$ rpki-client -vvf rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft File: FWZDTXxsxlkckNwnSr9z3gDrBQE.mft (raw, json) Hash identifier: kLexGJvpoGOHFrAErlJOUrM+jm4/3+7/FOWEQdcOELQ= Subject key identifier: F2:52:C6:B6:B3:21:FB:D8:E8:7D:CB:B0:EA:C0:7D:52:3B:CC:20:B5 Authority key identifier: 15:66:43:4D:7C:6C:C6:59:1C:90:DC:27:4A:BF:73:DE:00:EB:05:01 Certificate issuer: /CN=A912FEAB/serialNumber=1566434D7C6CC6591C90DC274ABF73DE00EB0501 Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft Manifest number: 01C2 Signing time: Sat 23 Nov 2024 01:46:17 +0000 Manifest this update: Sat 23 Nov 2024 01:46:17 +0000 Manifest next update: Sat 30 Nov 2024 01:46:17 +0000 Files and hashes: 1: FWZDTXxsxlkckNwnSr9z3gDrBQE.crl (hash: TrozHXZbIh9FCE7et149CA0QwgO3srSqC5sKsf2pgFU=) 2: 9082B9C42F8711ED90F1090CC4F9AE02.roa (hash: ESvF2zANeeoHFSP7kMO/U5RvLezUTjQbbdWpYH4pQ4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.crl rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:46:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FEAB/serialNumber=1566434D7C6CC6591C90DC274ABF73DE00EB0501 Validity Not Before: Nov 23 01:46:17 2024 GMT Not After : Nov 30 01:46:17 2024 GMT Subject: CN=674133e9-c022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:16:b5:da:0a:26:8f:de:6a:c5:37:d2:a0:eb: bc:35:f3:3e:91:54:88:45:4c:66:7a:33:66:88:a9: 12:00:79:4b:74:5b:aa:1e:e1:04:c4:1b:61:18:32: 91:f1:bc:0d:38:c7:31:e7:46:d5:98:27:fb:04:62: 84:88:19:93:8f:07:21:a6:65:12:5e:59:70:50:a8: 9b:cb:38:37:08:e1:2d:5b:be:91:cf:5f:28:5c:b7: 12:4a:93:bf:b2:eb:d0:88:23:4f:10:19:8e:43:79: 15:f8:8a:0a:b3:9b:5c:ba:c6:8d:e0:27:89:d1:38: a8:5a:93:52:f9:7d:de:ff:30:94:00:79:c2:33:6f: 56:20:24:af:48:cd:4f:9c:00:75:a8:0a:de:75:dd: 09:d2:bb:01:5c:3f:23:22:41:23:59:67:4f:57:20: 51:79:3c:41:5d:67:e3:f2:e8:df:76:e0:4a:7d:51: b3:b5:c7:7d:43:f0:d2:40:34:47:61:97:5a:0e:98: 12:71:b0:cb:cb:6f:8c:59:cd:d4:cf:53:c6:71:1b: 08:b2:11:b7:7c:97:0a:10:67:b9:be:7c:2b:c7:13: 4b:25:c1:2b:5a:72:d5:ff:29:82:63:9b:49:27:d9: 35:d9:ac:cb:e8:cb:aa:c6:b4:1a:82:aa:8a:bd:21: 7f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:52:C6:B6:B3:21:FB:D8:E8:7D:CB:B0:EA:C0:7D:52:3B:CC:20:B5 X509v3 Authority Key Identifier: keyid:15:66:43:4D:7C:6C:C6:59:1C:90:DC:27:4A:BF:73:DE:00:EB:05:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:df:f3:1b:c5:66:fc:a6:64:a4:54:a5:2b:83:dc:8b:87:96: 