$ rpki-client -vvf rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft File: FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft (raw, json) Hash identifier: dNQkRqua5flHhu5Y8BIIVyojjC0Q/HUjC07vuRZ9UDg= Subject key identifier: 17:DE:0D:4B:53:F0:68:23:5B:88:5A:86:0E:20:CC:A4:2B:06:64:9E Authority key identifier: 15:2A:3B:43:22:5C:FA:2C:5F:8D:E2:7A:9A:68:93:D3:B2:3F:5D:E3 Certificate issuer: /CN=A91468A1/serialNumber=152A3B43225CFA2C5F8DE27A9A6893D3B23F5DE3 Certificate serial: 09FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft Manifest number: 09F6 Signing time: Sat 04 May 2024 20:50:29 +0000 Manifest this update: Sat 04 May 2024 20:50:29 +0000 Manifest next update: Sat 11 May 2024 20:50:29 +0000 Files and hashes: 1: FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl (hash: ufbkRbfnPp00N5f/klZa7bbrMSbZ+pRaAL9o3kt+ee8=) 2: F0520A385DD611EAA4AD4767C4F9AE02.roa (hash: lmF/e5IG5EpeViX3RQEVWvmsb2v09JOH6dxA1kV5Fos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 20:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2557 (0x9fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91468A1/serialNumber=152A3B43225CFA2C5F8DE27A9A6893D3B23F5DE3 Validity Not Before: May 4 20:50:29 2024 GMT Not After : May 11 20:50:29 2024 GMT Subject: CN=66369f95-2ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:67:39:06:fc:28:d7:1a:7c:d4:65:b0:34:71: 0f:d1:26:d8:0c:08:01:9b:fc:53:0e:9d:50:3a:e4: af:52:cd:71:79:97:45:8a:8b:06:65:d6:3e:9b:23: ee:ff:5a:cd:f3:65:a6:7b:97:9a:cb:1f:45:b3:60: 53:25:07:98:69:8d:52:23:72:7f:89:85:d2:4e:e7: 37:8c:9e:e8:a5:66:15:09:99:97:fa:cd:d9:4d:88: dd:09:2a:b1:8c:ff:f2:dc:76:c8:54:c5:a7:d3:b5: c5:b0:8e:17:12:17:88:f0:4c:0b:14:47:b1:0c:54: d7:5e:7b:42:c2:78:ce:81:ed:e5:a4:9e:1f:77:43: ad:13:82:b6:18:ee:10:53:cd:a3:c1:d7:0f:d3:24: 92:9b:48:17:7a:6e:1d:29:41:22:e6:07:5c:69:ca: 85:0d:9e:92:73:d0:00:92:fe:82:4a:f2:6d:ab:29: f3:e7:54:53:33:37:59:ca:3d:1b:1c:ce:8e:57:8b: 07:64:21:b8:1e:37:fa:ab:ff:dd:7c:ab:8c:c3:e0: ea:e2:4b:bc:b0:1a:c6:d8:45:17:39:fd:17:c5:06: 6c:bf:82:e6:ad:31:77:70:65:79:53:0c:85:fc:c2: 5a:a0:cc:63:71:fd:4d:99:9c:e2:23:7e:e7:b2:52: b0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:DE:0D:4B:53:F0:68:23:5B:88:5A:86:0E:20:CC:A4:2B:06:64:9E X509v3 Authority Key Identifier: keyid:15:2A:3B:43:22:5C:FA:2C:5F:8D:E2:7A:9A:68:93:D3:B2:3F:5D:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:7e:fe:ee:ee:50:b5:ff:2c:e6:aa:3c:f6:51:02:01:3e:9c: 