$ rpki-client -vvf rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft File: FDm85NeiKugDbOsu5uavGPIbtZM.mft (raw, json) Hash identifier: yLCOLJRrbX3wxzboq5DwC3fDKd5oo3AiDc+lLDsh40Y= Subject key identifier: BE:9D:24:26:4F:3C:77:D5:32:EF:2C:A5:96:9A:5B:09:0A:C5:08:C9 Authority key identifier: 14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93 Certificate issuer: /CN=A91F57D9/serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593 Certificate serial: 02D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft Manifest number: 02C8 Signing time: Wed 01 May 2024 03:46:37 +0000 Manifest this update: Wed 01 May 2024 03:46:37 +0000 Manifest next update: Wed 08 May 2024 03:46:37 +0000 Files and hashes: 1: FDm85NeiKugDbOsu5uavGPIbtZM.crl (hash: wmCzx13z89Mc0XZJ56gJlW3/7qaccfIJItBXPBlu6nM=) 2: CD22C9C8DC0D11ECA064B94CC4F9AE02.roa (hash: 58tRp84nV6cuDwMQCtuvrDR1Q9sd2XcxoEZ9gu16O5I=) 3: F8071E24DC1111EC80AE816DC4F9AE02.roa (hash: HzYHLqMfwP0QnmtU46YrdLzIK8IRgXFtgddRZ8aUz8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 721 (0x2d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F57D9/serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593 Validity Not Before: May 1 03:46:37 2024 GMT Not After : May 8 03:46:37 2024 GMT Subject: CN=6631bb1d-61c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:39:0a:06:71:d5:f9:16:fe:47:3d:c4:d4:ff: c5:58:25:10:c0:77:8c:74:2a:1a:af:72:a9:10:55: 7b:12:a6:a1:04:ce:0d:da:58:61:67:17:8d:96:fc: 02:29:9b:9f:70:d6:ad:7e:c0:21:4e:0a:2d:b9:41: dc:8b:ff:11:7e:cc:8e:c5:eb:b2:50:00:f1:97:fa: b5:60:95:92:7b:81:e8:cb:bf:01:50:d7:b8:7c:9a: 5a:40:bd:5d:76:f3:96:67:17:51:7d:c7:6f:77:c2: d1:d7:ee:b8:4c:ca:0a:4f:72:ef:3b:06:97:f8:b1: 18:e8:1f:df:d4:b6:41:38:53:35:25:97:d8:1d:06: 33:18:8a:f4:f6:5d:1a:11:0b:af:d5:6b:42:a4:0a: 3c:cf:5f:8e:c8:c9:27:90:85:83:08:2e:54:d7:70: 60:73:d8:99:64:e8:fa:e2:a7:17:02:4a:f3:6a:47: a1:2d:44:68:25:ec:d7:60:90:fb:f0:48:8c:70:9a: 23:8a:af:4f:7e:c1:a6:e3:84:35:cb:56:06:46:00: d7:91:05:e6:0b:11:02:b5:fd:08:70:71:0c:c2:5e: f9:e9:ef:92:52:8e:ad:64:f2:86:be:ff:41:b3:f1: ce:23:e9:a0:2c:30:90:3b:e7:84:d3:db:37:dd:df: a4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9D:24:26:4F:3C:77:D5:32:EF:2C:A5:96:9A:5B:09:0A:C5:08:C9 X509v3 Authority Key Identifier: keyid:14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:b8:0b:3d:b5:a5:90:5c:6d:e5:4e:8b:b7:1f:16:0a:c4:b0: 