$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft File: FPn_SiOnILc7r-YDNT8R65c5Jxk.mft (raw, json) Hash identifier: G+aRsZv1347Dq1QCHcTkyd9nQE789gauv2FJrkirWxw= Subject key identifier: 72:E7:E7:1A:24:6E:B0:8C:D0:BC:7C:F0:CF:3C:FE:C8:00:29:CC:AB Authority key identifier: 14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19 Certificate issuer: /CN=A91BF8F4/serialNumber=14F9FF4A23A720B73BAFE603353F11EB97392719 Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft Manifest number: 0146 Signing time: Fri 03 May 2024 05:03:08 +0000 Manifest this update: Fri 03 May 2024 05:03:07 +0000 Manifest next update: Fri 10 May 2024 05:03:07 +0000 Files and hashes: 1: FPn_SiOnILc7r-YDNT8R65c5Jxk.crl (hash: hy5+bsgXXaWWO1ALC4igrKXhN0WA38WoQeL9kE/4zyU=) 2: 9B3244E038A411EDB5C86A28C4F9AE02.roa (hash: vOXi2NZeIVF+yQnURJl+z60/HT9gL5WRkT96yJYHYd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.crl rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF8F4/serialNumber=14F9FF4A23A720B73BAFE603353F11EB97392719 Validity Not Before: May 3 05:03:07 2024 GMT Not After : May 10 05:03:07 2024 GMT Subject: CN=6634700b-b8eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9a:30:21:51:56:d3:08:e7:a4:fa:22:43:2e: 66:c1:5b:74:0b:72:8c:51:8b:84:8f:d5:f6:b0:c4: 39:68:ae:c6:1a:c4:f4:db:13:c1:55:9c:06:79:50: 7e:aa:ad:5d:c2:52:0d:6e:bf:13:9e:9d:eb:c5:87: 14:36:1d:a0:61:e5:ef:5d:78:16:a2:44:d4:a1:35: a7:c2:a6:68:16:e6:f4:50:bc:a4:63:b4:79:d0:79: 01:d8:29:25:d5:19:b4:a3:62:b5:06:a1:0c:c7:04: 92:b3:20:93:9e:71:7c:d7:7c:cd:18:ee:f3:45:02: 25:40:b9:7d:64:85:92:27:64:6c:8e:ca:86:8e:fc: 17:6a:08:6f:b7:58:ba:f5:d1:5b:ea:48:d2:96:7b: 3f:72:3e:ba:82:4e:7a:70:74:60:da:63:de:74:57: 98:ff:24:8e:24:d8:2f:19:76:00:9e:27:d4:7c:4f: 7e:2b:ef:5a:a1:52:47:4f:8e:be:f4:e6:3e:d6:dc: 75:e8:2e:93:8f:21:1c:1c:ee:e9:f8:23:5c:c9:31: 40:34:7b:78:5f:b7:dd:97:5f:cd:b3:96:db:4e:2c: 0c:f9:9b:2f:c2:99:5c:af:43:44:42:04:40:8f:1e: ca:c6:0e:58:74:a5:46:dd:10:d7:ac:f7:18:6f:e6: 54:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E7:E7:1A:24:6E:B0:8C:D0:BC:7C:F0:CF:3C:FE:C8:00:29:CC:AB X509v3 Authority Key Identifier: keyid:14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:58:88:c0:38:f8:71:ea:a3:e2:5f:a4:46:0b:5a:f8:cf:57: ab:48:65:0d:41:36:81:2d:05:38:ee:a9:c9:8a:e5:0e:e8:71: