$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft File: FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft (raw, json) Hash identifier: U4noJ4TpoOu50MM0WTQRAZaAhM5rEGsXl4d6HrXfmgY= Subject key identifier: 3D:B0:2A:2E:D5:A5:E8:02:C2:FA:EA:2B:F9:60:32:B6:CE:7A:AB:42 Authority key identifier: 16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57 Certificate issuer: /CN=A9188F77/serialNumber=16315A68A745080BDDB6C8F0156D043068931B57 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft Manifest number: 5B Signing time: Sat 23 Nov 2024 05:07:13 +0000 Manifest this update: Sat 23 Nov 2024 05:07:12 +0000 Manifest next update: Sat 30 Nov 2024 05:07:12 +0000 Files and hashes: 1: FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl (hash: dzdGCt9WeFdXjotfIoEqEi4AfnVwHOPHoeCynuotsug=) 2: 1501E24625F511EF8F342F3EC4F9AE02.roa (hash: xb5pYUXWejftZcnwxhpgprfBYw1l18qZhykhwAV8tW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F77/serialNumber=16315A68A745080BDDB6C8F0156D043068931B57 Validity Not Before: Nov 23 05:07:12 2024 GMT Not After : Nov 30 05:07:12 2024 GMT Subject: CN=67416300-f33b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b0:5d:7d:fb:12:a1:65:69:54:63:b1:81:72: b3:84:8a:0d:96:6f:af:a0:59:54:4a:03:8e:db:92: 3e:00:27:83:bc:a6:cd:a8:58:6c:d7:2d:6e:38:20: 90:e1:dd:df:07:5f:10:53:fa:0b:a3:2c:b1:e9:e5: c8:8a:36:cd:b7:ce:54:09:2f:29:1a:b2:a7:21:98: 78:70:75:f0:59:1b:60:f9:f1:77:54:03:7f:9b:97: 3c:4e:62:7f:f3:ff:08:a0:39:35:83:0d:6c:d0:56: a5:0f:f5:b7:97:ff:d9:ed:db:50:a1:39:12:54:d5: 1c:c9:7d:14:0d:e5:0c:05:69:f8:6f:07:62:3b:62: 95:8f:96:c9:48:01:9c:32:dc:be:98:d5:8b:ac:1a: 61:bb:9b:8e:90:5d:d4:9f:b4:e9:45:81:cf:62:8a: 9c:ec:25:39:68:c7:77:84:8d:8c:65:e2:c0:e4:0f: 73:63:1f:fb:6c:d0:24:14:0b:85:25:75:9f:b8:ed: 06:e2:d9:fb:a2:cf:32:f8:cf:a2:e0:12:c1:4a:d4: fb:2a:24:0b:ab:37:b8:f1:34:e7:0c:99:22:3c:16: 51:c8:43:1d:46:db:37:2b:cf:1c:1f:2a:30:8b:fe: 5b:91:4b:11:66:9f:ac:79:ba:5d:ab:c3:5f:ab:01: a6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B0:2A:2E:D5:A5:E8:02:C2:FA:EA:2B:F9:60:32:B6:CE:7A:AB:42 X509v3 Authority Key Identifier: keyid:16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:9d:9e:e8:29:8a:b8:1d:8b:f2:6e:da:60:f6:0b:09:1d:84: 55:22:e4:51:91:97:43:b4:bf:e1:e0:bf:31:2e:2b:52:12:2d: af:76:1e:6e:bf:0b:57:40:99:24:cb:2c:16:d7:68:69:5c:4d: 66:9a:7a:3b:21:b5:72:48:86:cc:94:36:29:d9:57:de:4b:d8: 47:3e:b3:f5:9d:b7:9f:7e:5e:88:21:26:2e:39:56:00:bd:80: 7f:fc:80:fb:03:18:78:24:ce:a1:f7:fd:98:8c:07:03:a0:b2: 08:42:13:4c:63:02:a9:44:1c:2c:d8:49:c2:74:24:c3:1e:a1: d9:4a:de:50:fc:54:5f:f0:64:78:75:b4:1d:d3:82:80:04:55: 9f:de:23:3a:d3:fc:fb:d2:b4:70:1c:46:44:17:5e:1d:e5:e0: 65:d3:df:0d:8e:ed:ff:c0:71:ce:c4:10:bb:2f:0f:2b:23:83: 62:98:f0:03:96:98:fd:ab:1e:b2:70:64:5b:33:d2:5e:85:13: e5:9d:f0:a5:85:6e:dc:d1:28:e3:85:13:9e:4c:98:dc:60:b0: 00:36:dc:59:84:89:46:69:76:c8:57:a3:2e:80:06:e8:f3:6d: c0:c4:c8:c5:de:40:b0:32:61:85:9d:bf:9f:23:8c:9d:8e:92: 49:9a:c9:d0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OEY3NzExMC8GA1UEBRMoMTYzMTVBNjhBNzQ1MDgwQkREQjZDOEYwMTU2RDA0MzA2 ODkzMUI1NzAeFw0yNDExMjMwNTA3MTJaFw0yNDExMzAwNTA3MTJaMBgxFjAUBgNV BAMTDTY3NDE2MzAwLWYzM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgsF19+xKhZWlUY7GBcrOEig2Wb6+gWVRKA47bkj4AJ4O8ps2oWGzXLW44IJDh 3d8HXxBT+gujLLHp5ciKNs23zlQJLykasqchmHhwdfBZG2D58XdUA3+blzxOYn/z /wigOTWDDWzQVqUP9beX/9nt21ChORJU1RzJfRQN5QwFafhvB2I7YpWPlslIAZwy 3L6Y1YusGmG7m46QXdSftOlFgc9iipzsJTlox3eEjYxl4sDkD3NjH/ts0CQUC4Ul dZ+47Qbi2fuizzL4z6LgEsFK1PsqJAurN7jxNOcMmSI8FlHIQx1G2zcrzxwfKjCL /luRSxFmn6x5ul2rw1+rAabjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPbAqLtWl 6ALC+uor+WAyts56q0IwHwYDVR0jBBgwFoAUFjFaaKdFCAvdtsjwFW0EMGiTG1cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4Rjc3L0NEMjg3MzgyMjVD MTExRUY5MDA5N0Y1QUM0RjlBRTAyL0ZqRmFhS2RGQ0F2ZHRzandGVzBFTUdpVEcx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRmpGYWFLZEZDQXZkdHNqd0ZXMEVNR2lURzFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 Rjc3L0NEMjg3MzgyMjVDMTExRUY5MDA5N0Y1QUM0RjlBRTAyL0ZqRmFhS2RGQ0F2 ZHRzandGVzBFTUdpVEcxYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFCdnugpirgdi/Ju2mD2CwkdhFUi5FGRl0O0v+HgvzEuK1ISLa92Hm6/ C1dAmSTLLBbXaGlcTWaaejshtXJIhsyUNinZV95L2Ec+s/Wdt59+XoghJi45VgC9 gH/8gPsDGHgkzqH3/ZiMBwOgsghCE0xjAqlEHCzYScJ0JMMeodlK3lD8VF/wZHh1 tB3TgoAEVZ/eIzrT/PvStHAcRkQXXh3l4GXT3w2O7f/Acc7EELsvDysjg2KY8AOW mP2rHrJwZFsz0l6FE+Wd8KWFbtzRKOOFE55MmNxgsAA23FmEiUZpdshXoy6ABujz bcDEyMXeQLAyYYWdv58jjJ2OkkmaydA= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:12 2024 by rpki-client on console-ams.rpki-client.org