$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft File: FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft (raw, json) Hash identifier: HwQeWEPKJgzIBmJMQi25ON0+UcJMedCzC2GMi9rrAeI= Subject key identifier: 6D:A4:73:CC:CE:1D:EB:6C:2C:AB:61:83:D4:F1:F2:97:85:A8:D8:64 Authority key identifier: 16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0 Certificate issuer: /CN=A91A29DA/serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft Manifest number: 25 Signing time: Fri 17 May 2024 08:39:12 +0000 Manifest this update: Fri 17 May 2024 08:39:12 +0000 Manifest next update: Fri 24 May 2024 08:39:12 +0000 Files and hashes: 1: FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl (hash: JAjzL6HdsHQzRaCvUxt/Ty6Ib5A5c2EVQhW9ISbPJ+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 08:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A29DA/serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0 Validity Not Before: May 17 08:39:12 2024 GMT Not After : May 24 08:39:12 2024 GMT Subject: CN=664717b0-867b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b1:f4:04:93:1c:70:50:a4:a3:4a:23:80:84: 46:2f:b5:0d:0a:76:6a:ff:4d:cb:8d:2e:17:30:fc: 1f:50:02:1d:08:15:a3:6f:be:e1:7d:b7:7a:97:f0: b7:8d:4e:06:53:ce:9e:06:11:44:ac:af:8c:10:73: 0c:14:c7:25:fd:de:f6:19:ef:2d:ea:90:c1:3c:9b: 44:12:ef:17:e7:0c:74:36:f8:b4:62:15:75:41:f3: 8b:b9:62:0d:4c:a7:79:64:13:bf:96:7a:3a:c0:9d: 31:27:f3:14:56:6e:37:57:35:49:00:71:15:5d:58: 68:38:dd:f7:ad:5a:a7:d5:32:ee:ee:7b:8b:16:df: 74:7a:f3:a0:a0:db:f9:df:44:72:b2:c3:39:16:76: 42:f4:97:74:5c:18:9b:80:55:70:77:45:6d:cc:07: 2b:0c:d8:4b:e0:13:7a:10:2f:e3:71:43:c2:18:66: 1a:0b:a4:3d:77:16:1e:f1:3f:31:0c:f4:77:8f:02: 2f:c9:7c:56:f3:ef:6c:f4:6b:4d:08:7c:9e:81:ac: eb:43:a2:5e:2b:f8:41:87:5b:e0:8f:48:0b:fd:d0: a4:1d:d1:3e:72:79:69:9d:e2:2e:0d:00:d1:f0:82: 2a:8b:73:d5:d5:01:1e:3f:8f:d2:94:bb:e9:36:7e: 13:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A4:73:CC:CE:1D:EB:6C:2C:AB:61:83:D4:F1:F2:97:85:A8:D8:64 X509v3 Authority Key Identifier: keyid:16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:c9:40:09:23:25:f7:a3:6f:87:b6:cb:d6:22:aa:c2:5e:22: 38:1f:1e:5c:44:bc:55:53:38:26:00:b2:bf:eb:65:81:72:24: 2a:be:f1:2a:f8:61:4e:ed:44:89:18:59:df:44:c9:6f:8a:3b: 7d:b5:2b:44:c7:a1:6d:0f:9f:44:54:24:99:24:92:3f:f8:6b: c8:ce:9f:54:e8:ca:c0:2c:65:f6:cd:42:25:2f:3d:de:3c:49: e3:59:f9:73:60:84:3d:e3:a4:c1:3e:67:fd:44:c4:f4:0a:0d: d1:44:51:e6:67:6c:af:2c:0b:5c:39:8c:51:f9:19:ee:7d:fb: ba:52:a2:39:3a:71:9d:77:b2:cc:a9:0d:03:ce:6b:bd:05:60: 08:4d:fc:b8:73:52:c5:06:c0:93:bd:8b:fd:70:e1:96:31:8a: e1:dc:52:51:7f:04:08:6e:dd:35:59:f0:cd:7f:47:38:ab:5a: 06:f5:46:46:3e:de:ca:78:60:8b:6c:1f:65:2e:2c:ee:82:5e: 95:7d:44:86:76:f0:c2:ee:b9:f5:f8:8a:b8:52:ac:9c:32:89: 28:86:ff:b1:35:f7:84:d6:ea:90:49:c6:d3:e8:1d:c0:28:22: 5a:42:2e:49:c0:09:35:64:16:c1:cb:08:8f:c2:57:47:33:ac: 15:a5:84:44 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MjlEQTExMC8GA1UEBRMoMTZEMTRBQTUxMzRENDExMjQ2NEQ3OTkyREJGMUM0NTJG N0ZBMjlBMDAeFw0yNDA1MTcwODM5MTJaFw0yNDA1MjQwODM5MTJaMBgxFjAUBgNV BAMTDTY2NDcxN2IwLTg2N2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNsfQEkxxwUKSjSiOAhEYvtQ0Kdmr/TcuNLhcw/B9QAh0IFaNvvuF9t3qX8LeN TgZTzp4GEUSsr4wQcwwUxyX93vYZ7y3qkME8m0QS7xfnDHQ2+LRiFXVB84u5Yg1M p3lkE7+WejrAnTEn8xRWbjdXNUkAcRVdWGg43fetWqfVMu7ue4sW33R686Cg2/nf RHKywzkWdkL0l3RcGJuAVXB3RW3MBysM2EvgE3oQL+NxQ8IYZhoLpD13Fh7xPzEM 9HePAi/JfFbz72z0a00IfJ6BrOtDol4r+EGHW+CPSAv90KQd0T5yeWmd4i4NANHw giqLc9XVAR4/j9KUu+k2fhOlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbaRzzM4d 62wsq2GD1PHyl4Wo2GQwHwYDVR0jBBgwFoAUFtFKpRNNQRJGTXmS2/HEUvf6KaAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyOURBLzNFNjI0QkFFREE1 NDExRUU4MjdDQTU3REM0RjlBRTAyL0Z0RktwUk5OUVJKR1RYbVMyX0hFVXZmNkth QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRnRGS3BSTk5RUkpHVFhtUzJfSEVVdmY2S2FBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEy OURBLzNFNjI0QkFFREE1NDExRUU4MjdDQTU3REM0RjlBRTAyL0Z0RktwUk5OUVJK R1RYbVMyX0hFVXZmNkthQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB/JQAkjJfejb4e2y9YiqsJeIjgfHlxEvFVTOCYAsr/rZYFyJCq+8Sr4 YU7tRIkYWd9EyW+KO321K0THoW0Pn0RUJJkkkj/4a8jOn1ToysAsZfbNQiUvPd48 SeNZ+XNghD3jpME+Z/1ExPQKDdFEUeZnbK8sC1w5jFH5Ge59+7pSojk6cZ13ssyp DQPOa70FYAhN/LhzUsUGwJO9i/1w4ZYxiuHcUlF/BAhu3TVZ8M1/RzirWgb1RkY+ 3sp4YItsH2UuLO6CXpV9RIZ28MLuufX4irhSrJwyiSiG/7E194TW6pBJxtPoHcAo IlpCLknACTVkFsHLCI/CV0czrBWlhEQ= -----END CERTIFICATE-----Generated at Fri May 17 10:10:51 2024 by rpki-client on console-fra.rpki-client.org