$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft File: FPn_SiOnILc7r-YDNT8R65c5Jxk.mft (raw, json) Hash identifier: xvKmo6AuR7WwluAlnxsM5Y/ciGCHv6/W427YfDYQGmU= Subject key identifier: D9:E7:48:99:DA:56:81:F4:26:07:70:46:1F:50:90:DE:D3:E3:4C:93 Authority key identifier: 14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19 Certificate issuer: /CN=A91BF8F4/serialNumber=14F9FF4A23A720B73BAFE603353F11EB97392719 Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft Manifest number: 01AC Signing time: Sat 23 Nov 2024 01:49:28 +0000 Manifest this update: Sat 23 Nov 2024 01:49:27 +0000 Manifest next update: Sat 30 Nov 2024 01:49:27 +0000 Files and hashes: 1: FPn_SiOnILc7r-YDNT8R65c5Jxk.crl (hash: biwFUj5P6fKD+uAvyFa92qVw27lprMvoccdycGPeOx8=) 2: 9B3244E038A411EDB5C86A28C4F9AE02.roa (hash: vOXi2NZeIVF+yQnURJl+z60/HT9gL5WRkT96yJYHYd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.crl rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF8F4/serialNumber=14F9FF4A23A720B73BAFE603353F11EB97392719 Validity Not Before: Nov 23 01:49:27 2024 GMT Not After : Nov 30 01:49:27 2024 GMT Subject: CN=674134a7-c1fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:37:40:2c:f4:11:99:cf:88:70:0c:ae:7e:ee: 09:bf:93:cf:01:35:21:51:08:29:ff:8f:d4:2c:17: f9:7d:32:5f:a2:a6:f8:31:e5:dc:54:00:53:52:8c: 76:9e:7b:49:7b:2e:dc:f8:f9:59:25:6c:d0:a1:4c: 3f:ca:f6:84:fa:af:49:fc:7d:f5:fa:bc:77:cb:2c: 25:0a:e6:b8:a0:d3:a7:d8:03:35:ca:27:88:4f:50: 25:41:e3:4a:9d:e3:eb:08:78:a2:a2:18:ee:d0:ef: aa:c1:21:0e:16:ea:5d:b2:e6:f4:75:1e:59:74:ba: 00:0e:69:b5:b0:a2:e2:ef:cf:44:57:c6:11:db:47: 07:45:c3:ff:50:c0:2f:85:06:3d:35:57:43:7b:8f: 52:63:f0:63:d8:1c:71:fd:d0:49:e0:ec:c7:2b:1a: cd:82:3b:a8:eb:44:77:91:42:96:20:c7:6d:24:57: d2:c7:87:9e:06:20:6c:58:be:f0:11:88:e0:6f:b9: 71:5a:ca:31:af:e7:45:9c:7c:c2:0c:aa:41:88:1b: 64:78:e9:eb:79:df:f9:bf:7a:c1:55:25:3d:09:88: 4b:e1:17:27:93:a4:0c:4d:b5:1e:ac:ee:2d:c9:52: 1b:45:18:14:12:cb:2e:42:7e:85:96:10:52:0d:8f: 3a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E7:48:99:DA:56:81:F4:26:07:70:46:1F:50:90:DE:D3:E3:4C:93 X509v3 Authority Key Identifier: keyid:14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:7c:b4:41:bb:4e:01:67:14:29:3f:db:04:1e:0a:25:70:0c: 8b:38:95:b8:f2:46:3f:65:e8:a2:8a:23:31:e1:34:57:c1:51: 3c:08:2e:38:27:59:2c:9d:b2:99:9a:14:de:ab:d9:ab:e3:79: ea:2d:77:f7:45:87:af:68:ce:f4:89:f0:74:44:02:1e:8e:d7: da:db:4f:7b:9f:d9:b4:ef:0c:a3:c3:f1:ac:b3:f0:fb:f8:bd: e7:e8:25:83:de:79:0f:d9:5e:f2:f3:2c:81:99:0a:04:37:90: 19:33:e4:ba:be:da:d2:b7:73:b4:6b:4d:cd:ff:71:4c:62:60: e3:87:38:4d:fc:fa:7c:4f:c0:2e:d2:8d:a0:f4:e8:f9:3c:33: 44:fc:8f:1d:65:77:3b:26:4d:f3:2e:cb:c4:8b:09:66:ba:e3: b3:ea:b4:03:60:42:68:9e:96:9a:a9:f7:45:ae:ca:2c:c4:95: 3f:eb:25:ba:31:2d:3e:15:96:0b:e0:4c:0a:8d:41:c2:51:5e: 18:53:5b:01:82:08:4b:56:c4:6d:c6:40:25:2f:03:8b:0c:0c: 9c:9d:a3:01:3b:72:15:e2:49:dd:71:89:2b:c7:a7:89:27:6f: 47:3a:ac:9f:12:cb:cd:44:c4:ed:4f:0c:c4:df:69:73:82:e4: 5f:a8:08:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4RjQxMTAvBgNVBAUTKDE0RjlGRjRBMjNBNzIwQjczQkFGRTYwMzM1M0YxMUVC OTczOTI3MTkwHhcNMjQxMTIzMDE0OTI3WhcNMjQxMTMwMDE0OTI3WjAYMRYwFAYD VQQDEw02NzQxMzRhNy1jMWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDdALPQRmc+IcAyufu4Jv5PPATUhUQgp/4/ULBf5fTJfoqb4MeXcVABTUox2 nntJey7c+PlZJWzQoUw/yvaE+q9J/H31+rx3yywlCua4oNOn2AM1yieIT1AlQeNK nePrCHiiohju0O+qwSEOFupdsub0dR5ZdLoADmm1sKLi789EV8YR20cHRcP/UMAv hQY9NVdDe49SY/Bj2Bxx/dBJ4OzHKxrNgjuo60R3kUKWIMdtJFfSx4eeBiBsWL7w EYjgb7lxWsoxr+dFnHzCDKpBiBtkeOnred/5v3rBVSU9CYhL4Rcnk6QMTbUerO4t yVIbRRgUEssuQn6FlhBSDY86PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnnSJna VoH0JgdwRh9QkN7T40yTMB8GA1UdIwQYMBaAFBT5/0ojpyC3O6/mAzU/EeuXOScZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhGNC83MDc3NjVBODM4 QTExMUVEOUYzQzBDODJDNEY5QUUwMi9GUG5fU2lPbklMYzdyLVlETlQ4UjY1YzVK eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZQbl9TaU9uSUxjN3ItWUROVDhSNjVjNUp4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjhGNC83MDc3NjVBODM4QTExMUVEOUYzQzBDODJDNEY5QUUwMi9GUG5fU2lPbklM YzdyLVlETlQ4UjY1YzVKeGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgfLRBu04BZxQpP9sEHgolcAyLOJW48kY/ZeiiiiMx4TRXwVE8CC44 J1ksnbKZmhTeq9mr43nqLXf3RYevaM70ifB0RAIejtfa2097n9m07wyjw/Gss/D7 +L3n6CWD3nkP2V7y8yyBmQoEN5AZM+S6vtrSt3O0a03N/3FMYmDjhzhN/Pp8T8Au 0o2g9Oj5PDNE/I8dZXc7Jk3zLsvEiwlmuuOz6rQDYEJonpaaqfdFrsosxJU/6yW6 MS0+FZYL4EwKjUHCUV4YU1sBgghLVsRtxkAlLwOLDAycnaMBO3IV4kndcYkrx6eJ J29HOqyfEsvNRMTtTwzE32lzguRfqAiM -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:45 2024 by rpki-client on console-fra.rpki-client.org