$ rpki-client -vvf rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft File: Rfpu6-HepSLAREPPJSnpd5qY2I8.mft (raw, json) Hash identifier: 9KmMR6TBIfprUu2KKsw1i1CgDMv6NhfnfbbjROWvtWU= Subject key identifier: 35:63:7E:3B:EB:37:FC:BC:34:7E:F3:19:04:7D:15:8D:98:E9:1B:8A Authority key identifier: 45:FA:6E:EB:E1:DE:A5:22:C0:44:43:CF:25:29:E9:77:9A:98:D8:8F Certificate issuer: /CN=A916E343/serialNumber=45FA6EEBE1DEA522C04443CF2529E9779A98D88F Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rfpu6-HepSLAREPPJSnpd5qY2I8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft Manifest number: 84 Signing time: Wed 15 May 2024 07:14:51 +0000 Manifest this update: Wed 15 May 2024 07:14:51 +0000 Manifest next update: Wed 22 May 2024 07:14:50 +0000 Files and hashes: 1: Rfpu6-HepSLAREPPJSnpd5qY2I8.crl (hash: NDTa/teZG2smuDBGCF69MgmA/j80z0a/hMbHKO6616A=) 2: 798F13884BC511EE95462F4FC4F9AE02.roa (hash: Ba0ZZqEoTKVuNAjMC13r7fLSXJxSp0iKDhCqpyuXkAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.crl rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rfpu6-HepSLAREPPJSnpd5qY2I8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E343/serialNumber=45FA6EEBE1DEA522C04443CF2529E9779A98D88F Validity Not Before: May 15 07:14:51 2024 GMT Not After : May 22 07:14:50 2024 GMT Subject: CN=664460eb-bfa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0e:7c:99:ad:f9:2e:2f:e3:8e:8b:49:df:64: d2:84:8c:a1:11:5c:67:54:55:8d:d2:59:12:bd:45: 78:d9:e2:5a:80:b5:e6:eb:50:ea:61:a4:d6:fd:3c: c7:7d:c4:41:ff:2e:21:83:3d:54:85:f7:4c:7f:78: ce:17:2c:96:e2:dd:72:51:23:65:8e:3f:67:05:34: 12:97:95:47:7f:bf:07:f8:32:c4:3e:d6:80:55:30: 2b:72:8e:6c:ce:0f:ac:7a:5a:8d:2c:16:31:0b:89: 7b:c8:5b:b9:a2:f7:30:ff:56:76:5c:ac:32:96:e6: d3:79:4b:7e:bb:65:08:b5:f9:a2:e0:f0:93:96:4c: 0c:ed:ca:b1:22:9f:16:94:4b:14:97:ac:bf:b8:1c: b6:09:bc:46:95:a0:2e:cb:21:e7:6f:1f:43:de:b5: 78:d1:7c:6b:13:95:f7:ee:67:3b:f9:53:9e:03:00: c1:e7:76:8e:9c:24:01:45:85:f1:99:2f:7e:49:98: 50:59:03:5e:81:ee:95:42:e4:bb:db:ba:64:ec:9c: 93:05:f5:b1:8e:a7:d9:2a:e9:ed:08:5f:2e:18:9f: 98:da:08:7a:6f:be:dd:0b:02:a1:e6:56:89:2b:46: 48:35:74:85:94:c9:2d:d1:34:d2:e1:46:25:73:01: e3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:63:7E:3B:EB:37:FC:BC:34:7E:F3:19:04:7D:15:8D:98:E9:1B:8A X509v3 Authority Key Identifier: keyid:45:FA:6E:EB:E1:DE:A5:22:C0:44:43:CF:25:29:E9:77:9A:98:D8:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rfpu6-HepSLAREPPJSnpd5qY2I8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:63:af:22:c0:4c:63:8b:c8:e0:3d:03:f6:67:c9:ce:ac:7f: 