$ rpki-client -vvf rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft File: Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft (raw, json) Hash identifier: jEexh6Cj4oMshZ/Z4ssUqT5IBgADhRDmKkOjnxmgN8o= Subject key identifier: 42:C2:B9:F1:34:8B:CC:07:A4:9F:46:38:38:C1:5E:DB:5C:65:4D:5E Authority key identifier: 16:08:BF:46:24:A7:E1:B7:23:22:8B:46:61:DD:66:1E:70:AE:F3:F4 Certificate issuer: /CN=A91444E5/serialNumber=1608BF4624A7E1B723228B4661DD661E70AEF3F4 Certificate serial: 0421 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft Manifest number: 041D Signing time: Sun 19 May 2024 02:03:17 +0000 Manifest this update: Sun 19 May 2024 02:03:16 +0000 Manifest next update: Sun 26 May 2024 02:03:16 +0000 Files and hashes: 1: Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl (hash: L2KgyRfYPMLNZ1xTwvw9M3o5SvfMN8Qk5flkJhOKIyo=) 2: 90AB89E4547511EEB44F391AC4F9AE02.roa (hash: XRm+Z3dlyEbOZqYcgtoDpMQyC8C8LEeMgLfGVumfSkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1057 (0x421) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91444E5/serialNumber=1608BF4624A7E1B723228B4661DD661E70AEF3F4 Validity Not Before: May 19 02:03:16 2024 GMT Not After : May 26 02:03:16 2024 GMT Subject: CN=66495de4-5cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2a:63:2c:cf:08:97:b6:5f:ba:0c:82:43:e2: f9:68:30:e3:1a:b5:e8:02:55:7c:45:f4:76:18:72: 98:1c:81:e6:e7:84:60:95:4c:d3:11:58:a0:f4:16: 76:67:ca:2b:40:07:f3:50:0a:e8:fd:8e:b4:ed:c4: b7:f5:67:6e:a0:2e:eb:8e:0b:23:e0:aa:71:a5:50: c9:d9:e5:3c:14:1b:f9:56:d6:ee:d1:9b:9b:eb:c6: 6f:c5:22:7c:02:93:76:fb:a7:9f:3b:1a:b4:be:2c: e7:24:aa:48:49:6f:73:a4:db:cb:40:7c:e1:25:44: 36:51:9c:58:f0:13:e7:a9:f3:8f:7f:e3:5f:c3:2b: 7a:b5:00:2e:f4:cf:fb:2b:99:2b:a6:71:61:a9:f3: 97:38:28:8d:38:8e:33:c2:e8:de:d2:cb:37:76:f3: 04:fc:2a:e0:b4:05:33:6b:37:ff:bb:2b:6c:38:11: 05:26:6e:55:19:a2:a5:8f:3b:9e:27:d2:49:67:a9: 7d:d4:ee:55:aa:58:29:4b:14:00:5f:c9:66:7b:c9: 14:5d:60:a4:8e:c2:d6:82:ec:7e:5c:27:3d:46:6f: 13:2e:79:29:0d:fe:73:45:4a:c1:27:b7:92:bc:9e: 84:21:38:ab:d4:01:74:44:14:11:9a:b4:ea:a5:19: c1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C2:B9:F1:34:8B:CC:07:A4:9F:46:38:38:C1:5E:DB:5C:65:4D:5E X509v3 Authority Key Identifier: keyid:16:08:BF:46:24:A7:E1:B7:23:22:8B:46:61:DD:66:1E:70:AE:F3:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:1a:8e:b6:dc:01:fe:53:cf:74:28:95:bf:d7:54:41:2c:fd: 