$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft File: fn-3i_rxIdy3dJPgd5raTNDVmBo.mft (raw, json) Hash identifier: X/nts4NiHZ9WgvCySE0xkaOGYY5NeqfaidaqrwZIxTU= Subject key identifier: 53:12:64:EA:12:F0:03:47:03:CC:B5:43:61:65:89:5C:DF:AA:06:54 Authority key identifier: 7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A Certificate issuer: /CN=A91DE7DE/serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Certificate serial: 1095 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft Manifest number: 1093 Signing time: Sat 18 May 2024 17:55:46 +0000 Manifest this update: Sat 18 May 2024 17:55:45 +0000 Manifest next update: Sat 25 May 2024 17:55:45 +0000 Files and hashes: 1: fn-3i_rxIdy3dJPgd5raTNDVmBo.crl (hash: du1K44LVCEv4ZuQ/RZbsqCHNQPhNKZ6BfyoPxcVpoOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4245 (0x1095) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE7DE/serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Validity Not Before: May 18 17:55:45 2024 GMT Not After : May 25 17:55:45 2024 GMT Subject: CN=6648eba2-3b6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:6e:c8:38:28:0a:e1:27:c6:6e:4a:db:7a:de: ec:21:fa:8c:80:bf:58:97:35:fc:21:83:0c:cd:d6: 40:0a:96:77:51:a7:b2:50:c4:ee:fc:18:cb:d4:7c: 92:1b:c9:91:ce:ce:0e:33:ff:b7:99:e0:9b:66:16: 27:45:b8:2d:02:d2:29:5e:1f:5f:0e:f0:9c:e2:a4: 16:e3:f2:38:95:5a:a9:78:a8:40:26:02:67:14:22: 99:ac:39:69:83:f9:47:f8:dc:e7:a4:87:6f:f8:e5: 67:9f:11:97:e8:16:ca:df:47:7d:35:b4:d2:f7:6a: 71:08:7f:26:23:b0:60:97:ea:73:a5:07:5a:35:a2: 64:ee:42:62:30:56:6f:40:9c:dc:72:6c:67:ac:d3: 4d:98:1b:62:6c:9b:a7:06:39:dc:42:03:bc:54:42: cd:d5:13:30:61:fc:05:b4:2d:4d:74:6d:09:cf:63: 84:31:aa:49:2b:91:76:4c:0b:18:5e:94:14:e6:65: 6e:4d:da:a9:9b:80:c6:b0:37:9f:b4:05:e3:c7:39: 6e:d4:95:ab:b1:ae:ba:60:92:f4:37:a2:be:fb:23: 96:d9:c0:e6:b5:b5:23:e7:37:f0:61:80:5b:ed:0a: 89:98:f9:3a:ce:74:42:89:c0:a1:f8:60:fb:7f:5c: 95:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:12:64:EA:12:F0:03:47:03:CC:B5:43:61:65:89:5C:DF:AA:06:54 X509v3 Authority Key Identifier: keyid:7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:80:f2:b7:13:60:9b:3f:de:18:8a:6b:c7:d3:71:8e:c0:5e: a3:82:28:80:b5:ad:2c:82:de:6e:d4:db:8d:8a:f5:a5:35:25: f1:d8:ad:c9:c6:e5:c6:f0:f3:4c:ee:35:78:9f:af:17:d5:8b: ed:87:50:e5:a7:e7:06:b5:6f:44:fd:98:5e:6a:47:f6:0a:46: 93:ab:c0:02:d0:e3:d8:65:fc:04:89:28:09:e2:c7:82:fc:2e: 91:33:47:cb:c6:3b:22:18:10:1e:5d:df:bb:06:bb:24:63:d4: 13:3d:5d:c0:45:ac:7e:28:cc:0c:94:36:a3:02:07:1e:5f:ce: 53:a6:6a:ad:86:08:cc:6f:6a:8a:4b:cd:29:dd:52:03:42:d7: b5:40:b2:0f:e7:ad:09:bd:8e:59:58:21:93:a4:ca:74:94:34: eb:51:3c:42:ca:a5:de:d2:59:b4:d2:7b:63:24:10:f6:2d:6a: 1c:e4:a3:95:35:d0:bd:92:a8:9b:68:36:2f:65:7d:6e:dc:ba: 19:39:29:f5:83:dd:08:fd:0a:80:f9:8b:f7:78:bc:d0:46:94: d6:a2:e5:ac:9c:76:00:6a:11:6a:d1:1e:06:38:b9:c5:5f:7d: e9:8a:10:99:1d:2a:c7:a6:ad:ac:c3:a5:c7:3e:b0:f6:13:a0: 3e:cf:79:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU3REUxMTAvBgNVBAUTKDdFN0ZCNzhCRkFGMTIxRENCNzc0OTNFMDc3OUFEQTRD RDBENTk4MUEwHhcNMjQwNTE4MTc1NTQ1WhcNMjQwNTI1MTc1NTQ1WjAYMRYwFAYD VQQDEw02NjQ4ZWJhMi0zYjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8W7IOCgK4SfGbkrbet7sIfqMgL9YlzX8IYMMzdZACpZ3UaeyUMTu/BjL1HyS G8mRzs4OM/+3meCbZhYnRbgtAtIpXh9fDvCc4qQW4/I4lVqpeKhAJgJnFCKZrDlp g/lH+NznpIdv+OVnnxGX6BbK30d9NbTS92pxCH8mI7Bgl+pzpQdaNaJk7kJiMFZv QJzccmxnrNNNmBtibJunBjncQgO8VELN1RMwYfwFtC1NdG0Jz2OEMapJK5F2TAsY XpQU5mVuTdqpm4DGsDeftAXjxzlu1JWrsa66YJL0N6K++yOW2cDmtbUj5zfwYYBb 7QqJmPk6znRCicCh+GD7f1yV0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMSZOoS 8ANHA8y1Q2FliVzfqgZUMB8GA1UdIwQYMBaAFH5/t4v68SHct3ST4Hea2kzQ1Zga MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTdERS9DMzMyQUZCNjA0 RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElkeTNkSlBnZDVyYVRORFZt Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZuLTNpX3J4SWR5M2RKUGdkNXJhVE5EVm1Cby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTdERS9DMzMyQUZCNjA0RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElk eTNkSlBnZDVyYVRORFZtQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdgPK3E2CbP94YimvH03GOwF6jgiiAta0sgt5u1NuNivWlNSXx2K3J xuXG8PNM7jV4n68X1Yvth1Dlp+cGtW9E/Zheakf2CkaTq8AC0OPYZfwEiSgJ4seC /C6RM0fLxjsiGBAeXd+7BrskY9QTPV3ARax+KMwMlDajAgceX85TpmqthgjMb2qK S80p3VIDQte1QLIP560JvY5ZWCGTpMp0lDTrUTxCyqXe0lm00ntjJBD2LWoc5KOV NdC9kqibaDYvZX1u3LoZOSn1g90I/QqA+Yv3eLzQRpTWouWsnHYAahFq0R4GOLnF X33pihCZHSrHpq2sw6XHPrD2E6A+z3mu -----END CERTIFICATE-----Generated at Sat May 18 19:15:26 2024 by rpki-client on console-ams.rpki-client.org