68:29:bf:cf:7d:80:74:90:79:2a:f0:f4:37:9f:96:0f:c3:97: ca:f7:42:a4:a1:a8:8e:73:9d:02:45:05:85:84:ab:44:b5:07: 88:4f:ad:69:ab:ae:b2:f6:64:31:0a:7f:38:27:17:0e:b5:f8: 58:86:0e:6d:2d:07:b0:18:dc:b5:48:ba:7e:57:21:58:a5:9c: ea:f7:b0:98:97:40:4e:8d:4b:b7:61:65:48:d7:e4:f7:64:46: 94:e2:36:f2:1c:0a:84:de:39:2a:9f:13:b4:84:c9:67:9d:68: 59:b4:ee:7c:57:31:16:8b:d6:f6:db:cb:6f:0a:8c:21:1d:22: 55:83:3d:5b:06:cc:ad:06:ae:02:9e:e7:c1:24:2d:a1:60:c8: eb:21:f5:6f:4e:f8:b7:96:d7:c0:c2:57:6c:f5:83:41:39:a8: 9e:f2:cb:92:58:f4:60:7c:d1:64:e9:1e:d4:87:52:a6:fb:a0: 14:9c:9d:bd:41:aa:e7:62:4c:4a:9b:10:8c:e9:73:ee:38:4a: 46:60:96:41:05:86:8e:3a:fe:5a:53:26:06:c8:a2:01:0d:b2: 5a:75:ce:e8:c7:82:82:88:e5:c3:a3:cc:79:62:00:97:e7:c6: 4a:56:2f:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUzNDMxMTAvBgNVBAUTKDQ1RkE2RUVCRTFERUE1MjJDMDQ0NDNDRjI1MjlFOTc3 OUE5OEQ4OEYwHhcNMjQwNTE1MDcxNDUxWhcNMjQwNTIyMDcxNDUwWjAYMRYwFAYD VQQDEw02NjQ0NjBlYi1iZmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxA58ma35Li/jjotJ32TShIyhEVxnVFWN0lkSvUV42eJagLXm61DqYaTW/TzH fcRB/y4hgz1UhfdMf3jOFyyW4t1yUSNljj9nBTQSl5VHf78H+DLEPtaAVTArco5s zg+selqNLBYxC4l7yFu5ovcw/1Z2XKwylubTeUt+u2UItfmi4PCTlkwM7cqxIp8W lEsUl6y/uBy2CbxGlaAuyyHnbx9D3rV40XxrE5X37mc7+VOeAwDB53aOnCQBRYXx mS9+SZhQWQNege6VQuS727pk7JyTBfWxjqfZKuntCF8uGJ+Y2gh6b77dCwKh5laJ K0ZINXSFlMkt0TTS4UYlcwHj2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVjfjvr N/y8NH7zGQR9FY2Y6RuKMB8GA1UdIwQYMBaAFEX6buvh3qUiwERDzyUp6XeamNiP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTM0My8wRDEwRjdCMjRC QzUxMUVFQjY2RTZENEVDNEY5QUUwMi9SZnB1Ni1IZXBTTEFSRVBQSlNucGQ1cVky STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JmcHU2LUhlcFNMQVJFUFBKU25wZDVxWTJJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTM0My8wRDEwRjdCMjRCQzUxMUVFQjY2RTZENEVDNEY5QUUwMi9SZnB1Ni1IZXBT TEFSRVBQSlNucGQ1cVkySTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRY68iwExji8jgPQP2Z8nOrH9oKb/PfYB0kHkq8PQ3n5YPw5fK90Kk oaiOc50CRQWFhKtEtQeIT61pq66y9mQxCn84JxcOtfhYhg5tLQewGNy1SLp+VyFY pZzq97CYl0BOjUu3YWVI1+T3ZEaU4jbyHAqE3jkqnxO0hMlnnWhZtO58VzEWi9b2 28tvCowhHSJVgz1bBsytBq4CnufBJC2hYMjrIfVvTvi3ltfAwlds9YNBOaie8suS WPRgfNFk6R7Uh1Km+6AUnJ29QarnYkxKmxCM6XPuOEpGYJZBBYaOOv5aUyYGyKIB DbJadc7ox4KCiOXDo8x5YgCX58ZKVi/l -----END CERTIFICATE-----Generated at Wed May 15 09:27:34 2024 by rpki-client on console-fra.rpki-client.org