$ rpki-client -vvf rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft File: fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft (raw, json) Hash identifier: 4ZUu1X186ChcHFCkph3Up/2OZYu475JRhYS/GEZFhjk= Subject key identifier: F2:2A:FE:1F:80:2A:79:43:AD:5E:AE:29:3C:13:34:CC:7A:74:6C:59 Authority key identifier: 7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B Certificate issuer: /CN=A91C96A7/serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B Certificate serial: 0EF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft Manifest number: 0EEE Signing time: Fri 26 Apr 2024 18:16:31 +0000 Manifest this update: Fri 26 Apr 2024 18:16:30 +0000 Manifest next update: Fri 03 May 2024 18:16:30 +0000 Files and hashes: 1: fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl (hash: OfEQRZAvFauB3OnD53ldfnMh0H+BOjK/EB/ANljVhFo=) 2: 1BB9CAB6578011E99E80631AC4F9AE02.roa (hash: DJClFjNtaOvQ/Ujp6J8xeRJYTDwT4UiI5JTW6w5mbHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 18:16:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3833 (0xef9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C96A7/serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B Validity Not Before: Apr 26 18:16:30 2024 GMT Not After : May 3 18:16:30 2024 GMT Subject: CN=662bef7f-f6ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2f:ca:da:81:72:a8:6a:5d:07:6c:b1:50:8a: a0:39:c1:0f:18:6f:8a:dc:9d:ea:bd:d4:28:0c:5d: 7e:f4:cf:0f:b5:9f:32:06:0d:52:fe:2c:60:c0:28: c3:bc:5e:8d:ef:eb:62:39:90:7b:26:bf:35:ca:ad: b9:9e:32:ae:61:08:39:95:c6:50:8c:37:a7:c5:10: a9:cf:34:ab:50:95:7a:10:41:28:c8:c7:be:a6:8b: a8:0d:8a:9f:0b:f1:8b:b8:05:72:22:7e:21:9b:3b: 62:16:df:aa:08:1e:ae:75:41:e8:29:3f:dd:b3:d4: 42:09:c1:9f:4c:fb:eb:f6:e4:2d:2e:4a:74:66:37: 1d:3b:44:34:c4:3a:bf:be:d5:ee:4f:52:6a:83:6f: a7:ed:60:d0:98:4e:3a:d2:fe:8c:59:16:b2:d4:96: 58:52:ca:f3:5c:a7:b7:e9:5a:b7:a4:de:5b:0a:5a: 87:97:94:d9:8c:97:fb:7c:e3:bd:1c:1d:bd:b1:85: f9:27:42:94:89:5c:cf:0f:34:0e:fc:ab:ae:26:b8: 28:ba:d6:42:c9:74:29:3e:08:d7:9d:ab:c6:1f:2f: b2:b0:ad:5a:81:16:1f:52:e8:ff:7a:bc:cb:49:41: 4f:eb:63:33:44:f8:49:68:08:52:10:48:a0:85:8e: 83:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:2A:FE:1F:80:2A:79:43:AD:5E:AE:29:3C:13:34:CC:7A:74:6C:59 X509v3 Authority Key Identifier: keyid:7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:07:0b:6e:f0:c1:24:2e:96:bd:80:d3:69:52:00:a8:d0:be: 86:c0:13:c7:0a:4b:ed:0c:2d:6a:87:60:bf:55:03:03:7a:a8: 06:34:88:b2:1c:ab:f5:70:b9:71:a6:a4:75:ed:8b:3c:da:87: b5:83:e7:f9:19:f7:9c:16:a1:23:0c:38:85:9d:cc:15:7d:03: 04:bd:e2:fa:4f:62:e4:4a:fc:70:f7:c2:a4:7d:1f:19:67:df: 46:d7:24:37:31:e8:a6:6e:da:29:66:59:54:f2:ea:3f:df:ee: 54:86:ea:b4:2f:dc:52:60:0e:68:c2:3d:33:97:83:cd:21:ca: 09:1f:de:b8:ca:95:2a:19:ee:6c:75:ed:d9:2b:f7:87:e1:db: 3f:87:f7:20:d8:b6:c1:cd:51:3c:c1:70:07:f3:17:43:b3:34: 50:74:65:20:22:11:ca:35:2f:f7:87:c8:e3:8e:2d:e4:02:45: bd:85:89:a7:d3:4c:ec:c4:99:eb:ec:22:a9:17:66:94:c3:06: 65:86:47:ed:df:3c:19:66:b8:a1:52:61:04:c9:58:9d:f5:2e: 08:81:37:36:17:da:00:81:dd:a8:84:98:28:34:a8:07:8a:63: 44:0c:3a:6e:aa:3e:97:4e:ed:c5:cc:da:07:b1:6a:f6:51:35: 7b:d1:76:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2QTcxMTAvBgNVBAUTKDdEQzU2ODkzREEzNTQ4M0ZEOTA5NERGMDM1MDRERTIx N0I2RTNCM0IwHhcNMjQwNDI2MTgxNjMwWhcNMjQwNTAzMTgxNjMwWjAYMRYwFAYD VQQDEw02NjJiZWY3Zi1mNmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuC/K2oFyqGpdB2yxUIqgOcEPGG+K3J3qvdQoDF1+9M8PtZ8yBg1S/ixgwCjD vF6N7+tiOZB7Jr81yq25njKuYQg5lcZQjDenxRCpzzSrUJV6EEEoyMe+pouoDYqf C/GLuAVyIn4hmztiFt+qCB6udUHoKT/ds9RCCcGfTPvr9uQtLkp0ZjcdO0Q0xDq/ vtXuT1Jqg2+n7WDQmE460v6MWRay1JZYUsrzXKe36Vq3pN5bClqHl5TZjJf7fOO9 HB29sYX5J0KUiVzPDzQO/KuuJrgoutZCyXQpPgjXnavGHy+ysK1agRYfUuj/erzL SUFP62MzRPhJaAhSEEighY6DkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIq/h+A KnlDrV6uKTwTNMx6dGxZMB8GA1UdIwQYMBaAFH3FaJPaNUg/2QlN8DUE3iF7bjs7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTZBNy8yNkU3NDk5NjU3 N0YxMUU5OEU5MENBMThDNEY5QUUwMi9mY1ZvazlvMVNEX1pDVTN3TlFUZUlYdHVP enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZjVm9rOW8xU0RfWkNVM3dOUVRlSVh0dU96cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTZBNy8yNkU3NDk5NjU3N0YxMUU5OEU5MENBMThDNEY5QUUwMi9mY1ZvazlvMVNE X1pDVTN3TlFUZUlYdHVPenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPBwtu8MEkLpa9gNNpUgCo0L6GwBPHCkvtDC1qh2C/VQMDeqgGNIiy HKv1cLlxpqR17Ys82oe1g+f5GfecFqEjDDiFncwVfQMEveL6T2LkSvxw98KkfR8Z Z99G1yQ3MeimbtopZllU8uo/3+5Uhuq0L9xSYA5owj0zl4PNIcoJH964ypUqGe5s de3ZK/eH4ds/h/cg2LbBzVE8wXAH8xdDszRQdGUgIhHKNS/3h8jjji3kAkW9hYmn 00zsxJnr7CKpF2aUwwZlhkft3zwZZrihUmEEyVid9S4IgTc2F9oAgd2ohJgoNKgH imNEDDpuqj6XTu3FzNoHsWr2UTV70XYn -----END CERTIFICATE-----Generated at Sat Apr 27 10:20:28 2024 by rpki-client on console-ams.rpki-client.org