$ rpki-client -vvf rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft File: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft (raw, json) Hash identifier: AoOILCUY3jEG37n4fi7hqXoSzV3cKjaz+C4m40VOLKU= Subject key identifier: 47:48:C0:3C:95:55:5A:13:A5:CB:60:D7:13:F5:9E:2F:B8:A7:2F:1D Authority key identifier: 14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8 Certificate issuer: /CN=A911C564/serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8 Certificate serial: 04F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft Manifest number: 04F0 Signing time: Fri 22 Nov 2024 23:15:16 +0000 Manifest this update: Fri 22 Nov 2024 23:15:15 +0000 Manifest next update: Fri 29 Nov 2024 23:15:15 +0000 Files and hashes: 1: FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl (hash: 5PzNxV9ZML1CnMY1jk46msju95dUTCga27uBmBocLgk=) 2: A3B2B0A8EE9711EB8EF1A50AC4F9AE02.roa (hash: Jf8QtUinuXEmxe7plhHtwAZrMyKb/TssbL3bZiwtCVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1269 (0x4f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C564/serialNumber=1402B64F9AE78161D0D65DA725FDD0BBC8E152D8 Validity Not Before: Nov 22 23:15:15 2024 GMT Not After : Nov 29 23:15:15 2024 GMT Subject: CN=67411083-9952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1a:76:a5:bd:b6:1e:de:2d:7d:ae:c3:70:3a: 2e:29:37:28:ac:f5:83:c2:38:9d:32:37:02:e5:7f: eb:79:0c:c7:94:24:43:84:78:42:73:98:9b:11:94: 79:16:62:d2:33:83:98:cb:93:24:c8:82:07:46:1c: b5:87:5c:5d:31:6e:fe:45:b1:c3:24:b1:d7:fc:2c: dc:f4:02:80:1a:48:ab:c1:35:c8:49:c3:d3:e4:0f: 7a:2b:e2:04:3c:48:07:e2:93:85:5e:39:ee:7a:fd: 68:d1:53:f2:f4:4c:7b:af:55:1c:8a:89:6d:1b:03: c5:76:6f:d4:e4:1a:21:70:16:9e:c8:4c:7b:b3:20: 10:35:de:1f:bb:14:0a:c8:20:93:a8:bc:db:3c:0f: be:ad:00:fe:3d:a3:0f:8f:2c:61:3c:40:db:82:b1: 55:8c:6b:e9:59:2a:1c:66:18:d3:1a:1d:ff:78:10: c1:ad:f5:61:bd:04:71:b0:7b:4e:5c:1e:03:b3:d2: 02:68:df:c1:3e:0f:b3:3e:d6:82:f5:ef:e5:bd:75: b7:dd:96:07:c0:61:c4:15:ec:5d:eb:2d:c9:8d:89: b6:c3:e5:9a:33:4a:cc:0a:d7:95:0c:12:c9:ca:2c: ba:dd:ad:a0:6e:1f:5e:80:4a:67:b1:a5:db:7b:d8: 69:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:48:C0:3C:95:55:5A:13:A5:CB:60:D7:13:F5:9E:2F:B8:A7:2F:1D X509v3 Authority Key Identifier: keyid:14:02:B6:4F:9A:E7:81:61:D0:D6:5D:A7:25:FD:D0:BB:C8:E1:52:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C564/E808AED6EE9411EBB3D85A86C4F9AE02/FAK2T5rngWHQ1l2nJf3Qu8jhUtg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:1c:94:80:2b:aa:a6:8e:ff:0f:c8:0f:b2:ba:21:b7:fe:65: