$ rpki-client -vvf rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft File: FX3bMj02U1BOMIJOaeDbA3U6aM4.mft (raw, json) Hash identifier: OPBa28qloNNsAmP59h+DqXk81SesmS7r1y1Vyy3ZvJo= Subject key identifier: BC:70:B0:7C:E8:D6:30:F2:92:1D:38:0C:B3:3B:B4:A8:0F:C3:B6:6D Authority key identifier: 15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE Certificate issuer: /CN=A91480B2/serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft Manifest number: 73 Signing time: Fri 17 May 2024 07:32:18 +0000 Manifest this update: Fri 17 May 2024 07:32:18 +0000 Manifest next update: Fri 24 May 2024 07:32:18 +0000 Files and hashes: 1: FX3bMj02U1BOMIJOaeDbA3U6aM4.crl (hash: VJbK0izKqZxB1RURGuFhZVbu29/DrAjByelkM+kODeE=) 2: 93151D5668F911EE9916D146C4F9AE02.roa (hash: 0qsmBJg5UUGr6e1w6S/R56pfS95Y3X7V8TkVGk6lD/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91480B2/serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE Validity Not Before: May 17 07:32:18 2024 GMT Not After : May 24 07:32:18 2024 GMT Subject: CN=66470802-22da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:41:7c:93:52:be:59:cc:ad:1b:0b:f8:6a:8a: ea:48:94:55:ff:79:a4:58:a5:96:03:cb:7b:72:d0: 06:58:a7:75:e7:3e:d2:20:0c:72:e8:24:e2:d3:18: fe:c5:ec:4b:54:d0:74:b6:fc:af:c6:5e:23:43:da: 13:2d:13:52:0f:b9:fe:f5:dd:53:6e:fc:a1:35:74: 2b:95:53:9d:0a:0a:05:6c:30:48:bf:1b:56:5d:d9: 2e:2b:1a:fa:a8:b3:a9:50:8e:5e:41:67:c4:a9:d2: 22:81:3e:f3:99:4c:49:14:f0:5e:b5:c4:58:09:22: 94:ab:f8:94:c1:01:4a:0b:94:c0:a0:cd:75:47:d7: 2f:9b:c2:f7:ad:69:a5:c0:71:02:67:05:d8:73:0c: 66:8e:aa:4a:78:77:df:c0:e1:a7:5f:aa:93:b7:28: 5a:65:fb:a4:c5:39:f5:86:6c:3f:47:02:cd:6b:f3: ae:3d:ee:e3:c0:2d:55:00:90:e3:08:9c:9a:29:cc: 87:a2:c6:26:69:71:96:30:7f:fd:15:c5:49:6e:1a: 80:46:96:9d:24:4d:88:b0:8f:52:bb:ca:f7:c2:97: 11:4c:8f:9d:63:66:26:07:63:92:92:b0:e0:23:94: 78:a9:c6:d3:d4:55:bb:5e:94:29:54:86:ee:19:c3: 08:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:70:B0:7C:E8:D6:30:F2:92:1D:38:0C:B3:3B:B4:A8:0F:C3:B6:6D X509v3 Authority Key Identifier: keyid:15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:b8:eb:06:c3:7a:6f:66:d2:b7:32:b4:cd:88:fb:db:8d:9d: 7f:3c:07:da:5c:fd:3f:1f:95:ce:f0:dc:44:31:21:4d:68:da: c9:12:50:f3:2b:81:46:55:16:95:6f:71:a3:61:96:1e:70:ff: c3:ad:89:c5:cd:7d:c8:9b:2f:91:ec:7a:97:c2:41:05:a0:f4: 36:1d:1b:3a:31:24:e0:a8:82:16:d8:f0:cc:b0:fd:ad:d1:b7: 04:af:32:53:ac:76:a8:38:f4:0f:6a:a2:0a:48:60:67:8f:cb: c6:62:e4:a3:2c:b4:0a:78:91:5f:99:f5:60:3e:28:12:84:c0: b1:93:a8:db:1b:1f:59:3e:06:e2:99:75:bb:f5:da:aa:87:04: 29:91:4b:f3:ad:c2:fc:c3:ee:64:ad:a3:c6:05:d1:a2:cc:b3: 78:ea:45:26:8d:50:54:bc:46:98:71:d7:2b:34:79:90:5e:3b: f3:58:0d:e2:c4:17:77:18:b4:cb:9d:87:26:35:25:7e:35:85: 69:89:c7:d3:fa:64:cc:c2:63:fd:ac:54:f2:db:27:16:4f:bc: db:06:4f:bd:86:a3:c6:25:64:f2:e8:ee:f2:64:bb:fe:c3:e2: 56:b3:02:f0:d3:49:b2:f6:e1:ae:18:e8:13:e1:15:40:4d:04: 1d:27:78:dd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 ODBCMjExMC8GA1UEBRMoMTU3RERCMzIzRDM2NTM1MDRFMzA4MjRFNjlFMERCMDM3 NTNBNjhDRTAeFw0yNDA1MTcwNzMyMThaFw0yNDA1MjQwNzMyMThaMBgxFjAUBgNV BAMTDTY2NDcwODAyLTIyZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpQXyTUr5ZzK0bC/hqiupIlFX/eaRYpZYDy3ty0AZYp3XnPtIgDHLoJOLTGP7F 7EtU0HS2/K/GXiND2hMtE1IPuf713VNu/KE1dCuVU50KCgVsMEi/G1Zd2S4rGvqo s6lQjl5BZ8Sp0iKBPvOZTEkU8F61xFgJIpSr+JTBAUoLlMCgzXVH1y+bwvetaaXA cQJnBdhzDGaOqkp4d9/A4adfqpO3KFpl+6TFOfWGbD9HAs1r86497uPALVUAkOMI nJopzIeixiZpcZYwf/0VxUluGoBGlp0kTYiwj1K7yvfClxFMj51jZiYHY5KSsOAj lHipxtPUVbtelClUhu4ZwwiBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvHCwfOjW MPKSHTgMszu0qA/Dtm0wHwYDVR0jBBgwFoAUFX3bMj02U1BOMIJOaeDbA3U6aM4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4MEIyLzQxQ0JCNjRFNjhG OTExRUVBRDZDRjYyRUM0RjlBRTAyL0ZYM2JNajAyVTFCT01JSk9hZURiQTNVNmFN NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRlgzYk1qMDJVMUJPTUlKT2FlRGJBM1U2YU00LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4 MEIyLzQxQ0JCNjRFNjhGOTExRUVBRDZDRjYyRUM0RjlBRTAyL0ZYM2JNajAyVTFC T01JSk9hZURiQTNVNmFNNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACm46wbDem9m0rcytM2I+9uNnX88B9pc/T8flc7w3EQxIU1o2skSUPMr gUZVFpVvcaNhlh5w/8OticXNfcibL5HsepfCQQWg9DYdGzoxJOCoghbY8Myw/a3R twSvMlOsdqg49A9qogpIYGePy8Zi5KMstAp4kV+Z9WA+KBKEwLGTqNsbH1k+BuKZ dbv12qqHBCmRS/OtwvzD7mSto8YF0aLMs3jqRSaNUFS8Rphx1ys0eZBeO/NYDeLE F3cYtMudhyY1JX41hWmJx9P6ZMzCY/2sVPLbJxZPvNsGT72Go8YlZPLo7vJku/7D 4lazAvDTSbL24a4Y6BPhFUBNBB0neN0= -----END CERTIFICATE-----Generated at Fri May 17 08:52:47 2024 by rpki-client on console-ams.rpki-client.org