$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft File: FqgerO8cn8MyDElats0MZ2Oqg2M.mft (raw, json) Hash identifier: CsWo2puxYta45irDcLg3vbEDXkN3vbIxnQ9232QWieE= Subject key identifier: 4E:2D:1E:CF:A5:FD:FC:17:C8:EB:EF:CB:DE:89:4D:66:0D:3D:DF:C7 Authority key identifier: 16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63 Certificate issuer: /CN=A91DFC92/serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363 Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft Manifest number: 93 Signing time: Fri 31 May 2024 07:51:27 +0000 Manifest this update: Fri 31 May 2024 07:51:26 +0000 Manifest next update: Fri 07 Jun 2024 07:51:26 +0000 Files and hashes: 1: FqgerO8cn8MyDElats0MZ2Oqg2M.crl (hash: sgnHBCjUJ6eBYcj9WoYCFepRE45enzueYAYbgMnmadI=) 2: 0AE7E0B6421711EE97070469C4F9AE02.roa (hash: /4GsPDOsOz6IKJ8MiECwyeOuOhiaIGDZwISWVLxNOyo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFC92/serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363 Validity Not Before: May 31 07:51:26 2024 GMT Not After : Jun 7 07:51:26 2024 GMT Subject: CN=6659817f-a4e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:14:b0:1c:e9:3b:31:60:d4:45:69:39:3b:65: 05:c7:5d:c3:d8:bc:a7:d7:8d:5c:c5:03:e8:50:a3: f1:fb:30:90:80:3f:a3:99:e9:50:60:1d:5b:25:d3: 41:88:c0:17:dc:47:68:78:4e:20:40:22:5e:27:24: 70:d8:c1:33:45:9f:85:67:d5:97:f2:91:ef:00:45: d1:d6:ec:de:8d:f1:b8:eb:e5:88:37:0b:0e:32:0f: 97:77:91:85:e1:a1:15:6a:77:a6:c4:10:81:fa:18: 4a:73:82:69:9e:57:42:58:22:d7:c9:ac:12:06:eb: c3:1a:92:ac:c3:b0:82:22:26:54:21:83:88:bb:d0: 93:01:f3:5c:a5:2b:31:01:fb:2b:8f:a2:5c:d2:7b: 62:7a:e4:4a:36:d2:fb:22:df:1f:d9:21:cb:c9:3d: d5:99:83:cf:0f:f9:16:1a:32:9f:20:7e:3f:00:6d: 68:db:dc:e2:1e:f4:a3:ea:7f:41:c0:4f:b4:d8:45: bf:7b:13:af:cc:7a:79:be:5c:c5:cb:df:34:15:06: 2c:7f:f6:d0:71:9a:2f:4d:07:b7:36:f7:31:c6:5a: f8:99:5b:d0:02:32:6b:ac:aa:1d:c1:13:40:f8:a2: 8c:7e:20:a0:b8:11:e9:3e:c4:ef:6e:8f:cb:5f:0e: 55:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:2D:1E:CF:A5:FD:FC:17:C8:EB:EF:CB:DE:89:4D:66:0D:3D:DF:C7 X509v3 Authority Key Identifier: keyid:16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:aa:57:da:ac:c2:66:1c:c8:ef:64:7c:30:3c:d0:23:4c:92: 58:22:26:ca:74:49:be:65:6c:26:6d:64:d0:4c:f9:e3:f1:86: 93:be:e7:08:d8:9a:46:21:ef:f3:6a:22:5f:19:80:4f:8b:af: bd:97:58:a7:c5:3f:a0:3b:9b:a9:9b:a9:e7:0b:63:4e:84:2a: 7a:15:64:2e:86:51:bd:75:ec:2a:d4:b8:95:c2:d7:7e:a7:7b: f7:9c:00:f0:16:82:66:16:84:0b:55:6c:59:32:3e:c7:be:1d: f3:1a:8c:90:cd:f8:44:87:f3:6e:d1:eb:81:31:23:a8:31:2a: 50:36:97:6b:94:82:00:9f:d0:e9:57:05:7b:46:12:4b:48:ef: 39:24:d0:58:12:8e:62:9f:84:60:e1:61:13:be:4d:43:66:fb: 23:ee:89:50:8d:e0:7e:bb:af:84:4b:62:b2:b9:52:54:a1:34: 20:94:1b:23:3a:dd:2b:a1:16:a6:a7:3b:a9:27:67:7d:3b:20: 47:37:ec:33:f3:9d:72:3e:d1:50:30:80:a8:9e:73:62:6a:a3: cd:91:6d:93:43:67:a3:82:c1:95:a1:b2:91:3d:09:c4:51:0e: 31:c6:ee:ce:44:fa:dd:43:42:11:b7:13:2a:54:20:25:44:d2: c9:32:8d:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZDOTIxMTAvBgNVBAUTKDE2QTgxRUFDRUYxQzlGQzMzMjBDNDk1QUI2Q0QwQzY3 NjNBQTgzNjMwHhcNMjQwNTMxMDc1MTI2WhcNMjQwNjA3MDc1MTI2WjAYMRYwFAYD VQQDEw02NjU5ODE3Zi1hNGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRSwHOk7MWDURWk5O2UFx13D2Lyn141cxQPoUKPx+zCQgD+jmelQYB1bJdNB iMAX3EdoeE4gQCJeJyRw2MEzRZ+FZ9WX8pHvAEXR1uzejfG46+WINwsOMg+Xd5GF 4aEVanemxBCB+hhKc4JpnldCWCLXyawSBuvDGpKsw7CCIiZUIYOIu9CTAfNcpSsx Afsrj6Jc0ntieuRKNtL7It8f2SHLyT3VmYPPD/kWGjKfIH4/AG1o29ziHvSj6n9B wE+02EW/exOvzHp5vlzFy980FQYsf/bQcZovTQe3Nvcxxlr4mVvQAjJrrKodwRNA +KKMfiCguBHpPsTvbo/LXw5VVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4tHs+l /fwXyOvvy96JTWYNPd/HMB8GA1UdIwQYMBaAFBaoHqzvHJ/DMgxJWrbNDGdjqoNj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkM5Mi9DQjRBQkU2QTQy MTYxMUVFOUEzRUI3NjhDNEY5QUUwMi9GcWdlck84Y244TXlERWxhdHMwTVoyT3Fn Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZxZ2VyTzhjbjhNeURFbGF0czBNWjJPcWcyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkM5Mi9DQjRBQkU2QTQyMTYxMUVFOUEzRUI3NjhDNEY5QUUwMi9GcWdlck84Y244 TXlERWxhdHMwTVoyT3FnMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADqlfarMJmHMjvZHwwPNAjTJJYIibKdEm+ZWwmbWTQTPnj8YaTvucI 2JpGIe/zaiJfGYBPi6+9l1inxT+gO5upm6nnC2NOhCp6FWQuhlG9dewq1LiVwtd+ p3v3nADwFoJmFoQLVWxZMj7Hvh3zGoyQzfhEh/Nu0euBMSOoMSpQNpdrlIIAn9Dp VwV7RhJLSO85JNBYEo5in4Rg4WETvk1DZvsj7olQjeB+u6+ES2KyuVJUoTQglBsj Ot0roRampzupJ2d9OyBHN+wz851yPtFQMIConnNiaqPNkW2TQ2ejgsGVobKRPQnE UQ4xxu7ORPrdQ0IRtxMqVCAlRNLJMo2U -----END CERTIFICATE-----Generated at Fri May 31 08:39:01 2024 by rpki-client on console-fra.rpki-client.org