$ rpki-client -vvf rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.mft File: FMR1z9KLd-wRUsLvM-XkPhdawiE.mft (raw, json) Hash identifier: IZ6c3MH92LZ7P3mRFLC22eJL/zu6h1EhKdKpcARYXyY= Subject key identifier: 74:41:39:A2:80:66:0D:8C:72:2C:45:E0:60:6A:AE:05:04:E1:C9:99 Authority key identifier: 14:C4:75:CF:D2:8B:77:EC:11:52:C2:EF:33:E5:E4:3E:17:5A:C2:21 Certificate issuer: /CN=A9180542/serialNumber=14C475CFD28B77EC1152C2EF33E5E43E175AC221 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMR1z9KLd-wRUsLvM-XkPhdawiE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.mft Manifest number: 10AE Signing time: Tue 14 May 2024 18:55:57 +0000 Manifest this update: Tue 14 May 2024 18:55:56 +0000 Manifest next update: Tue 21 May 2024 18:55:56 +0000 Files and hashes: 1: FMR1z9KLd-wRUsLvM-XkPhdawiE.crl (hash: k0/SaWqWz9xIzBwGiD2izJ/HV8fucgYu9mVDYDwZTJQ=) 2: 07F7821E890011EEB1D8307EC4F9AE02.roa (hash: YyffPB3s/X4gNzTicPbUURPDCYvnedhwuoBj6zcOnx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.crl rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMR1z9KLd-wRUsLvM-XkPhdawiE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 18:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180542/serialNumber=14C475CFD28B77EC1152C2EF33E5E43E175AC221 Validity Not Before: May 14 18:55:56 2024 GMT Not After : May 21 18:55:56 2024 GMT Subject: CN=6643b3bd-9b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:77:ab:fd:bd:6d:70:c9:94:ae:5f:e5:6f:95: e1:5e:7e:bb:83:e8:eb:59:68:28:07:0d:49:7d:c3: 33:c6:df:c7:be:3c:11:5d:35:1a:07:3f:3e:a0:55: 96:3a:da:ae:07:b5:ce:52:9f:ee:07:2b:50:2e:51: c3:c8:9d:36:7b:dd:63:47:ba:82:b7:35:6f:fd:74: e1:87:af:55:8d:e0:b7:41:64:2a:7e:61:74:ad:a7: 0e:03:5d:cd:cb:51:d4:ea:7d:f7:ea:1a:3b:17:5b: bb:e8:74:8c:f9:60:02:bb:33:30:73:46:26:c9:06: e9:1a:23:99:70:58:a0:36:0f:5e:25:2a:35:fe:5a: d4:ee:5d:ad:1b:19:db:6f:b4:f2:35:96:dd:e2:93: bc:29:5a:b2:00:8a:3e:cc:93:8f:ec:67:1d:c5:ca: ff:db:17:d9:bd:fb:b4:53:e9:08:ca:6a:c0:1d:62: cb:8c:cd:7b:b3:d3:9f:ea:4c:fd:b3:04:c8:8e:fd: 18:5a:18:15:2e:72:9d:51:d5:15:51:98:ec:ff:32: 48:f6:27:fd:cc:5d:21:66:2c:e5:04:2f:64:2c:f5: ff:17:7b:76:37:0b:bc:a1:1d:03:b1:35:3e:50:e6: 58:11:43:72:17:b7:e6:40:0e:a1:83:99:f3:a6:73: 57:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:41:39:A2:80:66:0D:8C:72:2C:45:E0:60:6A:AE:05:04:E1:C9:99 X509v3 Authority Key Identifier: