$ rpki-client -vvf rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft File: FWV3K3tOvoUEnSr5syrMh4AxGl0.mft (raw, json) Hash identifier: fol5IFXPTLL98rfHg9SWcRdKJhXVQNhSj5Dubxu3Rpc= Subject key identifier: 57:A7:91:BD:9E:A3:D9:9B:B2:BA:40:17:D7:51:E8:79:04:2D:4F:DD Authority key identifier: 15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D Certificate issuer: /CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D Certificate serial: 02DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft Manifest number: 02D7 Signing time: Sat 27 Apr 2024 03:16:36 +0000 Manifest this update: Sat 27 Apr 2024 03:16:36 +0000 Manifest next update: Sat 04 May 2024 03:16:36 +0000 Files and hashes: 1: FWV3K3tOvoUEnSr5syrMh4AxGl0.crl (hash: aCmYET+TLODTzR5ZXDiR3OzIUmK6dx3Q/90ADysLfbg=) 2: 2106E428992111EC99E0095AC4F9AE02.roa (hash: PcKJkGwaK4o171v3EBWrcFnHzSRmJYq7ZGQ7KxepW58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 03:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 731 (0x2db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D Validity Not Before: Apr 27 03:16:36 2024 GMT Not After : May 4 03:16:36 2024 GMT Subject: CN=662c6e14-20f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f7:9a:4b:36:9f:ae:86:24:e7:28:7c:28:c8: fb:a7:12:63:c5:83:db:c6:ed:04:90:e5:a2:8f:e7: 3a:fb:47:30:85:3f:d9:ac:46:df:cd:bf:b6:88:f4: 25:e2:b5:b0:dd:8d:e8:61:2f:c3:75:f4:dc:cc:5f: 41:00:9f:f6:9a:4c:3d:79:1c:f1:11:32:6e:38:a3: b5:a9:e9:00:06:e0:fd:f0:5e:c4:5a:08:5e:20:39: 65:01:f8:45:1f:4e:e4:8a:ea:a7:71:aa:32:d2:67: f3:3d:5a:ff:30:28:98:c2:c3:f2:fb:9f:ba:a8:a7: 74:29:c8:30:2f:ef:04:43:43:f9:a6:74:88:ea:8f: f8:7a:45:1c:e9:f5:84:78:46:08:a0:b1:d3:3d:07: 28:b7:7d:30:9f:db:47:75:89:21:d4:0c:3e:62:42: 8c:a2:47:ac:a1:31:60:51:f8:f2:ca:3e:da:f2:95: cc:b2:c8:e2:1c:0c:01:a8:d9:bd:2d:af:58:25:10: c4:2e:b1:75:13:b3:30:aa:d4:65:04:6e:20:10:26: 6e:3a:3f:06:79:d6:7e:bb:cf:45:47:33:5c:9d:5a: 8d:c0:cd:28:22:cb:cf:b5:39:ac:ae:98:71:46:56: 10:f0:ba:cc:f3:18:b4:e8:1a:fd:3c:86:3a:7d:b1: 69:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A7:91:BD:9E:A3:D9:9B:B2:BA:40:17:D7:51:E8:79:04:2D:4F:DD X509v3 Authority Key Identifier: keyid:15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:b8:5f:58:14:7e:34:43:fc:29:f7:e0:4f:19:f2:31:1a:a9: ae:9d:a6:14:d4:29:dd:d0:f7:22:2b:6c:89:d3:b2:4b:2c:46: c2:75:7a:8f:46:61:3e:3b:6f:98:fa:be:d3:a0:f0:43:00:b5: 38:87:30:57:99:4c:df:68:c4:ec:19:24:bc:13:bf:b2:29:b2: 8f:b2:21:24:a7:6c:08:a5:f0:29:44:25:9d:39:95:06:db:d3: bb:de:b3:fc:26:47:8e:92:13:7b:cb:0d:c4:95:ab:4b:8e:0a: f2:06:1e:d4:4e:bb:51:d9:40:b9:ed:29:ae:f4:be:ce:54:a7: 68:56:47:f3:01:ef:e6:b6:78:b5:ce:3d:c2:7f:78:24:d4:a4: 1b:8d:36:0c:ef:82:da:87:c6:06:94:30:ea:60:f4:84:ae:b2: 3a:00:bf:16:a1:3b:51:8d:bc:09:a8:fa:f7:7c:53:48:96:32: 77:81:0b:43:68:90:44:0a:41:2d:08:de:ec:ca:ea:57:a9:c7: a6:8e:cd:33:92:05:d2:3c:94:70:d6:14:96:6e:6f:5b:b1:f2: ee:49:a2:2e:a9:b9:fc:c3:6f:bf:37:34:92:51:fa:05:b8:ac: ff:e8:af:95:02:b0:4e:02:4a:13:13:86:c1:69:b3:5a:ec:f1: ec:c7:d6:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxQUQxMTAvBgNVBAUTKDE1NjU3NzJCN0I0RUJFODUwNDlEMkFGOUIzMkFDQzg3 ODAzMTFBNUQwHhcNMjQwNDI3MDMxNjM2WhcNMjQwNTA0MDMxNjM2WjAYMRYwFAYD VQQDEw02NjJjNmUxNC0yMGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PeaSzafroYk5yh8KMj7pxJjxYPbxu0EkOWij+c6+0cwhT/ZrEbfzb+2iPQl 4rWw3Y3oYS/DdfTczF9BAJ/2mkw9eRzxETJuOKO1qekABuD98F7EWgheIDllAfhF H07kiuqncaoy0mfzPVr/MCiYwsPy+5+6qKd0KcgwL+8EQ0P5pnSI6o/4ekUc6fWE eEYIoLHTPQcot30wn9tHdYkh1Aw+YkKMokesoTFgUfjyyj7a8pXMssjiHAwBqNm9 La9YJRDELrF1E7MwqtRlBG4gECZuOj8GedZ+u89FRzNcnVqNwM0oIsvPtTmsrphx RlYQ8LrM8xi06Br9PIY6fbFpyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFenkb2e o9mbsrpAF9dR6HkELU/dMB8GA1UdIwQYMBaAFBVldyt7Tr6FBJ0q+bMqzIeAMRpd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTFBRC84RkRERjVFODk5 MUQxMUVDODA5MzlBNTRDNEY5QUUwMi9GV1YzSzN0T3ZvVUVuU3I1c3lyTWg0QXhH bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXVjNLM3RPdm9VRW5TcjVzeXJNaDRBeEdsMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTFBRC84RkRERjVFODk5MUQxMUVDODA5MzlBNTRDNEY5QUUwMi9GV1YzSzN0T3Zv VUVuU3I1c3lyTWg0QXhHbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnuF9YFH40Q/wp9+BPGfIxGqmunaYU1Cnd0PciK2yJ07JLLEbCdXqP RmE+O2+Y+r7ToPBDALU4hzBXmUzfaMTsGSS8E7+yKbKPsiEkp2wIpfApRCWdOZUG 29O73rP8JkeOkhN7yw3ElatLjgryBh7UTrtR2UC57Smu9L7OVKdoVkfzAe/mtni1 zj3Cf3gk1KQbjTYM74Lah8YGlDDqYPSErrI6AL8WoTtRjbwJqPr3fFNIljJ3gQtD aJBECkEtCN7syupXqcemjs0zkgXSPJRw1hSWbm9bsfLuSaIuqbn8w2+/NzSSUfoF uKz/6K+VArBOAkoTE4bBabNa7PHsx9b0 -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:32 2024 by rpki-client on console-ams.rpki-client.org