$ rpki-client -vvf rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft File: FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft (raw, json) Hash identifier: p560oVXuLq/bqYUU7x93t7nxGW5z6ks1hJzE8iy5MZk= Subject key identifier: D8:B7:99:46:82:7F:C1:B9:77:20:AB:A8:9D:6F:B3:0C:28:0E:58:40 Authority key identifier: 16:02:38:49:B9:C6:4D:56:DE:DC:AE:9B:12:86:3D:07:31:88:AC:2E Certificate issuer: /CN=A9197FBD/serialNumber=16023849B9C64D56DEDCAE9B12863D073188AC2E Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgI4SbnGTVbe3K6bEoY9BzGIrC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft Manifest number: 87 Signing time: Fri 17 May 2024 07:12:17 +0000 Manifest this update: Fri 17 May 2024 07:12:17 +0000 Manifest next update: Fri 24 May 2024 07:12:17 +0000 Files and hashes: 1: FgI4SbnGTVbe3K6bEoY9BzGIrC4.crl (hash: Uqoh1/cOjIgYXlYx/lFMZ+tLS+p/vwHAi2JvM8in8ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.crl rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgI4SbnGTVbe3K6bEoY9BzGIrC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:12:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197FBD/serialNumber=16023849B9C64D56DEDCAE9B12863D073188AC2E Validity Not Before: May 17 07:12:17 2024 GMT Not After : May 24 07:12:17 2024 GMT Subject: CN=66470351-1936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:45:a3:a5:27:62:b1:f9:01:d9:38:05:57:d8: 9d:80:37:ca:c7:f9:f2:43:59:15:a8:34:ee:7f:34: ce:ce:25:65:93:53:dc:2b:54:3b:07:1e:e9:a0:94: 36:36:d9:00:ba:1f:c8:c1:22:8d:c1:ec:b0:dc:c2: c1:fa:5e:5a:68:6d:70:5e:42:6a:fc:61:ae:4c:b5: 95:a9:a9:41:a5:7e:bd:df:70:99:07:00:68:4f:ed: 52:90:8e:d2:83:f0:86:2e:13:43:8e:fc:f4:03:e8: 5b:88:13:9a:79:44:f4:80:46:df:0b:f5:93:03:50: 74:e5:96:a0:96:7b:b7:b2:cd:d0:3d:80:b4:0e:fb: eb:26:38:68:3b:eb:a7:d3:1c:25:b0:35:e3:7b:1c: 98:a2:5a:d9:e6:8b:56:d2:85:f8:50:df:bb:77:0c: 3f:66:74:38:a6:cb:6b:cf:23:0b:b6:c3:29:2b:70: 75:d8:32:9e:30:b6:f7:96:de:36:82:42:83:0c:1f: f3:7b:48:2f:23:63:83:5b:35:01:66:d5:e0:15:5e: 41:fb:ae:28:ea:6a:d6:9d:c0:ab:f4:84:3d:42:e6: 58:2e:be:22:35:0c:be:eb:22:e2:d6:0c:68:ae:bc: 70:fe:65:2b:d3:70:3f:ce:a7:1a:69:65:82:50:04: a5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B7:99:46:82:7F:C1:B9:77:20:AB:A8:9D:6F:B3:0C:28:0E:58:40 X509v3 Authority Key Identifier: keyid:16:02:38:49:B9:C6:4D:56:DE:DC:AE:9B:12:86:3D:07:31:88:AC:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgI4SbnGTVbe3K6bEoY9BzGIrC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:fb:92:de:a5:bc:87:9b:07:31:2d:4c:78:b5:09:c2:9b:07: 