$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft File: FzXLqe4W_oXz0oP6W7lHnZryzIY.mft (raw, json) Hash identifier: zixZX16lEq9vRR+DNtERLEMiFYcEScQkht2/1cJ0i2s= Subject key identifier: C1:DE:A5:2C:2D:FE:D2:06:3A:97:03:D0:06:33:03:6C:D4:D0:45:33 Authority key identifier: 17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86 Certificate issuer: /CN=A91757CB/serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft Manifest number: 14 Signing time: Wed 15 May 2024 08:55:26 +0000 Manifest this update: Wed 15 May 2024 08:55:25 +0000 Manifest next update: Wed 22 May 2024 08:55:25 +0000 Files and hashes: 1: FzXLqe4W_oXz0oP6W7lHnZryzIY.crl (hash: T+AJ9zvdki8+Iapi3yR9gKq3uFQeHawVrbeleOzE79s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 08:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91757CB/serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86 Validity Not Before: May 15 08:55:25 2024 GMT Not After : May 22 08:55:25 2024 GMT Subject: CN=6644787d-d329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:69:c4:b4:fc:86:f3:87:ba:58:68:86:50:75: 2b:2b:84:f0:64:5e:af:c6:77:fd:45:f6:d7:ec:ba: 0e:5e:f5:2c:71:94:3c:dd:98:e2:29:81:8b:8d:c9: c0:72:54:74:b9:24:ef:02:02:c2:ce:63:0d:6d:a5: b6:39:20:de:5d:5c:2e:63:da:3f:dd:7a:85:0f:01: 0b:59:5a:1b:e2:23:ed:e4:f7:52:66:7e:7e:9c:03: da:1c:06:e6:03:8e:58:9e:4f:bd:93:d3:28:a3:4b: 34:33:16:98:ec:c2:62:49:1c:56:1e:99:47:88:29: 70:01:56:b6:81:0d:45:1d:f0:a3:cc:a1:02:a1:d5: b5:9b:38:02:cd:15:59:dd:a2:12:a0:43:da:9c:84: 0d:17:6d:68:0b:29:9a:9e:43:0d:e3:1f:f6:24:11: a2:69:2c:87:a3:8c:a0:b8:3c:16:63:55:3e:b3:c3: 0d:9c:02:88:c0:08:34:88:c9:4d:33:80:0b:c6:ea: fb:df:e5:3d:c1:0e:db:c1:20:e7:16:7f:39:a6:e0: 3b:8d:b2:94:1b:ca:06:57:61:0c:f8:d3:da:01:6f: d3:e5:15:34:cc:56:e8:02:a6:72:0c:f6:2f:c3:93: ae:de:2c:82:df:ec:f2:ae:15:39:7a:fc:34:98:a1: ce:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DE:A5:2C:2D:FE:D2:06:3A:97:03:D0:06:33:03:6C:D4:D0:45:33 X509v3 Authority Key Identifier: keyid:17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:e6:74:75:7f:c8:cf:17:56:28:9b:ec:bf:16:5a:09:1f:79: 64:9c:94:13:41:50:2d:d2:5b:d9:bf:dc:68:82:8a:88:8f:14: e0:61:d0:4c:0b:fd:4b:38:c7:22:82:68:48:d2:ab:4b:1b:8c: b5:cd:9a:c8:43:dc:2f:32:8f:13:65:44:bc:97:75:13:33:5d: 52:8f:34:ec:7d:4b:b4:ed:c0:27:25:18:67:97:0c:ab:c4:ab: f8:5a:ca:5e:3f:2e:56:85:a5:3e:52:be:ff:1e:0f:d9:7c:2f: 8b:45:e4:7d:98:21:06:4c:31:0d:f2:07:10:ae:d5:30:7f:bc: 35:a0:2e:ca:4e:c8:7a:88:8f:1a:b9:d8:f1:9b:44:07:a6:a7: 7e:07:a7:bb:62:58:75:89:b3:e0:a7:4b:da:90:fd:8a:d8:4e: d1:7b:a3:86:ed:ae:58:92:48:3a:4d:4a:2b:77:64:4b:62:f9: f6:cd:ee:d3:5b:2a:7f:39:e7:e0:3e:f8:36:2d:ee:6d:2b:b9: 02:00:1b:91:37:af:b1:fc:ca:fe:16:4c:8b:69:46:2d:56:1d: df:cc:b3:ed:41:9a:53:af:5a:90:0d:9c:d4:59:21:c1:9b:aa: 4d:d0:48:22:5d:6e:9b:bd:1b:c2:9f:cc:91:7b:3d:e6:69:9b: 20:64:34:37 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NTdDQjExMC8GA1UEBRMoMTczNUNCQTlFRTE2RkU4NUYzRDI4M0ZBNUJCOTQ3OUQ5 QUYyQ0M4NjAeFw0yNDA1MTUwODU1MjVaFw0yNDA1MjIwODU1MjVaMBgxFjAUBgNV BAMTDTY2NDQ3ODdkLWQzMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5acS0/Ibzh7pYaIZQdSsrhPBkXq/Gd/1F9tfsug5e9SxxlDzdmOIpgYuNycBy VHS5JO8CAsLOYw1tpbY5IN5dXC5j2j/deoUPAQtZWhviI+3k91Jmfn6cA9ocBuYD jlieT72T0yijSzQzFpjswmJJHFYemUeIKXABVraBDUUd8KPMoQKh1bWbOALNFVnd ohKgQ9qchA0XbWgLKZqeQw3jH/YkEaJpLIejjKC4PBZjVT6zww2cAojACDSIyU0z gAvG6vvf5T3BDtvBIOcWfzmm4DuNspQbygZXYQz409oBb9PlFTTMVugCpnIM9i/D k67eLILf7PKuFTl6/DSYoc73AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwd6lLC3+ 0gY6lwPQBjMDbNTQRTMwHwYDVR0jBBgwFoAUFzXLqe4W/oXz0oP6W7lHnZryzIYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1N0NCLzRFRDIxMkRDRjJG ODExRUVBMzUwNjczOEM0RjlBRTAyL0Z6WExxZTRXX29YejBvUDZXN2xIblpyeXpJ WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRnpYTHFlNFdfb1h6MG9QNlc3bEhuWnJ5eklZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 N0NCLzRFRDIxMkRDRjJGODExRUVBMzUwNjczOEM0RjlBRTAyL0Z6WExxZTRXX29Y ejBvUDZXN2xIblpyeXpJWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMfmdHV/yM8XViib7L8WWgkfeWSclBNBUC3SW9m/3GiCioiPFOBh0EwL /Us4xyKCaEjSq0sbjLXNmshD3C8yjxNlRLyXdRMzXVKPNOx9S7TtwCclGGeXDKvE q/hayl4/LlaFpT5Svv8eD9l8L4tF5H2YIQZMMQ3yBxCu1TB/vDWgLspOyHqIjxq5 2PGbRAemp34Hp7tiWHWJs+CnS9qQ/YrYTtF7o4btrliSSDpNSit3ZEti+fbN7tNb Kn855+A++DYt7m0ruQIAG5E3r7H8yv4WTItpRi1WHd/Ms+1BmlOvWpANnNRZIcGb qk3QSCJdbpu9G8KfzJF7PeZpmyBkNDc= -----END CERTIFICATE-----Generated at Wed May 15 11:17:42 2024 by rpki-client on console-ams.rpki-client.org