$ rpki-client -vvf rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft File: fjub3aUOjafVD_OnwzKc9IPVF-k.mft (raw, json) Hash identifier: Ps0y3uaLIqqpJalf1bdgTW1Kt5iCxCEZpMWaqfiMAHo= Subject key identifier: 60:65:82:D9:28:DE:34:31:BF:56:B9:01:7B:92:3A:56:70:08:1A:C3 Authority key identifier: 7E:3B:9B:DD:A5:0E:8D:A7:D5:0F:F3:A7:C3:32:9C:F4:83:D5:17:E9 Certificate issuer: /CN=A91128AE/serialNumber=7E3B9BDDA50E8DA7D50FF3A7C3329CF483D517E9 Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft Manifest number: BD Signing time: Wed 01 May 2024 06:44:44 +0000 Manifest this update: Wed 01 May 2024 06:44:43 +0000 Manifest next update: Wed 08 May 2024 06:44:43 +0000 Files and hashes: 1: fjub3aUOjafVD_OnwzKc9IPVF-k.crl (hash: btx1KHqqmBGJ5Ihve2HRjPgZ/QvHuF5smgAoG5btSno=) 2: 12671028EDB211EDBD7A5059C4F9AE02.roa (hash: nTMcjbGl3l6Nd/7JIEfsc/CZw1yeU6o5UmEqYOt6aZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.crl rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 06:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128AE/serialNumber=7E3B9BDDA50E8DA7D50FF3A7C3329CF483D517E9 Validity Not Before: May 1 06:44:43 2024 GMT Not After : May 8 06:44:43 2024 GMT Subject: CN=6631e4db-8ad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c0:b7:a9:4e:7d:76:52:00:9f:16:70:3d:de: 64:ae:66:37:6b:50:eb:0d:36:7c:93:0a:fd:fd:e5: 32:0f:9b:0b:2d:c0:26:05:cb:9d:76:36:71:94:f5: 92:09:b6:e1:e3:93:5c:b3:24:8f:b5:40:0f:cd:c2: ed:48:e0:a9:41:6b:1a:62:68:10:03:ce:8b:e0:f4: 32:6d:43:57:dd:87:47:f2:d9:27:78:a9:e9:61:3d: 95:20:93:d0:be:81:32:50:02:2a:55:c4:ff:86:12: b5:39:f9:c4:f6:ae:6b:c3:d2:a2:0a:fe:b7:dc:34: 6c:17:61:8f:23:cf:d8:0a:4b:01:7b:03:ea:ba:50: ac:bd:2d:60:c1:5c:ac:eb:1b:c2:09:14:47:9e:fe: 13:2b:a6:9c:a2:71:00:e7:f4:68:e6:a0:71:cf:2b: 6a:dd:d5:de:ea:28:ec:88:8f:51:04:75:3d:3c:a2: 29:c0:d8:b5:38:4e:39:b6:04:47:b3:92:a4:f5:74: 9f:9d:cd:50:68:01:2e:53:20:9a:3a:b1:3b:f7:58: 19:a1:c8:18:0a:cf:7b:3e:9c:7c:ab:1c:44:22:94: 1d:07:e3:79:8a:60:9a:a2:a3:88:5b:0c:9b:e5:03: f5:93:21:b0:b2:15:a9:46:27:37:4c:db:65:89:88: ce:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:65:82:D9:28:DE:34:31:BF:56:B9:01:7B:92:3A:56:70:08:1A:C3 X509v3 Authority Key Identifier: keyid:7E:3B:9B:DD:A5:0E:8D:A7:D5:0F:F3:A7:C3:32:9C:F4:83:D5:17:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:b4:4c:88:8a:4c:ea:8a:3e:56:0a:2c:3b:fb:92:d2:1e:d9: