$ rpki-client -vvf rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft File: 1h3BeAj1jg-ZsoUs50hg-FPLINs.mft (raw, json) Hash identifier: G58l79iv9onm2VWXhmNV6Rz9CTHHsbWyWtq4TXO1xzE= Subject key identifier: 36:BB:1C:3A:DA:DD:32:6F:79:6F:9F:54:73:F9:D5:42:F5:D5:83:DC Authority key identifier: D6:1D:C1:78:08:F5:8E:0F:99:B2:85:2C:E7:48:60:F8:53:CB:20:DB Certificate issuer: /CN=A916FD2B/serialNumber=D61DC17808F58E0F99B2852CE74860F853CB20DB Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft Manifest number: E9 Signing time: Fri 03 May 2024 05:55:03 +0000 Manifest this update: Fri 03 May 2024 05:55:02 +0000 Manifest next update: Fri 10 May 2024 05:55:02 +0000 Files and hashes: 1: 1h3BeAj1jg-ZsoUs50hg-FPLINs.crl (hash: oLaN7bu4hSs3oGfbPDjmClsmLEkBFOIZTL3DpYSOvUs=) 2: FB4FC092A83811ED94EE0437C4F9AE02.roa (hash: uBSKCHsUFl408B6bvgD3QgcNXBcba/V56ixs2JbyeAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.crl rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 05:55:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FD2B/serialNumber=D61DC17808F58E0F99B2852CE74860F853CB20DB Validity Not Before: May 3 05:55:02 2024 GMT Not After : May 10 05:55:02 2024 GMT Subject: CN=66347c37-7335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:29:01:05:a2:d6:50:46:77:dc:f7:a7:a8:e2: 06:2c:88:99:94:9e:55:07:8d:6d:38:e3:63:c7:6f: a3:10:df:ae:8f:ac:e7:a0:c1:b8:a8:4f:f0:31:97: 4a:f6:69:6c:cf:97:07:85:bb:92:f5:5a:80:75:a4: 2c:cf:79:1f:a8:61:9b:cd:fb:14:1a:47:39:28:db: 34:ab:3e:77:7c:87:58:0a:a3:76:db:10:46:59:62: 04:c3:b9:81:2a:af:a7:00:8c:48:e6:45:30:1c:28: 81:e8:31:d1:cc:d9:a9:da:89:f8:ed:34:96:5e:14: 89:18:ac:31:bb:6f:52:33:2c:69:a8:4f:f3:a5:62: 25:dd:e6:e6:87:ef:ab:5f:9d:3a:14:22:64:d4:77: e1:e5:9d:20:fc:aa:f5:ff:5d:e5:e6:f5:52:ab:6c: 71:fb:6c:9a:34:ac:37:d3:d2:93:aa:39:0e:d8:74: b7:fd:c5:77:55:ba:f6:24:b0:1d:6d:ff:f0:2a:c6: f1:ed:87:69:45:88:a1:c3:39:ef:af:4e:b0:88:31: aa:51:5b:25:bc:8c:e4:b7:07:62:82:c6:96:42:9c: a9:1a:9a:d4:46:bb:66:e3:a6:50:d9:70:b8:32:57: 05:ce:45:f6:41:48:46:14:35:e0:f0:0b:17:29:40: 52:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:BB:1C:3A:DA:DD:32:6F:79:6F:9F:54:73:F9:D5:42:F5:D5:83:DC X509v3 Authority Key Identifier: keyid:D6:1D:C1:78:08:F5:8E:0F:99:B2:85:2C:E7:48:60:F8:53:CB:20:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:7b:0a:8d:28:87:ac:5c:c4:e6:ec:c2:bf:9f:63:e8:36:c7: 