$ rpki-client -vvf rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft File: FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft (raw, json) Hash identifier: 2XWJ7/L7dp/92p21L1eW+RaF4dFGCR4fZa29zSWfKxs= Subject key identifier: 24:89:B9:6E:2F:CF:56:C1:79:EF:E0:90:84:8E:E4:63:E3:E8:E7:88 Authority key identifier: 16:75:DB:D9:EC:39:CE:ED:81:BB:BB:DE:42:CC:78:CF:7A:16:27:C5 Certificate issuer: /CN=A918259F/serialNumber=1675DBD9EC39CEED81BBBBDE42CC78CF7A1627C5 Certificate serial: 077F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft Manifest number: 077A Signing time: Sat 18 May 2024 22:14:21 +0000 Manifest this update: Sat 18 May 2024 22:14:21 +0000 Manifest next update: Sat 25 May 2024 22:14:21 +0000 Files and hashes: 1: FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl (hash: V4az7UQLME4T7R6k6Vh5ZnjRn7gmuMUvYFEcnQXZIqs=) 2: 760B9414D50911EB81567986C4F9AE02.roa (hash: v3kxajDctLeZNDmvGYwP8Mc2vFeXO+tVOMCadIC7cwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1919 (0x77f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918259F/serialNumber=1675DBD9EC39CEED81BBBBDE42CC78CF7A1627C5 Validity Not Before: May 18 22:14:21 2024 GMT Not After : May 25 22:14:21 2024 GMT Subject: CN=6649283d-70ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:21:4d:d2:f5:93:31:b1:81:07:fa:87:b6:55: 0d:a9:da:1d:42:72:a2:ff:55:57:98:04:5a:d1:b4: 25:8d:bc:03:50:35:8e:e4:4c:da:51:13:ea:9f:d2: 5a:1b:ec:5f:0f:44:55:1c:e7:6a:91:37:ba:71:58: 0f:74:cd:e6:3c:c3:a5:e8:c2:c7:f4:f7:6f:4e:9a: 4e:e1:67:72:25:54:c5:fe:77:d5:32:bb:c5:8c:e3: 89:e6:f2:40:c6:85:ce:81:db:ab:2f:3d:b6:3b:7c: 49:55:fc:07:28:5b:fc:51:13:66:a2:a0:26:b6:cf: 2b:be:95:d6:28:32:8f:41:f2:ab:d5:ed:a2:fa:fa: 3f:b9:09:53:64:33:e5:32:ee:64:14:60:95:bc:61: 25:65:d5:30:07:90:b9:ee:42:68:a3:31:26:b0:37: 3b:35:06:ab:93:07:52:99:31:89:27:0b:bb:30:78: 6f:2d:cb:12:08:58:9f:79:e5:ee:f1:03:b3:28:e9: 0e:f5:78:80:4b:d8:0c:ca:6c:48:84:6e:b0:6c:3d: 69:d9:ae:53:a6:37:76:76:46:a5:ad:fb:c8:21:ed: 93:09:f1:f3:4c:4f:39:fe:09:26:d8:0c:c2:db:e1: 1f:b5:e4:1b:86:ae:2f:4f:c4:a8:16:a0:e1:7a:7c: 63:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:89:B9:6E:2F:CF:56:C1:79:EF:E0:90:84:8E:E4:63:E3:E8:E7:88 X509v3 Authority Key Identifier: keyid:16:75:DB:D9:EC:39:CE:ED:81:BB:BB:DE:42:CC:78:CF:7A:16:27:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:30:ac:50:9d:a1:e7:b8:07:91:7d:13:6f:26:15:2b:e3:48: 