$ rpki-client -vvf rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft File: f32FZbsEGDw68czSI-nEYR8VCAY.mft (raw, json) Hash identifier: Xu0XGgH3XLCd/axJopC3uDip26EZVsxM55tAYqk2yD4= Subject key identifier: 65:78:20:80:56:A3:D5:1B:82:51:1C:EB:C3:53:FA:CC:F7:1A:64:02 Authority key identifier: 7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06 Certificate issuer: /CN=A9194004/serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft Manifest number: F6 Signing time: Sat 23 Nov 2024 03:20:54 +0000 Manifest this update: Sat 23 Nov 2024 03:20:54 +0000 Manifest next update: Sat 30 Nov 2024 03:20:54 +0000 Files and hashes: 1: f32FZbsEGDw68czSI-nEYR8VCAY.crl (hash: qFBY2CJ2t1EvEu8Zw6OcBQAyl/07OGRElxUSTCl/IQ8=) 2: 4A6E97AC311E11EE85C30E3BC4F9AE02.roa (hash: NO+YNugcxTXyb9dCZOOdJ51ziCc/jYCa92qXpmRaYW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194004/serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806 Validity Not Before: Nov 23 03:20:54 2024 GMT Not After : Nov 30 03:20:54 2024 GMT Subject: CN=67414a16-c110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:65:7d:d0:74:8d:90:49:42:59:62:76:65:93: 18:d8:d2:c0:df:f5:3d:57:a6:1d:09:2c:f4:64:3d: 21:ed:92:b6:85:68:b4:33:9b:79:ec:e6:3a:73:01: ee:61:85:c8:98:29:fd:0f:18:22:53:17:f5:31:a4: c0:3d:b8:c1:c4:5b:38:a0:bb:05:91:e6:1a:18:a9: 16:70:4b:3d:1a:12:16:db:f1:e8:f5:cb:c4:38:c8: 60:d5:08:60:c7:34:85:80:a9:a9:05:5e:8d:bd:66: 31:b1:e3:0c:c8:40:50:e3:27:12:e6:f6:46:38:32: c6:af:65:bf:83:b6:08:43:84:69:b2:cc:9d:20:39: 82:98:08:f9:78:7f:4f:61:0e:49:1b:f3:85:14:c9: 91:14:2a:c3:9f:31:fa:f4:34:d9:4f:58:b9:44:11: 1a:73:38:4f:8f:a5:9d:03:53:82:4e:66:30:6c:8e: 9e:33:aa:7a:75:97:28:c1:32:da:ee:ee:f7:7d:45: 6c:6d:dc:7b:2d:7a:47:7a:77:af:1f:46:08:41:26: da:23:47:60:1b:4f:3e:84:ba:07:7c:ee:7d:9d:d5: 0c:67:71:87:16:da:8a:bd:68:8f:8b:6e:da:22:40: d9:17:a4:92:ff:55:2c:5b:e2:e4:53:02:ce:92:b2: 73:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:78:20:80:56:A3:D5:1B:82:51:1C:EB:C3:53:FA:CC:F7:1A:64:02 X509v3 Authority Key Identifier: keyid:7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:66:87:fe:e7:ba:72:cc:ae:5e:db:a2:18:91:75:2e:04:fa: a3:e0:ad:65:28:0d:a2:4a:7d:ec:f7:bf:05:8a:07:66:f0:78: 87:3b:ae:ec:24:bb:9d:6b:87:e6:ca:7a:ab:93:33:2b:12:17: ee:94:08:f8:fd:47:38:78:52:02:d4:94:b7:b3:42:c2:3a:00: b7:88:fc:59:a1:d4:a6:a2:67:6d:ec:69:bd:c6:45:b6:95:27: e3:6e:79:e5:d6:bd:3a:a4:89:fd:fb:1c:a1:12:9f:69:ff:b3: 15:73:cc:31:8f:82:fe:b5:86:6c:7e:d9:99:3d:33:b7:b3:4c: be:c3:e9:03:02:c8:52:9e:e2:ec:c2:3a:43:72:0f:70:97:f9: 5a:9e:f9:3a:6d:13:6f:83:e5:5f:e8:9a:bd:de:14:6f:f7:8f: c4:b3:ac:08:a3:48:1b:4c:cc:85:af:98:47:74:48:1b:0e:4e: e4:37:cd:1c:3b:36:03:cd:34:3b:fd:ec:dc:6e:90:49:0d:d2: d4:b2:fd:ae:7b:9d:d7:7b:5a:1e:88:71:81:78:96:c3:80:33: 8c:2c:a4:ae:d1:b0:a5:ac:5c:a6:89:b7:cc:0f:78:45:ba:51: ea:0d:68:7c:f2:57:78:cb:eb:5d:81:30:e5:02:30:ee:31:73: f9:b1:c0:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQwMDQxMTAvBgNVBAUTKDdGN0Q4NTY1QkIwNDE4M0MzQUYxQ0NEMjIzRTlDNDYx MUYxNTA4MDYwHhcNMjQxMTIzMDMyMDU0WhcNMjQxMTMwMDMyMDU0WjAYMRYwFAYD VQQDEw02NzQxNGExNi1jMTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5mV90HSNkElCWWJ2ZZMY2NLA3/U9V6YdCSz0ZD0h7ZK2hWi0M5t57OY6cwHu YYXImCn9DxgiUxf1MaTAPbjBxFs4oLsFkeYaGKkWcEs9GhIW2/Ho9cvEOMhg1Qhg xzSFgKmpBV6NvWYxseMMyEBQ4ycS5vZGODLGr2W/g7YIQ4RpssydIDmCmAj5eH9P YQ5JG/OFFMmRFCrDnzH69DTZT1i5RBEaczhPj6WdA1OCTmYwbI6eM6p6dZcowTLa 7u73fUVsbdx7LXpHenevH0YIQSbaI0dgG08+hLoHfO59ndUMZ3GHFtqKvWiPi27a IkDZF6SS/1UsW+LkUwLOkrJzBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGV4IIBW o9UbglEc68NT+sz3GmQCMB8GA1UdIwQYMBaAFH99hWW7BBg8OvHM0iPpxGEfFQgG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDAwNC8wNDk1NDZDRTMw MkMxMUVFQkEzRUEwMTNDNEY5QUUwMi9mMzJGWmJzRUdEdzY4Y3pTSS1uRVlSOFZD QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YzMkZaYnNFR0R3NjhjelNJLW5FWVI4VkNBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDAwNC8wNDk1NDZDRTMwMkMxMUVFQkEzRUEwMTNDNEY5QUUwMi9mMzJGWmJzRUdE dzY4Y3pTSS1uRVlSOFZDQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmZof+57pyzK5e26IYkXUuBPqj4K1lKA2iSn3s978Figdm8HiHO67s JLuda4fmynqrkzMrEhfulAj4/Uc4eFIC1JS3s0LCOgC3iPxZodSmomdt7Gm9xkW2 lSfjbnnl1r06pIn9+xyhEp9p/7MVc8wxj4L+tYZsftmZPTO3s0y+w+kDAshSnuLs wjpDcg9wl/lanvk6bRNvg+Vf6Jq93hRv94/Es6wIo0gbTMyFr5hHdEgbDk7kN80c OzYDzTQ7/ezcbpBJDdLUsv2ue53Xe1oeiHGBeJbDgDOMLKSu0bClrFymibfMD3hF ulHqDWh88ld4y+tdgTDlAjDuMXP5scBh -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:53 2024 by rpki-client on console-fra.rpki-client.org