$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft File: Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft (raw, json) Hash identifier: IkXbAFNLG1XtYVw+/v+YeYQA+xMVo6fOYoZMxSinMts= Subject key identifier: 6F:CF:CF:94:1F:89:69:45:C0:96:03:68:2F:E1:5A:94:0C:EF:5B:42 Authority key identifier: 16:7D:6E:C3:2A:D0:B3:58:15:F2:88:47:AD:D7:97:0E:B6:7F:2D:BA Certificate issuer: /CN=A9197CBD/serialNumber=167D6EC32AD0B35815F28847ADD7970EB67F2DBA Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft Manifest number: 42 Signing time: Fri 17 May 2024 08:12:11 +0000 Manifest this update: Fri 17 May 2024 08:12:10 +0000 Manifest next update: Fri 24 May 2024 08:12:10 +0000 Files and hashes: 1: Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.crl (hash: Npe1DSjbWLTFVdgsSfvjwVD2ZL1dS1NA/KuPeSdLcBo=) 2: BD16D2BCB11411EE9B803C66C4F9AE02.roa (hash: sbXLUP+ySv876OX4drz/OH3VKKGNMGx7S1G0hlILvsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.crl rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:12:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197CBD/serialNumber=167D6EC32AD0B35815F28847ADD7970EB67F2DBA Validity Not Before: May 17 08:12:10 2024 GMT Not After : May 24 08:12:10 2024 GMT Subject: CN=6647115a-fd8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c1:8f:68:c5:8a:3e:36:bb:fd:1c:c9:e0:eb: ab:15:f9:81:29:9b:58:be:42:9a:3f:f4:08:c2:be: 7d:69:ec:ad:40:54:3c:eb:83:ce:0b:6b:11:f6:dd: 4d:23:73:b8:fb:d2:a0:19:42:e9:f8:45:00:43:f5: 24:60:64:1d:71:c9:c8:d9:2c:bf:07:60:a8:e2:0c: 50:7e:ec:e7:3a:36:69:17:c9:9c:a7:01:5a:61:ec: 0e:40:43:13:c6:ea:80:8b:3c:af:2a:50:70:d6:ef: 76:23:e3:b6:06:cc:ff:26:87:8f:79:34:43:d2:3e: d7:f5:48:22:c0:a6:cf:08:8b:5a:4b:52:69:ce:87: 00:6f:e8:f2:e8:c1:31:f2:05:b7:af:54:51:25:50: 33:de:7c:23:f0:59:d1:6d:25:d2:40:cf:c5:f3:6c: 30:88:ff:06:90:03:12:6f:29:18:ef:a7:18:de:ae: df:e0:bc:a9:8f:23:c8:81:f6:bd:7f:ee:32:23:4b: 1f:2d:f1:64:90:6e:79:87:f3:e0:83:85:8a:8f:6b: 2a:16:0a:f6:e3:7e:76:59:c4:be:33:f8:7f:ce:6f: 70:28:7e:7c:e9:29:aa:8c:51:1f:c8:d2:8d:17:af: 08:32:2a:99:18:5e:79:08:35:7c:d7:51:12:91:b1: 6e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:CF:CF:94:1F:89:69:45:C0:96:03:68:2F:E1:5A:94:0C:EF:5B:42 X509v3 Authority Key Identifier: keyid:16:7D:6E:C3:2A:D0:B3:58:15:F2:88:47:AD:D7:97:0E:B6:7F:2D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:19:5f:b1:25:59:c2:ae:e5:f4:d4:a9:b3:07:e9:6b:a4:fa: b3:b5:d8:17:78:0b:3b:50:3f:00:db:34:58:ef:d6:b3:fa:11: 3b:ca:88:f3:52:bd:83:04:9b:b4:dc:91:57:1c:c7:b5:92:a6: 03:58:08:42:2c:30:e9:bf:6c:d2:5c:72:3d:00:5d:74:1b:5c: f2:38:7e:eb:0d:70:cf:48:0b:5c:14:7c:dc:cd:d0:ea:d5:64: 8e:4b:da:bd:db:4e:fc:b7:6c:ec:16:51:1d:70:30:7c:80:0e: d2:48:4a:cd:c2:ed:41:44:e8:6a:ca:5d:84:6d:76:82:14:f7: 5e:af:9c:0d:bf:02:89:2d:d4:ba:d4:8b:68:d8:a4:f8:4a:81: 49:70:0f:44:50:a4:96:7c:dd:1d:db:e3:07:1f:9d:c6:6b:44: 8d:dd:77:d4:f3:ff:82:f6:4c:f8:f1:b2:6c:e8:be:0c:ba:a9: bb:0b:27:fb:da:31:8e:52:43:bf:f1:ac:0a:97:4b:40:37:5e: 34:76:6b:6a:bb:f0:71:03:11:a3:ab:b9:13:d9:ca:4d:54:f1: 25:c4:63:03:15:69:8b:f2:d3:3c:27:38:6f:92:9d:a1:13:ae: 03:ab:77:ef:93:64:19:d3:8a:72:7b:93:a0:99:43:0b:ea:b1: 92:a9:2f:45 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 N0NCRDExMC8GA1UEBRMoMTY3RDZFQzMyQUQwQjM1ODE1RjI4ODQ3QURENzk3MEVC NjdGMkRCQTAeFw0yNDA1MTcwODEyMTBaFw0yNDA1MjQwODEyMTBaMBgxFjAUBgNV BAMTDTY2NDcxMTVhLWZkOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcwY9oxYo+Nrv9HMng66sV+YEpm1i+Qpo/9AjCvn1p7K1AVDzrg84LaxH23U0j c7j70qAZQun4RQBD9SRgZB1xycjZLL8HYKjiDFB+7Oc6NmkXyZynAVph7A5AQxPG 6oCLPK8qUHDW73Yj47YGzP8mh495NEPSPtf1SCLAps8Ii1pLUmnOhwBv6PLowTHy BbevVFElUDPefCPwWdFtJdJAz8XzbDCI/waQAxJvKRjvpxjert/gvKmPI8iB9r1/ 7jIjSx8t8WSQbnmH8+CDhYqPayoWCvbjfnZZxL4z+H/Ob3AofnzpKaqMUR/I0o0X rwgyKpkYXnkINXzXURKRsW7fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUb8/PlB+J aUXAlgNoL+FalAzvW0IwHwYDVR0jBBgwFoAUFn1uwyrQs1gV8ohHrdeXDrZ/Lbow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3Q0JELzNFNDAwNjk4QjEx NDExRUU5NUU3NDM2NUM0RjlBRTAyL0ZuMXV3eXJRczFnVjhvaEhyZGVYRHJaX0xi by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRm4xdXd5clFzMWdWOG9oSHJkZVhEclpfTGJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3 Q0JELzNFNDAwNjk4QjExNDExRUU5NUU3NDM2NUM0RjlBRTAyL0ZuMXV3eXJRczFn VjhvaEhyZGVYRHJaX0xiby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHEZX7ElWcKu5fTUqbMH6Wuk+rO12Bd4CztQPwDbNFjv1rP6ETvKiPNS vYMEm7TckVccx7WSpgNYCEIsMOm/bNJccj0AXXQbXPI4fusNcM9IC1wUfNzN0OrV ZI5L2r3bTvy3bOwWUR1wMHyADtJISs3C7UFE6GrKXYRtdoIU916vnA2/Aokt1LrU i2jYpPhKgUlwD0RQpJZ83R3b4wcfncZrRI3dd9Tz/4L2TPjxsmzovgy6qbsLJ/va MY5SQ7/xrAqXS0A3XjR2a2q78HEDEaOruRPZyk1U8SXEYwMVaYvy0zwnOG+SnaET rgOrd++TZBnTinJ7k6CZQwvqsZKpL0U= -----END CERTIFICATE-----Generated at Fri May 17 10:10:51 2024 by rpki-client on console-fra.rpki-client.org