1a:43:26:d1:67:14:95:03:ac:7b:1b:fe:0a:35:47:b0:11:2b: cf:df:71:2c:15:0d:8b:a8:25:f9:bb:b3:7e:f3:64:1b:44:5a: c6:35:48:c4:95:a2:05:33:d5:14:d3:23:41:8b:b1:f4:50:f7: 16:10:a7:c3:0a:b2:49:a2:56:47:0b:87:77:9a:6c:35:f6:e7: 62:e6:35:9f:80:70:00:35:41:17:39:2f:f3:0d:d4:29:cc:c1: 4e:2d:36:04:83:1d:58:a1:60:41:97:9c:bf:c9:45:31:33:0f: 86:3b:37:1c:d5:16:e1:09:65:2b:c4:ec:15:72:d2:09:a2:96: 28:87:be:b8:3e:8c:00:73:d8:58:23:80:cf:58:aa:4f:d4:26: bd:99:a3:e1:5b:9f:1b:6a:43:81:4c:ce:6a:6b:5b:ce:19:ef: 11:be:22:35:8b:ad:7b:93:57:2e:ec:46:89:be:37:1a:35:b4: af:5b:bb:48:dd:39:5f:65:ec:0b:80:d0:2d:71:c0:92:f9:4c: c8:5e:92:fe:13:70:23:74:c2:20:e8:4c:8d:f1:d1:16:b0:f5: 26:04:45:25:7e:4a:e9:82:62:3d:97:11:49:41:2c:70:66:6c: d8:b2:42:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZEMkIxMTAvBgNVBAUTKEQ2MURDMTc4MDhGNThFMEY5OUIyODUyQ0U3NDg2MEY4 NTNDQjIwREIwHhcNMjQwNTAzMDU1NTAyWhcNMjQwNTEwMDU1NTAyWjAYMRYwFAYD VQQDEw02NjM0N2MzNy03MzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApikBBaLWUEZ33PenqOIGLIiZlJ5VB41tOONjx2+jEN+uj6znoMG4qE/wMZdK 9mlsz5cHhbuS9VqAdaQsz3kfqGGbzfsUGkc5KNs0qz53fIdYCqN22xBGWWIEw7mB Kq+nAIxI5kUwHCiB6DHRzNmp2on47TSWXhSJGKwxu29SMyxpqE/zpWIl3ebmh++r X506FCJk1Hfh5Z0g/Kr1/13l5vVSq2xx+2yaNKw309KTqjkO2HS3/cV3Vbr2JLAd bf/wKsbx7YdpRYihwznvr06wiDGqUVslvIzktwdigsaWQpypGprURrtm46ZQ2XC4 MlcFzkX2QUhGFDXg8AsXKUBSzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDa7HDra 3TJveW+fVHP51UL11YPcMB8GA1UdIwQYMBaAFNYdwXgI9Y4PmbKFLOdIYPhTyyDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkQyQi8zRjg2RDc5QUE4 MzUxMUVEQTc3NkFCMzBDNEY5QUUwMi8xaDNCZUFqMWpnLVpzb1VzNTBoZy1GUExJ TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFoM0JlQWoxamctWnNvVXM1MGhnLUZQTElOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkQyQi8zRjg2RDc5QUE4MzUxMUVEQTc3NkFCMzBDNEY5QUUwMi8xaDNCZUFqMWpn LVpzb1VzNTBoZy1GUExJTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6ewqNKIesXMTm7MK/n2PoNscaQybRZxSVA6x7G/4KNUewESvP33Es FQ2LqCX5u7N+82QbRFrGNUjElaIFM9UU0yNBi7H0UPcWEKfDCrJJolZHC4d3mmw1 9udi5jWfgHAANUEXOS/zDdQpzMFOLTYEgx1YoWBBl5y/yUUxMw+GOzcc1RbhCWUr xOwVctIJopYoh764PowAc9hYI4DPWKpP1Ca9maPhW58bakOBTM5qa1vOGe8RviI1 i617k1cu7EaJvjcaNbSvW7tI3TlfZewLgNAtccCS+UzIXpL+E3AjdMIg6EyN8dEW sPUmBEUlfkrpgmI9lxFJQSxwZmzYskKC -----END CERTIFICATE-----Generated at Fri May 3 08:21:09 2024 by rpki-client on console-ams.rpki-client.org