$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft File: FsAdnKD_vvrguwEOUURQeupBDQM.mft (raw, json) Hash identifier: Nct4GZcv1TLMs0tIsr1p1bKLwqSr9PQi/vDE2MEw8Ag= Subject key identifier: 55:BC:35:70:9B:58:A5:75:61:91:82:2F:85:4F:C1:DD:23:59:E0:A4 Authority key identifier: 16:C0:1D:9C:A0:FF:BE:FA:E0:BB:01:0E:51:44:50:7A:EA:41:0D:03 Certificate issuer: /CN=A91415AA/serialNumber=16C01D9CA0FFBEFAE0BB010E5144507AEA410D03 Certificate serial: 07B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft Manifest number: 1136 Signing time: Tue 30 Apr 2024 21:13:27 +0000 Manifest this update: Tue 30 Apr 2024 21:13:27 +0000 Manifest next update: Tue 07 May 2024 21:13:27 +0000 Files and hashes: 1: FsAdnKD_vvrguwEOUURQeupBDQM.crl (hash: rVvVWuh+pEJEpHtvNuWNnYZrwl+QUI1yIIArBPP8rIk=) 2: 92CF8C78D49711EEB1F29E51C4F9AE02.roa (hash: cxibNan7ElxE1tnazxmzgw6bQ/N+bhDSSmvx94QIG8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.crl rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 20:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1968 (0x7b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415AA/serialNumber=16C01D9CA0FFBEFAE0BB010E5144507AEA410D03 Validity Not Before: Apr 30 21:13:27 2024 GMT Not After : May 7 21:13:27 2024 GMT Subject: CN=66315ef7-174c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f5:6a:5f:d1:e6:37:7f:a6:e6:a1:02:cf:84: da:c6:b1:d0:7a:be:90:f0:04:57:b0:d1:25:25:bb: 59:ab:6f:c7:73:9e:b7:90:e1:fb:93:c9:8b:c2:d9: 63:b7:b2:ff:31:a7:b6:19:d8:f6:77:af:19:20:40: d7:37:2c:3a:33:d9:54:a6:3c:6e:85:36:6d:dc:2c: 80:82:33:7f:ca:09:2f:53:77:4d:e1:5c:bd:91:45: 5e:12:2d:ed:d7:6b:d1:4b:99:24:fc:6b:5a:70:17: c9:55:96:55:1d:ab:75:0a:51:4f:a4:42:77:4f:ef: 38:4f:e3:59:4f:23:4a:f4:e0:ed:ce:8b:61:70:ec: dd:d2:25:79:88:85:b8:f6:33:8a:f9:76:54:f6:ac: 0e:67:6b:80:2f:e0:db:66:e4:36:ad:7f:60:5a:fe: ec:9e:b2:0b:45:ed:b0:1b:7c:7b:3c:f4:59:6b:c3: b9:c8:d9:41:b0:39:12:c8:c5:81:35:4b:ae:20:d0: 9e:a9:58:b9:79:37:1b:07:fe:e6:06:73:e9:e4:f2: ee:87:8f:67:ca:a8:50:fd:66:c6:a2:8f:18:f4:ca: 0c:e9:7b:79:2d:bb:a6:8a:4f:fc:d4:ec:f6:e2:33: 2c:f1:44:5d:e3:f2:97:73:ee:80:c7:80:31:02:6a: b6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:BC:35:70:9B:58:A5:75:61:91:82:2F:85:4F:C1:DD:23:59:E0:A4 X509v3 Authority Key Identifier: keyid:16:C0:1D:9C:A0:FF:BE:FA:E0:BB:01:0E:51:44:50:7A:EA:41:0D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:45:bc:25:03:1c:a5:25:3d:2a:91:d3:63:be:0b:7c:86:de: 