$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft File: fFO_avST0kw7fGuiFrOCsMf3_CQ.mft (raw, json) Hash identifier: ok86AaqhqrWeOiSiqLwchoVMLaopWaRzie71vqdrZvY= Subject key identifier: FA:1A:FF:69:6F:82:9E:34:BF:73:1A:9E:2A:79:25:88:58:FE:0F:50 Authority key identifier: 7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24 Certificate issuer: /CN=A913FA1D/serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24 Certificate serial: 082C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft Manifest number: 0822 Signing time: Fri 22 Nov 2024 20:32:17 +0000 Manifest this update: Fri 22 Nov 2024 20:32:17 +0000 Manifest next update: Fri 29 Nov 2024 20:32:17 +0000 Files and hashes: 1: fFO_avST0kw7fGuiFrOCsMf3_CQ.crl (hash: hitv6NfJjboCGjkL+djn49yux8etLvXbZBAd6KYMcWg=) 2: F86B8216BFED11EABE972E5AC4F9AE02.roa (hash: V0pjnh04vEdgmV8Kv8derW5bLwshO/M+fOtkhl/pSHk=) 3: F902E016BFED11EABE972E5AC4F9AE02.roa (hash: zJnQAoVQnMFggHhOkukGbqVFmuwnoJ5l6Pzb/DNiFGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:32:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2092 (0x82c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FA1D/serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24 Validity Not Before: Nov 22 20:32:17 2024 GMT Not After : Nov 29 20:32:17 2024 GMT Subject: CN=6740ea51-e905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bb:c1:ec:c9:1c:93:2b:64:82:a7:64:46:34: ab:24:b0:c5:1c:a4:36:27:cb:98:4f:a9:fb:85:b3: 81:af:30:9e:2f:6f:d2:b6:7a:eb:a3:5b:59:9f:0e: 9b:da:3e:49:5f:ed:cd:b4:e0:d4:5b:b5:06:82:02: d6:b4:65:b0:1b:29:17:15:26:61:2e:79:f2:09:2c: 3c:fc:54:2c:1c:8a:a3:ce:5c:10:48:df:cf:b8:3a: a1:4e:30:90:9d:6b:8f:d4:9c:7f:26:73:0a:81:3c: c8:d7:23:17:b5:ce:49:20:1b:86:bb:dc:df:48:60: 4f:56:2c:0c:01:7b:73:87:9a:36:2b:08:db:40:0c: 57:f2:79:59:1d:cd:22:e5:e8:ab:a4:e9:b6:90:b7: 00:34:59:5b:f7:63:d4:77:33:10:76:95:ad:8f:41: d2:37:ef:d8:0a:fc:98:92:1e:c0:34:c6:a7:b3:e1: 22:1a:94:85:1a:a2:ac:4f:51:87:82:ee:59:01:b8: 5c:7a:37:47:fe:5e:5a:ac:5c:b9:0a:7d:e4:ab:63: 10:7b:7d:3a:b1:96:45:62:26:66:40:93:55:8a:fb: b7:3a:aa:86:4e:0a:09:ff:39:ca:97:f5:6c:ac:6a: b3:b9:0f:59:cf:d2:04:e3:3b:ec:11:ad:be:b4:63: 76:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:1A:FF:69:6F:82:9E:34:BF:73:1A:9E:2A:79:25:88:58:FE:0F:50 X509v3 Authority Key Identifier: keyid:7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e7:b3:54:ea:4a:7c:02:23:88:57:62:bf:2a:90:7d:d7:f0: 85:61:20:ca:87:4e:49:a4:fe:d8:9f:42:8f:ab:b9:b5:34:28: 54:4d:f2:95:c5:68:a7:41:14:31:46:48:b4:77:76:09:23:3d: bb:dd:ee:88:7a:05:37:cb:c8:0b:dc:a5:c9:28:9b:95:4d:36: 8f:f5:de:ee:f2:b7:fb:06:00:fc:9c:40:75:fc:55:a1:bd:bf: 20:87:18:43:03:ba:bb:93:43:99:54:76:27:1b:5f:5a:ef:64: 8d:b9:28:88:4f:34:de:07:5c:38:81:8f:f4:bd:6a:e4:50:ac: 6b:9b:94:50:86:da:4c:50:48:52:84:16:27:04:33:0c:67:4c: 68:d3:7e:68:0e:4c:c3:9f:cd:46:20:67:52:17:a2:bc:18:f1: c9:1f:5d:b3:22:2e:31:50:3c:2f:ad:b2:cb:0f:6e:b6:1f:20: 81:af:51:8d:25:47:8f:ee:46:19:54:9a:22:8b:65:85:08:20: f7:24:4a:2d:e1:be:4b:a3:2b:9d:c5:32:b0:31:22:ec:75:ae: ce:2f:08:58:ad:a0:ef:47:16:ef:3f:2c:ba:0d:02:96:df:b4: 84:04:87:3f:ee:16:6d:cb:7b:19:b6:ca:74:84:08:b4:ec:ce: a4:39:d4:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZBMUQxMTAvBgNVBAUTKDdDNTNCRjZBRjQ5M0QyNEMzQjdDNkJBMjE2QjM4MkIw QzdGN0ZDMjQwHhcNMjQxMTIyMjAzMjE3WhcNMjQxMTI5MjAzMjE3WjAYMRYwFAYD VQQDEw02NzQwZWE1MS1lOTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLvB7MkckytkgqdkRjSrJLDFHKQ2J8uYT6n7hbOBrzCeL2/Stnrro1tZnw6b 2j5JX+3NtODUW7UGggLWtGWwGykXFSZhLnnyCSw8/FQsHIqjzlwQSN/PuDqhTjCQ nWuP1Jx/JnMKgTzI1yMXtc5JIBuGu9zfSGBPViwMAXtzh5o2KwjbQAxX8nlZHc0i 5eirpOm2kLcANFlb92PUdzMQdpWtj0HSN+/YCvyYkh7ANMans+EiGpSFGqKsT1GH gu5ZAbhcejdH/l5arFy5Cn3kq2MQe306sZZFYiZmQJNVivu3OqqGTgoJ/znKl/Vs rGqzuQ9Zz9IE4zvsEa2+tGN2IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPoa/2lv gp40v3Manip5JYhY/g9QMB8GA1UdIwQYMBaAFHxTv2r0k9JMO3xrohazgrDH9/wk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkExRC85RUVBNEQ2OEJG RUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBrdzdmR3VpRnJPQ3NNZjNf Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGT19hdlNUMGt3N2ZHdWlGck9Dc01mM19DUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkExRC85RUVBNEQ2OEJGRUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBr dzdmR3VpRnJPQ3NNZjNfQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe57NU6kp8AiOIV2K/KpB91/CFYSDKh05JpP7Yn0KPq7m1NChUTfKV xWinQRQxRki0d3YJIz273e6IegU3y8gL3KXJKJuVTTaP9d7u8rf7BgD8nEB1/FWh vb8ghxhDA7q7k0OZVHYnG19a72SNuSiITzTeB1w4gY/0vWrkUKxrm5RQhtpMUEhS hBYnBDMMZ0xo035oDkzDn81GIGdSF6K8GPHJH12zIi4xUDwvrbLLD262HyCBr1GN JUeP7kYZVJoii2WFCCD3JEot4b5LoyudxTKwMSLsda7OLwhYraDvRxbvPyy6DQKW 37SEBIc/7hZty3sZtsp0hAi07M6kOdTK -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:25 2024 by rpki-client on console-ams.rpki-client.org