$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft File: FUc--zxa6KDEdke34P3liGtrH6M.mft (raw, json) Hash identifier: HZUJ68a6cmsaNnh9ie5VVhyflTtY/ipwGg5DrNUEiro= Subject key identifier: 5D:C9:01:59:CB:88:FF:67:51:BC:9A:7D:23:44:2D:70:63:C0:4B:C0 Authority key identifier: 15:47:3E:FB:3C:5A:E8:A0:C4:76:47:B7:E0:FD:E5:88:6B:6B:1F:A3 Certificate issuer: /CN=A91CE4A1/serialNumber=15473EFB3C5AE8A0C47647B7E0FDE5886B6B1FA3 Certificate serial: 032D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft Manifest number: 0326 Signing time: Sun 19 May 2024 03:04:49 +0000 Manifest this update: Sun 19 May 2024 03:04:49 +0000 Manifest next update: Sun 26 May 2024 03:04:49 +0000 Files and hashes: 1: FUc--zxa6KDEdke34P3liGtrH6M.crl (hash: Rany1ivgJiK7wr1j8KBNo1XmMe+JzuGtwAIB2HLM6dU=) 2: 2D81FF3680BB11EC8FD7663DC4F9AE02.roa (hash: ACYS4E6s5g3Yyp9k5cK0cHZKIktS2+m7MVWC1wBjVGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.crl rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 813 (0x32d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE4A1/serialNumber=15473EFB3C5AE8A0C47647B7E0FDE5886B6B1FA3 Validity Not Before: May 19 03:04:49 2024 GMT Not After : May 26 03:04:49 2024 GMT Subject: CN=66496c51-a356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:24:ff:9c:c5:69:e5:64:38:a5:97:aa:85:a3: 77:6d:ba:a4:66:ae:eb:e9:e1:17:c8:09:f0:1f:fa: 56:51:f0:e8:58:d9:16:07:c8:50:90:f1:da:5b:e6: 66:9c:a3:b3:6e:00:77:35:27:09:43:71:b6:ef:b0: bd:dc:6b:f1:e2:1a:45:03:f6:f9:b6:c7:40:90:38: f4:46:d1:04:78:5d:9e:ac:64:5e:ac:fe:b7:ab:43: 02:df:0c:28:38:01:22:2a:b8:52:d3:31:86:e5:cd: 7e:6a:40:ec:19:1f:ee:cd:28:92:a4:f8:e8:e8:e2: 3f:f6:73:da:23:04:cf:a4:4e:3d:8b:0c:1b:2f:88: b0:e9:56:3f:df:54:90:38:9a:37:d4:5e:76:c6:5b: 12:8a:50:26:9f:25:f9:c5:b2:a7:4a:56:6e:a1:47: c7:c5:d4:c4:02:3e:e9:f4:d4:72:f9:74:76:6e:3d: fb:e6:6f:8d:84:a2:56:80:14:8e:a8:c4:13:04:f9: e1:f4:de:c0:e4:01:36:3f:82:a6:de:f2:52:49:7b: 6f:53:fb:15:75:74:21:a3:c2:ce:f3:c3:84:2e:13: 34:14:73:cc:4e:8c:8f:d6:dc:77:dd:08:58:78:72: 99:09:fb:42:6a:ea:9c:50:ed:f3:7c:6e:32:a2:0f: 9b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C9:01:59:CB:88:FF:67:51:BC:9A:7D:23:44:2D:70:63:C0:4B:C0 X509v3 Authority Key Identifier: keyid:15:47:3E:FB:3C:5A:E8:A0:C4:76:47:B7:E0:FD:E5:88:6B:6B:1F:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:3b:c0:0d:71:73:8c:95:92:bf:ee:e7:f3:e0:47:25:24:1f: 