$ rpki-client -vvf rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft File: FmUgpBWnVONYZSxXkM6GtLJjLdE.mft (raw, json) Hash identifier: TDR38PDyC/L5LYFTOmGU3uvpa7Lk5j8OMlzzEKxm0iY= Subject key identifier: 46:70:64:80:36:89:C6:39:12:51:3C:B4:81:08:40:F9:8E:53:FC:E7 Authority key identifier: 16:65:20:A4:15:A7:54:E3:58:65:2C:57:90:CE:86:B4:B2:63:2D:D1 Certificate issuer: /CN=A91D12C2/serialNumber=166520A415A754E358652C5790CE86B4B2632DD1 Certificate serial: 0A81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft Manifest number: 0A7C Signing time: Sat 18 May 2024 20:15:37 +0000 Manifest this update: Sat 18 May 2024 20:15:36 +0000 Manifest next update: Sat 25 May 2024 20:15:36 +0000 Files and hashes: 1: FmUgpBWnVONYZSxXkM6GtLJjLdE.crl (hash: cWxeyb+4HTURS1drhdgGpquUenrEzjuORfy/SequSH4=) 2: 6C8823E2378211EA8FE81077C4F9AE02.roa (hash: ElMvFtSWQc3L/PeymWA1CWb+wYib+HMGSvmnYch4X7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.crl rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2689 (0xa81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D12C2/serialNumber=166520A415A754E358652C5790CE86B4B2632DD1 Validity Not Before: May 18 20:15:36 2024 GMT Not After : May 25 20:15:36 2024 GMT Subject: CN=66490c68-cadc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cb:7f:5e:da:db:37:ed:7c:42:4b:c0:94:16: 01:2e:b7:ac:ca:1f:13:f7:d7:d2:2d:8b:07:eb:e5: 21:bc:32:98:6f:1e:42:ed:6f:3a:09:68:58:56:85: ed:b3:57:43:e8:7f:35:93:db:0f:e4:d4:3f:a3:85: d1:06:be:9d:59:b1:c9:61:dc:98:d2:04:0f:14:60: c2:c8:7a:0d:fd:7b:6d:98:68:9f:2e:b9:0e:6a:72: be:24:ab:bc:79:1b:67:42:9f:8a:fc:82:69:b3:dd: ff:12:96:f2:d2:17:c4:5c:5f:9f:92:08:d9:ea:2e: 7f:7b:1e:fb:96:94:93:bd:87:a8:8b:f2:b3:98:58: c7:6c:5a:70:98:26:f8:c8:19:bf:17:86:53:fe:a5: a5:db:52:55:d4:1e:95:fe:7a:21:73:86:97:0c:fc: 59:70:2a:54:71:2a:04:ad:7b:e4:8b:95:f9:b9:11: 0e:6f:45:8a:19:e1:3a:a6:40:1e:9d:86:ef:f0:ba: 06:6f:67:f2:20:ef:e7:71:cc:05:59:81:50:59:a4: f1:2a:a7:d2:bd:fe:0e:8d:ed:3d:d7:90:f3:e6:d9: 19:39:39:20:3a:f6:a2:7b:12:90:81:b9:0e:37:9a: 12:b7:b9:03:06:66:df:2f:12:47:9f:8c:37:23:d2: ca:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:70:64:80:36:89:C6:39:12:51:3C:B4:81:08:40:F9:8E:53:FC:E7 X509v3 Authority Key Identifier: keyid:16:65:20:A4:15:A7:54:E3:58:65:2C:57:90:CE:86:B4:B2:63:2D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:e4:6d:e5:05:f0:ef:0a:60:b2:e1:ed:79:d5:f5:3d:85:e1: 