$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft File: FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft (raw, json) Hash identifier: eljoOjM8H8TQ55I21cRbnLYkfrkUUccZ0MmRQxdIttA= Subject key identifier: 24:88:BF:A5:AD:FE:D3:AD:1D:5B:58:84:09:59:9E:B3:68:04:0E:C7 Authority key identifier: 16:13:D6:EB:FC:D8:49:CF:CC:0A:88:8D:B9:7E:6B:BF:52:07:AD:B3 Certificate issuer: /CN=A91F6E7D/serialNumber=1613D6EBFCD849CFCC0A888DB97E6BBF5207ADB3 Certificate serial: 0901 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPW6_zYSc_MCoiNuX5rv1IHrbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft Manifest number: 08FA Signing time: Sat 18 May 2024 21:17:26 +0000 Manifest this update: Sat 18 May 2024 21:17:25 +0000 Manifest next update: Sat 25 May 2024 21:17:25 +0000 Files and hashes: 1: FhPW6_zYSc_MCoiNuX5rv1IHrbM.crl (hash: YGLAHFVTT0i3mnOFFsiTH41dUjwh/PwgvFr2Vplvv5Q=) 2: 4AEB32A2D2F911EA93B2C659C4F9AE02.roa (hash: 3rWkl0W3crfARyeJEWHkC4Z5dwQIq9F1gZTXeYw8MYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.crl rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPW6_zYSc_MCoiNuX5rv1IHrbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2305 (0x901) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6E7D/serialNumber=1613D6EBFCD849CFCC0A888DB97E6BBF5207ADB3 Validity Not Before: May 18 21:17:25 2024 GMT Not After : May 25 21:17:25 2024 GMT Subject: CN=66491ae6-1dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0a:10:a8:77:07:59:1c:79:0d:3b:01:2d:b9: 33:4e:0b:24:47:8a:73:e7:56:a1:f6:87:b3:0a:25: e6:3c:23:95:13:f9:34:f9:b0:96:9f:80:4d:6d:d8: 31:99:82:37:7b:95:38:a5:78:08:08:f8:ce:e5:11: 0e:c9:46:60:fc:91:cd:dc:40:6f:bc:08:af:28:3d: 21:c8:5b:91:18:75:8f:6d:9a:eb:99:2f:0c:91:8f: 45:c6:04:95:f9:58:e9:a2:34:8f:81:9c:41:80:6c: f0:73:60:a1:40:bc:53:ca:8d:1b:a4:62:a1:00:1e: 60:8c:ca:78:53:f2:76:ac:0d:43:a6:06:8d:2f:07: 2a:f5:98:cf:4b:47:83:40:a6:7c:b9:c3:0f:88:41: 3e:39:47:0b:ea:67:86:50:f5:d5:ee:55:cf:80:58: 4b:3f:72:9a:c1:c6:57:25:d7:bb:dd:27:c4:85:88: 70:47:25:11:78:d0:84:92:1a:66:57:4d:d5:ac:ee: 3f:2c:0e:e6:d2:0b:ee:e6:36:26:c4:89:f1:6c:1f: 70:75:b9:78:7f:47:f2:35:c4:12:92:a3:63:0b:bc: 07:84:01:a9:e7:e9:6c:48:33:b3:24:bb:1e:2d:6e: 78:59:cd:82:47:4d:bb:e7:fa:bb:59:57:60:aa:df: f4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:88:BF:A5:AD:FE:D3:AD:1D:5B:58:84:09:59:9E:B3:68:04:0E:C7 X509v3 Authority Key Identifier: keyid:16:13:D6:EB:FC:D8:49:CF:CC:0A:88:8D:B9:7E:6B:BF:52:07:AD:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPW6_zYSc_MCoiNuX5rv1IHrbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:0e:8a:7f:32:37:fa:56:d0:9b:0f:c0:ef:76:b8:e6:18:d5: 48:c3:22:75:b6:5e:af:26:d5:de:ae:54:1f:16:6e:02:50:5b: ec:f8:81:8e:64:bd:63:63:c6:da:7c:a8:c2:81:00:fd:5a:f2: 6e:7c:55:1f:b9:06:e7:d3:46:0f:c4:ff:33:3b:42:8f:12:c2: 69:c8:5b:ea:71:63:55:a4:c4:19:09:4d:90:cc:83:3f:3e:6e: 9b:85:b1:d7:e3:95:fd:14:42:93:d4:35:d8:bc:5d:e5:5c:ab: bb:53:1c:22:04:49:c2:81:59:e7:9a:cb:e3:0f:f0:5d:e0:d4: 58:07:1d:51:d2:cf:7b:96:3d:7b:69:57:da:b4:b0:59:05:7b: a1:cf:79:63:de:82:d3:d1:5b:3c:18:0a:a0:ab:03:5e:84:99: 2e:df:66:3a:1e:5d:fc:dd:a9:fc:c3:a7:ee:cb:fe:5b:2f:df: 7f:71:4f:8a:c1:c2:13:e2:56:b3:b4:cf:72:0f:91:1e:a4:c3: 49:d6:98:58:d1:95:00:5c:09:b5:67:f0:77:8a:9a:1a:e9:2f: 84:20:e8:b8:d3:ee:45:66:61:78:a0:a7:72:70:0a:59:d8:64: a4:c5:00:6f:55:38:b2:93:6c:3a:e3:a3:cd:d8:59:79:7e:c3: c6:e9:fd:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZFN0QxMTAvBgNVBAUTKDE2MTNENkVCRkNEODQ5Q0ZDQzBBODg4REI5N0U2QkJG NTIwN0FEQjMwHhcNMjQwNTE4MjExNzI1WhcNMjQwNTI1MjExNzI1WjAYMRYwFAYD VQQDEw02NjQ5MWFlNi0xZGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgoQqHcHWRx5DTsBLbkzTgskR4pz51ah9oezCiXmPCOVE/k0+bCWn4BNbdgx mYI3e5U4pXgICPjO5REOyUZg/JHN3EBvvAivKD0hyFuRGHWPbZrrmS8MkY9FxgSV +VjpojSPgZxBgGzwc2ChQLxTyo0bpGKhAB5gjMp4U/J2rA1DpgaNLwcq9ZjPS0eD QKZ8ucMPiEE+OUcL6meGUPXV7lXPgFhLP3KawcZXJde73SfEhYhwRyUReNCEkhpm V03VrO4/LA7m0gvu5jYmxInxbB9wdbl4f0fyNcQSkqNjC7wHhAGp5+lsSDOzJLse LW54Wc2CR0275/q7WVdgqt/0vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSIv6Wt /tOtHVtYhAlZnrNoBA7HMB8GA1UdIwQYMBaAFBYT1uv82EnPzAqIjbl+a79SB62z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU3RC8xRTlBMTFDMjgz ODExMUVBQUNCOUJDMzBDNEY5QUUwMi9GaFBXNl96WVNjX01Db2lOdVg1cnYxSUhy Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoUFc2X3pZU2NfTUNvaU51WDVydjFJSHJiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkU3RC8xRTlBMTFDMjgzODExMUVBQUNCOUJDMzBDNEY5QUUwMi9GaFBXNl96WVNj X01Db2lOdVg1cnYxSUhyYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9Dop/Mjf6VtCbD8DvdrjmGNVIwyJ1tl6vJtXerlQfFm4CUFvs+IGO ZL1jY8bafKjCgQD9WvJufFUfuQbn00YPxP8zO0KPEsJpyFvqcWNVpMQZCU2QzIM/ Pm6bhbHX45X9FEKT1DXYvF3lXKu7UxwiBEnCgVnnmsvjD/Bd4NRYBx1R0s97lj17 aVfatLBZBXuhz3lj3oLT0Vs8GAqgqwNehJku32Y6Hl383an8w6fuy/5bL99/cU+K wcIT4laztM9yD5EepMNJ1phY0ZUAXAm1Z/B3ipoa6S+EIOi40+5FZmF4oKdycApZ 2GSkxQBvVTiyk2w646PN2Fl5fsPG6f32 -----END CERTIFICATE-----Generated at Sat May 18 22:14:05 2024 by rpki-client on console-fra.rpki-client.org