$ rpki-client -vvf rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.mft File: FSLnXozBo4h_XUiEw2VwnFc0FZU.mft (raw, json) Hash identifier: iOLnKA+HThAWt2rr9glHlRUlh+6UvUTBOEmdi2uBjgc= Subject key identifier: A8:23:BF:4E:3D:90:58:D7:06:36:96:96:AA:5E:51:14:6B:AF:F6:47 Authority key identifier: 15:22:E7:5E:8C:C1:A3:88:7F:5D:48:84:C3:65:70:9C:57:34:15:95 Certificate issuer: /CN=A9180913/serialNumber=1522E75E8CC1A3887F5D4884C365709C57341595 Certificate serial: 03ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSLnXozBo4h_XUiEw2VwnFc0FZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.mft Manifest number: 03E8 Signing time: Sun 05 May 2024 02:26:24 +0000 Manifest this update: Sun 05 May 2024 02:26:23 +0000 Manifest next update: Sun 12 May 2024 02:26:23 +0000 Files and hashes: 1: FSLnXozBo4h_XUiEw2VwnFc0FZU.crl (hash: mix14AUDU6erhvltDM6nll6tPh24RIxz/A0V/vtzHbU=) 2: 9D05C23684EF11EEA8277F6EC4F9AE02.roa (hash: xzdz7xHAGfTF9ciYyaFkvhMSqyUZUpIl5Q48mTGtW70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.crl rsync://rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSLnXozBo4h_XUiEw2VwnFc0FZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1005 (0x3ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180913/serialNumber=1522E75E8CC1A3887F5D4884C365709C57341595 Validity Not Before: May 5 02:26:23 2024 GMT Not After : May 12 02:26:23 2024 GMT Subject: CN=6636ee50-a7a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:09:7e:29:ce:90:45:15:8f:9b:f0:8d:de:b1: 1e:94:94:4e:48:bb:9e:97:21:ef:5c:95:ae:fd:f8: 8f:cb:d9:5d:86:18:aa:63:8c:94:83:31:0b:53:b0: f0:61:51:da:8d:e4:b0:3f:1d:70:1d:7a:4a:d4:38: 22:e6:e7:a5:74:65:f5:cb:2c:a7:1b:12:12:16:0c: 47:d5:fe:dd:91:63:b7:d2:55:2c:5c:93:db:dd:1a: 50:91:6a:19:2a:d4:04:15:1f:70:34:79:03:cc:2a: 5e:af:66:c3:84:80:1b:62:69:03:70:4e:7e:18:23: a1:7d:e7:b8:c3:0a:cd:9d:04:e0:0d:4f:fb:87:56: b5:97:b3:88:a7:3d:a3:06:1e:cd:d6:14:e2:3d:65: 74:9f:21:66:02:88:da:76:ca:9a:d5:9e:4a:10:09: b5:df:5e:91:34:5a:a2:ce:12:64:8a:fb:c5:6c:6d: cb:5e:46:a7:3e:c4:a8:5b:49:4b:3d:ef:c1:86:ea: d9:3a:32:80:42:20:0e:aa:52:3a:1d:a5:62:7e:ce: 32:db:a0:5c:67:8b:e0:a2:90:61:bb:05:a6:e8:eb: d5:da:04:bb:ab:ec:7e:3b:6a:a1:24:ed:27:ff:2b: a6:71:3c:ab:0d:4c:83:c9:c1:f0:32:dc:87:44:da: fd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:23:BF:4E:3D:90:58:D7:06:36:96:96:AA:5E:51:14:6B:AF:F6:47 X509v3 Authority Key Identifier: keyid:15:22:E7:5E:8C:C1:A3:88:7F:5D:48:84:C3:65:70:9C:57:34:15:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSLnXozBo4h_XUiEw2VwnFc0FZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180913/183C0CA830E711EC92451159C4F9AE02/FSLnXozBo4h_XUiEw2VwnFc0FZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:28:3d:1b:9c:92:7a:62:59:ca:ad:e2:15:1e:db:3b:b1:b8: 22:6d:f3:4f:f4:2e:d8:ea:91:7e:6d:a7:79:1f:6e:01:6c:c6: c3:13:72:4c:27:72:31:32:d1:29:2b:85:e0:6b:f9:63:96:32: 89:b3:ad:11:86:80:84:66:d1:78:69:87:06:cd:31:cc:67:5f: 1b:64:2f:fb:47:85:d1:3b:10:50:83:c2:8f:47:cd:9f:83:46: c4:74:6b:e2:82:3b:1a:5c:50:d1:52:09:31:00:28:21:37:cc: 82:8a:dc:ef:85:6f:3c:e4:3c:d1:8b:3e:17:b5:5a:ce:65:f2: 03:29:f0:8c:e3:69:d3:cf:78:9f:4a:27:6b:59:2b:a7:fa:8e: e8:b8:7c:88:cf:da:e4:4d:66:fe:79:7d:5a:6d:f7:c7:6b:9e: b3:33:01:0a:ea:1b:42:a8:3a:b2:95:49:f2:fa:aa:e3:db:91: c2:60:cf:be:53:98:f5:dd:68:3f:ed:8b:1c:73:54:20:17:04: 95:58:84:aa:c4:43:18:26:4c:f1:57:d4:00:79:ae:cc:b0:0e: 38:52:e9:06:19:36:b1:20:36:d6:7c:04:fa:7c:09:4d:33:fe: e5:5c:ef:55:ed:04:50:b6:6b:66:40:3b:91:86:b1:56:b6:aa: 9a:18:92:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA5MTMxMTAvBgNVBAUTKDE1MjJFNzVFOENDMUEzODg3RjVENDg4NEMzNjU3MDlD NTczNDE1OTUwHhcNMjQwNTA1MDIyNjIzWhcNMjQwNTEyMDIyNjIzWjAYMRYwFAYD VQQDEw02NjM2ZWU1MC1hN2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Ql+Kc6QRRWPm/CN3rEelJROSLuelyHvXJWu/fiPy9ldhhiqY4yUgzELU7Dw YVHajeSwPx1wHXpK1Dgi5ueldGX1yyynGxISFgxH1f7dkWO30lUsXJPb3RpQkWoZ KtQEFR9wNHkDzCper2bDhIAbYmkDcE5+GCOhfee4wwrNnQTgDU/7h1a1l7OIpz2j Bh7N1hTiPWV0nyFmAojadsqa1Z5KEAm1316RNFqizhJkivvFbG3LXkanPsSoW0lL Pe/BhurZOjKAQiAOqlI6HaVifs4y26BcZ4vgopBhuwWm6OvV2gS7q+x+O2qhJO0n /yumcTyrDUyDycHwMtyHRNr9iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgjv049 kFjXBjaWlqpeURRrr/ZHMB8GA1UdIwQYMBaAFBUi516MwaOIf11IhMNlcJxXNBWV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDkxMy8xODNDMENBODMw RTcxMUVDOTI0NTExNTlDNEY5QUUwMi9GU0xuWG96Qm80aF9YVWlFdzJWd25GYzBG WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTTG5Yb3pCbzRoX1hVaUV3MlZ3bkZjMEZaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDkxMy8xODNDMENBODMwRTcxMUVDOTI0NTExNTlDNEY5QUUwMi9GU0xuWG96Qm80 aF9YVWlFdzJWd25GYzBGWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9KD0bnJJ6YlnKreIVHts7sbgibfNP9C7Y6pF+bad5H24BbMbDE3JM J3IxMtEpK4Xga/ljljKJs60RhoCEZtF4aYcGzTHMZ18bZC/7R4XROxBQg8KPR82f g0bEdGvigjsaXFDRUgkxACghN8yCitzvhW885DzRiz4XtVrOZfIDKfCM42nTz3if SidrWSun+o7ouHyIz9rkTWb+eX1abffHa56zMwEK6htCqDqylUny+qrj25HCYM++ U5j13Wg/7Yscc1QgFwSVWISqxEMYJkzxV9QAea7MsA44UukGGTaxIDbWfAT6fAlN M/7lXO9V7QRQtmtmQDuRhrFWtqqaGJK2 -----END CERTIFICATE-----Generated at Sun May 5 03:09:55 2024 by rpki-client on console-ams.rpki-client.org