$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft File: FPn_SiOnILc7r-YDNT8R65c5Jxk.mft (raw, json) Hash identifier: mAx2byVhBbsNZ0KsxII92sKbc9ZGha9M6ohQLaeBhoM= Subject key identifier: B7:0C:71:ED:FB:4E:7C:E6:ED:CB:82:74:B5:43:8F:D6:C1:39:FE:3F Authority key identifier: 14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19 Certificate issuer: /CN=A91BF8F4/serialNumber=14F9FF4A23A720B73BAFE603353F11EB97392719 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft Manifest number: 0152 Signing time: Wed 29 May 2024 05:23:45 +0000 Manifest this update: Wed 29 May 2024 05:23:45 +0000 Manifest next update: Wed 05 Jun 2024 05:23:45 +0000 Files and hashes: 1: FPn_SiOnILc7r-YDNT8R65c5Jxk.crl (hash: vnTAAMqwvN8np2/izdUb/9zaTGHsAu47HSyoMc39uRw=) 2: 9B3244E038A411EDB5C86A28C4F9AE02.roa (hash: vOXi2NZeIVF+yQnURJl+z60/HT9gL5WRkT96yJYHYd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.crl rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 05:21:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF8F4/serialNumber=14F9FF4A23A720B73BAFE603353F11EB97392719 Validity Not Before: May 29 05:23:45 2024 GMT Not After : Jun 5 05:23:45 2024 GMT Subject: CN=6656bbe1-1697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:15:fa:bc:04:e1:2f:fe:98:ba:dc:3c:12:11: b4:e8:9d:b0:09:2a:2e:ca:69:6b:6e:c1:e4:3c:ce: 90:8e:d6:a0:fc:a8:64:ce:7c:56:d5:b4:f0:9f:8b: df:98:84:77:6c:5f:35:b4:f9:40:db:b4:82:f7:b9: 84:14:ae:c5:b7:50:ff:86:fb:44:71:6d:c2:dc:88: f7:2c:3d:d1:08:6a:90:fb:e9:f8:5d:6d:1e:e3:0e: bb:94:27:d2:e1:85:47:91:b3:58:d4:f3:8f:06:8e: 99:1d:78:98:c2:4e:a7:e8:36:77:1d:2f:a1:e0:ec: c1:9e:71:9f:5f:4c:06:00:13:3d:5c:32:b1:6d:25: b6:cf:5b:6f:6f:33:84:10:7a:14:9c:55:0b:c1:64: 94:cc:8b:c2:33:55:fc:7b:fe:81:a8:c4:66:8f:4d: 72:82:2b:4c:5f:31:f1:6b:30:d0:f0:33:fc:2e:8e: 43:9c:14:d5:ee:7c:df:5e:c9:33:3b:62:52:57:ac: bb:94:d0:6a:18:12:56:ee:14:71:36:43:f6:ad:a7: 90:db:84:15:12:5e:47:54:f2:c3:5d:8e:e5:a3:82: ee:56:6a:d2:6c:aa:3d:f9:f1:4b:bf:f0:68:74:30: 78:d9:f6:b1:21:5d:59:34:bd:8a:9b:61:a8:26:b8: 79:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0C:71:ED:FB:4E:7C:E6:ED:CB:82:74:B5:43:8F:D6:C1:39:FE:3F X509v3 Authority Key Identifier: keyid:14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:04:48:e9:dd:55:6c:66:61:c1:a0:9e:fb:a9:34:59:d1:5a: 