$ rpki-client -vvf rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft File: FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft (raw, json) Hash identifier: hHF6k0rVWplyEDaFrj2CD+pZLU3tg4TeXPFKS6d79yA= Subject key identifier: 45:6F:AB:C9:09:25:34:0C:38:42:43:3D:31:2E:AF:4D:11:F0:B2:52 Authority key identifier: 16:02:38:49:B9:C6:4D:56:DE:DC:AE:9B:12:86:3D:07:31:88:AC:2E Certificate issuer: /CN=A9197FBD/serialNumber=16023849B9C64D56DEDCAE9B12863D073188AC2E Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgI4SbnGTVbe3K6bEoY9BzGIrC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft Manifest number: 88 Signing time: Sun 19 May 2024 07:05:37 +0000 Manifest this update: Sun 19 May 2024 07:05:36 +0000 Manifest next update: Sun 26 May 2024 07:05:36 +0000 Files and hashes: 1: FgI4SbnGTVbe3K6bEoY9BzGIrC4.crl (hash: mE8E+C/3Ie0JniF3Gx3W1jrRD9TTfxBkU3GoqLIQ89I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.crl rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgI4SbnGTVbe3K6bEoY9BzGIrC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197FBD/serialNumber=16023849B9C64D56DEDCAE9B12863D073188AC2E Validity Not Before: May 19 07:05:36 2024 GMT Not After : May 26 07:05:36 2024 GMT Subject: CN=6649a4c1-73b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e6:a1:d7:1f:de:56:e3:4a:a0:e2:8a:32:70: 10:2b:71:75:74:fa:82:51:e0:6d:ff:70:b6:3b:06: 2e:ef:72:e0:df:d9:1b:f8:7c:39:0c:cd:6b:47:49: c6:b6:f3:49:f4:02:de:ac:6c:a6:0b:54:e8:a2:cf: b8:1f:12:ae:7b:0d:c9:a6:07:6e:5e:0d:9f:a9:9a: d2:7c:49:c2:a2:2d:9b:05:36:52:ed:11:ce:38:e9: 35:f0:83:a7:85:bc:da:cb:e5:72:d1:a3:28:08:04: f0:89:77:f7:e6:4c:ce:92:dd:66:eb:a2:d1:4e:e3: f8:cf:cb:ad:92:33:f3:72:eb:32:90:5c:07:6e:ad: 65:20:90:35:4a:5b:9b:c6:95:58:8f:74:96:b8:f3: a5:c9:7c:5a:f1:90:cb:3f:6b:fb:01:5d:97:3a:f0: d0:8b:b1:17:33:9d:4e:f6:87:42:04:b5:d0:c8:ad: 40:46:17:e9:02:13:56:a6:73:ba:ad:7c:b7:2f:16: c0:17:00:c4:9e:5e:4f:7b:ac:56:43:91:06:cb:42: e8:d3:47:39:97:a6:b4:a1:e0:d7:ed:ac:13:90:5a: 5f:7f:37:cf:b9:2b:8e:dc:e7:f6:b0:9e:40:09:88: 92:01:dc:8f:df:70:97:d2:8a:c2:3b:21:9f:1f:04: ac:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:6F:AB:C9:09:25:34:0C:38:42:43:3D:31:2E:AF:4D:11:F0:B2:52 X509v3 Authority Key Identifier: keyid:16:02:38:49:B9:C6:4D:56:DE:DC:AE:9B:12:86:3D:07:31:88:AC:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgI4SbnGTVbe3K6bEoY9BzGIrC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:4c:36:30:e8:db:dd:fd:05:b5:7e:fc:e9:95:94:bd:93:35: eb:78:da:d8:5a:da:45:6d:73:57:8a:c3:32:69:7e:0e:7a:54: 1e:df:18:01:b7:34:61:97:eb:24:f4:93:54:bd:f3:02:b0:5c: d6:0b:52:74:36:3d:78:5f:f2:44:a5:a0:56:24:45:d7:cb:83: 10:1b:61:b6:85:91:29:45:f7:6b:b5:a1:27:80:21:06:14:24: ae:25:93:a9:ef:18:08:83:4a:db:3d:14:eb:2a:a6:7a:ec:2c: 3f:29:1d:cf:11:4b:6f:4d:ac:58:a9:c9:e5:e7:d7:ce:29:f2: 84:2a:24:ab:19:11:c9:73:ef:75:ee:f9:08:75:10:da:5b:ec: 2c:d0:e4:87:b9:f4:7b:c1:a2:0e:e4:24:c9:94:3a:93:f1:b4: 6e:81:01:0c:bf:59:c9:cc:3c:cb:00:69:1e:c7:81:7c:03:a2: e3:64:a3:c4:94:6b:65:96:a1:6f:a2:61:26:20:59:36:06:59: 31:5b:3a:88:8f:f5:d2:64:44:e9:f1:f0:c0:74:04:07:b9:24: b3:fb:be:d0:70:98:14:11:82:3c:64:fc:b2:5a:f1:e9:e2:98: 61:c1:33:a8:40:f0:60:00:68:bf:85:b7:33:16:1e:3c:a7:70: 81:f8:1b:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdGQkQxMTAvBgNVBAUTKDE2MDIzODQ5QjlDNjRENTZERURDQUU5QjEyODYzRDA3 MzE4OEFDMkUwHhcNMjQwNTE5MDcwNTM2WhcNMjQwNTI2MDcwNTM2WjAYMRYwFAYD VQQDEw02NjQ5YTRjMS03M2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOah1x/eVuNKoOKKMnAQK3F1dPqCUeBt/3C2OwYu73Lg39kb+Hw5DM1rR0nG tvNJ9ALerGymC1Toos+4HxKuew3JpgduXg2fqZrSfEnCoi2bBTZS7RHOOOk18IOn hbzay+Vy0aMoCATwiXf35kzOkt1m66LRTuP4z8utkjPzcusykFwHbq1lIJA1Slub xpVYj3SWuPOlyXxa8ZDLP2v7AV2XOvDQi7EXM51O9odCBLXQyK1ARhfpAhNWpnO6 rXy3LxbAFwDEnl5Pe6xWQ5EGy0Lo00c5l6a0oeDX7awTkFpffzfPuSuO3Of2sJ5A CYiSAdyP33CX0orCOyGfHwSsMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVvq8kJ JTQMOEJDPTEur00R8LJSMB8GA1UdIwQYMBaAFBYCOEm5xk1W3tyumxKGPQcxiKwu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0ZCRC83RkZGNDU3NDQ2 RUExMUVFQTZFREVBNjNDNEY5QUUwMi9GZ0k0U2JuR1RWYmUzSzZiRW9ZOUJ6R0ly QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnSTRTYm5HVFZiZTNLNmJFb1k5QnpHSXJDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0ZCRC83RkZGNDU3NDQ2RUExMUVFQTZFREVBNjNDNEY5QUUwMi9GZ0k0U2JuR1RW YmUzSzZiRW9ZOUJ6R0lyQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXTDYw6Nvd/QW1fvzplZS9kzXreNrYWtpFbXNXisMyaX4OelQe3xgB tzRhl+sk9JNUvfMCsFzWC1J0Nj14X/JEpaBWJEXXy4MQG2G2hZEpRfdrtaEngCEG FCSuJZOp7xgIg0rbPRTrKqZ67Cw/KR3PEUtvTaxYqcnl59fOKfKEKiSrGRHJc+91 7vkIdRDaW+ws0OSHufR7waIO5CTJlDqT8bRugQEMv1nJzDzLAGkex4F8A6LjZKPE lGtllqFvomEmIFk2BlkxWzqIj/XSZETp8fDAdAQHuSSz+77QcJgUEYI8ZPyyWvHp 4phhwTOoQPBgAGi/hbczFh48p3CB+Bvg -----END CERTIFICATE-----Generated at Sun May 19 07:40:42 2024 by rpki-client on console-fra.rpki-client.org