$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft File: fzUqdpVtdwL8d69g_MEp5h_b6jI.mft (raw, json) Hash identifier: +/PxkqKdAWsAkxZD83ia5qR4O+osE1R8TiQC0dN5trw= Subject key identifier: 83:FE:77:E5:51:38:2E:36:11:52:AB:5B:B4:6A:B4:2E:CD:CF:22:91 Authority key identifier: 7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32 Certificate issuer: /CN=A91E15AD/serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft Manifest number: 67 Signing time: Wed 15 May 2024 07:44:34 +0000 Manifest this update: Wed 15 May 2024 07:44:34 +0000 Manifest next update: Wed 22 May 2024 07:44:34 +0000 Files and hashes: 1: fzUqdpVtdwL8d69g_MEp5h_b6jI.crl (hash: /iNvVr3/DsU7EWg8t27xVe+3ZZ7/jYQn5LpgdiJvmP0=) 2: 9BFF089AD0B511EE9C8E6885C4F9AE02.roa (hash: P00/wBXxpZAxVmMEQShGNeLCJuhKQb2Pvy1tzAoS0xQ=) 3: 2A26D2607E1311EEAF8FD93EC4F9AE02.roa (hash: lO4z0/8coYc47q8hWXVuaX9wXtDh6vCyrQsV6AIYdqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E15AD/serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32 Validity Not Before: May 15 07:44:34 2024 GMT Not After : May 22 07:44:34 2024 GMT Subject: CN=664467e2-d83a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b4:34:cf:59:f1:8d:05:29:ae:84:87:17:d2: 92:b5:f6:cf:c2:06:6f:6c:6c:f7:0d:d0:bd:7f:07: f3:29:3f:14:bf:48:53:9f:11:64:08:b9:10:14:49: ea:74:95:09:7f:8a:8d:d0:8f:66:6a:04:e7:f3:cc: f0:de:6a:eb:c2:4b:b0:6f:05:74:25:3d:64:ca:c5: 66:3c:0c:f8:72:69:a7:6f:b8:ac:ba:b0:60:63:62: 37:04:f9:86:a6:ab:89:40:d9:90:f0:37:5f:02:bf: d8:ac:07:84:1f:c6:c0:e7:e3:88:38:59:62:38:ac: fb:93:90:4d:de:81:e9:9e:1a:31:8b:d5:fe:4f:23: aa:34:27:5b:9e:33:f9:d4:47:e8:58:38:26:a4:54: 0f:3c:d7:14:a8:3a:60:a0:6d:6f:38:24:a7:3d:a3: cd:a3:a1:dc:40:a4:ac:b7:e3:4a:76:2f:d0:86:19: 31:71:95:15:9f:68:33:fb:53:83:ef:8a:04:72:6d: e9:52:e7:2d:e5:7e:ce:b6:b4:ab:f9:49:f0:b6:46: 12:81:a3:a4:6e:98:79:e1:ef:cf:c5:85:c8:e2:9f: 58:9f:d9:33:32:e3:ec:5e:6e:2f:28:ab:c3:8d:78: cd:5c:c2:e3:96:16:23:3d:97:89:a2:74:13:82:04: 9e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FE:77:E5:51:38:2E:36:11:52:AB:5B:B4:6A:B4:2E:CD:CF:22:91 X509v3 Authority Key Identifier: keyid:7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:b7:cb:e2:90:fe:02:6f:4c:4d:92:b9:f0:be:ed:b5:5a:8c: a8:11:81:88:d9:b7:d9:85:10:91:ac:bd:8a:cc:a0:a7:9c:76: 