97:fd:04:f8:52:40:fc:78:9f:7a:6d:4d:ee:2e:36:f8:66:b1: b3:6a:5b:b3:ba:08:ae:58:38:70:64:d5:5f:2d:41:e8:32:68: 3f:fc:33:ae:32:c2:76:3b:3a:b6:67:bf:86:12:7d:b3:ac:18: 54:91:d4:c0:88:65:0c:23:60:74:9f:ba:62:d3:2c:2d:69:ab: ad:e2:ba:8e:71:0e:95:74:a5:d6:b2:76:a5:49:5f:52:f3:7f: a6:2d:43:a7:73:04:42:be:fc:a3:f2:97:8f:bb:0a:1d:12:f6: 85:16:d4:16:ba:3a:aa:92:31:72:eb:1e:14:02:cb:32:54:55: 2d:7d:ef:fa:03:28:81:7d:13:b2:ed:23:4d:96:60:6b:d4:a2: 19:1e:94:0a:9f:c6:b8:40:7e:8a:e5:7b:be:95:24:f5:a1:d4: 08:86:ca:b8:b6:4a:42:68:2d:88:04:23:ff:01:58:24:73:b2: 98:82:17:be:12:0e:98:a9:d3:38:0c:19:9b:bd:86:a9:51:b9: 2d:9a:ad:3e:51:cd:ed:e6:76:3c:42:ab:c4:06:30:1f:a9:21: ed:5b:78:d3:49:d3:1d:6e:41:e8:03:d8:cf:c0:fe:09:a0:b4: 86:50:bf:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4RjQxMTAvBgNVBAUTKDE0RjlGRjRBMjNBNzIwQjczQkFGRTYwMzM1M0YxMUVC OTczOTI3MTkwHhcNMjQwNTI5MDUyMzQ1WhcNMjQwNjA1MDUyMzQ1WjAYMRYwFAYD VQQDEw02NjU2YmJlMS0xNjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhX6vAThL/6Yutw8EhG06J2wCSouymlrbsHkPM6Qjtag/KhkznxW1bTwn4vf mIR3bF81tPlA27SC97mEFK7Ft1D/hvtEcW3C3Ij3LD3RCGqQ++n4XW0e4w67lCfS 4YVHkbNY1POPBo6ZHXiYwk6n6DZ3HS+h4OzBnnGfX0wGABM9XDKxbSW2z1tvbzOE EHoUnFULwWSUzIvCM1X8e/6BqMRmj01ygitMXzHxazDQ8DP8Lo5DnBTV7nzfXskz O2JSV6y7lNBqGBJW7hRxNkP2raeQ24QVEl5HVPLDXY7lo4LuVmrSbKo9+fFLv/Bo dDB42faxIV1ZNL2Km2GoJrh58QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcMce37 Tnzm7cuCdLVDj9bBOf4/MB8GA1UdIwQYMBaAFBT5/0ojpyC3O6/mAzU/EeuXOScZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhGNC83MDc3NjVBODM4 QTExMUVEOUYzQzBDODJDNEY5QUUwMi9GUG5fU2lPbklMYzdyLVlETlQ4UjY1YzVK eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZQbl9TaU9uSUxjN3ItWUROVDhSNjVjNUp4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjhGNC83MDc3NjVBODM4QTExMUVEOUYzQzBDODJDNEY5QUUwMi9GUG5fU2lPbklM YzdyLVlETlQ4UjY1YzVKeGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHBEjp3VVsZmHBoJ77qTRZ0VqX/QT4UkD8eJ96bU3uLjb4ZrGzaluz ugiuWDhwZNVfLUHoMmg//DOuMsJ2Ozq2Z7+GEn2zrBhUkdTAiGUMI2B0n7pi0ywt aaut4rqOcQ6VdKXWsnalSV9S83+mLUOncwRCvvyj8pePuwodEvaFFtQWujqqkjFy 6x4UAssyVFUtfe/6AyiBfROy7SNNlmBr1KIZHpQKn8a4QH6K5Xu+lST1odQIhsq4 tkpCaC2IBCP/AVgkc7KYghe+Eg6YqdM4DBmbvYapUbktmq0+Uc3t5nY8QqvEBjAf qSHtW3jTSdMdbkHoA9jPwP4JoLSGUL/9 -----END CERTIFICATE-----Generated at Wed May 29 06:12:24 2024 by rpki-client on console-ams.rpki-client.org