$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft File: FUc--zxa6KDEdke34P3liGtrH6M.mft (raw, json) Hash identifier: XEna02bA0cGGtclz4tHci03xM3ujdbfOaXVWOrUDOfM= Subject key identifier: 89:D8:8A:9D:D5:19:89:70:C7:CC:7B:84:73:6A:CF:D1:06:1C:7E:6B Authority key identifier: 15:47:3E:FB:3C:5A:E8:A0:C4:76:47:B7:E0:FD:E5:88:6B:6B:1F:A3 Certificate issuer: /CN=A91CE4A1/serialNumber=15473EFB3C5AE8A0C47647B7E0FDE5886B6B1FA3 Certificate serial: 0325 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft Manifest number: 031E Signing time: Wed 01 May 2024 03:24:24 +0000 Manifest this update: Wed 01 May 2024 03:24:24 +0000 Manifest next update: Wed 08 May 2024 03:24:24 +0000 Files and hashes: 1: FUc--zxa6KDEdke34P3liGtrH6M.crl (hash: LQtsoeBHFi4QEAnI6N4sUYS/GlbWahRKyCCAA8qzoI8=) 2: 2D81FF3680BB11EC8FD7663DC4F9AE02.roa (hash: ACYS4E6s5g3Yyp9k5cK0cHZKIktS2+m7MVWC1wBjVGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.crl rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 805 (0x325) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE4A1/serialNumber=15473EFB3C5AE8A0C47647B7E0FDE5886B6B1FA3 Validity Not Before: May 1 03:24:24 2024 GMT Not After : May 8 03:24:24 2024 GMT Subject: CN=6631b5e8-8753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:77:87:80:ef:2c:8a:98:79:8a:1f:be:8d:bb: c7:f0:7d:9b:09:4e:f7:29:b8:28:14:b8:2d:f6:ea: e7:6b:bb:a2:2e:8a:fd:41:47:8b:46:65:ec:80:42: 08:ba:a5:5d:51:3e:2f:77:50:f1:aa:1b:7e:80:8b: bf:bf:74:d6:f8:eb:76:17:10:f5:c6:17:a2:bb:10: 80:ca:08:d7:ae:27:15:ad:42:41:5a:cc:20:98:82: 4d:e8:22:2d:f3:d0:ee:e0:95:2f:d6:9a:5a:e8:f8: d5:52:90:e0:66:30:06:5e:44:72:7b:8a:1f:69:85: 13:0d:b1:ae:25:a1:03:70:3c:fd:c2:7c:00:3f:cc: 88:e5:da:84:87:7d:85:47:62:fc:72:42:f4:54:8b: ff:89:5e:29:52:4b:18:2b:87:c4:bb:f4:51:68:4b: 09:5e:97:72:15:06:32:be:94:8f:b3:d0:6b:ee:c0: 73:81:96:40:6a:b0:dd:64:d3:7e:a0:67:a3:fc:cb: 5e:8c:17:d2:41:e2:b2:36:58:d7:23:b8:c4:d4:d1: 3c:08:64:03:a6:20:29:18:af:b8:e5:cb:95:3e:51: f5:79:78:12:e2:43:6b:8a:d4:84:e4:82:5a:fd:61: 56:71:7a:05:f0:67:02:a0:75:63:8a:7c:cb:f4:80: 9c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D8:8A:9D:D5:19:89:70:C7:CC:7B:84:73:6A:CF:D1:06:1C:7E:6B X509v3 Authority Key Identifier: keyid:15:47:3E:FB:3C:5A:E8:A0:C4:76:47:B7:E0:FD:E5:88:6B:6B:1F:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:44:b0:d9:c2:2f:c1:30:cd:b2:82:ac:52:3b:53:92:19:19: 