keyid:14:C4:75:CF:D2:8B:77:EC:11:52:C2:EF:33:E5:E4:3E:17:5A:C2:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMR1z9KLd-wRUsLvM-XkPhdawiE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:f3:cf:b8:02:e2:68:25:28:9d:b1:78:c6:c3:3a:9c:55:51: df:18:2c:0d:d3:80:57:31:11:3d:ec:16:94:91:a2:d8:84:b7: 59:bb:20:79:1e:5f:2c:fa:ee:ac:54:61:19:d4:ff:49:9f:15: 89:d1:3d:c0:fb:9e:12:4a:cb:aa:8f:89:1a:8e:a4:8d:62:40: 9a:ac:72:57:be:f6:f8:f9:f5:74:18:17:9e:a7:cc:b4:1e:9e: 1c:97:7e:d6:3b:57:2d:88:11:0f:e8:5d:fd:ad:b4:58:52:61: f6:e3:6b:eb:45:3c:8e:43:77:46:c6:2d:fa:92:81:9b:25:7a: bf:e7:81:83:aa:43:e2:0d:83:49:59:4f:5a:c3:b8:3d:b4:f7: 6b:74:d1:2a:a9:e4:62:38:18:b5:5f:a5:0a:c2:47:f5:52:ae: c0:34:31:01:0a:0d:c6:94:37:23:64:f4:3f:1f:c1:6e:d4:86: 12:11:83:cf:75:34:c3:78:24:96:3c:66:9a:37:e7:eb:5f:a5: c8:98:3c:e4:62:45:08:88:ad:4c:cc:26:a9:09:9a:60:75:fb: a6:8b:85:f9:36:37:7b:7d:08:82:7f:74:b9:8d:7d:0c:09:9c: 86:47:11:94:0c:79:26:22:a2:d9:58:3b:d4:a4:5d:6b:55:fe: b4:cb:1a:93 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MDU0MjExMC8GA1UEBRMoMTRDNDc1Q0ZEMjhCNzdFQzExNTJDMkVGMzNFNUU0M0Ux NzVBQzIyMTAeFw0yNDA1MTQxODU1NTZaFw0yNDA1MjExODU1NTZaMBgxFjAUBgNV BAMTDTY2NDNiM2JkLTliNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDxd6v9vW1wyZSuX+VvleFefruD6OtZaCgHDUl9wzPG38e+PBFdNRoHPz6gVZY6 2q4Htc5Sn+4HK1AuUcPInTZ73WNHuoK3NW/9dOGHr1WN4LdBZCp+YXStpw4DXc3L UdTqfffqGjsXW7vodIz5YAK7MzBzRibJBukaI5lwWKA2D14lKjX+WtTuXa0bGdtv tPI1lt3ik7wpWrIAij7Mk4/sZx3Fyv/bF9m9+7RT6QjKasAdYsuMzXuz05/qTP2z BMiO/RhaGBUucp1R1RVRmOz/Mkj2J/3MXSFmLOUEL2Qs9f8Xe3Y3C7yhHQOxNT5Q 5lgRQ3IXt+ZADqGDmfOmc1e7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdEE5ooBm DYxyLEXgYGquBQThyZkwHwYDVR0jBBgwFoAUFMR1z9KLd+wRUsLvM+XkPhdawiEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwNTQyLzBBNDc5QzkwQ0FF OTExRTlCQkU5MjE4M0M0RjlBRTAyL0ZNUjF6OUtMZC13UlVzTHZNLVhrUGhkYXdp RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRk1SMXo5S0xkLXdSVXNMdk0tWGtQaGRhd2lFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw NTQyLzBBNDc5QzkwQ0FFOTExRTlCQkU5MjE4M0M0RjlBRTAyL0ZNUjF6OUtMZC13 UlVzTHZNLVhrUGhkYXdpRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIDzz7gC4mglKJ2xeMbDOpxVUd8YLA3TgFcxET3sFpSRotiEt1m7IHke Xyz67qxUYRnU/0mfFYnRPcD7nhJKy6qPiRqOpI1iQJqscle+9vj59XQYF56nzLQe nhyXftY7Vy2IEQ/oXf2ttFhSYfbja+tFPI5Dd0bGLfqSgZsler/ngYOqQ+INg0lZ T1rDuD2092t00Sqp5GI4GLVfpQrCR/VSrsA0MQEKDcaUNyNk9D8fwW7UhhIRg891 NMN4JJY8Zpo35+tfpciYPORiRQiIrUzMJqkJmmB1+6aLhfk2N3t9CIJ/dLmNfQwJ nIZHEZQMeSYiotlYO9SkXWtV/rTLGpM= -----END CERTIFICATE-----Generated at Tue May 14 21:48:41 2024 by rpki-client on console-ams.rpki-client.org