fa:88:18:24:82:80:dd:c4:32:9a:41:38:8f:ed:e8:54:b5:68: 11:e5:80:7f:9a:8e:5b:8a:45:74:bd:9a:38:38:8f:88:4f:f5: f6:42:23:4c:23:4f:fd:b3:74:66:73:38:bc:ab:bd:ba:45:7f: ca:2d:0f:d8:d9:62:c3:5e:a3:fa:a1:76:64:f4:b8:2b:fe:3b: 88:fa:21:ca:b6:91:0b:34:99:2d:77:b3:00:07:e8:00:00:b6: 05:da:09:b8:9c:4b:97:e2:30:4f:33:7a:ba:2a:8c:7a:3e:8f: 58:50:f4:0d:36:e5:96:6d:78:39:10:bf:5f:9b:5a:ea:62:83: 4a:8c:ed:29:8a:ab:e8:7e:41:a6:9c:58:6a:81:6f:55:c0:8c: 9b:5a:c0:4c:b3:1d:df:ae:b4:bb:64:fb:22:5a:31:1b:ea:c6: 27:c9:e5:6c:c8:3c:f4:e2:fd:90:22:b2:26:b9:90:bc:9e:b9: bd:f0:1c:f3:75:68:07:12:d3:c2:a9:45:2b:98:0c:6d:48:91: b0:b6:36:d9:35:85:ff:d3:08:7c:a0:70:f9:ca:14:44:05:ce: 5a:03:c4:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4RjQxMTAvBgNVBAUTKDE0RjlGRjRBMjNBNzIwQjczQkFGRTYwMzM1M0YxMUVC OTczOTI3MTkwHhcNMjQwNTAzMDUwMzA3WhcNMjQwNTEwMDUwMzA3WjAYMRYwFAYD VQQDEw02NjM0NzAwYi1iOGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ZowIVFW0wjnpPoiQy5mwVt0C3KMUYuEj9X2sMQ5aK7GGsT02xPBVZwGeVB+ qq1dwlINbr8Tnp3rxYcUNh2gYeXvXXgWokTUoTWnwqZoFub0ULykY7R50HkB2Ckl 1Rm0o2K1BqEMxwSSsyCTnnF813zNGO7zRQIlQLl9ZIWSJ2RsjsqGjvwXaghvt1i6 9dFb6kjSlns/cj66gk56cHRg2mPedFeY/ySOJNgvGXYAnifUfE9+K+9aoVJHT46+ 9OY+1tx16C6TjyEcHO7p+CNcyTFANHt4X7fdl1/Ns5bbTiwM+Zsvwplcr0NEQgRA jx7Kxg5YdKVG3RDXrPcYb+ZUMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHLn5xok brCM0Lx88M88/sgAKcyrMB8GA1UdIwQYMBaAFBT5/0ojpyC3O6/mAzU/EeuXOScZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhGNC83MDc3NjVBODM4 QTExMUVEOUYzQzBDODJDNEY5QUUwMi9GUG5fU2lPbklMYzdyLVlETlQ4UjY1YzVK eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZQbl9TaU9uSUxjN3ItWUROVDhSNjVjNUp4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjhGNC83MDc3NjVBODM4QTExMUVEOUYzQzBDODJDNEY5QUUwMi9GUG5fU2lPbklM YzdyLVlETlQ4UjY1YzVKeGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUWIjAOPhx6qPiX6RGC1r4z1erSGUNQTaBLQU47qnJiuUO6HH6iBgk goDdxDKaQTiP7ehUtWgR5YB/mo5bikV0vZo4OI+IT/X2QiNMI0/9s3Rmczi8q726 RX/KLQ/Y2WLDXqP6oXZk9Lgr/juI+iHKtpELNJktd7MAB+gAALYF2gm4nEuX4jBP M3q6Kox6Po9YUPQNNuWWbXg5EL9fm1rqYoNKjO0piqvofkGmnFhqgW9VwIybWsBM sx3frrS7ZPsiWjEb6sYnyeVsyDz04v2QIrImuZC8nrm98BzzdWgHEtPCqUUrmAxt SJGwtjbZNYX/0wh8oHD5yhREBc5aA8QP -----END CERTIFICATE-----Generated at Fri May 3 06:18:54 2024 by rpki-client on console-ams.rpki-client.org