4c:4e:0a:89:3b:e1:6c:3b:1e:50:6c:42:24:45:d6:d7:d8:19: 72:d5:d7:9d:13:cd:e6:7a:d2:11:32:86:32:5c:af:93:9c:dc: 91:86:72:ac:72:ec:1f:4f:0e:06:d2:85:05:e2:4e:a4:4f:43: 8b:94:21:0f:81:f4:4c:ec:d4:89:60:c5:da:72:1c:39:8c:35: a5:8c:60:7a:89:2f:ea:c6:51:b7:3b:2b:ba:a8:26:e1:99:8c: c2:8f:39:56:c0:73:18:65:9d:9c:9f:f1:24:30:77:de:45:e9: 77:7e:7f:0e:f4:23:51:09:38:77:28:d5:be:ae:82:24:a2:be: a0:16:12:53:20:a2:aa:03:88:70:15:93:4b:b9:17:61:2f:99: ad:c6:1c:bb:0b:9b:51:f8:c7:7e:09:44:f0:f6:42:db:39:f0: f6:0b:fa:fa:de:5b:d3:14:29:1b:ec:fb:ba:24:be:cd:f7:61: d7:43:91:ea:dd:50:11:a1:e0:89:39:b2:af:be:7e:eb:55:23: 90:6f:b1:55:1d:31:a1:b4:aa:7a:a3:bf:45:8c:79:17:47:81: 58:fb:64:6b:13:cb:e1:03:d7:e4:92:78:7b:e0:89:f2:83:2d: 42:bd:15:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyQzIxMTAvBgNVBAUTKDE2NjUyMEE0MTVBNzU0RTM1ODY1MkM1NzkwQ0U4NkI0 QjI2MzJERDEwHhcNMjQwNTE4MjAxNTM2WhcNMjQwNTI1MjAxNTM2WjAYMRYwFAYD VQQDEw02NjQ5MGM2OC1jYWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8t/XtrbN+18QkvAlBYBLresyh8T99fSLYsH6+UhvDKYbx5C7W86CWhYVoXt s1dD6H81k9sP5NQ/o4XRBr6dWbHJYdyY0gQPFGDCyHoN/XttmGifLrkOanK+JKu8 eRtnQp+K/IJps93/Epby0hfEXF+fkgjZ6i5/ex77lpSTvYeoi/KzmFjHbFpwmCb4 yBm/F4ZT/qWl21JV1B6V/nohc4aXDPxZcCpUcSoErXvki5X5uREOb0WKGeE6pkAe nYbv8LoGb2fyIO/nccwFWYFQWaTxKqfSvf4Oje0915Dz5tkZOTkgOvaiexKQgbkO N5oSt7kDBmbfLxJHn4w3I9LKCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZwZIA2 icY5ElE8tIEIQPmOU/znMB8GA1UdIwQYMBaAFBZlIKQVp1TjWGUsV5DOhrSyYy3R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTJDMi9CMkZFMzVERTM3 ODAxMUVBQjIxNDEzNzRDNEY5QUUwMi9GbVVncEJXblZPTllaU3hYa002R3RMSmpM ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZtVWdwQlduVk9OWVpTeFhrTTZHdExKakxkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTJDMi9CMkZFMzVERTM3ODAxMUVBQjIxNDEzNzRDNEY5QUUwMi9GbVVncEJXblZP TllaU3hYa002R3RMSmpMZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA05G3lBfDvCmCy4e151fU9heFMTgqJO+FsOx5QbEIkRdbX2Bly1ded E83metIRMoYyXK+TnNyRhnKscuwfTw4G0oUF4k6kT0OLlCEPgfRM7NSJYMXachw5 jDWljGB6iS/qxlG3Oyu6qCbhmYzCjzlWwHMYZZ2cn/EkMHfeRel3fn8O9CNRCTh3 KNW+roIkor6gFhJTIKKqA4hwFZNLuRdhL5mtxhy7C5tR+Md+CUTw9kLbOfD2C/r6 3lvTFCkb7Pu6JL7N92HXQ5Hq3VARoeCJObKvvn7rVSOQb7FVHTGhtKp6o79FjHkX R4FY+2RrE8vhA9fkknh74Inygy1CvRW2 -----END CERTIFICATE-----Generated at Sat May 18 21:31:31 2024 by rpki-client on console-ams.rpki-client.org