$ rpki-client -vvf rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft File: Fh4CKuiXURLudYnUmzFmDKkKBBA.mft (raw, json) Hash identifier: UOAUSig9PMZfR31edm/LLU+JtwJeNbaA6THvkseY2oo= Subject key identifier: EC:46:90:17:00:8B:FD:A6:77:01:61:E0:62:A8:A2:E5:90:89:0A:C1 Authority key identifier: 16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10 Certificate issuer: /CN=A91A865F/serialNumber=161E022AE8975112EE7589D49B31660CA90A0410 Certificate serial: 0B04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft Manifest number: 0AFA Signing time: Fri 26 Apr 2024 19:55:27 +0000 Manifest this update: Fri 26 Apr 2024 19:55:26 +0000 Manifest next update: Fri 03 May 2024 19:55:26 +0000 Files and hashes: 1: Fh4CKuiXURLudYnUmzFmDKkKBBA.crl (hash: U9iauRTQRMUwLFnBx7J4jXxwTqcu6BxnUusMx7UHcOk=) 2: 8BB1EB9E1C8A11EABAA73A62C4F9AE02.roa (hash: 5O8G6LYJ0rhT94mzd+lsnn2I9NpxEhVRUg7KIJfOtS8=) 3: 8AAF803A1C8A11EABAA73A62C4F9AE02.roa (hash: 71xd5/5FhMriYHoOL/tPwY0AhjMl++Dxo9Z6XFBNqNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 19:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2820 (0xb04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A865F/serialNumber=161E022AE8975112EE7589D49B31660CA90A0410 Validity Not Before: Apr 26 19:55:26 2024 GMT Not After : May 3 19:55:26 2024 GMT Subject: CN=662c06af-1f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d4:7f:59:94:a4:56:f3:d0:65:fa:10:f5:45: 01:bc:dd:7c:29:46:b8:56:1a:b6:32:6f:04:45:8a: de:15:49:7c:fa:fc:1c:a6:99:79:97:b5:f5:61:0f: 2c:0a:3c:f2:a4:02:6e:12:0c:82:df:27:25:10:8e: 43:7d:ae:29:22:8e:b9:81:99:84:de:eb:81:9c:23: b2:5d:31:bf:0b:14:3b:2a:5e:ef:88:fa:b1:4b:ef: 9b:62:34:55:24:1e:80:9f:a9:1c:bb:d8:b8:43:53: 01:24:a2:91:60:cf:64:a8:83:1e:f5:99:67:b5:58: bd:3d:0f:ae:57:e5:f4:e1:a8:b1:a4:78:6d:ec:5b: 35:ad:7e:37:15:e1:b3:86:2e:19:8e:6c:b8:c3:15: 77:7d:63:e4:11:5a:08:07:f7:7d:a8:ad:7d:32:be: 67:7b:bf:91:70:84:d3:fd:87:76:9a:24:88:d5:33: f7:ba:4a:5f:28:23:74:5e:29:46:2c:22:84:da:a2: ac:dc:c8:db:54:02:26:8b:3f:9f:e6:96:93:8e:61: 82:c2:b2:4e:c5:24:49:1c:83:05:1d:98:9c:3f:33: 73:c1:b0:16:36:70:eb:ea:0c:70:d6:c9:78:3f:a3: 75:78:d5:73:4c:4b:17:9a:16:16:18:0c:6d:3f:e1: 8b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:46:90:17:00:8B:FD:A6:77:01:61:E0:62:A8:A2:E5:90:89:0A:C1 X509v3 Authority Key Identifier: keyid:16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:df:ee:59:f1:97:0e:d8:aa:52:a0:f1:ce:93:bd:46:d6:3b: ef:29:4b:70:1d:82:d3:83:2c:c9:52:5e:61:da:f5:6c:fd:d5: d2:e4:98:f5:e2:78:8d:8e:02:11:fa:05:8b:2f:44:77:60:79: 3a:c5:ca:b8:53:03:6e:06:95:8a:41:f5:64:7f:11:8f:97:bb: ed:11:74:9c:a8:88:b6:06:bb:e3:1d:00:0b:c5:be:e6:35:ff: 63:3c:b8:4a:9f:b1:c3:bf:43:90:e4:b7:e9:4a:ad:90:8f:0e: 37:57:63:45:79:be:2d:07:43:61:2f:d3:52:67:b7:9c:c3:2d: 6b:3d:0c:95:8e:e7:9b:1b:7f:c3:73:9c:ce:45:9b:ca:0d:74: 2b:bf:56:fa:d4:43:3b:4a:1d:3d:1f:26:39:9e:14:a2:6e:ee: 71:52:0e:c1:b6:73:70:43:a8:dd:d5:70:77:a9:17:a0:d5:c9: 95:ab:aa:6c:0c:2e:65:ba:f8:6c:75:8f:80:10:69:8a:9e:5a: a9:19:d2:29:01:45:a9:15:2d:0a:68:bb:e9:de:8b:f1:d0:70: 4d:5b:50:22:2a:88:7f:93:7c:14:3a:91:59:6c:a6:3d:4f:6a: a9:cb:65:6d:b9:f1:a0:e0:b9:8e:47:95:bd:d5:a7:f0:6f:c8: 99:73:80:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2NUYxMTAvBgNVBAUTKDE2MUUwMjJBRTg5NzUxMTJFRTc1ODlENDlCMzE2NjBD QTkwQTA0MTAwHhcNMjQwNDI2MTk1NTI2WhcNMjQwNTAzMTk1NTI2WjAYMRYwFAYD VQQDEw02NjJjMDZhZi0xZjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdR/WZSkVvPQZfoQ9UUBvN18KUa4Vhq2Mm8ERYreFUl8+vwcppl5l7X1YQ8s CjzypAJuEgyC3yclEI5Dfa4pIo65gZmE3uuBnCOyXTG/CxQ7Kl7viPqxS++bYjRV JB6An6kcu9i4Q1MBJKKRYM9kqIMe9ZlntVi9PQ+uV+X04aixpHht7Fs1rX43FeGz hi4Zjmy4wxV3fWPkEVoIB/d9qK19Mr5ne7+RcITT/Yd2miSI1TP3ukpfKCN0XilG LCKE2qKs3MjbVAImiz+f5paTjmGCwrJOxSRJHIMFHZicPzNzwbAWNnDr6gxw1sl4 P6N1eNVzTEsXmhYWGAxtP+GLawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOxGkBcA i/2mdwFh4GKoouWQiQrBMB8GA1UdIwQYMBaAFBYeAirol1ES7nWJ1JsxZgypCgQQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODY1Ri9CRjk2NkU0QTFD ODkxMUVBQTlCOTU3NjFDNEY5QUUwMi9GaDRDS3VpWFVSTHVkWW5VbXpGbURLa0tC QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoNENLdWlYVVJMdWRZblVtekZtREtrS0JCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODY1Ri9CRjk2NkU0QTFDODkxMUVBQTlCOTU3NjFDNEY5QUUwMi9GaDRDS3VpWFVS THVkWW5VbXpGbURLa0tCQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA03+5Z8ZcO2KpSoPHOk71G1jvvKUtwHYLTgyzJUl5h2vVs/dXS5Jj1 4niNjgIR+gWLL0R3YHk6xcq4UwNuBpWKQfVkfxGPl7vtEXScqIi2BrvjHQALxb7m Nf9jPLhKn7HDv0OQ5LfpSq2Qjw43V2NFeb4tB0NhL9NSZ7ecwy1rPQyVjuebG3/D c5zORZvKDXQrv1b61EM7Sh09HyY5nhSibu5xUg7BtnNwQ6jd1XB3qReg1cmVq6ps DC5luvhsdY+AEGmKnlqpGdIpAUWpFS0KaLvp3ovx0HBNW1AiKoh/k3wUOpFZbKY9 T2qpy2VtufGg4LmOR5W91afwb8iZc4BD -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:08 2024 by rpki-client on console-ams.rpki-client.org