39:19:c1:bc:53:f8:3a:a5:93:c7:1b:60:42:7f:87:20:80:f1: ac:42:70:a9:0d:c1:14:75:34:1c:e7:83:67:84:ff:4c:6e:a3: e7:cf:ec:aa:d4:68:92:db:fa:f5:bd:a4:a2:37:0d:d2:3f:b2: 9f:7d:7e:e3:fc:7e:74:80:37:f6:c5:22:75:95:c7:f9:d0:f5: 37:0d:e9:e8:88:ee:ad:d2:4a:5a:87:06:d6:19:6c:d0:a3:e3: a5:56:12:89:c5:42:ba:6a:1f:c6:d2:94:67:02:e4:d9:18:cd: 7e:4b:79:e2:51:56:c2:7d:b3:6c:20:54:48:af:7f:c3:a6:04: b6:53:30:e1:ad:26:ec:ac:7d:29:5b:e1:ae:e8:4f:ba:8f:f0: ef:2d:d0:ee:f2:1b:af:e9:47:bc:29:05:68:0e:0e:d3:dc:24: f1:99:26:44:62:02:ba:d3:14:d9:8d:a7:80:c5:b9:e3:b2:5b: 11:4c:0d:33:7d:eb:d6:0c:ca:64:46:94:0a:a2:f5:66:3d:a3: 13:34:f6:16:74:9f:ae:e0:f6:2e:8d:f0:52:39:0b:6e:65:31: 14:af:1f:de:aa:5b:d5:50:5a:44:f7:5c:7b:b9:e9:1e:df:59: b8:88:4c:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U0QTExMTAvBgNVBAUTKDE1NDczRUZCM0M1QUU4QTBDNDc2NDdCN0UwRkRFNTg4 NkI2QjFGQTMwHhcNMjQwNTE5MDMwNDQ5WhcNMjQwNTI2MDMwNDQ5WjAYMRYwFAYD VQQDEw02NjQ5NmM1MS1hMzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxiT/nMVp5WQ4pZeqhaN3bbqkZq7r6eEXyAnwH/pWUfDoWNkWB8hQkPHaW+Zm nKOzbgB3NScJQ3G277C93Gvx4hpFA/b5tsdAkDj0RtEEeF2erGRerP63q0MC3wwo OAEiKrhS0zGG5c1+akDsGR/uzSiSpPjo6OI/9nPaIwTPpE49iwwbL4iw6VY/31SQ OJo31F52xlsSilAmnyX5xbKnSlZuoUfHxdTEAj7p9NRy+XR2bj375m+NhKJWgBSO qMQTBPnh9N7A5AE2P4Km3vJSSXtvU/sVdXQho8LO88OELhM0FHPMToyP1tx33QhY eHKZCftCauqcUO3zfG4yog+bkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3JAVnL iP9nUbyafSNELXBjwEvAMB8GA1UdIwQYMBaAFBVHPvs8WuigxHZHt+D95Yhrax+j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTRBMS84NUZBMENFODgw QjcxMUVDOUZFQjJDNjdDNEY5QUUwMi9GVWMtLXp4YTZLREVka2UzNFAzbGlHdHJI Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZVYy0tenhhNktERWRrZTM0UDNsaUd0ckg2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTRBMS84NUZBMENFODgwQjcxMUVDOUZFQjJDNjdDNEY5QUUwMi9GVWMtLXp4YTZL REVka2UzNFAzbGlHdHJINk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWO8ANcXOMlZK/7ufz4EclJB85GcG8U/g6pZPHG2BCf4cggPGsQnCp DcEUdTQc54NnhP9MbqPnz+yq1GiS2/r1vaSiNw3SP7KffX7j/H50gDf2xSJ1lcf5 0PU3DenoiO6t0kpahwbWGWzQo+OlVhKJxUK6ah/G0pRnAuTZGM1+S3niUVbCfbNs IFRIr3/DpgS2UzDhrSbsrH0pW+Gu6E+6j/DvLdDu8huv6Ue8KQVoDg7T3CTxmSZE YgK60xTZjaeAxbnjslsRTA0zfevWDMpkRpQKovVmPaMTNPYWdJ+u4PYujfBSOQtu ZTEUrx/eqlvVUFpE91x7ueke31m4iEzB -----END CERTIFICATE-----Generated at Sun May 19 03:38:15 2024 by rpki-client on console-ams.rpki-client.org