41:be:a5:75:f4:de:80:b2:0f:d3:f7:7a:38:38:8c:b7:54:aa: 5f:20:a9:24:20:3e:d2:9d:65:ac:c0:8c:93:59:64:36:1f:a2: 5a:6d:00:a1:60:37:20:e1:4f:27:b2:9a:ad:27:0f:02:09:a1: dd:e4:69:7b:03:b5:e5:81:a5:82:dc:05:db:c3:6a:cd:f6:06: 8a:0c:2a:cd:f4:4a:13:b2:39:3c:3c:0c:fa:96:40:42:64:ef: 0d:d5:f1:6c:0b:05:5b:68:dc:15:b6:ec:03:07:1a:c3:1c:21: ef:58:e8:22:29:05:42:b7:25:12:06:37:32:05:51:06:62:ca: df:10:d4:cb:eb:35:db:c1:a7:25:b2:12:f0:85:83:61:01:ef: ec:42:26:9b:02:62:c8:44:dc:94:35:a6:ca:00:5b:11:14:69: cc:f8:09:30:0c:c1:05:f4:d8:2c:51:92:12:af:ba:6d:9f:17: 89:50:66:d3:e5:d4:aa:4e:78:71:d3:6f:b5:af:d8:1b:bf:05: 4a:57:85:2b:9a:71:2c:45:26:04:b9:80:a8:0a:9e:c5:0f:74: de:44:58:bc:2c:a1:cb:88:8f:51:dd:31:ba:b1:bf:85:8c:5d: 07:a2:a8:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU3RDkxMTAvBgNVBAUTKDE0MzlCQ0U0RDdBMjJBRTgwMzZDRUIyRUU2RTZBRjE4 RjIxQkI1OTMwHhcNMjQwNTAxMDM0NjM3WhcNMjQwNTA4MDM0NjM3WjAYMRYwFAYD VQQDEw02NjMxYmIxZC02MWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoDkKBnHV+Rb+Rz3E1P/FWCUQwHeMdCoar3KpEFV7EqahBM4N2lhhZxeNlvwC KZufcNatfsAhTgotuUHci/8RfsyOxeuyUADxl/q1YJWSe4Hoy78BUNe4fJpaQL1d dvOWZxdRfcdvd8LR1+64TMoKT3LvOwaX+LEY6B/f1LZBOFM1JZfYHQYzGIr09l0a EQuv1WtCpAo8z1+OyMknkIWDCC5U13Bgc9iZZOj64qcXAkrzakehLURoJezXYJD7 8EiMcJojiq9PfsGm44Q1y1YGRgDXkQXmCxECtf0IcHEMwl756e+SUo6tZPKGvv9B s/HOI+mgLDCQO+eE09s33d+khQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6dJCZP PHfVMu8spZaaWwkKxQjJMB8GA1UdIwQYMBaAFBQ5vOTXoiroA2zrLubmrxjyG7WT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTdEOS8wNzE3RTlFRTlG NUQxMUVDQkJDQTk2MThDNEY5QUUwMi9GRG04NU5laUt1Z0RiT3N1NXVhdkdQSWJ0 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZEbTg1TmVpS3VnRGJPc3U1dWF2R1BJYnRaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTdEOS8wNzE3RTlFRTlGNUQxMUVDQkJDQTk2MThDNEY5QUUwMi9GRG04NU5laUt1 Z0RiT3N1NXVhdkdQSWJ0Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzuAs9taWQXG3lTou3HxYKxLBBvqV19N6Asg/T93o4OIy3VKpfIKkk ID7SnWWswIyTWWQ2H6JabQChYDcg4U8nspqtJw8CCaHd5Gl7A7XlgaWC3AXbw2rN 9gaKDCrN9EoTsjk8PAz6lkBCZO8N1fFsCwVbaNwVtuwDBxrDHCHvWOgiKQVCtyUS BjcyBVEGYsrfENTL6zXbwaclshLwhYNhAe/sQiabAmLIRNyUNabKAFsRFGnM+Akw DMEF9NgsUZISr7ptnxeJUGbT5dSqTnhx02+1r9gbvwVKV4UrmnEsRSYEuYCoCp7F D3TeRFi8LKHLiI9R3TG6sb+FjF0HoqhT -----END CERTIFICATE-----Generated at Wed May 1 05:59:15 2024 by rpki-client on console-fra.rpki-client.org