af:66:e1:f1:4f:c8:18:54:bd:a6:2b:ab:04:2b:4d:35:1b:08: 90:95:c0:e1:47:34:b5:a1:b0:25:2a:2e:a8:0d:b8:02:3e:aa: af:19:f9:7f:a6:97:3f:95:38:b5:a0:f0:29:2a:64:d1:26:67: eb:1e:cb:57:05:b2:43:4a:a9:e7:a7:bf:00:dd:d1:27:43:31: 36:f9:c2:a7:c0:ca:a6:31:70:42:8a:db:60:ed:d9:1b:c9:35: fc:19:2f:5b:0d:c1:8f:9a:b6:3e:a8:48:5a:49:24:ef:a3:10: 91:fa:e1:b6:c1:6e:51:60:d8:9e:e1:92:9a:ea:85:b5:e5:c7: d9:59:5b:e6:28:ac:3b:28:8c:ce:68:93:fc:f2:8b:ed:c5:cc: 1c:e3:61:b5:84:10:21:c4:1a:ec:a3:9a:84:74:0f:8e:e5:db: b7:7f:76:bb:4c:9e:75:35:e3:95:b2:51:5d:b4:15:bd:81:80: c2:f0:01:37:9e:ed:90:b8:be:a6:89:dd:a9:a7:ed:5d:19:f0: 87:b3:5e:22:2e:6b:e1:b6:98:64:17:a7:cc:95:d0:d0:3c:73: fe:0d:b8:29:aa:c8:1e:f8:00:26:45:c8:61:46:84:81:c5:7e: 26:44:ea:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4QUUxMTAvBgNVBAUTKDdFM0I5QkREQTUwRThEQTdENTBGRjNBN0MzMzI5Q0Y0 ODNENTE3RTkwHhcNMjQwNTAxMDY0NDQzWhcNMjQwNTA4MDY0NDQzWjAYMRYwFAYD VQQDEw02NjMxZTRkYi04YWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsC3qU59dlIAnxZwPd5krmY3a1DrDTZ8kwr9/eUyD5sLLcAmBcuddjZxlPWS Cbbh45NcsySPtUAPzcLtSOCpQWsaYmgQA86L4PQybUNX3YdH8tkneKnpYT2VIJPQ voEyUAIqVcT/hhK1OfnE9q5rw9KiCv633DRsF2GPI8/YCksBewPqulCsvS1gwVys 6xvCCRRHnv4TK6aconEA5/Ro5qBxzytq3dXe6ijsiI9RBHU9PKIpwNi1OE45tgRH s5Kk9XSfnc1QaAEuUyCaOrE791gZocgYCs97Ppx8qxxEIpQdB+N5imCaoqOIWwyb 5QP1kyGwshWpRic3TNtliYjOwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGBlgtko 3jQxv1a5AXuSOlZwCBrDMB8GA1UdIwQYMBaAFH47m92lDo2n1Q/zp8MynPSD1Rfp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhBRS81M0VFMzE4RUVE QUQxMUVEOTE2NkZBNTNDNEY5QUUwMi9manViM2FVT2phZlZEX09ud3pLYzlJUFZG LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqdWIzYVVPamFmVkRfT253ektjOUlQVkYtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhBRS81M0VFMzE4RUVEQUQxMUVEOTE2NkZBNTNDNEY5QUUwMi9manViM2FVT2ph ZlZEX09ud3pLYzlJUFZGLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMtEyIikzqij5WCiw7+5LSHtmvZuHxT8gYVL2mK6sEK001GwiQlcDh RzS1obAlKi6oDbgCPqqvGfl/ppc/lTi1oPApKmTRJmfrHstXBbJDSqnnp78A3dEn QzE2+cKnwMqmMXBCittg7dkbyTX8GS9bDcGPmrY+qEhaSSTvoxCR+uG2wW5RYNie 4ZKa6oW15cfZWVvmKKw7KIzOaJP88ovtxcwc42G1hBAhxBrso5qEdA+O5du3f3a7 TJ51NeOVslFdtBW9gYDC8AE3nu2QuL6mid2pp+1dGfCHs14iLmvhtphkF6fMldDQ PHP+Dbgpqsge+AAmRchhRoSBxX4mROqq -----END CERTIFICATE-----Generated at Wed May 1 07:55:37 2024 by rpki-client on console-fra.rpki-client.org