$ rpki-client -vvf rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft File: FmUgpBWnVONYZSxXkM6GtLJjLdE.mft (raw, json) Hash identifier: Miw0g/CCZqE2MMLelMl7bi6/ESfqxSDjTa5jXl4Uq1g= Subject key identifier: A2:39:EE:BE:F4:E8:7B:6A:BE:6D:2E:4E:58:A6:27:9B:74:30:D8:BC Authority key identifier: 16:65:20:A4:15:A7:54:E3:58:65:2C:57:90:CE:86:B4:B2:63:2D:D1 Certificate issuer: /CN=A91D12C2/serialNumber=166520A415A754E358652C5790CE86B4B2632DD1 Certificate serial: 0A7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft Manifest number: 0A77 Signing time: Mon 06 May 2024 20:22:33 +0000 Manifest this update: Mon 06 May 2024 20:22:32 +0000 Manifest next update: Mon 13 May 2024 20:22:32 +0000 Files and hashes: 1: FmUgpBWnVONYZSxXkM6GtLJjLdE.crl (hash: SoVpN7iu+LkEtXBkP8kpsTOQib5DhTzly4joDB5xbds=) 2: 6C8823E2378211EA8FE81077C4F9AE02.roa (hash: ElMvFtSWQc3L/PeymWA1CWb+wYib+HMGSvmnYch4X7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.crl rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2684 (0xa7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D12C2/serialNumber=166520A415A754E358652C5790CE86B4B2632DD1 Validity Not Before: May 6 20:22:32 2024 GMT Not After : May 13 20:22:32 2024 GMT Subject: CN=66393c08-fd46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:15:6a:89:e5:36:2f:8e:73:60:6d:0d:b3:15: a1:4c:b9:86:fc:e2:69:2d:66:3a:00:36:f8:ed:05: 73:05:7a:cf:b1:37:24:a5:c5:bc:f1:d4:6e:6c:29: 63:f2:48:5c:eb:eb:66:59:35:7d:b6:69:be:9c:ee: 65:c6:27:cf:01:72:f6:a8:b5:c8:2a:db:96:25:f8: 09:f9:b2:6f:52:ae:32:bc:d6:1a:1c:46:d1:cd:ed: ed:9e:64:07:ad:a4:d4:ca:1b:ec:93:82:72:ce:0e: 33:fe:da:6e:df:a2:7b:ad:d7:1b:10:46:81:c4:5f: ac:ab:a1:85:65:c6:eb:3a:bf:b5:f5:55:4c:f5:4c: 61:5a:00:cf:99:73:80:aa:b8:19:27:1b:d6:73:bb: a6:51:ab:96:ab:82:f0:24:ce:e7:2b:b9:4d:cc:dc: b0:c5:bc:8b:9c:c3:b2:10:82:9c:ee:97:52:d3:87: 02:61:39:a9:59:b3:d8:a9:4b:89:9c:ae:d0:ef:0b: 8e:d9:49:81:12:ae:72:8c:e5:7d:82:c5:d1:75:1f: 14:65:77:48:cb:26:fa:8c:71:2b:23:bf:93:cf:65: c3:2e:05:83:dd:5f:4d:5e:1f:30:8b:7a:8a:c4:49: 1f:31:df:fa:9d:41:fe:17:88:65:61:e0:6c:ca:7e: b8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:39:EE:BE:F4:E8:7B:6A:BE:6D:2E:4E:58:A6:27:9B:74:30:D8:BC X509v3 Authority Key Identifier: keyid:16:65:20:A4:15:A7:54:E3:58:65:2C:57:90:CE:86:B4:B2:63:2D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:13:07:d2:ba:0b:10:6e:76:bf:43:64:58:25:b3:1b:02:74: 