$ rpki-client -vvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft File: FyPctBoEJopYeqzoz9na5fn1Hfc.mft (raw, json) Hash identifier: mOQjUxJHVwaoH0f935WxeOW57BoOxYF2RnY1G2DBg28= Subject key identifier: A9:B0:89:D2:F8:72:9F:AC:D0:A8:C4:1C:14:F7:15:7F:54:D6:38:5F Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 Certificate issuer: /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Certificate serial: 0744 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft Manifest number: 0721 Signing time: Fri 22 Nov 2024 21:23:54 +0000 Manifest this update: Fri 22 Nov 2024 21:23:54 +0000 Manifest next update: Fri 29 Nov 2024 21:23:54 +0000 Files and hashes: 1: FyPctBoEJopYeqzoz9na5fn1Hfc.crl (hash: ZtYfD9iv+9RC8Y6U6YHLoZ9bLg/IllUC6we4kiTq3mQ=) 2: 3CD29BF4D46911EE8B36431CC4F9AE02.roa (hash: 0LRH57WQzl4Rls3DA1D5ibSKHe1ZUiGoTlR4SEyE25o=) 3: 8037BC50EB2E11EDB835EF4AC4F9AE02.roa (hash: FjZNV84GDEYG9rs7eSzrPs7JIeca7EBDu1KkwsxHYzI=) 4: 7AA7B416E01011EEA1CA127CC4F9AE02.roa (hash: 4D0MtO3klPUbzcREIroqTwRalXeVpYqZnuQeF7up3Rs=) 5: 68DAAA1A749711EFB4EDA45FC4F9AE02.roa (hash: iCvDHT2InFQYFJJ9LW52qC1YqNM+jnahLgFdP507rPQ=) 6: 2840D3A225FF11EBAF634966C4F9AE02.roa (hash: HgwGz1HNixPgkzYja86IABpReSgaWGluIINyqRObpeI=) 7: 26D56F6425FF11EBAF634966C4F9AE02.roa (hash: 3vTDoLxSMP6iCYPrTnRPa68156DbahM7Va7enXW/PyM=) 8: 284E9E9E1D5611EB891ADC6CC4F9AE02.roa (hash: jHyz9hBesQPy2OLfpKePjWLaykWWtF8kdX2XvcQ4rao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1860 (0x744) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Validity Not Before: Nov 22 21:23:54 2024 GMT Not After : Nov 29 21:23:54 2024 GMT Subject: CN=6740f66a-5882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b2:74:c3:58:90:86:b8:9e:4f:15:83:0e:19: df:12:71:92:8c:92:e8:9f:1d:c4:c2:f0:3f:73:28: 78:d9:2b:31:e4:e5:55:82:8a:0b:f7:58:a3:65:a2: de:94:dc:98:6e:7e:82:fd:7b:ab:4e:66:4c:12:5c: 9f:28:4d:54:e1:22:59:9c:a2:45:da:24:48:e5:08: d4:52:2e:a5:8c:22:91:f1:38:ea:52:97:05:b2:35: d2:88:c6:8a:ab:c5:b2:c9:06:90:e9:6a:b7:39:98: 5e:82:62:55:52:9c:f0:32:94:33:8d:61:84:c9:48: dc:2a:f7:24:1a:16:b7:1c:f4:37:25:e1:2c:d3:ae: 19:4a:a9:77:40:4a:f7:6c:ed:4c:50:47:1f:30:65: 33:28:a0:b2:b4:3f:ec:65:ed:9a:48:03:04:06:4d: 4b:6f:e2:1c:e4:b9:74:55:7f:f0:88:2f:f2:83:59: 2a:7a:13:d4:24:52:84:f2:a9:b9:b1:52:e7:ac:f0: ef:df:bf:d7:0f:ca:f0:ad:6c:d7:36:7f:c0:9c:9b: 0c:5b:36:e3:26:5b:9a:4a:b5:19:61:1a:af:c5:2f: 76:04:f6:b1:60:12:a1:59:27:77:51:48:5e:b2:ff: 55:68:76:00:99:08:ef:6b:e5:1e:4e:a4:9c:3f:b0: f0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B0:89:D2:F8:72:9F:AC:D0:A8:C4:1C:14:F7:15:7F:54:D6:38:5F