$ rpki-client -vvf rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft File: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft (raw, json) Hash identifier: MI280FJm8pzO0iKGncMQlUiiarBQilcAuoGYK5LDsuk= Subject key identifier: F1:60:40:B7:A4:5F:DB:21:DC:FD:87:5C:4E:DA:F5:C5:8D:38:B4:01 Authority key identifier: 15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C Certificate issuer: /CN=A91D61DF/serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft Manifest number: A7 Signing time: Fri 17 May 2024 06:50:13 +0000 Manifest this update: Fri 17 May 2024 06:50:12 +0000 Manifest next update: Fri 24 May 2024 06:50:12 +0000 Files and hashes: 1: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl (hash: fuTPpD7qCFOgwGVWt7ZQT0r8YOhPso9UYB3CPdxeVrw=) 2: 1D52E8E860D711EEA524AE64C4F9AE02.roa (hash: dz8+3qu5h5r0R4jtpUTCSApBTzOeCaTV8lpsEpR+XFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D61DF/serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C Validity Not Before: May 17 06:50:12 2024 GMT Not After : May 24 06:50:12 2024 GMT Subject: CN=6646fe25-2db3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c7:f9:e9:6d:d6:75:ef:69:4a:f8:ec:b0:03: 7f:c4:eb:e5:11:fb:e5:b1:f4:c3:f6:86:88:a2:c6: a4:06:83:98:d1:79:9a:14:9c:7a:6e:40:0e:7a:f7: dc:d9:a0:60:50:2a:55:44:bc:23:0d:87:61:3f:43: b8:f9:2f:95:3c:47:04:1e:33:84:b3:c0:68:37:93: 58:94:23:89:dd:68:ae:32:29:b3:db:6a:9e:f4:1b: 3d:3c:b9:52:67:3f:26:b5:f2:34:4e:c1:10:93:dc: 85:c6:79:7b:1e:dd:18:20:6e:83:52:33:a4:3c:36: 98:82:d2:20:bd:63:ec:ee:a0:09:37:33:99:20:9a: c1:b5:34:8d:5b:ff:73:32:8d:3d:d8:8d:06:53:06: 46:5a:74:94:84:63:59:72:8d:54:1f:e2:48:70:15: ac:30:d2:a5:15:fd:e8:82:f2:0b:b2:72:b8:00:e4: 32:32:e3:22:f6:54:dd:e5:eb:19:c5:f6:09:83:1f: 75:ba:88:65:ae:1e:9c:0d:cd:18:e7:bb:31:82:37: d1:6e:82:46:22:0c:d3:4d:60:f8:ef:24:bc:f4:da: 6b:30:2d:f3:03:d8:a4:b5:b6:b0:c9:57:16:58:12: 17:cb:0b:2a:91:9e:4f:a8:c6:15:e5:1c:c4:b7:a3: 53:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:60:40:B7:A4:5F:DB:21:DC:FD:87:5C:4E:DA:F5:C5:8D:38:B4:01 X509v3 Authority Key Identifier: keyid:15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:bc:24:fd:a7:50:8b:8a:b5:dc:97:19:0b:c3:13:52:20:40: 6a:0e:63:0e:a3:24:4d:ed:de:92:34:b5:23:02:7c:b6:e5:27: 7e:3e:6f:60:d7:8c:c4:f6:23:8b:7e:e2:48:09:f1:16:b0:4a: a1:a3:90:c4:f9:39:af:1d:bc:66:e3:84:69:4e:76:3c:61:85: 3b:83:bc:17:64:d3:1b:95:92:d6:f8:6b:39:24:11:b2:a5:74: 02:88:40:47:52:40:32:70:78:7d:9b:3e:30:05:36:02:61:2b: d4:d5:28:54:b8:45:2a:44:79:a2:a4:13:fc:90:e7:3f:76:8a: 36:f3:fc:2c:2d:fc:75:52:55:46:18:60:b6:eb:29:a8:09:a2: b4:a7:07:06:8b:27:75:1c:43:10:f1:9f:e2:28:dd:aa:4a:12: cb:ed:8c:70:91:51:8e:13:41:70:0f:60:d9:76:aa:66:ad:49: 47:df:6d:ea:f0:2e:55:f0:72:ae:5b:1d:c2:38:e4:18:13:0c: f7:a0:ec:17:82:b7:d0:71:46:ec:0e:19:7d:97:51:87:95:8c: a8:b3:c2:d4:84:0f:2a:5e:19:69:bf:f7:69:ad:a7:c0:a2:f8: c9:af:a7:df:f7:64:f6:5a:33:0a:de:26:e8:42:fc:bb:f7:39: 23:42:43:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYxREYxMTAvBgNVBAUTKDE1QkYyMTBCNzM3ODFENUNDMEJFOTlCRDM5RDcwQjJG RUI0RUI4NkMwHhcNMjQwNTE3MDY1MDEyWhcNMjQwNTI0MDY1MDEyWjAYMRYwFAYD VQQDEw02NjQ2ZmUyNS0yZGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsf56W3Wde9pSvjssAN/xOvlEfvlsfTD9oaIosakBoOY0XmaFJx6bkAOevfc 2aBgUCpVRLwjDYdhP0O4+S+VPEcEHjOEs8BoN5NYlCOJ3WiuMimz22qe9Bs9PLlS Zz8mtfI0TsEQk9yFxnl7Ht0YIG6DUjOkPDaYgtIgvWPs7qAJNzOZIJrBtTSNW/9z Mo092I0GUwZGWnSUhGNZco1UH+JIcBWsMNKlFf3ogvILsnK4AOQyMuMi9lTd5esZ xfYJgx91uohlrh6cDc0Y57sxgjfRboJGIgzTTWD47yS89NprMC3zA9iktbawyVcW WBIXywsqkZ5PqMYV5RzEt6NT1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFgQLek X9sh3P2HXE7a9cWNOLQBMB8GA1UdIwQYMBaAFBW/IQtzeB1cwL6ZvTnXCy/rTrhs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjFERi8wRDBDNUY3NDFD NjYxMUVFOUExMzJCODRDNEY5QUUwMi9GYjhoQzNONEhWekF2cG05T2RjTEwtdE91 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZiOGhDM040SFZ6QXZwbTlPZGNMTC10T3VHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjFERi8wRDBDNUY3NDFDNjYxMUVFOUExMzJCODRDNEY5QUUwMi9GYjhoQzNONEhW ekF2cG05T2RjTEwtdE91R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtvCT9p1CLirXclxkLwxNSIEBqDmMOoyRN7d6SNLUjAny25Sd+Pm9g 14zE9iOLfuJICfEWsEqho5DE+TmvHbxm44RpTnY8YYU7g7wXZNMblZLW+Gs5JBGy pXQCiEBHUkAycHh9mz4wBTYCYSvU1ShUuEUqRHmipBP8kOc/doo28/wsLfx1UlVG GGC26ymoCaK0pwcGiyd1HEMQ8Z/iKN2qShLL7YxwkVGOE0FwD2DZdqpmrUlH323q 8C5V8HKuWx3COOQYEwz3oOwXgrfQcUbsDhl9l1GHlYyos8LUhA8qXhlpv/dprafA ovjJr6ff92T2WjMK3iboQvy79zkjQkNU -----END CERTIFICATE-----Generated at Fri May 17 08:13:54 2024 by rpki-client on console-fra.rpki-client.org