$ rpki-client -vvf rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft File: Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft (raw, json) Hash identifier: dE/2CqZuKvRw6DVp442r6mLN2cHroWYpzJPIMuZv/fQ= Subject key identifier: 45:FD:11:AF:FB:53:D0:B4:CB:E7:8D:6A:9D:53:33:7F:47:07:C6:68 Authority key identifier: 16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18 Certificate issuer: /CN=A91295B6/serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718 Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft Manifest number: AC Signing time: Fri 31 May 2024 07:34:22 +0000 Manifest this update: Fri 31 May 2024 07:34:21 +0000 Manifest next update: Fri 07 Jun 2024 07:34:21 +0000 Files and hashes: 1: Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl (hash: AoVzuE9U4EvNd/hU5IsEGdMxrTKSPQFkanMzRzdgc/w=) 2: 35C8F50C218A11EE959B7037C4F9AE02.roa (hash: mXmJ5PvGAMiYPu0KQvEAngkTOyyf1heYQelQwedtyxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91295B6/serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718 Validity Not Before: May 31 07:34:21 2024 GMT Not After : Jun 7 07:34:21 2024 GMT Subject: CN=66597d7e-0fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:20:f6:d9:ed:f0:f5:b3:65:6f:25:90:42:bb: 32:ef:5d:6f:12:ed:fa:70:bb:ce:28:70:67:1f:aa: 24:9c:41:8b:79:db:0d:cc:f0:c1:92:cd:77:ef:95: 55:3a:3f:d3:1f:a3:67:84:ed:f4:9c:66:88:31:0c: ed:22:84:cf:90:de:61:b7:d5:1f:4b:79:f4:5a:84: 2b:88:88:d3:5d:1a:5c:b3:71:f2:df:0f:2c:27:dc: 8a:32:4d:86:de:7a:30:0b:c4:4e:1e:57:81:8f:f3: ac:70:fa:7d:40:e7:1c:33:78:97:87:38:ef:1b:3e: cc:33:64:ea:86:84:bb:3b:d4:76:20:04:15:8e:fe: 81:e4:16:27:92:8c:ac:c4:cd:a4:b0:5b:cc:52:8d: fa:99:4f:61:3c:3c:ab:22:03:02:b2:f3:e8:97:39: 8f:02:04:94:56:a5:d5:0a:03:93:bd:9c:b1:1d:fd: 5b:ba:23:ad:26:32:d6:a4:5a:f0:cd:31:dc:ed:99: 66:49:44:18:de:6a:89:3c:ce:bc:73:34:03:e3:0e: e9:a8:da:3d:f4:24:0a:ad:f2:b8:42:08:0a:21:db: 73:e7:5a:95:ad:ed:8c:55:f8:48:a0:b0:4a:02:c9: cb:a2:f3:41:18:03:86:eb:4d:44:74:35:47:4a:cf: b7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FD:11:AF:FB:53:D0:B4:CB:E7:8D:6A:9D:53:33:7F:47:07:C6:68 X509v3 Authority Key Identifier: keyid:16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:04:2f:ca:39:07:1b:5c:b4:f7:0e:2f:18:c8:b3:c0:2c:1c: fc:0d:39:76:ca:7e:1a:d1:60:bd:1f:40:53:5c:1a:d1:61:13: 8a:07:8e:48:00:59:b3:6d:eb:5a:4a:5e:6a:0a:0f:86:25:1e: c0:3a:25:88:de:03:75:41:20:47:82:ea:58:a1:e7:ba:88:d4: 71:4d:2c:26:10:f4:27:7d:9a:30:9b:61:e8:00:36:17:96:42: 03:da:55:bb:f1:7e:2f:f8:22:6f:03:f1:23:b3:15:c4:09:9b: 3d:d0:e2:5e:1e:1f:63:6d:29:77:66:f8:66:ad:a2:65:6c:e6: be:0f:85:8b:24:ae:af:26:7d:9d:15:f3:02:d9:22:e6:ff:28: ba:28:2f:6c:5a:fe:98:a2:98:d4:ea:bc:c2:c4:08:d9:16:11: 78:5b:a8:dc:b2:e5:e3:1f:5f:4c:61:64:d7:a3:c9:e2:c3:45: 7b:78:05:5e:18:43:21:62:d2:81:d1:33:14:61:c1:a4:62:3e: d9:54:77:0c:e3:5d:40:ec:86:79:9a:a1:5c:a9:43:ac:7a:7c: 0b:28:ba:9d:74:ca:fb:29:50:40:bf:ff:ff:23:c4:f2:9f:72: a8:ff:96:a2:40:6a:b4:4c:98:8a:3f:be:cb:93:c9:84:21:8a: 91:7d:0c:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk1QjYxMTAvBgNVBAUTKDE2MEUwMDAxNUQyQjU4MTUzRjM0ODJFOERFOTQ3QjVG NEFENzg3MTgwHhcNMjQwNTMxMDczNDIxWhcNMjQwNjA3MDczNDIxWjAYMRYwFAYD VQQDEw02NjU5N2Q3ZS0wZmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwiD22e3w9bNlbyWQQrsy711vEu36cLvOKHBnH6oknEGLedsNzPDBks1375VV Oj/TH6NnhO30nGaIMQztIoTPkN5ht9UfS3n0WoQriIjTXRpcs3Hy3w8sJ9yKMk2G 3nowC8ROHleBj/OscPp9QOccM3iXhzjvGz7MM2TqhoS7O9R2IAQVjv6B5BYnkoys xM2ksFvMUo36mU9hPDyrIgMCsvPolzmPAgSUVqXVCgOTvZyxHf1buiOtJjLWpFrw zTHc7ZlmSUQY3mqJPM68czQD4w7pqNo99CQKrfK4QggKIdtz51qVre2MVfhIoLBK AsnLovNBGAOG601EdDVHSs+3/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEX9Ea/7 U9C0y+eNap1TM39HB8ZoMB8GA1UdIwQYMBaAFBYOAAFdK1gVPzSC6N6Ue19K14cY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTVCNi9GMDczMEM4ODIx NjkxMUVFQjU2RjIyNDlDNEY5QUUwMi9GZzRBQVYwcldCVV9OSUxvM3BSN1gwclho eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnNEFBVjByV0JVX05JTG8zcFI3WDByWGh4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTVCNi9GMDczMEM4ODIxNjkxMUVFQjU2RjIyNDlDNEY5QUUwMi9GZzRBQVYwcldC VV9OSUxvM3BSN1gwclhoeGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0BC/KOQcbXLT3Di8YyLPALBz8DTl2yn4a0WC9H0BTXBrRYROKB45I AFmzbetaSl5qCg+GJR7AOiWI3gN1QSBHgupYoee6iNRxTSwmEPQnfZowm2HoADYX lkID2lW78X4v+CJvA/EjsxXECZs90OJeHh9jbSl3ZvhmraJlbOa+D4WLJK6vJn2d FfMC2SLm/yi6KC9sWv6YopjU6rzCxAjZFhF4W6jcsuXjH19MYWTXo8niw0V7eAVe GEMhYtKB0TMUYcGkYj7ZVHcM411A7IZ5mqFcqUOsenwLKLqddMr7KVBAv///I8Ty n3Ko/5aiQGq0TJiKP77Lk8mEIYqRfQzA -----END CERTIFICATE-----Generated at Fri May 31 10:01:38 2024 by rpki-client on console-ams.rpki-client.org