9d:91:0c:d5:c7:25:63:e3:1a:8c:c4:4b:6f:99:34:39:ec:78: 74:00:b3:71:2b:4a:fc:bf:53:9f:29:4a:9b:8b:fe:b6:c0:d1: 81:dd:14:9b:29:01:07:5e:c9:64:24:1a:e2:3a:3e:48:ff:b2: 49:a9:9f:f1:68:86:de:f8:72:ab:4b:af:04:12:40:fb:e6:2e: c4:0c:9d:a1:46:6f:a8:df:93:78:ac:73:ac:97:77:6b:c8:72: f6:5e:a1:b4:f0:2d:15:6e:82:38:91:4f:97:c7:96:68:59:e8: da:23:20:ec:9f:cd:cb:6e:76:b4:82:35:e7:82:60:dd:c1:fa: ef:05:f9:63:4b:70:fd:b7:3b:26:2a:ce:ed:7c:f5:e9:36:7b: a8:0f:b4:17:9d:01:ba:19:7e:43:5e:21:b3:0b:f2:8f:28:3b: 82:81:c6:1e:50:ff:cf:08:dd:a5:b2:f9:09:d0:68:b7:83:2c: 4a:3e:b2:4a:b4:6c:9a:4c:f0:65:ce:d3:ef:e5:03:5c:7c:ca: a9:fa:34:a4:5a:f2:85:09:b1:6b:cf:0e:ee:47:9d:13:12:f6: c5:01:73:93 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MTVBRDExMC8GA1UEBRMoN0YzNTJBNzY5NTZENzcwMkZDNzdBRjYwRkNDMTI5RTYx RkRCRUEzMjAeFw0yNDA1MTUwNzQ0MzRaFw0yNDA1MjIwNzQ0MzRaMBgxFjAUBgNV BAMTDTY2NDQ2N2UyLWQ4M2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNtDTPWfGNBSmuhIcX0pK19s/CBm9sbPcN0L1/B/MpPxS/SFOfEWQIuRAUSep0 lQl/io3Qj2ZqBOfzzPDeauvCS7BvBXQlPWTKxWY8DPhyaadvuKy6sGBjYjcE+Yam q4lA2ZDwN18Cv9isB4QfxsDn44g4WWI4rPuTkE3egemeGjGL1f5PI6o0J1ueM/nU R+hYOCakVA881xSoOmCgbW84JKc9o82jodxApKy340p2L9CGGTFxlRWfaDP7U4Pv igRybelS5y3lfs62tKv5SfC2RhKBo6RumHnh78/Fhcjin1if2TMy4+xebi8oq8ON eM1cwuOWFiM9l4midBOCBJ73AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUg/535VE4 LjYRUqtbtGq0Ls3PIpEwHwYDVR0jBBgwFoAUfzUqdpVtdwL8d69g/MEp5h/b6jIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxNUFEL0I4QjkxQzQ2N0Ux MjExRUU5Q0IxMUYzRUM0RjlBRTAyL2Z6VXFkcFZ0ZHdMOGQ2OWdfTUVwNWhfYjZq SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZnpVcWRwVnRkd0w4ZDY5Z19NRXA1aF9iNmpJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx NUFEL0I4QjkxQzQ2N0UxMjExRUU5Q0IxMUYzRUM0RjlBRTAyL2Z6VXFkcFZ0ZHdM OGQ2OWdfTUVwNWhfYjZqSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADe3y+KQ/gJvTE2SufC+7bVajKgRgYjZt9mFEJGsvYrMoKecdp2RDNXH JWPjGozES2+ZNDnseHQAs3ErSvy/U58pSpuL/rbA0YHdFJspAQdeyWQkGuI6Pkj/ skmpn/Foht74cqtLrwQSQPvmLsQMnaFGb6jfk3isc6yXd2vIcvZeobTwLRVugjiR T5fHlmhZ6NojIOyfzctudrSCNeeCYN3B+u8F+WNLcP23OyYqzu189ek2e6gPtBed AboZfkNeIbML8o8oO4KBxh5Q/88I3aWy+QnQaLeDLEo+skq0bJpM8GXO0+/lA1x8 yqn6NKRa8oUJsWvPDu5HnRMS9sUBc5M= -----END CERTIFICATE-----Generated at Wed May 15 09:28:17 2024 by rpki-client on console-fra.rpki-client.org