1b:93:32:fb:ab:cf:5f:25:fa:69:ff:42:4a:99:13:d8:51:52: 96:d1:4d:52:dc:31:8f:dc:e5:43:08:83:be:ac:5e:2c:4a:6b: 6d:a2:62:58:fa:08:3c:6d:71:05:3d:e5:9e:ef:01:4d:97:29: bb:c3:0e:56:7c:a0:4c:3a:0a:4d:98:84:04:cb:d9:e6:f5:66: e7:b5:a5:00:ae:8e:8d:c4:19:17:f0:4d:41:4d:31:98:0f:db: 76:31:32:7f:3e:ee:30:34:f3:aa:21:0a:ee:13:c8:83:94:88: b5:73:46:e1:df:1c:45:a9:84:3c:26:43:36:6b:b2:71:ac:99: 1c:b4:d3:ab:f0:b7:82:d1:2c:44:63:fa:64:8c:ec:bc:56:21: c7:25:45:73:ab:ad:69:29:0d:14:87:c2:c2:29:34:89:47:97: 59:ff:55:58:2e:0d:03:aa:62:a5:98:6d:0d:33:22:1d:cc:13: 61:af:6b:eb:db:97:8e:08:bc:80:8b:5f:c0:1b:75:81:c7:d8: 56:31:0a:aa:c6:1a:f2:05:b9:77:22:b7:5d:62:34:f4:bc:f7: a4:8a:df:33:30:3c:5d:d2:e0:c0:c4:8b:c5:43:2e:51:53:b7: e2:8b:7c:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdGQkQxMTAvBgNVBAUTKDE2MDIzODQ5QjlDNjRENTZERURDQUU5QjEyODYzRDA3 MzE4OEFDMkUwHhcNMjQwNTE3MDcxMjE3WhcNMjQwNTI0MDcxMjE3WjAYMRYwFAYD VQQDEw02NjQ3MDM1MS0xOTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo0WjpSdisfkB2TgFV9idgDfKx/nyQ1kVqDTufzTOziVlk1PcK1Q7Bx7poJQ2 NtkAuh/IwSKNweyw3MLB+l5aaG1wXkJq/GGuTLWVqalBpX6933CZBwBoT+1SkI7S g/CGLhNDjvz0A+hbiBOaeUT0gEbfC/WTA1B05Zaglnu3ss3QPYC0DvvrJjhoO+un 0xwlsDXjexyYolrZ5otW0oX4UN+7dww/ZnQ4pstrzyMLtsMpK3B12DKeMLb3lt42 gkKDDB/ze0gvI2ODWzUBZtXgFV5B+64o6mrWncCr9IQ9QuZYLr4iNQy+6yLi1gxo rrxw/mUr03A/zqcaaWWCUASlgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNi3mUaC f8G5dyCrqJ1vswwoDlhAMB8GA1UdIwQYMBaAFBYCOEm5xk1W3tyumxKGPQcxiKwu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0ZCRC83RkZGNDU3NDQ2 RUExMUVFQTZFREVBNjNDNEY5QUUwMi9GZ0k0U2JuR1RWYmUzSzZiRW9ZOUJ6R0ly QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnSTRTYm5HVFZiZTNLNmJFb1k5QnpHSXJDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0ZCRC83RkZGNDU3NDQ2RUExMUVFQTZFREVBNjNDNEY5QUUwMi9GZ0k0U2JuR1RW YmUzSzZiRW9ZOUJ6R0lyQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCT+5LepbyHmwcxLUx4tQnCmwcbkzL7q89fJfpp/0JKmRPYUVKW0U1S 3DGP3OVDCIO+rF4sSmttomJY+gg8bXEFPeWe7wFNlym7ww5WfKBMOgpNmIQEy9nm 9WbntaUAro6NxBkX8E1BTTGYD9t2MTJ/Pu4wNPOqIQruE8iDlIi1c0bh3xxFqYQ8 JkM2a7JxrJkctNOr8LeC0SxEY/pkjOy8ViHHJUVzq61pKQ0Uh8LCKTSJR5dZ/1VY Lg0DqmKlmG0NMyIdzBNhr2vr25eOCLyAi1/AG3WBx9hWMQqqxhryBbl3IrddYjT0 vPekit8zMDxd0uDAxIvFQy5RU7fii3y1 -----END CERTIFICATE-----Generated at Fri May 17 08:52:51 2024 by rpki-client on console-ams.rpki-client.org