X509v3 Authority Key Identifier: keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:b3:ab:18:ec:fc:9f:73:48:d6:2d:8d:62:4c:08:d9:15:99: 52:3d:be:6a:37:a9:b3:1c:9a:72:89:07:93:93:c3:a5:87:b0: 38:af:4a:a5:a4:5d:39:9f:76:07:3c:9e:6e:7d:3c:6e:b1:9a: e9:ef:07:e0:45:8e:4f:c5:91:b9:62:cc:e7:00:41:d6:85:d0: b3:97:04:7d:ee:9a:06:dd:67:29:1f:6c:bf:46:c4:1b:54:84: 92:ac:39:50:d5:89:47:b2:15:87:69:ee:eb:09:4e:1d:81:41: f7:e9:4e:c5:88:26:ec:14:90:46:9b:0d:03:43:c8:71:ab:73: ac:7e:88:d3:7f:4b:a2:64:fb:b0:f7:d9:b2:08:e5:16:7a:28: 97:66:ec:78:46:82:8d:59:96:29:ac:80:79:77:6e:27:71:9f: f0:4e:cc:a2:ab:72:30:66:d6:11:20:33:01:71:d2:76:5e:39: 0a:bd:cf:20:67:ec:31:98:77:ec:27:c5:11:a5:52:d9:45:30: c8:ad:91:ef:23:37:a2:9f:18:e1:83:cd:b1:71:e6:95:5a:b2: 58:87:64:1a:15:04:76:ec:52:0e:b7:f0:30:49:02:fc:ce:9f: 4b:1f:54:cd:e5:b4:d9:34:f2:c6:02:75:f7:aa:66:4e:50:c1: 05:99:93:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlEQ0IxMTAvBgNVBAUTKDE3MjNEQ0I0MUEwNDI2OEE1ODdBQUNFOENGRDlEQUU1 RjlGNTFERjcwHhcNMjQxMTIyMjEyMzU0WhcNMjQxMTI5MjEyMzU0WjAYMRYwFAYD VQQDEw02NzQwZjY2YS01ODgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrJ0w1iQhrieTxWDDhnfEnGSjJLonx3EwvA/cyh42Ssx5OVVgooL91ijZaLe lNyYbn6C/XurTmZMElyfKE1U4SJZnKJF2iRI5QjUUi6ljCKR8TjqUpcFsjXSiMaK q8WyyQaQ6Wq3OZhegmJVUpzwMpQzjWGEyUjcKvckGha3HPQ3JeEs064ZSql3QEr3 bO1MUEcfMGUzKKCytD/sZe2aSAMEBk1Lb+Ic5Ll0VX/wiC/yg1kqehPUJFKE8qm5 sVLnrPDv37/XD8rwrWzXNn/AnJsMWzbjJluaSrUZYRqvxS92BPaxYBKhWSd3UUhe sv9VaHYAmQjva+UeTqScP7DwoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmwidL4 cp+s0KjEHBT3FX9U1jhfMB8GA1UdIwQYMBaAFBcj3LQaBCaKWHqs6M/Z2uX59R33 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOURDQi9FNEMwRjU2QzE4 N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpvcFllcXpvejluYTVmbjFI ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z5UGN0Qm9FSm9wWWVxem96OW5hNWZuMUhmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OURDQi9FNEMwRjU2QzE4N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpv cFllcXpvejluYTVmbjFIZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJs6sY7Pyfc0jWLY1iTAjZFZlSPb5qN6mzHJpyiQeTk8Olh7A4r0ql pF05n3YHPJ5ufTxusZrp7wfgRY5PxZG5YsznAEHWhdCzlwR97poG3WcpH2y/RsQb VISSrDlQ1YlHshWHae7rCU4dgUH36U7FiCbsFJBGmw0DQ8hxq3OsfojTf0uiZPuw 99myCOUWeiiXZux4RoKNWZYprIB5d24ncZ/wTsyiq3IwZtYRIDMBcdJ2XjkKvc8g Z+wxmHfsJ8URpVLZRTDIrZHvIzeinxjhg82xceaVWrJYh2QaFQR27FIOt/AwSQL8 zp9LH1TN5bTZNPLGAnX3qmZOUMEFmZOI -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:05 2024 by rpki-client on console-fra.rpki-client.org