$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft File: FqgerO8cn8MyDElats0MZ2Oqg2M.mft (raw, json) Hash identifier: zf2Piz3npagb0ZIEM63JzhAZfTyGP2o+TkjQuAJDPd4= Subject key identifier: 75:0B:C7:44:95:4F:FF:8F:58:E5:33:C6:6B:EB:C8:77:BA:0E:42:51 Authority key identifier: 16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63 Certificate issuer: /CN=A91DFC92/serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft Manifest number: 8C Signing time: Fri 17 May 2024 07:09:28 +0000 Manifest this update: Fri 17 May 2024 07:09:28 +0000 Manifest next update: Fri 24 May 2024 07:09:28 +0000 Files and hashes: 1: FqgerO8cn8MyDElats0MZ2Oqg2M.crl (hash: /LpkKdocftG75YvcPV5vmn6TIBNyrlOSCzATgpMw11A=) 2: 0AE7E0B6421711EE97070469C4F9AE02.roa (hash: /4GsPDOsOz6IKJ8MiECwyeOuOhiaIGDZwISWVLxNOyo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:09:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFC92/serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363 Validity Not Before: May 17 07:09:28 2024 GMT Not After : May 24 07:09:28 2024 GMT Subject: CN=664702a8-444d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b3:aa:76:29:36:d4:53:c8:48:bb:d2:5e:3d: bb:70:17:9c:e3:65:d0:41:ed:10:0b:69:de:8f:af: 19:f8:80:6c:08:e6:a7:6b:7c:ac:15:61:39:a1:8f: 3e:b2:c8:5d:fc:7f:7d:64:65:09:ec:09:f0:9a:e5: 19:7a:18:29:75:ab:2d:34:b9:11:a3:d7:08:5b:1a: ed:2a:e8:c1:bb:76:a9:5b:82:ed:c4:ee:ba:fe:32: 75:b9:48:3d:41:f3:75:d4:ba:07:ed:ed:ba:76:a7: 28:43:eb:83:9d:85:18:12:eb:1a:db:46:26:2d:c6: 39:c2:34:5e:6a:05:d2:e1:9b:6f:1a:2d:58:cd:45: a9:13:66:39:c1:0d:06:d1:80:a8:71:3f:bf:e7:fd: 5d:13:3e:f0:1b:e6:96:c0:92:53:b9:b4:33:f1:55: 92:de:c9:06:76:6b:fa:16:57:27:d6:08:4f:66:64: f8:ed:af:d4:fa:7d:c4:d2:74:f7:a8:3d:5c:74:b2: e5:3b:24:2f:e6:fa:15:63:5f:3e:ac:e2:46:ae:2e: 47:1b:b6:90:b3:e9:ee:d2:01:d0:63:08:7a:ab:ca: 95:be:73:af:70:0b:3a:aa:cf:19:a7:ae:c2:91:49: 1f:f4:1c:c9:f0:91:ac:c7:b3:c5:1f:79:43:84:21: 67:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:0B:C7:44:95:4F:FF:8F:58:E5:33:C6:6B:EB:C8:77:BA:0E:42:51 X509v3 Authority Key Identifier: keyid:16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:96:a2:3f:15:5c:e1:68:61:2a:8b:51:4b:e6:48:b4:53:f4: 26:f9:43:59:69:3b:49:b2:fb:ae:b2:41:12:89:ce:e6:e2:08: 7d:12:21:b3:60:be:9d:d2:31:0f:47:f9:1b:8f:32:60:b9:fd: f0:2e:86:52:b5:f1:ed:3a:8c:b1:81:5f:33:19:44:d0:27:aa: 15:7d:36:07:7e:63:c8:fc:7d:1f:cd:af:ec:c9:8b:d6:11:5a: 53:6c:1a:71:16:11:90:ed:93:bc:3a:c0:ad:07:48:1c:23:d6: 13:3a:d2:98:ad:b4:36:a4:b1:a9:77:48:2c:d7:2b:8c:1d:db: 2a:1f:dd:f3:5e:96:c4:5f:2d:ec:6c:21:2d:92:39:64:89:d6: 49:81:68:ef:82:7e:9c:96:a0:26:bc:44:8a:3e:74:5c:9c:c9: f1:74:4d:d9:51:3d:22:2e:b8:cf:90:02:58:8c:8f:21:cb:46: b4:74:4d:8b:09:c8:d1:6f:2f:4f:42:dd:e6:f5:08:02:98:10: 2d:ee:bd:0c:72:57:e0:d8:75:8a:f1:98:ef:ab:b6:8f:a8:fa: 94:9f:df:87:17:a8:61:53:b3:61:ee:7b:6f:77:87:df:bb:01: 4b:eb:30:5c:0e:70:9c:24:9d:d8:e3:7a:cf:64:47:7a:ce:1c: 2b:e1:ba:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZDOTIxMTAvBgNVBAUTKDE2QTgxRUFDRUYxQzlGQzMzMjBDNDk1QUI2Q0QwQzY3 NjNBQTgzNjMwHhcNMjQwNTE3MDcwOTI4WhcNMjQwNTI0MDcwOTI4WjAYMRYwFAYD VQQDEw02NjQ3MDJhOC00NDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLOqdik21FPISLvSXj27cBec42XQQe0QC2nej68Z+IBsCOana3ysFWE5oY8+ sshd/H99ZGUJ7AnwmuUZehgpdastNLkRo9cIWxrtKujBu3apW4LtxO66/jJ1uUg9 QfN11LoH7e26dqcoQ+uDnYUYEusa20YmLcY5wjReagXS4ZtvGi1YzUWpE2Y5wQ0G 0YCocT+/5/1dEz7wG+aWwJJTubQz8VWS3skGdmv6Flcn1ghPZmT47a/U+n3E0nT3 qD1cdLLlOyQv5voVY18+rOJGri5HG7aQs+nu0gHQYwh6q8qVvnOvcAs6qs8Zp67C kUkf9BzJ8JGsx7PFH3lDhCFn6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHULx0SV T/+PWOUzxmvryHe6DkJRMB8GA1UdIwQYMBaAFBaoHqzvHJ/DMgxJWrbNDGdjqoNj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkM5Mi9DQjRBQkU2QTQy MTYxMUVFOUEzRUI3NjhDNEY5QUUwMi9GcWdlck84Y244TXlERWxhdHMwTVoyT3Fn Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZxZ2VyTzhjbjhNeURFbGF0czBNWjJPcWcyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkM5Mi9DQjRBQkU2QTQyMTYxMUVFOUEzRUI3NjhDNEY5QUUwMi9GcWdlck84Y244 TXlERWxhdHMwTVoyT3FnMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2lqI/FVzhaGEqi1FL5ki0U/Qm+UNZaTtJsvuuskESic7m4gh9EiGz YL6d0jEPR/kbjzJguf3wLoZStfHtOoyxgV8zGUTQJ6oVfTYHfmPI/H0fza/syYvW EVpTbBpxFhGQ7ZO8OsCtB0gcI9YTOtKYrbQ2pLGpd0gs1yuMHdsqH93zXpbEXy3s bCEtkjlkidZJgWjvgn6clqAmvESKPnRcnMnxdE3ZUT0iLrjPkAJYjI8hy0a0dE2L CcjRby9PQt3m9QgCmBAt7r0Mclfg2HWK8Zjvq7aPqPqUn9+HF6hhU7Nh7ntvd4ff uwFL6zBcDnCcJJ3Y43rPZEd6zhwr4boe -----END CERTIFICATE-----Generated at Fri May 17 08:13:55 2024 by rpki-client on console-fra.rpki-client.org