$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft File: ficJop5GIOVCf3NfN8A0c-NrWXo.mft (raw, json) Hash identifier: D3XxYfWBYTQk4y0T4BD/38P0Ved+YGQNyP8T8Qtvt0w= Subject key identifier: 08:4B:5E:4B:2C:F8:C0:E6:74:E8:53:2A:1A:DE:32:97:B1:6A:6B:64 Authority key identifier: 7E:27:09:A2:9E:46:20:E5:42:7F:73:5F:37:C0:34:73:E3:6B:59:7A Certificate issuer: /CN=A91DD0A4/serialNumber=7E2709A29E4620E5427F735F37C03473E36B597A Certificate serial: 0848 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft Manifest number: 0840 Signing time: Sat 18 May 2024 21:45:16 +0000 Manifest this update: Sat 18 May 2024 21:45:16 +0000 Manifest next update: Sat 25 May 2024 21:45:16 +0000 Files and hashes: 1: ficJop5GIOVCf3NfN8A0c-NrWXo.crl (hash: q7M0mHNdyYH4ReCksx0Qr+/7kmfHVHXdrcYaGh+YHcY=) 2: C8CCE2CCAA7411EA9DF2E685C4F9AE02.roa (hash: 6I+uff1UXsEclScW0pxm4ci886ZY0LDxuI+o7m1iBhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.crl rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2120 (0x848) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD0A4/serialNumber=7E2709A29E4620E5427F735F37C03473E36B597A Validity Not Before: May 18 21:45:16 2024 GMT Not After : May 25 21:45:16 2024 GMT Subject: CN=6649216c-b02b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:4f:9b:65:33:b5:40:43:c2:e8:51:9b:fe:eb: 03:ae:eb:eb:14:f4:51:eb:ac:39:f7:f5:df:17:fd: cd:0f:82:3a:9e:7a:fd:01:79:90:23:48:8f:10:e9: 04:8b:e4:ec:6f:45:f2:59:75:da:9f:03:7d:df:48: 4e:f9:e8:19:23:fc:80:c1:b0:0d:96:72:71:d9:1a: 32:75:a0:35:ad:63:2b:54:01:42:b5:c1:ab:3a:af: b1:78:4b:a4:4f:8f:cd:f3:2f:be:2e:c4:96:e1:c0: 15:17:2b:e0:23:b2:7d:07:b9:d5:a2:0c:ae:54:9c: 5d:4e:78:6f:51:7b:e7:59:df:8c:9f:be:c6:15:85: 46:25:de:a7:5a:3f:20:a8:33:82:96:b5:f7:0b:16: a7:ac:bc:67:d8:d6:07:6b:da:8e:6e:60:8e:01:01: 9b:14:19:a1:78:98:18:fd:3e:78:13:fc:83:37:97: 1f:7b:96:2f:b0:83:07:1b:4e:fa:82:ed:4e:90:6b: 46:5c:d9:08:f7:13:2e:c2:0b:61:08:3b:25:49:08: 7a:e9:9a:91:9e:81:82:69:b0:e0:f4:d7:f0:79:8f: 24:cd:20:b8:b9:23:bf:b8:3f:3a:c9:98:72:f4:0d: ba:91:a5:68:37:e1:63:98:9e:b2:c4:78:c5:ec:51: 09:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:4B:5E:4B:2C:F8:C0:E6:74:E8:53:2A:1A:DE:32:97:B1:6A:6B:64 X509v3 Authority Key Identifier: keyid:7E:27:09:A2:9E:46:20:E5:42:7F:73:5F:37:C0:34:73:E3:6B:59:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:b8:11:72:86:43:5a:92:bd:3b:94:eb:ae:b7:64:16:81:0e: 