4e:50:35:85:2d:0d:4d:d5:6c:9e:80:2b:ca:00:03:88:a1:31: 87:88:9b:e3:2d:cc:3d:21:ec:57:b9:26:41:d7:5b:0f:44:3d: b9:a8:f0:36:23:67:a6:f6:16:9c:89:13:95:91:97:f7:42:a7: 4c:a7:71:0a:64:3c:5c:0e:75:a5:06:76:4c:88:47:0a:db:43: 23:26:4b:31:e6:2b:e2:c3:0a:e2:f8:b4:de:4f:37:eb:3b:a0: be:86:77:22:17:d0:ad:95:52:54:d2:2f:76:8b:43:7e:cd:59: da:50:0e:5d:e9:33:9d:cd:c8:4d:cc:33:55:70:e1:d9:cc:b3: 71:6d:e4:70:1a:c2:b0:29:10:1b:ae:b8:b6:30:42:8e:d1:14: a6:bb:e8:c8:b3:8e:3e:02:0c:db:6d:60:25:3b:f1:53:df:3c: 2c:f7:b0:7d:b7:5a:1a:54:bc:40:a1:cc:3d:39:4c:32:03:31: a6:a8:70:28:23:ba:a9:74:13:48:69:c1:cc:19:8c:21:54:de: 15:e0:82:45:5e:9f:a6:79:e8:6d:a8:e3:85:ca:0d:63:97:a8: 2f:35:6c:7b:e2:f2:ec:17:fb:07:f9:eb:07:1d:e5:33:c4:99: 1a:45:cc:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY4QTExMTAvBgNVBAUTKDE1MkEzQjQzMjI1Q0ZBMkM1RjhERTI3QTlBNjg5M0Qz QjIzRjVERTMwHhcNMjQwNTA0MjA1MDI5WhcNMjQwNTExMjA1MDI5WjAYMRYwFAYD VQQDEw02NjM2OWY5NS0yYWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmc5Bvwo1xp81GWwNHEP0SbYDAgBm/xTDp1QOuSvUs1xeZdFiosGZdY+myPu /1rN82Wme5eayx9Fs2BTJQeYaY1SI3J/iYXSTuc3jJ7opWYVCZmX+s3ZTYjdCSqx jP/y3HbIVMWn07XFsI4XEheI8EwLFEexDFTXXntCwnjOge3lpJ4fd0OtE4K2GO4Q U82jwdcP0ySSm0gXem4dKUEi5gdcacqFDZ6Sc9AAkv6CSvJtqynz51RTMzdZyj0b HM6OV4sHZCG4Hjf6q//dfKuMw+Dq4ku8sBrG2EUXOf0XxQZsv4LmrTF3cGV5UwyF /MJaoMxjcf1NmZziI37nslKwmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBfeDUtT 8GgjW4hahg4gzKQrBmSeMB8GA1UdIwQYMBaAFBUqO0MiXPosX43ieppok9OyP13j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjhBMS8yRTFDQzY0NDUx MTgxMUVBOTM4N0M2NkJDNEY5QUUwMi9GU283UXlKYy1peGZqZUo2bW1pVDA3SV9Y ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTbzdReUpjLWl4ZmplSjZtbWlUMDdJX1hlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjhBMS8yRTFDQzY0NDUxMTgxMUVBOTM4N0M2NkJDNEY5QUUwMi9GU283UXlKYy1p eGZqZUo2bW1pVDA3SV9YZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLfv7u7lC1/yzmqjz2UQIBPpxOUDWFLQ1N1WyegCvKAAOIoTGHiJvj Lcw9IexXuSZB11sPRD25qPA2I2em9haciROVkZf3QqdMp3EKZDxcDnWlBnZMiEcK 20MjJksx5iviwwri+LTeTzfrO6C+hnciF9CtlVJU0i92i0N+zVnaUA5d6TOdzchN zDNVcOHZzLNxbeRwGsKwKRAbrri2MEKO0RSmu+jIs44+AgzbbWAlO/FT3zws97B9 t1oaVLxAocw9OUwyAzGmqHAoI7qpdBNIacHMGYwhVN4V4IJFXp+meehtqOOFyg1j l6gvNWx74vLsF/sH+esHHeUzxJkaRczF -----END CERTIFICATE-----Generated at Sat May 4 22:06:52 2024 by rpki-client on console-ams.rpki-client.org