy8yNkU3NDk5NjU3N0YxMUU5OEU5MENBMThDNEY5QUUwMi9mY1ZvazlvMVNE X1pDVTN3TlFUZUlYdHVPenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADP8lqwjisf4ZqeREzkeh6z8eC9ZiXMUxzDol0NV5rHZ/vhalk+ZGb ASDaL1Jtcv5ysRITtZ0oIFbp1uX3aex88Wg+ojTdADN5HhiPbKjPWD72LpqXszG4 wLbZmVJTWb+uzst2A6aLJkBeL5CEGvMClWnvZ1kx631GwhJO0WqCH1WUND0vN9up hdJUXxZSnoT8PdKJQ/wSnbcA6IrFzc7ufcmYCLMfHkXchHdinA/e7g4BoAmykVb2 B/RV8ZsZ4CJftO3EGQcK73t1fi9f0ZxaGWjZpIFiD9pwS5fedyQSp1QpYUrS0fTP IQ9TsKwNy6+l5FLO6A8M8gyJvoJYRFbL -----END CERTIFICATE-----Generated at Sat May 18 19:15:26 2024 by rpki-client on console-ams.rpki-client.org