$ rpki-client -vvf rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft File: FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft (raw, json) Hash identifier: teHnQBDmLMnV8FDp+qkNllmxI5nnvBAhvl51K0MSw5k= Subject key identifier: B6:1A:C9:E3:5B:BF:13:8B:61:D7:48:A6:47:48:3D:4D:86:3D:68:4B Authority key identifier: 14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29 Certificate issuer: /CN=A9121188/serialNumber=1466407758A8D7B935694896D50275280679AF29 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft Manifest number: 5D Signing time: Wed 15 May 2024 07:47:13 +0000 Manifest this update: Wed 15 May 2024 07:47:12 +0000 Manifest next update: Wed 22 May 2024 07:47:12 +0000 Files and hashes: 1: FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl (hash: 2Z/QP7OJgwOykW5abRlDcr8UT/X0lVnwUVsWV1reAIo=) 2: 91FC411C836411EE80C08641C4F9AE02.roa (hash: ik83fvgssDeRH2qYMpeR0HP1tctQFMkIskJveD+4Vow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:47:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121188/serialNumber=1466407758A8D7B935694896D50275280679AF29 Validity Not Before: May 15 07:47:12 2024 GMT Not After : May 22 07:47:12 2024 GMT Subject: CN=66446881-75ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:60:48:f4:f6:a5:b3:7f:91:cc:f4:dc:98:73: 18:b2:36:bf:1c:d6:22:50:27:b1:fc:ee:ed:8e:75: 86:5d:b9:1d:63:5a:68:f1:ce:c5:39:84:ae:56:68: 34:f8:a8:a0:ee:ed:91:e4:27:83:3a:b7:d0:84:79: a1:26:f6:dc:31:6b:78:d7:80:44:f3:53:60:c1:f1: d7:aa:8e:99:ca:7f:d4:11:27:d6:94:ef:29:98:e7: ce:40:02:78:23:5e:93:60:5c:78:78:44:a4:fc:0e: ba:a7:ee:03:75:a1:17:2a:c9:ab:a0:e7:b1:bd:0e: c3:a3:d7:8f:27:5b:3d:45:b2:2e:fe:9d:70:a6:8b: 0f:04:c5:db:4c:f2:4c:51:c2:82:58:3e:9f:67:42: 0e:a6:34:57:41:23:89:05:8f:5f:35:58:77:f2:0d: 84:4a:e9:19:97:a9:d4:b2:8b:5b:f3:1f:0b:36:24: 1c:a8:65:6f:2e:eb:64:37:fd:d0:7f:3f:59:fe:7d: 6c:ad:5f:f3:86:a3:5c:7f:39:de:9d:2b:ab:e8:e1: 89:bd:a9:8a:14:7a:01:14:60:c2:96:b8:02:60:0a: 74:a5:a0:ec:33:d4:f3:19:fc:df:06:b9:8d:61:6a: 0f:aa:70:7f:86:82:bc:08:eb:d8:05:50:d8:af:b6: e9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1A:C9:E3:5B:BF:13:8B:61:D7:48:A6:47:48:3D:4D:86:3D:68:4B X509v3 Authority Key Identifier: keyid:14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:bc:2f:41:01:d8:4c:7b:58:16:97:fa:da:9d:d1:2e:b1:d1: 5b:8d:58:52:de:e5:d9:c9:d1:9d:da:81:3b:c6:ff:1a:4a:60: 13:f4:0f:dc:20:e5:59:28:8e:02:79:5c:f3:d1:0d:67:29:81: 10:ad:6c:fd:63:74:47:fa:16:52:8a:21:94:7a:98:4f:8f:34: 7d:99:8e:7e:fe:4c:7a:6a:0d:5d:8f:ab:a9:f6:a1:e6:35:bd: 72:bb:97:2c:2e:5e:34:71:80:d8:23:03:e8:bd:71:7d:7b:da: dc:46:63:26:69:c3:31:af:67:37:ad:ad:d2:1a:6e:83:51:8d: 7d:3c:d1:06:04:95:e5:4e:d0:2b:8b:b6:03:33:4b:93:fb:4f: ae:40:41:11:4e:3a:d6:50:18:bc:4d:6c:e6:fe:6d:b8:6e:ee: b9:ea:bd:90:37:c4:d2:5a:16:89:3d:79:07:0b:6c:33:1f:76: 5f:a1:09:4f:c5:49:c7:44:e3:55:9a:c1:58:a0:33:49:3a:e6: dc:9b:4c:7f:f3:7f:b5:8d:70:3c:5b:b6:0a:54:35:92:74:74: 14:ff:e8:9b:cd:ff:af:d3:cc:5b:80:e8:92:6c:30:35:48:7a: 16:fd:55:84:36:fb:9f:6d:87:63:da:61:7b:70:ff:59:d0:2d: 81:06:50:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MTE4ODExMC8GA1UEBRMoMTQ2NjQwNzc1OEE4RDdCOTM1Njk0ODk2RDUwMjc1Mjgw Njc5QUYyOTAeFw0yNDA1MTUwNzQ3MTJaFw0yNDA1MjIwNzQ3MTJaMBgxFjAUBgNV BAMTDTY2NDQ2ODgxLTc1YWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBYEj09qWzf5HM9NyYcxiyNr8c1iJQJ7H87u2OdYZduR1jWmjxzsU5hK5WaDT4 qKDu7ZHkJ4M6t9CEeaEm9twxa3jXgETzU2DB8deqjpnKf9QRJ9aU7ymY585AAngj XpNgXHh4RKT8Drqn7gN1oRcqyaug57G9DsOj148nWz1Fsi7+nXCmiw8ExdtM8kxR woJYPp9nQg6mNFdBI4kFj181WHfyDYRK6RmXqdSyi1vzHws2JByoZW8u62Q3/dB/ P1n+fWytX/OGo1x/Od6dK6vo4Ym9qYoUegEUYMKWuAJgCnSloOwz1PMZ/N8GuY1h ag+qcH+GgrwI69gFUNivtul7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUthrJ41u/ E4th10imR0g9TYY9aEswHwYDVR0jBBgwFoAUFGZAd1io17k1aUiW1QJ1KAZ5rykw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIxMTg4Lzg0QkFBMDZDODM2 MzExRUVCQzE5MUIxRUM0RjlBRTAyL0ZHWkFkMWlvMTdrMWFVaVcxUUoxS0FaNXJ5 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRkdaQWQxaW8xN2sxYVVpVzFRSjFLQVo1cnlrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIx MTg4Lzg0QkFBMDZDODM2MzExRUVCQzE5MUIxRUM0RjlBRTAyL0ZHWkFkMWlvMTdr MWFVaVcxUUoxS0FaNXJ5ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL+8L0EB2Ex7WBaX+tqd0S6x0VuNWFLe5dnJ0Z3agTvG/xpKYBP0D9wg 5VkojgJ5XPPRDWcpgRCtbP1jdEf6FlKKIZR6mE+PNH2Zjn7+THpqDV2Pq6n2oeY1 vXK7lywuXjRxgNgjA+i9cX172txGYyZpwzGvZzetrdIaboNRjX080QYEleVO0CuL tgMzS5P7T65AQRFOOtZQGLxNbOb+bbhu7rnqvZA3xNJaFok9eQcLbDMfdl+hCU/F ScdE41WawVigM0k65tybTH/zf7WNcDxbtgpUNZJ0dBT/6JvN/6/TzFuA6JJsMDVI ehb9VYQ2+59th2PaYXtw/1nQLYEGUCg= -----END CERTIFICATE-----Generated at Wed May 15 09:27:28 2024 by rpki-client on console-fra.rpki-client.org