15:fb:40:26:cb:8c:1e:36:19:86:30:db:b0:44:de:dd:b8:61: f5:48:1a:25:68:c6:b5:45:6d:ac:ff:48:34:29:a8:59:05:fb: 99:9b:4f:16:37:20:fb:3b:c9:0e:c6:ee:e8:a5:af:52:7b:df: 68:4f:91:28:62:28:4d:d3:61:91:90:19:df:9a:64:6b:2e:15: 16:26:89:c4:e4:de:5a:61:d7:44:93:4a:17:e4:8a:73:d3:7b: 41:d4:56:27:fd:4d:af:47:0f:11:53:80:38:34:27:c9:aa:80: df:79:3c:ad:cc:b9:fd:cc:14:f7:4b:76:5b:1c:3d:5e:6a:64: 16:dc:cd:1e:a4:85:2a:5d:1b:f9:c8:e4:a3:9a:da:18:1b:49: 5c:6e:76:ec:83:eb:b7:eb:07:59:47:77:78:5f:d8:e3:8c:9c: 11:99:38:6c:30:93:cb:7f:b5:8b:07:68:83:7d:fb:bd:e3:0c: c4:79:cb:bc:41:a5:1c:1d:e8:d8:ae:dd:aa:51:7d:83:19:12: 21:f8:3e:53:2b:a7:82:14:f0:02:d3:37:36:ce:25:ee:0a:d1: 7a:58:05:f3:5a:6c:91:b1:09:89:5d:03:53:b7:c2:c4:58:22: 66:68:de:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQwQTQxMTAvBgNVBAUTKDdFMjcwOUEyOUU0NjIwRTU0MjdGNzM1RjM3QzAzNDcz RTM2QjU5N0EwHhcNMjQwNTE4MjE0NTE2WhcNMjQwNTI1MjE0NTE2WjAYMRYwFAYD VQQDEw02NjQ5MjE2Yy1iMDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA90+bZTO1QEPC6FGb/usDruvrFPRR66w59/XfF/3ND4I6nnr9AXmQI0iPEOkE i+Tsb0XyWXXanwN930hO+egZI/yAwbANlnJx2RoydaA1rWMrVAFCtcGrOq+xeEuk T4/N8y++LsSW4cAVFyvgI7J9B7nVogyuVJxdTnhvUXvnWd+Mn77GFYVGJd6nWj8g qDOClrX3CxanrLxn2NYHa9qObmCOAQGbFBmheJgY/T54E/yDN5cfe5YvsIMHG076 gu1OkGtGXNkI9xMuwgthCDslSQh66ZqRnoGCabDg9NfweY8kzSC4uSO/uD86yZhy 9A26kaVoN+FjmJ6yxHjF7FEJqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAhLXkss +MDmdOhTKhreMpexamtkMB8GA1UdIwQYMBaAFH4nCaKeRiDlQn9zXzfANHPja1l6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDBBNC85NUQ1RTM5MkFB NzMxMUVBQTEwQUNDODRDNEY5QUUwMi9maWNKb3A1R0lPVkNmM05mTjhBMGMtTnJX WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZpY0pvcDVHSU9WQ2YzTmZOOEEwYy1OcldYby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDBBNC85NUQ1RTM5MkFBNzMxMUVBQTEwQUNDODRDNEY5QUUwMi9maWNKb3A1R0lP VkNmM05mTjhBMGMtTnJXWG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBouBFyhkNakr07lOuut2QWgQ4V+0Amy4weNhmGMNuwRN7duGH1SBol aMa1RW2s/0g0KahZBfuZm08WNyD7O8kOxu7opa9Se99oT5EoYihN02GRkBnfmmRr LhUWJonE5N5aYddEk0oX5Ipz03tB1FYn/U2vRw8RU4A4NCfJqoDfeTytzLn9zBT3 S3ZbHD1eamQW3M0epIUqXRv5yOSjmtoYG0lcbnbsg+u36wdZR3d4X9jjjJwRmThs MJPLf7WLB2iDffu94wzEecu8QaUcHejYrt2qUX2DGRIh+D5TK6eCFPAC0zc2ziXu CtF6WAXzWmyRsQmJXQNTt8LEWCJmaN75 -----END CERTIFICATE-----Generated at Sun May 19 00:16:20 2024 by rpki-client on console-fra.rpki-client.org