$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft File: fvLsMxvWVD0y25gMUGJsBAfKiYI.mft (raw, json) Hash identifier: 7SpfmQ7ve2/GIQ3uum0H1SuvLuP6QoG6zsHPg0VivD8= Subject key identifier: E9:37:BB:03:37:B2:A6:1E:58:9C:DE:E9:8E:EC:2B:D5:C4:69:66:FC Authority key identifier: 7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82 Certificate issuer: /CN=A91D5E23/serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982 Certificate serial: 0817 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft Manifest number: 0812 Signing time: Sat 18 May 2024 21:50:08 +0000 Manifest this update: Sat 18 May 2024 21:50:07 +0000 Manifest next update: Sat 25 May 2024 21:50:07 +0000 Files and hashes: 1: fvLsMxvWVD0y25gMUGJsBAfKiYI.crl (hash: qxyeLAvYyfhpMMztgs9lZ08g2Oo3f+g/68jZQTdIQRs=) 2: 70C35E88B07511EA8C0EC372C4F9AE02.roa (hash: 956ajCquzYApHK+QBCIF5rt+mjn+xmrWfi6TNjOt4mQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.crl rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2071 (0x817) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5E23/serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982 Validity Not Before: May 18 21:50:07 2024 GMT Not After : May 25 21:50:07 2024 GMT Subject: CN=66492290-2a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e1:56:74:e3:c8:44:6d:88:d7:56:82:2f:f6: e0:0d:11:45:2f:24:0c:47:bb:74:b7:72:bd:38:40: 71:93:01:6d:06:cf:a1:17:62:ca:0e:6c:eb:2d:09: 7a:c5:aa:5b:57:56:a6:a5:f8:57:c5:9f:db:75:29: 90:02:e1:5e:dc:ce:12:08:cd:b5:49:72:42:d3:56: c5:1b:60:ea:b0:e3:6a:1f:a8:f8:f5:b8:ab:91:37: af:16:3e:7a:99:cb:b4:91:bb:a5:f7:e9:8d:8c:a0: 5d:14:d0:ef:72:5f:fc:1e:31:0b:ac:94:af:7d:cb: 56:41:e8:b8:f3:85:3d:af:90:95:53:17:f1:1d:c9: fa:be:cd:67:19:14:81:b1:97:4a:cd:ac:93:e2:aa: 02:18:4f:93:8c:6c:5e:4b:9c:b9:64:4f:7f:cc:fd: 11:85:e8:77:77:5a:4e:67:95:c4:8b:21:82:e2:b8: 91:d0:39:0b:57:1c:c1:f1:1d:94:cf:da:6b:7e:f6: 0c:6a:53:24:ca:f1:d6:21:32:b5:65:b7:5b:37:86: ed:ba:2c:04:eb:c0:76:18:20:0c:90:63:f6:77:fe: 97:af:0c:a8:a8:3d:9e:b8:67:00:0c:4c:d0:07:c8: 67:3b:53:df:06:f6:59:34:12:e2:62:80:fc:14:0c: 5f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:37:BB:03:37:B2:A6:1E:58:9C:DE:E9:8E:EC:2B:D5:C4:69:66:FC X509v3 Authority Key Identifier: keyid:7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:16:e7:b3:a0:95:de:73:c8:09:79:46:2d:e8:33:69:2e:30: 5d:cb:27:6c:01:6f:02:04:88:67:89:d8:10:f8:3c:6f:c6:76: b5:67:de:d3:3a:2f:e9:82:9e:1b:a1:b5:b0:17:e8:05:71:cf: 39:2e:1f:43:83:6c:59:79:96:b5:b9:39:8d:76:69:d8:19:7c: 9a:fc:a1:e3:eb:15:a9:53:4a:d1:20:1d:77:df:13:ce:72:90: 89:ea:a5:fc:66:c8:f9:b0:b5:b0:f7:4e:7e:d3:7b:3b:12:07: d9:da:05:32:a0:bd:8f:45:d7:0d:fe:48:6b:ef:3f:fd:48:6f: 61:91:3f:26:b5:6c:95:95:43:26:e2:c7:f7:32:bb:c1:de:7e: 81:20:44:23:82:32:73:d5:b7:33:e2:d8:46:84:2e:10:ef:cb: 04:aa:d4:88:17:23:2e:da:3f:13:1e:84:92:8d:9b:4d:4e:d6: aa:8a:28:3f:a9:a2:3b:59:a7:38:b7:8f:f0:36:d2:43:d1:44: 78:e3:41:0a:b3:be:cd:26:89:68:6d:9b:1a:ce:9a:29:07:8e: 9e:d5:b8:23:90:49:02:90:9e:8d:dd:24:2e:bd:41:87:be:82: ed:63:84:6d:fc:c2:9a:b2:2c:71:48:bf:b1:8e:2e:52:41:86: 37:9f:f4:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVFMjMxMTAvBgNVBAUTKDdFRjJFQzMzMUJENjU0M0QzMkRCOTgwQzUwNjI2QzA0 MDdDQTg5ODIwHhcNMjQwNTE4MjE1MDA3WhcNMjQwNTI1MjE1MDA3WjAYMRYwFAYD VQQDEw02NjQ5MjI5MC0yYTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyeFWdOPIRG2I11aCL/bgDRFFLyQMR7t0t3K9OEBxkwFtBs+hF2LKDmzrLQl6 xapbV1ampfhXxZ/bdSmQAuFe3M4SCM21SXJC01bFG2DqsONqH6j49birkTevFj56 mcu0kbul9+mNjKBdFNDvcl/8HjELrJSvfctWQei484U9r5CVUxfxHcn6vs1nGRSB sZdKzayT4qoCGE+TjGxeS5y5ZE9/zP0Rheh3d1pOZ5XEiyGC4riR0DkLVxzB8R2U z9prfvYMalMkyvHWITK1ZbdbN4btuiwE68B2GCAMkGP2d/6XrwyoqD2euGcADEzQ B8hnO1PfBvZZNBLiYoD8FAxfvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOk3uwM3 sqYeWJze6Y7sK9XEaWb8MB8GA1UdIwQYMBaAFH7y7DMb1lQ9MtuYDFBibAQHyomC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUUyMy84NjJBODNDQUIw NzMxMUVBOTBFQzk5NkVDNEY5QUUwMi9mdkxzTXh2V1ZEMHkyNWdNVUdKc0JBZktp WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z2THNNeHZXVkQweTI1Z01VR0pzQkFmS2lZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUUyMy84NjJBODNDQUIwNzMxMUVBOTBFQzk5NkVDNEY5QUUwMi9mdkxzTXh2V1ZE MHkyNWdNVUdKc0JBZktpWUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATFuezoJXec8gJeUYt6DNpLjBdyydsAW8CBIhnidgQ+Dxvxna1Z97T Oi/pgp4bobWwF+gFcc85Lh9Dg2xZeZa1uTmNdmnYGXya/KHj6xWpU0rRIB133xPO cpCJ6qX8Zsj5sLWw905+03s7EgfZ2gUyoL2PRdcN/khr7z/9SG9hkT8mtWyVlUMm 4sf3MrvB3n6BIEQjgjJz1bcz4thGhC4Q78sEqtSIFyMu2j8THoSSjZtNTtaqiig/ qaI7Wac4t4/wNtJD0UR440EKs77NJolobZsazpopB46e1bgjkEkCkJ6N3SQuvUGH voLtY4Rt/MKasixxSL+xji5SQYY3n/Su -----END CERTIFICATE-----Generated at Sun May 19 00:16:19 2024 by rpki-client on console-fra.rpki-client.org