$ rpki-client -vvf rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft File: FOvueS5AUhzVGx8DIDp_jiq7EtI.mft (raw, json) Hash identifier: Hez4wpdosifFDqqnwMQjz31lxwd5fBScErFX1c5fTbg= Subject key identifier: FB:65:9D:DA:DB:F4:26:46:F8:E7:FB:6E:01:81:36:8F:CE:E3:A3:57 Authority key identifier: 14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2 Certificate issuer: /CN=A912F40E/serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2 Certificate serial: 0975 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft Manifest number: 096F Signing time: Sat 04 May 2024 21:11:09 +0000 Manifest this update: Sat 04 May 2024 21:11:08 +0000 Manifest next update: Sat 11 May 2024 21:11:08 +0000 Files and hashes: 1: FOvueS5AUhzVGx8DIDp_jiq7EtI.crl (hash: 5hY9VRa4moZB/WygJTB8sXwEzg2YxyarxIDhWjprc8E=) 2: 6677438E6B7B11EA908F7C82C4F9AE02.roa (hash: MSUgG3YpJNbihj2Swmi1mDO3TB3FswBz5L2+dcR+N7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2421 (0x975) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F40E/serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2 Validity Not Before: May 4 21:11:08 2024 GMT Not After : May 11 21:11:08 2024 GMT Subject: CN=6636a46d-f197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:99:7d:64:16:67:37:d2:74:0a:11:2a:88:60: f5:27:c7:1b:97:27:58:78:c7:74:31:a1:e7:19:a4: 83:57:a1:29:8c:eb:6d:24:2c:2b:d6:b2:12:42:11: 53:c5:08:a6:77:03:0e:99:b2:7b:4b:e9:2a:42:ff: 0f:56:cd:60:31:c4:95:62:ab:f0:30:2b:22:8d:4e: b6:e3:56:21:f7:1f:7c:c8:e9:23:87:37:ec:93:90: 33:d3:a1:ec:59:48:67:5e:2b:20:1d:7d:14:2e:2b: 65:77:e6:c5:7e:78:24:d4:09:cd:0e:a7:24:c9:04: 12:ce:ac:8a:b6:53:81:da:99:8d:ff:c8:b0:65:c3: 8d:3d:9f:72:e9:9f:cb:3e:8e:b2:87:e4:bd:87:07: b9:d9:e6:ec:f1:c6:ae:de:d1:5d:1a:94:3e:54:6a: 89:71:52:ae:d7:3d:72:fa:32:4a:d0:c4:21:56:a3: bb:c6:99:b3:4b:f4:26:fe:67:a6:7d:17:3e:1a:44: e1:5d:b2:c4:ee:2f:99:69:67:c9:1e:20:17:b9:cb: af:27:ef:ed:7a:26:e2:60:35:7e:a8:32:60:32:2e: 7d:90:8f:e7:63:88:4b:f3:a3:04:0d:21:02:c4:a7: ac:3f:37:77:ea:68:2d:b2:30:50:dd:ff:53:b8:29: d0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:65:9D:DA:DB:F4:26:46:F8:E7:FB:6E:01:81:36:8F:CE:E3:A3:57 X509v3 Authority Key Identifier: keyid:14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:93:84:45:d1:5d:6d:1b:66:b4:b1:6f:74:3b:3e:9e:80:24: 44:81:a4:1e:22:7c:5d:53:65:b7:4c:86:09:6e:bb:c4:d2:da: a8:35:0c:14:73:ee:e9:98:7e:82:b2:b7:72:80:e9:2b:7e:f6: 9e:a6:5d:e8:6b:f4:f2:5c:d7:7c:0b:29:81:36:65:c1:25:3a: 98:91:3c:78:e7:8d:52:84:b7:2a:46:33:3a:af:d6:39:be:05: bf:24:ff:90:58:b7:53:aa:a1:01:34:97:14:cb:7a:66:13:83: 19:bb:b3:b4:c6:00:82:e0:6d:83:7b:45:f6:ae:b7:cb:5f:1a: 3f:a8:91:bb:2a:91:8e:3a:f3:47:4e:5c:03:4f:a2:c5:e2:d6: 9a:22:83:46:d3:49:4e:b6:45:55:65:30:e1:9d:04:cd:5b:9d: 9c:28:31:cc:25:aa:d4:bd:b6:9e:ca:d4:c8:a4:d0:69:6f:d3: 28:0e:87:92:b9:7f:ca:93:c3:81:23:45:76:d3:03:27:b6:07: f6:be:2b:c2:52:92:12:95:4c:71:8a:ed:d0:58:4f:a2:8d:c6: 10:70:86:ae:92:42:ac:79:6b:98:12:f8:c3:c8:a7:bc:c0:fa: 0f:d5:63:9a:0e:f8:2c:3d:93:63:7d:6a:40:90:9d:b5:e6:57: b6:22:1d:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY0MEUxMTAvBgNVBAUTKDE0RUJFRTc5MkU0MDUyMUNENTFCMUYwMzIwM0E3RjhF MkFCQjEyRDIwHhcNMjQwNTA0MjExMTA4WhcNMjQwNTExMjExMTA4WjAYMRYwFAYD VQQDEw02NjM2YTQ2ZC1mMTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJl9ZBZnN9J0ChEqiGD1J8cblydYeMd0MaHnGaSDV6EpjOttJCwr1rISQhFT xQimdwMOmbJ7S+kqQv8PVs1gMcSVYqvwMCsijU6241Yh9x98yOkjhzfsk5Az06Hs WUhnXisgHX0ULitld+bFfngk1AnNDqckyQQSzqyKtlOB2pmN/8iwZcONPZ9y6Z/L Po6yh+S9hwe52ebs8cau3tFdGpQ+VGqJcVKu1z1y+jJK0MQhVqO7xpmzS/Qm/mem fRc+GkThXbLE7i+ZaWfJHiAXucuvJ+/teibiYDV+qDJgMi59kI/nY4hL86MEDSEC xKesPzd36mgtsjBQ3f9TuCnQNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtlndrb 9CZG+Of7bgGBNo/O46NXMB8GA1UdIwQYMBaAFBTr7nkuQFIc1RsfAyA6f44quxLS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjQwRS8zMDNCM0Q3ODZC NzgxMUVBQTcxM0Q3NzhDNEY5QUUwMi9GT3Z1ZVM1QVVoelZHeDhESURwX2ppcTdF dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZPdnVlUzVBVWh6Vkd4OERJRHBfamlxN0V0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjQwRS8zMDNCM0Q3ODZCNzgxMUVBQTcxM0Q3NzhDNEY5QUUwMi9GT3Z1ZVM1QVVo elZHeDhESURwX2ppcTdFdEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfk4RF0V1tG2a0sW90Oz6egCREgaQeInxdU2W3TIYJbrvE0tqoNQwU c+7pmH6CsrdygOkrfvaepl3oa/TyXNd8CymBNmXBJTqYkTx4541ShLcqRjM6r9Y5 vgW/JP+QWLdTqqEBNJcUy3pmE4MZu7O0xgCC4G2De0X2rrfLXxo/qJG7KpGOOvNH TlwDT6LF4taaIoNG00lOtkVVZTDhnQTNW52cKDHMJarUvbaeytTIpNBpb9MoDoeS uX/Kk8OBI0V20wMntgf2vivCUpISlUxxiu3QWE+ijcYQcIaukkKseWuYEvjDyKe8 wPoP1WOaDvgsPZNjfWpAkJ215le2Ih0F -----END CERTIFICATE-----Generated at Sun May 5 00:12:21 2024 by rpki-client on console-fra.rpki-client.org