f1:15:6c:fb:38:9b:2e:28:04:94:7b:de:5a:c4:59:f8:a1:3c: 85:2c:96:79:7e:bd:53:f8:79:c8:b5:32:cc:69:63:95:c0:52: 67:18:da:3d:50:08:1b:ae:d2:c3:41:6d:4e:69:65:d8:8c:fa: fc:5f:41:9b:20:95:e6:0c:30:72:be:6b:fb:4e:3a:50:2e:56: 4d:f8:7d:65:bf:86:9e:22:c0:e3:28:b0:8c:55:8e:cc:a7:71: b4:bd:51:9e:ce:1f:64:87:20:d5:4a:d9:de:d4:ac:43:cb:d9: 81:c1:dd:63:9d:52:fa:1c:e9:ee:a7:ef:19:5d:d9:db:bc:e6: 65:88:a4:61:01:75:e2:7d:2c:7c:75:cf:93:2e:71:2a:5f:3c: 17:47:41:4d:49:55:24:a5:27:2e:8a:0f:95:d7:64:43:70:3b: f1:09:1b:75:28:d0:b4:de:df:8e:98:59:59:87:f8:f0:66:42: d2:9f:68:d4:13:78:73:18:27:df:08:85:cb:66:9d:bd:71:22: 7d:47:82:fd:85:17:cd:45:0a:0c:f2:66:23:77:dc:a4:47:78: f3:60:cf:36:f6:f1:f8:c9:4e:77:c7:c4:74:61:bf:69:01:66: 9e:a6:68:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM1NjQxMTAvBgNVBAUTKDE0MDJCNjRGOUFFNzgxNjFEMEQ2NURBNzI1RkREMEJC QzhFMTUyRDgwHhcNMjQxMTIyMjMxNTE1WhcNMjQxMTI5MjMxNTE1WjAYMRYwFAYD VQQDEw02NzQxMTA4My05OTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhp2pb22Ht4tfa7DcDouKTcorPWDwjidMjcC5X/reQzHlCRDhHhCc5ibEZR5 FmLSM4OYy5MkyIIHRhy1h1xdMW7+RbHDJLHX/Czc9AKAGkirwTXIScPT5A96K+IE PEgH4pOFXjnuev1o0VPy9Ex7r1UcioltGwPFdm/U5BohcBaeyEx7syAQNd4fuxQK yCCTqLzbPA++rQD+PaMPjyxhPEDbgrFVjGvpWSocZhjTGh3/eBDBrfVhvQRxsHtO XB4Ds9ICaN/BPg+zPtaC9e/lvXW33ZYHwGHEFexd6y3JjYm2w+WaM0rMCteVDBLJ yiy63a2gbh9egEpnsaXbe9hpJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdIwDyV VVoTpctg1xP1ni+4py8dMB8GA1UdIwQYMBaAFBQCtk+a54Fh0NZdpyX90LvI4VLY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzU2NC9FODA4QUVENkVF OTQxMUVCQjNEODVBODZDNEY5QUUwMi9GQUsyVDVybmdXSFExbDJuSmYzUXU4amhV dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZBSzJUNXJuZ1dIUTFsMm5KZjNRdThqaFV0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzU2NC9FODA4QUVENkVFOTQxMUVCQjNEODVBODZDNEY5QUUwMi9GQUsyVDVybmdX SFExbDJuSmYzUXU4amhVdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIHJSAK6qmjv8PyA+yuiG3/mXxFWz7OJsuKASUe95axFn4oTyFLJZ5 fr1T+HnItTLMaWOVwFJnGNo9UAgbrtLDQW1OaWXYjPr8X0GbIJXmDDByvmv7TjpQ LlZN+H1lv4aeIsDjKLCMVY7Mp3G0vVGezh9khyDVStne1KxDy9mBwd1jnVL6HOnu p+8ZXdnbvOZliKRhAXXifSx8dc+TLnEqXzwXR0FNSVUkpScuig+V12RDcDvxCRt1 KNC03t+OmFlZh/jwZkLSn2jUE3hzGCffCIXLZp29cSJ9R4L9hRfNRQoM8mYjd9yk R3jzYM829vH4yU53x8R0Yb9pAWaepmid -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:35 2024 by rpki-client on console-ams.rpki-client.org