$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft File: FiENxlKhYN7k5AFbvLQJ-odyRkA.mft (raw, json) Hash identifier: 80YWNvr15Yr9126OXArZ9rRoLqL4b4WA9mZRJGWih/M= Subject key identifier: EC:73:FC:87:68:C9:7B:0C:9B:4A:5D:5B:61:71:C1:06:5A:B6:D0:6E Authority key identifier: 16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40 Certificate issuer: /CN=A91983BD/serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640 Certificate serial: 33BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft Manifest number: 3726 Signing time: Tue 30 Apr 2024 14:40:42 +0000 Manifest this update: Tue 30 Apr 2024 14:40:42 +0000 Manifest next update: Tue 07 May 2024 14:40:42 +0000 Files and hashes: 1: FiENxlKhYN7k5AFbvLQJ-odyRkA.crl (hash: Tv8cXw18dPcS7+m4q48cqCDKkEgKW18YsapWPg33z/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 14:40:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13243 (0x33bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983BD/serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640 Validity Not Before: Apr 30 14:40:42 2024 GMT Not After : May 7 14:40:42 2024 GMT Subject: CN=663102ea-7ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:34:67:f2:e9:2f:04:20:ea:b2:6d:c0:ae:2a: aa:a8:f9:a4:d7:40:0a:87:fd:c2:6a:dc:11:fd:a3: c9:2c:02:96:a2:4b:19:8f:47:0b:3e:9b:0a:a2:c9: 73:33:f9:85:17:aa:d1:92:f3:50:29:86:b3:5e:b1: 65:4c:72:e3:61:8d:c1:05:3c:a1:15:96:82:7f:c6: 1b:e9:04:fb:2b:72:24:1c:91:a1:65:c2:a0:3c:6c: e5:a1:03:e3:03:45:78:a2:d7:72:0d:94:e3:d7:80: 84:97:dd:d8:3d:93:54:2d:eb:11:68:57:d3:60:af: 23:43:3c:2e:ce:a7:8f:ab:3a:af:57:f2:6b:96:1b: 98:0e:d2:ce:f6:26:ea:9d:9a:07:4f:ca:27:e4:bf: cd:aa:7f:59:8d:f4:4d:0d:ce:59:d9:f3:43:0d:c6: 1b:17:55:6c:af:61:3e:f6:69:2b:b1:85:6c:6a:24: 77:c6:96:35:92:46:24:dc:09:d2:48:dd:19:90:6e: 2c:2f:a7:21:93:4b:f1:20:1a:06:bf:f4:be:8b:ea: 44:c3:cc:96:4c:ff:29:15:c9:02:c0:34:04:34:83: fa:c0:7f:dc:da:29:24:06:ae:6f:54:ad:9e:a2:60: db:a8:2b:c2:e9:8c:a0:d3:76:39:62:b1:b4:44:4e: de:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:73:FC:87:68:C9:7B:0C:9B:4A:5D:5B:61:71:C1:06:5A:B6:D0:6E X509v3 Authority Key Identifier: keyid:16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:c9:14:9e:1f:c1:d4:23:2a:8d:7a:ac:b7:e4:02:8e:b1:49: ee:95:0a:86:06:aa:66:23:c2:85:b0:42:b0:df:5e:db:39:ce: ba:6c:2e:f2:e6:3f:47:56:89:20:6b:36:2f:8c:70:43:80:c5: 71:e5:60:98:23:41:c7:9b:84:b2:10:d3:5a:c1:52:17:ea:67: 1e:93:0e:87:1b:94:4e:d3:0b:f8:ee:d6:88:b9:31:8d:04:e3: a9:ce:fb:8e:e9:91:d4:c6:0b:80:59:d4:26:ee:f3:c9:f7:74: dd:ba:80:36:b9:48:c3:cd:0b:c6:09:ca:33:c4:45:9e:bd:fb: 00:d4:11:28:eb:71:77:23:b1:dc:7a:0a:af:f6:a2:a9:82:c5: 74:69:d1:fc:58:38:84:7d:47:53:06:92:29:ee:06:cc:64:2d: 5a:0b:99:3e:1d:c9:20:1c:26:02:41:55:ca:df:b8:42:f4:5d: 83:74:e1:49:50:ed:5c:41:ad:68:c1:07:19:0b:ca:25:2f:44: 97:f0:49:80:dc:81:31:62:a8:68:05:41:e8:c9:48:34:79:97: f1:81:79:1b:c2:46:ee:1a:d4:ab:c6:dc:4d:4e:ea:88:5e:23: f7:7d:fd:a6:61:8c:74:bc:57:61:f8:5e:61:76:1d:66:b0:d6: 36:c0:00:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQkQxMTAvBgNVBAUTKDE2MjEwREM2NTJBMTYwREVFNEU0MDE1QkJDQjQwOUZB ODc3MjQ2NDAwHhcNMjQwNDMwMTQ0MDQyWhcNMjQwNTA3MTQ0MDQyWjAYMRYwFAYD VQQDEw02NjMxMDJlYS03Y2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTRn8ukvBCDqsm3AriqqqPmk10AKh/3CatwR/aPJLAKWoksZj0cLPpsKoslz M/mFF6rRkvNQKYazXrFlTHLjYY3BBTyhFZaCf8Yb6QT7K3IkHJGhZcKgPGzloQPj A0V4otdyDZTj14CEl93YPZNULesRaFfTYK8jQzwuzqePqzqvV/JrlhuYDtLO9ibq nZoHT8on5L/Nqn9ZjfRNDc5Z2fNDDcYbF1Vsr2E+9mkrsYVsaiR3xpY1kkYk3AnS SN0ZkG4sL6chk0vxIBoGv/S+i+pEw8yWTP8pFckCwDQENIP6wH/c2ikkBq5vVK2e omDbqCvC6Yyg03Y5YrG0RE7eGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOxz/Ido yXsMm0pdW2FxwQZattBuMB8GA1UdIwQYMBaAFBYhDcZSoWDe5OQBW7y0CfqHckZA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNCRC9CRTdDRDAyQTFE OEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9GaUVOeGxLaFlON2s1QUZidkxRSi1vZHlS a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZpRU54bEtoWU43azVBRmJ2TFFKLW9keVJrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNCRC9CRTdDRDAyQTFEOEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9GaUVOeGxLaFlO N2s1QUZidkxRSi1vZHlSa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQyRSeH8HUIyqNeqy35AKOsUnulQqGBqpmI8KFsEKw317bOc66bC7y 5j9HVokgazYvjHBDgMVx5WCYI0HHm4SyENNawVIX6mcekw6HG5RO0wv47taIuTGN BOOpzvuO6ZHUxguAWdQm7vPJ93TduoA2uUjDzQvGCcozxEWevfsA1BEo63F3I7Hc egqv9qKpgsV0adH8WDiEfUdTBpIp7gbMZC1aC5k+HckgHCYCQVXK37hC9F2DdOFJ UO1cQa1owQcZC8olL0SX8EmA3IExYqhoBUHoyUg0eZfxgXkbwkbuGtSrxtxNTuqI XiP3ff2mYYx0vFdh+F5hdh1msNY2wADa -----END CERTIFICATE-----Generated at Tue Apr 30 19:22:15 2024 by rpki-client on console-ams.rpki-client.org