5a:ad:a7:c3:ea:f0:1c:dc:df:d5:8d:88:8b:e4:bb:46:f4:7d: 2f:ee:d8:07:d4:dc:9e:87:2a:a8:5c:92:35:96:7e:ec:c8:1d: b3:93:58:80:60:1c:64:1e:9f:3b:e6:ca:d0:ff:a5:8c:40:68: 58:04:e5:f5:d5:b0:7d:cf:56:d7:b8:3d:69:48:75:5a:3d:3a: fc:6d:51:5e:5f:31:53:10:c8:5c:4e:1a:79:51:c4:88:95:f3: 49:ce:fb:2b:41:53:87:69:c7:44:4b:99:d2:42:0c:18:0d:17: 7c:e6:a4:45:47:8d:4a:82:c9:42:67:c4:5d:29:0a:62:a2:cb: 0e:42:2c:0c:33:43:ae:c6:67:7c:17:58:2b:e0:30:18:97:ee: 59:9d:64:22:1f:04:40:e3:a3:ac:36:5b:c7:7f:bc:1a:fa:30: 93:4c:75:a5:db:34:ab:49:bf:6e:f3:70:ba:56:ea:9b:6d:08: 23:e0:ac:3e:a4:73:c5:0b:6f:d2:d2:14:dd:00:a0:63:b6:a5: c2:85:4f:86:07:38:50:76:a5:31:72:5e:0a:fa:09:77:11:f3: 63:ad:a7:6b:61:c6:fb:f7:0a:94:96:6b:6b:f4:c4:0b:a3:f1: 32:7c:2e:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyQzIxMTAvBgNVBAUTKDE2NjUyMEE0MTVBNzU0RTM1ODY1MkM1NzkwQ0U4NkI0 QjI2MzJERDEwHhcNMjQwNTA2MjAyMjMyWhcNMjQwNTEzMjAyMjMyWjAYMRYwFAYD VQQDEw02NjM5M2MwOC1mZDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRVqieU2L45zYG0NsxWhTLmG/OJpLWY6ADb47QVzBXrPsTckpcW88dRubClj 8khc6+tmWTV9tmm+nO5lxifPAXL2qLXIKtuWJfgJ+bJvUq4yvNYaHEbRze3tnmQH raTUyhvsk4Jyzg4z/tpu36J7rdcbEEaBxF+sq6GFZcbrOr+19VVM9UxhWgDPmXOA qrgZJxvWc7umUauWq4LwJM7nK7lNzNywxbyLnMOyEIKc7pdS04cCYTmpWbPYqUuJ nK7Q7wuO2UmBEq5yjOV9gsXRdR8UZXdIyyb6jHErI7+Tz2XDLgWD3V9NXh8wi3qK xEkfMd/6nUH+F4hlYeBsyn64LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKI57r70 6Htqvm0uTlimJ5t0MNi8MB8GA1UdIwQYMBaAFBZlIKQVp1TjWGUsV5DOhrSyYy3R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTJDMi9CMkZFMzVERTM3 ODAxMUVBQjIxNDEzNzRDNEY5QUUwMi9GbVVncEJXblZPTllaU3hYa002R3RMSmpM ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZtVWdwQlduVk9OWVpTeFhrTTZHdExKakxkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTJDMi9CMkZFMzVERTM3ODAxMUVBQjIxNDEzNzRDNEY5QUUwMi9GbVVncEJXblZP TllaU3hYa002R3RMSmpMZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+EwfSugsQbna/Q2RYJbMbAnRarafD6vAc3N/VjYiL5LtG9H0v7tgH 1NyehyqoXJI1ln7syB2zk1iAYBxkHp875srQ/6WMQGhYBOX11bB9z1bXuD1pSHVa PTr8bVFeXzFTEMhcThp5UcSIlfNJzvsrQVOHacdES5nSQgwYDRd85qRFR41KgslC Z8RdKQpiossOQiwMM0Ouxmd8F1gr4DAYl+5ZnWQiHwRA46OsNlvHf7wa+jCTTHWl 2zSrSb9u83C6VuqbbQgj4Kw+pHPFC2/S0hTdAKBjtqXChU+GBzhQdqUxcl4K+gl3 EfNjradrYcb79wqUlmtr9MQLo/EyfC7S -----END CERTIFICATE-----Generated at Mon May 6 22:41:03 2024 by rpki-client on console-ams.rpki-client.org