50:ff:6a:88:e8:8b:a9:53:2c:61:e2:25:86:f6:32:3b:73:01: 66:4c:7f:95:3e:76:1a:4f:40:f3:40:cb:c7:7d:04:f1:a4:53: 24:f4:42:fc:11:aa:70:5d:c6:76:e1:f5:8c:09:c3:0a:e6:8a: c7:8a:c1:c0:06:0c:07:5b:4b:83:e8:8b:fe:bd:96:6a:04:15: 78:53:e0:33:05:18:7d:f2:d4:51:d2:97:4f:d6:af:0d:1a:e6: 0d:97:e9:7f:be:17:bc:33:30:99:4f:4e:df:a7:d5:19:fd:36: 3a:e0:92:4b:8d:72:c1:45:29:02:30:78:d0:ea:b8:23:de:6d: e4:86:d0:ab:4f:29:ff:a2:9a:aa:7d:38:d7:e6:60:52:27:a2: d8:12:12:54:51:1b:38:cc:dd:cd:2b:2f:fd:a7:35:ea:7e:91: 2e:a0:b8:f5:6b:3e:2f:55:d9:47:ba:79:88:25:50:7d:e4:e6: 8a:4a:bd:78:75:2e:62:ac:af:9c:3a:7b:7b:02:13:02:74:fe: 94:41:82:07:6a:2b:f1:a3:19:27:2f:c8:32:8b:8e:0f:52:fa: 81:92:82:a4:8a:c7:0f:1d:60:ee:19:c8:1b:d3:81:5b:f7:f1: e9:04:f2:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZFQUIxMTAvBgNVBAUTKDE1NjY0MzREN0M2Q0M2NTkxQzkwREMyNzRBQkY3M0RF MDBFQjA1MDEwHhcNMjQxMTIzMDE0NjE3WhcNMjQxMTMwMDE0NjE3WjAYMRYwFAYD VQQDEw02NzQxMzNlOS1jMDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ha12gomj95qxTfSoOu8NfM+kVSIRUxmejNmiKkSAHlLdFuqHuEExBthGDKR 8bwNOMcx50bVmCf7BGKEiBmTjwchpmUSXllwUKibyzg3COEtW76Rz18oXLcSSpO/ suvQiCNPEBmOQ3kV+IoKs5tcusaN4CeJ0TioWpNS+X3e/zCUAHnCM29WICSvSM1P nAB1qAredd0J0rsBXD8jIkEjWWdPVyBReTxBXWfj8ujfduBKfVGztcd9Q/DSQDRH YZdaDpgScbDLy2+MWc3Uz1PGcRsIshG3fJcKEGe5vnwrxxNLJcErWnLV/ymCY5tJ J9k12azL6MuqxrQagqqKvSF/nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJSxraz IfvY6H3LsOrAfVI7zCC1MB8GA1UdIwQYMBaAFBVmQ018bMZZHJDcJ0q/c94A6wUB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkVBQi9GREQ4OTlFQzJG ODQxMUVEOThCOTFCMEFDNEY5QUUwMi9GV1pEVFh4c3hsa2NrTnduU3I5ejNnRHJC UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXWkRUWHhzeGxrY2tOd25Tcjl6M2dEckJRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkVBQi9GREQ4OTlFQzJGODQxMUVEOThCOTFCMEFDNEY5QUUwMi9GV1pEVFh4c3hs a2NrTnduU3I5ejNnRHJCUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf3/MbxWb8pmSkVKUrg9yLh5ZQ/2qI6IupUyxh4iWG9jI7cwFmTH+V PnYaT0DzQMvHfQTxpFMk9EL8EapwXcZ24fWMCcMK5orHisHABgwHW0uD6Iv+vZZq BBV4U+AzBRh98tRR0pdP1q8NGuYNl+l/vhe8MzCZT07fp9UZ/TY64JJLjXLBRSkC MHjQ6rgj3m3khtCrTyn/opqqfTjX5mBSJ6LYEhJUURs4zN3NKy/9pzXqfpEuoLj1 az4vVdlHunmIJVB95OaKSr14dS5irK+cOnt7AhMCdP6UQYIHaivxoxknL8gyi44P UvqBkoKkiscPHWDuGcgb04Fb9/HpBPL7 -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:37 2024 by rpki-client on console-ams.rpki-client.org