$ rpki-client -vvf rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft File: FgS-6E66CP3JRuSLTBTo3CVCGTo.mft (raw, json) Hash identifier: F2rYslK9QdCMA75zDua+FWDfJSYNlijP7amI7gIwEfg= Subject key identifier: E7:71:66:A3:69:F5:43:EE:A3:3E:A9:55:0C:7E:6A:56:98:D5:93:F6 Authority key identifier: 16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A Certificate issuer: /CN=A91513FA/serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft Manifest number: 018D Signing time: Sun 19 May 2024 04:42:49 +0000 Manifest this update: Sun 19 May 2024 04:42:48 +0000 Manifest next update: Sun 26 May 2024 04:42:48 +0000 Files and hashes: 1: FgS-6E66CP3JRuSLTBTo3CVCGTo.crl (hash: jWCSCBaDPpratKwV4CNbs1wOc/BCskV0+f1Sdoda6UI=) 2: 6901B0861DF211ED95A51A3EC4F9AE02.roa (hash: Hi7UbFfHYxxptS0YiKUYEHuYSy/noWAZzmsudv9czCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91513FA/serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A Validity Not Before: May 19 04:42:48 2024 GMT Not After : May 26 04:42:48 2024 GMT Subject: CN=66498349-5a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:96:d5:9d:4f:39:0d:c5:57:c5:70:df:ec:e5: 2e:98:52:68:3e:84:f1:63:59:db:1c:8d:13:83:b4: 65:2e:63:f2:ea:29:3a:fa:13:ba:a4:76:71:09:52: 63:5d:6c:67:bd:a2:d8:ca:ff:22:ef:b3:8e:a5:2b: 48:38:64:3b:34:38:21:f2:02:30:4f:28:ac:7f:ce: e1:d1:b1:9d:18:f9:ff:83:39:57:32:e5:a0:88:f4: 2d:20:54:f3:56:ca:ee:36:9d:ea:b7:2a:16:10:1b: 0d:2f:55:e5:34:52:12:3d:9b:16:22:82:d9:64:87: fa:36:77:9f:c2:63:bc:65:66:12:3a:3c:5c:25:07: 90:7f:81:fe:63:0b:63:d0:c3:9d:e2:ad:9c:b0:ba: 88:b2:35:5a:12:e5:e8:83:23:7c:8b:3e:30:82:05: f3:53:81:a8:51:36:93:e4:2e:3a:b4:37:1d:c0:bc: a3:b3:cc:a3:ac:00:57:b6:cb:f3:a4:78:66:16:fe: 90:25:22:4e:c8:0a:f3:44:85:e3:99:b5:5d:49:13: db:85:d7:14:9b:2a:e7:af:c1:59:a0:f2:f0:31:22: d1:ae:28:ee:03:d5:60:63:de:12:81:d8:77:27:ff: 70:ff:77:6c:d8:19:a4:af:68:c9:c1:22:ad:7d:50: 42:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:71:66:A3:69:F5:43:EE:A3:3E:A9:55:0C:7E:6A:56:98:D5:93:F6 X509v3 Authority Key Identifier: keyid:16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:91:ff:3d:cd:a3:da:04:58:35:69:61:f0:a5:b9:56:c6:60: 06:df:82:13:66:9f:c9:0b:04:64:ad:f4:93:a2:9d:05:72:62: 7a:5f:3f:99:e9:7a:79:48:25:13:9a:4e:89:bd:9e:75:86:1d: a6:98:cb:d6:cb:b7:83:fe:4b:d0:db:e3:a4:bc:0b:45:e2:64: 6a:68:41:81:93:92:bd:9a:d5:49:61:8c:e3:38:f9:bd:73:96: d0:8a:e8:6a:48:87:73:3a:37:8b:5a:1c:21:84:fc:83:52:b2: 20:29:33:a9:34:ee:ec:49:42:36:21:e5:e9:53:07:64:85:1d: af:c1:92:19:2a:12:b2:35:24:29:b4:87:4c:3c:a1:c4:7c:e3: 1b:3b:f1:8c:1d:e2:28:13:d0:be:23:a2:54:22:22:e7:ee:28: 72:b5:ea:96:a2:6c:38:65:50:a2:15:0a:8b:09:ef:c1:86:dd: 16:7d:9b:22:f9:34:10:cd:dc:5a:c0:0e:31:8b:a5:1d:7b:ab: ee:c9:85:ed:3c:0e:b4:77:4b:09:1d:c2:10:f9:9a:23:4c:50: 2e:72:0a:cb:f3:d2:72:12:bd:c8:32:52:41:7a:fa:f3:b6:e3: d3:cc:47:00:1e:17:6c:ab:a7:54:25:34:c4:2c:64:73:9b:12: 85:51:e7:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEzRkExMTAvBgNVBAUTKDE2MDRCRUU4NEVCQTA4RkRDOTQ2RTQ4QjRDMTRFOERD MjU0MjE5M0EwHhcNMjQwNTE5MDQ0MjQ4WhcNMjQwNTI2MDQ0MjQ4WjAYMRYwFAYD VQQDEw02NjQ5ODM0OS01YTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupbVnU85DcVXxXDf7OUumFJoPoTxY1nbHI0Tg7RlLmPy6ik6+hO6pHZxCVJj XWxnvaLYyv8i77OOpStIOGQ7NDgh8gIwTyisf87h0bGdGPn/gzlXMuWgiPQtIFTz VsruNp3qtyoWEBsNL1XlNFISPZsWIoLZZIf6NnefwmO8ZWYSOjxcJQeQf4H+Ywtj 0MOd4q2csLqIsjVaEuXogyN8iz4wggXzU4GoUTaT5C46tDcdwLyjs8yjrABXtsvz pHhmFv6QJSJOyArzRIXjmbVdSRPbhdcUmyrnr8FZoPLwMSLRrijuA9VgY94Sgdh3 J/9w/3ds2Bmkr2jJwSKtfVBCYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOdxZqNp 9UPuoz6pVQx+alaY1ZP2MB8GA1UdIwQYMBaAFBYEvuhOugj9yUbki0wU6NwlQhk6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTNGQS8zMjkzOTc2NjFE RUUxMUVEOTQ3MkMxMzZDNEY5QUUwMi9GZ1MtNkU2NkNQM0pSdVNMVEJUbzNDVkNH VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnUy02RTY2Q1AzSlJ1U0xUQlRvM0NWQ0dUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTNGQS8zMjkzOTc2NjFERUUxMUVEOTQ3MkMxMzZDNEY5QUUwMi9GZ1MtNkU2NkNQ M0pSdVNMVEJUbzNDVkNHVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4kf89zaPaBFg1aWHwpblWxmAG34ITZp/JCwRkrfSTop0FcmJ6Xz+Z 6Xp5SCUTmk6JvZ51hh2mmMvWy7eD/kvQ2+OkvAtF4mRqaEGBk5K9mtVJYYzjOPm9 c5bQiuhqSIdzOjeLWhwhhPyDUrIgKTOpNO7sSUI2IeXpUwdkhR2vwZIZKhKyNSQp tIdMPKHEfOMbO/GMHeIoE9C+I6JUIiLn7ihyteqWomw4ZVCiFQqLCe/Bht0WfZsi +TQQzdxawA4xi6Ude6vuyYXtPA60d0sJHcIQ+ZojTFAucgrL89JyEr3IMlJBevrz tuPTzEcAHhdsq6dUJTTELGRzmxKFUecZ -----END CERTIFICATE-----Generated at Sun May 19 05:48:50 2024 by rpki-client on console-fra.rpki-client.org