$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft File: FwBKozEFsKDm0-tOR8UTBj2SzsI.mft (raw, json) Hash identifier: 1vFKi4ZyKk5topZkYXCbsVzT5BvXhxZxGQejaoK0A1Q= Subject key identifier: D1:7E:94:B6:2E:45:84:A1:EC:EF:17:BD:CB:6C:23:C4:DF:AE:04:76 Authority key identifier: 17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2 Certificate issuer: /CN=A91DD4A6/serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2 Certificate serial: 0339 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft Manifest number: 032F Signing time: Sun 19 May 2024 03:02:46 +0000 Manifest this update: Sun 19 May 2024 03:02:46 +0000 Manifest next update: Sun 26 May 2024 03:02:45 +0000 Files and hashes: 1: FwBKozEFsKDm0-tOR8UTBj2SzsI.crl (hash: htAm3RBFHnD3l6NGKYCY+bMrqjtnm9nAq7p8dTOE+zk=) 2: 88C188FAEB5611EE9C5CAA45C4F9AE02.roa (hash: jprpkWfVNOHjbEQ1FZ7CZhWx6lIy9Q33wx34en25Wic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.crl rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 825 (0x339) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD4A6/serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2 Validity Not Before: May 19 03:02:46 2024 GMT Not After : May 26 03:02:45 2024 GMT Subject: CN=66496bd6-01f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c5:85:b7:28:20:da:72:b6:f5:4d:63:e6:73: b7:aa:30:ad:14:f5:c2:3c:9d:42:ea:de:41:67:44: a8:91:98:17:c5:af:92:80:63:34:cf:84:ce:ba:4d: 2e:9b:34:70:5d:0e:c0:99:d2:ac:44:fa:d6:b8:7a: 49:ff:b8:19:5f:b1:8d:3c:b5:50:c7:ac:83:0f:bc: b5:24:75:cc:e5:1b:e3:21:69:b2:a8:a5:ad:aa:27: 29:62:88:48:65:6d:01:eb:5e:2b:ca:84:95:93:72: f0:49:b1:8f:0f:97:69:a8:df:cb:ab:f5:5f:32:0d: 27:45:1b:58:b1:47:99:9f:6f:15:51:db:09:e7:ee: 07:37:43:a8:ef:b4:23:1d:76:6f:9e:ca:04:3d:e0: 2b:e3:06:ea:39:ce:f5:f1:50:a5:5b:88:dd:18:bf: 89:f0:a9:b6:ec:46:24:bd:74:0a:af:dd:fe:39:4d: 27:c3:65:45:19:d8:78:2d:9e:c5:b6:2d:5f:ab:93: 52:24:fe:ad:35:c5:27:a4:2f:3a:b4:8c:79:73:d7: ad:9d:6d:66:bc:c3:23:4f:f6:4d:82:9e:05:37:93: 27:d9:12:dc:60:2b:5b:0e:f7:48:8b:37:0c:6b:30: 19:a8:00:d5:37:cc:64:e6:e3:e6:d4:3b:b0:7b:04: 45:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:7E:94:B6:2E:45:84:A1:EC:EF:17:BD:CB:6C:23:C4:DF:AE:04:76 X509v3 Authority Key Identifier: keyid:17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:d8:a8:db:bd:81:8e:b3:a6:a8:aa:64:06:e3:fa:be:97:fd: f1:47:07:c4:77:78:fb:15:6b:5b:7e:51:d8:7e:d4:6e:d5:7e: 3a:1d:24:9f:9b:48:8f:e3:fb:60:9e:54:39:79:75:60:5f:65: 14:81:26:77:94:04:10:56:e0:02:08:21:fb:bd:fc:1a:66:e8: 2b:84:f2:7d:db:e9:8c:41:4f:08:80:00:9f:a9:c0:96:5d:8d: f2:e6:6b:84:ca:76:35:2d:f7:e0:9f:e7:2d:e7:2b:23:3a:c5: 53:09:1a:6f:20:bf:de:89:a4:89:23:a6:f6:57:c2:c9:f9:f5: 82:88:3e:c6:23:b5:fa:31:e9:b9:51:65:1d:5e:52:f4:e8:b9: 39:c9:95:56:b3:77:67:d3:35:e9:65:ad:88:e8:02:46:0b:4a: f9:36:0d:14:eb:f3:22:b7:0a:de:af:9e:3d:cb:1b:40:15:67: 17:cb:e0:c8:74:0e:a7:ce:df:86:ca:3a:ec:9f:83:da:c2:9c: 64:5a:e3:7b:0e:7e:de:64:29:05:d5:da:03:e9:28:1e:e5:8f: fc:e6:49:72:0f:84:54:d4:40:3e:f5:2b:e1:6b:4e:90:09:0d: 6d:c0:61:0a:d1:85:fe:ce:73:00:35:cb:f3:54:31:65:03:88: 0e:c5:20:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ0QTYxMTAvBgNVBAUTKDE3MDA0QUEzMzEwNUIwQTBFNkQzRUI0RTQ3QzUxMzA2 M0Q5MkNFQzIwHhcNMjQwNTE5MDMwMjQ2WhcNMjQwNTI2MDMwMjQ1WjAYMRYwFAYD VQQDEw02NjQ5NmJkNi0wMWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcWFtygg2nK29U1j5nO3qjCtFPXCPJ1C6t5BZ0SokZgXxa+SgGM0z4TOuk0u mzRwXQ7AmdKsRPrWuHpJ/7gZX7GNPLVQx6yDD7y1JHXM5RvjIWmyqKWtqicpYohI ZW0B614ryoSVk3LwSbGPD5dpqN/Lq/VfMg0nRRtYsUeZn28VUdsJ5+4HN0Oo77Qj HXZvnsoEPeAr4wbqOc718VClW4jdGL+J8Km27EYkvXQKr93+OU0nw2VFGdh4LZ7F ti1fq5NSJP6tNcUnpC86tIx5c9etnW1mvMMjT/ZNgp4FN5Mn2RLcYCtbDvdIizcM azAZqADVN8xk5uPm1DuwewRFdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNF+lLYu RYSh7O8XvctsI8TfrgR2MB8GA1UdIwQYMBaAFBcASqMxBbCg5tPrTkfFEwY9ks7C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDRBNi82QTU5NjlBODdF OTUxMUVDODJFRTUyMEFDNEY5QUUwMi9Gd0JLb3pFRnNLRG0wLXRPUjhVVEJqMlN6 c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z3QktvekVGc0tEbTAtdE9SOFVUQmoyU3pzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDRBNi82QTU5NjlBODdFOTUxMUVDODJFRTUyMEFDNEY5QUUwMi9Gd0JLb3pFRnNL RG0wLXRPUjhVVEJqMlN6c0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE2KjbvYGOs6aoqmQG4/q+l/3xRwfEd3j7FWtbflHYftRu1X46HSSf m0iP4/tgnlQ5eXVgX2UUgSZ3lAQQVuACCCH7vfwaZugrhPJ92+mMQU8IgACfqcCW XY3y5muEynY1Lffgn+ct5ysjOsVTCRpvIL/eiaSJI6b2V8LJ+fWCiD7GI7X6Mem5 UWUdXlL06Lk5yZVWs3dn0zXpZa2I6AJGC0r5Ng0U6/Mitwrer549yxtAFWcXy+DI dA6nzt+Gyjrsn4PawpxkWuN7Dn7eZCkF1doD6Sge5Y/85klyD4RU1EA+9Svha06Q CQ1twGEK0YX+znMANcvzVDFlA4gOxSBF -----END CERTIFICATE-----Generated at Sun May 19 03:48:52 2024 by rpki-client on console-fra.rpki-client.org