1a:47:31:91:8b:de:58:85:21:9b:6b:13:36:93:4a:2a:4f:6b: 1d:fb:a8:47:eb:d2:87:28:e3:f8:d0:7a:53:ca:f9:0a:8e:4c: ac:14:8a:56:c3:1c:32:3e:b1:ee:53:25:ba:21:7e:1d:67:85: 7d:d7:c5:07:67:4b:87:19:be:93:9d:0e:16:f4:14:3b:62:cd: 9a:0f:5c:77:5d:02:20:80:a8:82:ad:28:37:4c:33:94:19:da: 7b:9a:ea:a8:46:eb:58:1e:11:d9:d0:22:f8:07:2c:44:d9:bd: 03:b1:ed:72:cc:b8:ce:85:16:15:bc:12:a6:da:09:28:e8:9f: 05:71:15:f1:05:82:e9:70:4a:8e:38:2a:3b:e5:57:b2:55:75: d8:b8:83:d0:d8:a2:e6:61:ac:ad:92:ec:a3:0a:57:d4:60:02: 1f:b6:b4:8f:2f:f6:28:5e:2d:38:12:2a:f4:aa:6e:da:9d:cd: 89:1d:d0:b1:e0:70:19:c2:9b:13:ff:ff:6e:11:f2:68:4f:5e: fb:b1:5c:ad:92:4c:78:f7:d6:cf:3a:09:ba:1f:61:46:0a:01: 48:87:9f:34:ae:d7:24:65:0c:2f:86:63:09:62:1e:46:df:4e: 75:36:fc:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI1OUYxMTAvBgNVBAUTKDE2NzVEQkQ5RUMzOUNFRUQ4MUJCQkJERTQyQ0M3OENG N0ExNjI3QzUwHhcNMjQwNTE4MjIxNDIxWhcNMjQwNTI1MjIxNDIxWjAYMRYwFAYD VQQDEw02NjQ5MjgzZC03MGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyFN0vWTMbGBB/qHtlUNqdodQnKi/1VXmARa0bQljbwDUDWO5EzaURPqn9Ja G+xfD0RVHOdqkTe6cVgPdM3mPMOl6MLH9PdvTppO4WdyJVTF/nfVMrvFjOOJ5vJA xoXOgdurLz22O3xJVfwHKFv8URNmoqAmts8rvpXWKDKPQfKr1e2i+vo/uQlTZDPl Mu5kFGCVvGElZdUwB5C57kJoozEmsDc7NQarkwdSmTGJJwu7MHhvLcsSCFifeeXu 8QOzKOkO9XiAS9gMymxIhG6wbD1p2a5Tpjd2dkalrfvIIe2TCfHzTE85/gkm2AzC 2+EfteQbhq4vT8SoFqDhenxjzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSJuW4v z1bBee/gkISO5GPj6OeIMB8GA1UdIwQYMBaAFBZ129nsOc7tgbu73kLMeM96FifF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjU5Ri8wRjhCNTkxMENE QUIxMUVBODgzNzUyMENDNEY5QUUwMi9GblhiMmV3NXp1MkJ1N3ZlUXN4NHozb1dK OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZuWGIyZXc1enUyQnU3dmVRc3g0ejNvV0o4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjU5Ri8wRjhCNTkxMENEQUIxMUVBODgzNzUyMENDNEY5QUUwMi9GblhiMmV3NXp1 MkJ1N3ZlUXN4NHozb1dKOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPMKxQnaHnuAeRfRNvJhUr40gaRzGRi95YhSGbaxM2k0oqT2sd+6hH 69KHKOP40HpTyvkKjkysFIpWwxwyPrHuUyW6IX4dZ4V918UHZ0uHGb6TnQ4W9BQ7 Ys2aD1x3XQIggKiCrSg3TDOUGdp7muqoRutYHhHZ0CL4ByxE2b0Dse1yzLjOhRYV vBKm2gko6J8FcRXxBYLpcEqOOCo75VeyVXXYuIPQ2KLmYaytkuyjClfUYAIftrSP L/YoXi04Eir0qm7anc2JHdCx4HAZwpsT//9uEfJoT177sVytkkx499bPOgm6H2FG CgFIh580rtckZQwvhmMJYh5G3051NvxG -----END CERTIFICATE-----Generated at Sun May 19 00:16:16 2024 by rpki-client on console-fra.rpki-client.org