$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0425/5FC8AADC06A811EBBDFEB970C4F9AE02/FUn5SUcUqKLXBP3poEY7vDS19OA.mft File: FUn5SUcUqKLXBP3poEY7vDS19OA.mft (raw, json) Hash identifier: Boa2XHiHnymHxSUvolpLYs6ybkn1lgMq6hQ2Nx3eIcg= Subject key identifier: 71:48:C1:8A:55:B6:79:B0:8F:2E:2F:AA:7C:4C:3F:A7:6E:A2:35:96 Authority key identifier: 15:49:F9:49:47:14:A8:A2:D7:04:FD:E9:A0:46:3B:BC:34:B5:F4:E0 Certificate issuer: /CN=A91E0425/serialNumber=1549F9494714A8A2D704FDE9A0463BBC34B5F4E0 Certificate serial: 06DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUn5SUcUqKLXBP3poEY7vDS19OA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0425/5FC8AADC06A811EBBDFEB970C4F9AE02/FUn5SUcUqKLXBP3poEY7vDS19OA.mft Manifest number: 06DA Signing time: Tue 14 May 2024 22:59:53 +0000 Manifest this update: Tue 14 May 2024 22:59:53 +0000 Manifest next update: Tue 21 May 2024 22:59:52 +0000 Files and hashes: 1: FUn5SUcUqKLXBP3poEY7vDS19OA.crl (hash: pgiKg79JSZ0QUrpEe6NGgjEvfcsoBZI9xRnfzWUAt5U=) 2: 8F4AF01606A911EBB5828C71C4F9AE02.roa (hash: eM7aF4ymH6aDPZBOyFk/6QJ9vCpU8peuNx+mA0a7hNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0425/5FC8AADC06A811EBBDFEB970C4F9AE02/FUn5SUcUqKLXBP3poEY7vDS19OA.crl rsync://rpki.apnic.net/member_repository/A91E0425/5FC8AADC06A811EBBDFEB970C4F9AE02/FUn5SUcUqKLXBP3poEY7vDS19OA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUn5SUcUqKLXBP3poEY7vDS19OA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 22:44:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1759 (0x6df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0425/serialNumber=1549F9494714A8A2D704FDE9A0463BBC34B5F4E0 Validity Not Before: May 14 22:59:53 2024 GMT Not After : May 21 22:59:52 2024 GMT Subject: CN=6643ece9-97e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:49:8f:d2:9f:a3:88:b0:96:23:65:55:8c:dc: 1b:35:37:fc:cf:31:8a:bb:41:94:5e:ba:b0:34:77: 37:97:1a:ed:f9:5b:b1:81:68:2f:85:5a:ec:21:f5: 60:c0:1b:b4:93:f3:f7:15:fa:a3:31:77:1d:62:2e: 40:77:4b:64:68:72:61:5d:f5:e8:80:4a:f3:9b:82: fe:e7:37:24:03:a3:37:1f:0e:02:2d:7a:15:10:3e: 60:2f:f5:d5:15:24:e1:67:64:4c:c7:2b:56:5a:0e: b2:42:10:0d:ae:3e:89:0d:1a:2a:1b:4a:1b:c6:d2: 00:45:ed:42:71:7d:30:45:b1:65:a6:86:db:fd:8d: 46:f6:91:63:0c:a0:40:49:b4:88:ba:ce:a4:77:bc: 0b:26:06:16:07:d9:21:52:06:19:04:ef:b7:21:01: 6e:9a:86:62:2a:27:ca:8c:fb:ff:52:91:cc:82:5a: 4f:15:57:36:71:12:c7:92:07:91:f1:a2:6c:f6:ba: a4:e0:58:45:ad:0d:16:e1:a7:49:1f:c2:33:e8:f8: 57:62:c1:13:b1:3a:95:f2:ee:3b:82:dd:0a:61:dc: fd:4a:82:29:99:4f:ac:a4:e8:96:47:23:29:b4:ef: 39:2b:b4:58:45:7e:3c:c6:37:fd:f9:d5:6c:6b:36: 61:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:48:C1:8A:55:B6:79:B0:8F:2E:2F:AA:7C:4C:3F:A7:6E:A2:35:96 X509v3 Authority Key Identifier: keyid:15:49:F9:49:47:14:A8:A2:D7:04:FD:E9:A0:46:3B:BC:34:B5:F4:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0425/5FC8AADC06A811EBBDFEB970C4F9AE02/FUn5SUcUqKLXBP3poEY7vDS19OA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUn5SUcUqKLXBP3poEY7vDS19OA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0425/5FC8AADC06A811EBBDFEB970C4F9AE02/FUn5SUcUqKLXBP3poEY7vDS19OA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:0b:5e:9e:ef:9c:dd:56:99:9b:50:94:b9:33:76:61:c4:72: d6:ac:61:b1:5c:e1:f3:bd:3d:68:7b:5b:7d:91:52:74:3f:9c: da:59:b0:a8:ce:03:01:42:9b:d8:8f:3e:c0:e4:cd:e3:24:4e: e9:c9:83:97:69:69:e5:f7:83:be:b1:ae:6b:e9:a3:01:19:e2: 01:88:ba:f1:66:3c:08:c6:21:91:17:2f:82:b0:14:df:ca:97: e6:de:1d:18:f6:56:ca:7b:cb:03:54:9c:ec:dd:82:8d:4c:b8: 31:42:a2:ac:ab:0b:fe:68:4b:35:11:e0:ee:59:91:e5:3f:2a: 27:5f:74:72:2b:c2:7b:2b:7e:5a:05:7d:57:43:9d:e4:24:b3: 29:c4:db:d2:aa:70:30:27:09:54:19:3d:74:5e:c0:b7:7c:5d: 4a:6e:a7:6a:77:b3:8a:ab:a7:b8:3f:37:2a:c3:f7:17:bf:29: c3:21:e5:8e:17:b7:0d:aa:1f:4f:8b:45:51:04:3d:01:0a:52: b8:34:c5:75:e7:e8:32:24:16:a7:56:bc:eb:e6:07:6f:a5:90: 3c:67:a2:4b:4a:bd:a9:08:13:01:d3:2b:a3:89:7b:d7:08:7a: 1e:0e:fc:fe:4a:29:63:5f:1e:0d:3f:6e:5e:8f:d6:5b:f9:c3: bb:a7:13:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA0MjUxMTAvBgNVBAUTKDE1NDlGOTQ5NDcxNEE4QTJENzA0RkRFOUEwNDYzQkJD MzRCNUY0RTAwHhcNMjQwNTE0MjI1OTUzWhcNMjQwNTIxMjI1OTUyWjAYMRYwFAYD VQQDEw02NjQzZWNlOS05N2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEmP0p+jiLCWI2VVjNwbNTf8zzGKu0GUXrqwNHc3lxrt+VuxgWgvhVrsIfVg wBu0k/P3FfqjMXcdYi5Ad0tkaHJhXfXogErzm4L+5zckA6M3Hw4CLXoVED5gL/XV FSThZ2RMxytWWg6yQhANrj6JDRoqG0obxtIARe1CcX0wRbFlpobb/Y1G9pFjDKBA SbSIus6kd7wLJgYWB9khUgYZBO+3IQFumoZiKifKjPv/UpHMglpPFVc2cRLHkgeR 8aJs9rqk4FhFrQ0W4adJH8Iz6PhXYsETsTqV8u47gt0KYdz9SoIpmU+spOiWRyMp tO85K7RYRX48xjf9+dVsazZh2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFIwYpV tnmwjy4vqnxMP6duojWWMB8GA1UdIwQYMBaAFBVJ+UlHFKii1wT96aBGO7w0tfTg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDQyNS81RkM4QUFEQzA2 QTgxMUVCQkRGRUI5NzBDNEY5QUUwMi9GVW41U1VjVXFLTFhCUDNwb0VZN3ZEUzE5 T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZVbjVTVWNVcUtMWEJQM3BvRVk3dkRTMTlPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDQyNS81RkM4QUFEQzA2QTgxMUVCQkRGRUI5NzBDNEY5QUUwMi9GVW41U1VjVXFL TFhCUDNwb0VZN3ZEUzE5T0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASC16e75zdVpmbUJS5M3ZhxHLWrGGxXOHzvT1oe1t9kVJ0P5zaWbCo zgMBQpvYjz7A5M3jJE7pyYOXaWnl94O+sa5r6aMBGeIBiLrxZjwIxiGRFy+CsBTf ypfm3h0Y9lbKe8sDVJzs3YKNTLgxQqKsqwv+aEs1EeDuWZHlPyonX3RyK8J7K35a BX1XQ53kJLMpxNvSqnAwJwlUGT10XsC3fF1Kbqdqd7OKq6e4Pzcqw/cXvynDIeWO F7cNqh9Pi0VRBD0BClK4NMV15+gyJBanVrzr5gdvpZA8Z6JLSr2pCBMB0yujiXvX CHoeDvz+SiljXx4NP25ej9Zb+cO7pxP7 -----END CERTIFICATE-----Generated at Tue May 14 23:45:45 2024 by rpki-client on console-fra.rpki-client.org