2c:15:2c:4b:ed:6e:72:26:9a:76:fb:90:4f:26:8d:cc:ba:8b: 5a:e7:1f:83:95:49:3d:42:e6:25:7e:b9:ee:80:b6:78:b3:ad: 04:26:7a:48:e5:2a:4e:1b:e2:d0:a2:20:22:c6:39:9f:54:ff: 6c:07:42:6b:5b:60:63:a2:62:b3:2e:a0:57:3b:cc:b7:b1:22: a8:a3:05:1b:52:65:66:bf:6e:30:ba:13:5e:ab:c5:c2:67:aa: 3c:58:dc:f1:87:aa:92:fe:e6:e1:50:5d:16:01:04:55:25:75: b6:6f:29:5f:59:81:ef:ff:5e:da:30:74:12:80:7a:5c:58:4a: 69:a7:d7:35:86:19:12:31:10:a4:57:6a:32:e9:f5:66:03:6a: 3c:ac:a7:ad:91:71:91:85:82:c8:a1:a3:e8:99:0d:40:aa:90: 58:3e:f1:36:7a:c2:4e:75:a3:a1:0e:24:cb:d7:1e:76:89:aa: 97:df:aa:1e:36:b3:6b:81:8f:0a:73:e8:2c:9a:d7:47:35:77: 53:aa:3c:f6:17:93:3c:8e:6b:a5:14:49:63:21:5f:99:1b:74: ce:6b:34:be:68:a7:88:5c:c8:4b:39:4b:70:ff:eb:ff:4a:5a: 61:9f:ea:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U0QTExMTAvBgNVBAUTKDE1NDczRUZCM0M1QUU4QTBDNDc2NDdCN0UwRkRFNTg4 NkI2QjFGQTMwHhcNMjQwNTAxMDMyNDI0WhcNMjQwNTA4MDMyNDI0WjAYMRYwFAYD VQQDEw02NjMxYjVlOC04NzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtneHgO8siph5ih++jbvH8H2bCU73KbgoFLgt9urna7uiLor9QUeLRmXsgEII uqVdUT4vd1Dxqht+gIu/v3TW+Ot2FxD1xheiuxCAygjXricVrUJBWswgmIJN6CIt 89Du4JUv1ppa6PjVUpDgZjAGXkRye4ofaYUTDbGuJaEDcDz9wnwAP8yI5dqEh32F R2L8ckL0VIv/iV4pUksYK4fEu/RRaEsJXpdyFQYyvpSPs9Br7sBzgZZAarDdZNN+ oGej/MtejBfSQeKyNljXI7jE1NE8CGQDpiApGK+45cuVPlH1eXgS4kNritSE5IJa /WFWcXoF8GcCoHVjinzL9ICcXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInYip3V GYlwx8x7hHNqz9EGHH5rMB8GA1UdIwQYMBaAFBVHPvs8WuigxHZHt+D95Yhrax+j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTRBMS84NUZBMENFODgw QjcxMUVDOUZFQjJDNjdDNEY5QUUwMi9GVWMtLXp4YTZLREVka2UzNFAzbGlHdHJI Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZVYy0tenhhNktERWRrZTM0UDNsaUd0ckg2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTRBMS84NUZBMENFODgwQjcxMUVDOUZFQjJDNjdDNEY5QUUwMi9GVWMtLXp4YTZL REVka2UzNFAzbGlHdHJINk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCARLDZwi/BMM2ygqxSO1OSGRksFSxL7W5yJpp2+5BPJo3Muota5x+D lUk9QuYlfrnugLZ4s60EJnpI5SpOG+LQoiAixjmfVP9sB0JrW2BjomKzLqBXO8y3 sSKoowUbUmVmv24wuhNeq8XCZ6o8WNzxh6qS/ubhUF0WAQRVJXW2bylfWYHv/17a MHQSgHpcWEppp9c1hhkSMRCkV2oy6fVmA2o8rKetkXGRhYLIoaPomQ1AqpBYPvE2 esJOdaOhDiTL1x52iaqX36oeNrNrgY8Kc+gsmtdHNXdTqjz2F5M8jmulFEljIV+Z G3TOazS+aKeIXMhLOUtw/+v/Slphn+r5 -----END CERTIFICATE-----Generated at Wed May 1 05:59:11 2024 by rpki-client on console-fra.rpki-client.org