9c:ed:78:31:f3:4b:bc:bb:2e:14:b2:22:d7:ae:44:90:7a:2a: e6:51:62:b0:2f:d7:ea:13:0f:68:3d:33:de:bf:58:8e:6f:06: 46:99:9f:8f:a9:29:d7:21:1e:ef:12:35:a4:e3:78:79:20:5f: 3c:50:e0:48:17:25:d5:f5:64:45:41:00:0c:4c:c3:07:ff:23: 9a:52:ca:82:c9:94:cb:9b:4d:99:59:32:c6:a5:a3:ad:32:32: 84:e2:bd:50:77:c0:45:2c:7b:04:b3:3a:5b:a7:76:cc:a7:b3: 45:59:10:b9:74:2f:55:21:e2:e4:86:4b:1e:90:12:7b:5d:3d: c1:27:31:98:06:a3:2f:e2:c1:b5:e0:43:20:60:81:a9:7a:68: cb:98:2e:73:cd:e2:92:0e:05:ce:eb:6c:ce:d1:15:35:c7:2b: 57:30:fe:de:dd:58:2f:86:93:0a:ed:18:66:e9:9e:81:37:d9: 32:cf:85:44:94:67:e1:26:df:c0:00:d7:92:e5:8e:a7:d5:c1: 05:12:94:66:76:ec:12:49:1e:00:3f:86:67:a7:6e:56:f6:24: 7a:78:98:54:09:34:ba:d3:a6:3e:dd:0d:ff:8c:ea:9c:e4:a5: d1:49:24:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1QUExMTAvBgNVBAUTKDE2QzAxRDlDQTBGRkJFRkFFMEJCMDEwRTUxNDQ1MDdB RUE0MTBEMDMwHhcNMjQwNDMwMjExMzI3WhcNMjQwNTA3MjExMzI3WjAYMRYwFAYD VQQDEw02NjMxNWVmNy0xNzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6PVqX9HmN3+m5qECz4TaxrHQer6Q8ARXsNElJbtZq2/Hc563kOH7k8mLwtlj t7L/Mae2Gdj2d68ZIEDXNyw6M9lUpjxuhTZt3CyAgjN/ygkvU3dN4Vy9kUVeEi3t 12vRS5kk/GtacBfJVZZVHat1ClFPpEJ3T+84T+NZTyNK9ODtzothcOzd0iV5iIW4 9jOK+XZU9qwOZ2uAL+DbZuQ2rX9gWv7snrILRe2wG3x7PPRZa8O5yNlBsDkSyMWB NUuuINCeqVi5eTcbB/7mBnPp5PLuh49nyqhQ/WbGoo8Y9MoM6Xt5Lbumik/81Oz2 4jMs8URd4/KXc+6Ax4AxAmq2SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFW8NXCb WKV1YZGCL4VPwd0jWeCkMB8GA1UdIwQYMBaAFBbAHZyg/7764LsBDlFEUHrqQQ0D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVBQS8zRUZBMjQxNDYy RTAxMUVBQTZENTlBMkNDNEY5QUUwMi9Gc0FkbktEX3Z2cmd1d0VPVVVSUWV1cEJE UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZzQWRuS0RfdnZyZ3V3RU9VVVJRZXVwQkRRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTVBQS8zRUZBMjQxNDYyRTAxMUVBQTZENTlBMkNDNEY5QUUwMi9Gc0FkbktEX3Z2 cmd1d0VPVVVSUWV1cEJEUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiRbwlAxylJT0qkdNjvgt8ht6c7Xgx80u8uy4UsiLXrkSQeirmUWKw L9fqEw9oPTPev1iObwZGmZ+PqSnXIR7vEjWk43h5IF88UOBIFyXV9WRFQQAMTMMH /yOaUsqCyZTLm02ZWTLGpaOtMjKE4r1Qd8BFLHsEszpbp3bMp7NFWRC5dC9VIeLk hksekBJ7XT3BJzGYBqMv4sG14EMgYIGpemjLmC5zzeKSDgXO62zO0RU1xytXMP7e 3VgvhpMK7Rhm6Z6BN9kyz4VElGfhJt/AANeS5Y6n1cEFEpRmduwSSR4AP4Znp25W 9iR6eJhUCTS606Y+3Q3/jOqc5KXRSSS7 -----END CERTIFICATE-----Generated at Tue Apr 30 21:58:52 2024 by rpki-client on console-ams.rpki-client.org