3c:68:aa:f6:08:55:63:81:74:3d:c0:42:75:34:2f:0d:27:04: f8:e4:03:c1:62:d6:33:65:39:26:6c:3e:ce:fc:95:1a:8d:48: 0e:b2:c4:74:20:bc:4e:ab:1f:47:19:6e:81:27:94:c7:8d:89: 38:9b:6c:5b:0f:34:02:0b:06:fb:a4:74:88:2f:95:b1:50:2a: 2f:ec:b3:e7:07:98:e2:09:94:a8:21:c0:26:5a:56:5c:8c:44: 0f:e8:f1:f8:8a:09:af:4f:d1:97:27:49:d8:b6:49:9b:3d:e2: b9:21:42:00:b8:16:27:cc:dc:f6:3c:4f:f2:72:ca:1d:c0:f0: cd:cc:18:0e:35:13:0d:7d:99:dd:85:67:a4:da:59:17:3b:56: 73:4f:86:14:5d:9a:83:bc:8b:9e:66:02:93:78:4e:13:55:14: 38:34:0d:96:e3:03:e4:d4:9f:a4:3b:7b:11:9a:aa:65:c6:68: e4:f5:04:a2:95:c2:09:bf:cd:27:31:73:37:a1:10:62:ed:98: 95:e3:68:f7:98:e6:75:57:25:cb:56:e9:a6:a1:5b:8f:92:cc: f0:2c:55:87:01:43:01:40:c0:06:c3:66:6f:e1:40:62:9d:6c: 21:ed:ac:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ0RTUxMTAvBgNVBAUTKDE2MDhCRjQ2MjRBN0UxQjcyMzIyOEI0NjYxREQ2NjFF NzBBRUYzRjQwHhcNMjQwNTE5MDIwMzE2WhcNMjQwNTI2MDIwMzE2WjAYMRYwFAYD VQQDEw02NjQ5NWRlNC01Y2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCpjLM8Il7ZfugyCQ+L5aDDjGrXoAlV8RfR2GHKYHIHm54RglUzTEVig9BZ2 Z8orQAfzUAro/Y607cS39WduoC7rjgsj4KpxpVDJ2eU8FBv5Vtbu0Zub68ZvxSJ8 ApN2+6efOxq0viznJKpISW9zpNvLQHzhJUQ2UZxY8BPnqfOPf+Nfwyt6tQAu9M/7 K5krpnFhqfOXOCiNOI4zwuje0ss3dvME/CrgtAUzazf/uytsOBEFJm5VGaKljzue J9JJZ6l91O5VqlgpSxQAX8lme8kUXWCkjsLWgux+XCc9Rm8TLnkpDf5zRUrBJ7eS vJ6EITir1AF0RBQRmrTqpRnBOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELCufE0 i8wHpJ9GODjBXttcZU1eMB8GA1UdIwQYMBaAFBYIv0Ykp+G3IyKLRmHdZh5wrvP0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDRFNS8yRTgyMkRBQTFC OTExMUVDOUU3QTMxMTRDNEY5QUUwMi9GZ2lfUmlTbjRiY2pJb3RHWWQxbUhuQ3U4 X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnaV9SaVNuNGJjaklvdEdZZDFtSG5DdThfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDRFNS8yRTgyMkRBQTFCOTExMUVDOUU3QTMxMTRDNEY5QUUwMi9GZ2lfUmlTbjRi Y2pJb3RHWWQxbUhuQ3U4X1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBGo623AH+U890KJW/11RBLP08aKr2CFVjgXQ9wEJ1NC8NJwT45APB YtYzZTkmbD7O/JUajUgOssR0ILxOqx9HGW6BJ5THjYk4m2xbDzQCCwb7pHSIL5Wx UCov7LPnB5jiCZSoIcAmWlZcjEQP6PH4igmvT9GXJ0nYtkmbPeK5IUIAuBYnzNz2 PE/ycsodwPDNzBgONRMNfZndhWek2lkXO1ZzT4YUXZqDvIueZgKTeE4TVRQ4NA2W 4wPk1J+kO3sRmqplxmjk9QSilcIJv80nMXM3oRBi7ZiV42j3mOZ1VyXLVummoVuP kszwLFWHAUMBQMAGw2Zv4UBinWwh7ax3 -----END CERTIFICATE-----Generated at Sun May 19 02:59:06 2024 by rpki-client on console-ams.rpki-client.org