$ rpki-client -vvf rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft File: FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft (raw, json) Hash identifier: z2hwAc8yrEgt4BXEsyikDeK/f8BMJTb8q0Tr7CIGSxQ= Subject key identifier: F5:77:85:3E:A0:5D:67:98:EB:25:70:8C:84:B6:95:57:AC:3B:89:53 Authority key identifier: 15:93:66:93:2A:CB:C2:F3:81:F8:11:06:22:98:04:A4:15:2B:35:F1 Certificate issuer: /CN=A9195661/serialNumber=159366932ACBC2F381F81106229804A4152B35F1 Certificate serial: 02A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft Manifest number: 02A4 Signing time: Sat 23 Nov 2024 01:04:47 +0000 Manifest this update: Sat 23 Nov 2024 01:04:46 +0000 Manifest next update: Sat 30 Nov 2024 01:04:46 +0000 Files and hashes: 1: FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl (hash: jTTe36TeTZVRbSSJMzsIjAs9iWJrgs4LzswfGyvsRp0=) 2: 31A11606D5D411ECA6C65869C4F9AE02.roa (hash: 70Ak7XUB7BzXLnPmthZhxV5PKsUoGnrCyTGpT6zqlJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 679 (0x2a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195661/serialNumber=159366932ACBC2F381F81106229804A4152B35F1 Validity Not Before: Nov 23 01:04:46 2024 GMT Not After : Nov 30 01:04:46 2024 GMT Subject: CN=67412a2e-194a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7e:f3:06:2f:77:1c:40:16:b9:5b:82:10:8f: a4:49:3b:d0:dd:31:44:a8:f7:f8:67:96:93:a6:c5: 8a:3e:fd:bd:25:c8:2f:9c:b7:b2:a4:34:e9:85:ce: 3b:88:47:d2:99:ff:8f:06:7d:3f:89:71:53:fa:22: e1:40:7c:bf:14:b9:3b:7e:02:e1:56:eb:14:f5:ac: f9:d4:13:ac:2d:aa:65:b5:11:57:e3:59:49:bc:78: c2:aa:78:37:14:c6:47:b0:b1:c5:75:c1:f8:e3:a6: e3:7e:58:25:a2:49:84:4a:02:41:26:b7:1c:bb:a6: 4c:95:b6:48:c2:26:66:2c:07:f3:e9:b9:7d:a3:49: 79:91:f3:7a:30:ee:67:33:a9:a5:6e:1b:bd:47:27: e1:11:ec:a5:d7:23:d6:85:89:84:a8:f1:80:9c:7b: 5c:d8:0f:44:93:90:c2:8a:08:c4:c2:e8:d5:86:ed: 50:19:67:e4:1f:0b:2c:a0:a9:6e:07:e4:4c:4c:10: 95:60:2b:2d:e7:ad:10:99:2c:27:2d:22:bc:89:24: 25:55:22:6e:78:02:86:99:0b:af:b1:68:0c:b2:70: 5d:d4:d1:dc:ed:e0:40:1f:54:55:de:cc:65:54:30: d6:8a:3a:88:c6:e1:a0:53:ce:61:94:75:bc:57:ae: 89:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:77:85:3E:A0:5D:67:98:EB:25:70:8C:84:B6:95:57:AC:3B:89:53 X509v3 Authority Key Identifier: keyid:15:93:66:93:2A:CB:C2:F3:81:F8:11:06:22:98:04:A4:15:2B:35:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:93:02:05:0d:74:18:22:b8:20:ce:96:7d:3b:dd:ad:59:1a: 43:2b:4f:13:87:fe:8f:8b:f3:35:73:bf:af:fd:b3:fb:d6:df: b2:03:f8:c2:dc:0b:1a:88:e6:55:81:4d:f8:93:1d:21:5e:4f: 71:39:5b:2f:42:f0:21:e4:cc:e6:e9:ad:1a:90:15:c6:33:58: 0d:c9:83:70:aa:76:50:70:f9:7f:72:22:15:e4:3b:02:68:e1: 6f:87:80:b9:8b:12:1d:23:b7:97:b5:49:89:d5:bd:65:4d:ee: c1:9a:03:d0:52:25:47:5b:68:b6:e1:4d:7c:be:53:6a:98:fc: 69:f1:98:75:c5:43:f1:e4:ab:ea:ed:35:46:a4:9f:41:2a:4d: d8:88:87:d7:82:ef:29:c3:8d:2a:cb:bb:4c:95:0b:78:b6:0c: 1c:63:67:a8:83:64:e8:07:05:26:95:0f:56:0c:21:03:a1:62: 30:7b:21:90:50:7e:25:b1:e2:10:c7:8c:b6:73:ef:b7:5e:91: a4:6f:94:66:73:fc:6c:f1:1b:ca:bf:a1:34:78:b5:49:96:03: ba:73:11:20:22:e1:cf:c3:92:b1:dd:b7:a1:71:3f:a9:0f:fe: db:69:32:61:f9:bd:3a:ca:e6:7c:8b:4d:62:ac:79:ab:d5:c2: ff:0a:20:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU2NjExMTAvBgNVBAUTKDE1OTM2NjkzMkFDQkMyRjM4MUY4MTEwNjIyOTgwNEE0 MTUyQjM1RjEwHhcNMjQxMTIzMDEwNDQ2WhcNMjQxMTMwMDEwNDQ2WjAYMRYwFAYD VQQDEw02NzQxMmEyZS0xOTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs37zBi93HEAWuVuCEI+kSTvQ3TFEqPf4Z5aTpsWKPv29JcgvnLeypDTphc47 iEfSmf+PBn0/iXFT+iLhQHy/FLk7fgLhVusU9az51BOsLapltRFX41lJvHjCqng3 FMZHsLHFdcH446bjflglokmESgJBJrccu6ZMlbZIwiZmLAfz6bl9o0l5kfN6MO5n M6mlbhu9RyfhEeyl1yPWhYmEqPGAnHtc2A9Ek5DCigjEwujVhu1QGWfkHwssoKlu B+RMTBCVYCst560QmSwnLSK8iSQlVSJueAKGmQuvsWgMsnBd1NHc7eBAH1RV3sxl VDDWijqIxuGgU85hlHW8V66J/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPV3hT6g XWeY6yVwjIS2lVesO4lTMB8GA1UdIwQYMBaAFBWTZpMqy8LzgfgRBiKYBKQVKzXx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTY2MS9FREM3MTQ0NEQ1 Q0UxMUVDQTlEQjI0NjJDNEY5QUUwMi9GWk5ta3lyTHd2T0ItQkVHSXBnRXBCVXJO ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZaTm1reXJMd3ZPQi1CRUdJcGdFcEJVck5mRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTY2MS9FREM3MTQ0NEQ1Q0UxMUVDQTlEQjI0NjJDNEY5QUUwMi9GWk5ta3lyTHd2 T0ItQkVHSXBnRXBCVXJOZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBikwIFDXQYIrggzpZ9O92tWRpDK08Th/6Pi/M1c7+v/bP71t+yA/jC 3AsaiOZVgU34kx0hXk9xOVsvQvAh5Mzm6a0akBXGM1gNyYNwqnZQcPl/ciIV5DsC aOFvh4C5ixIdI7eXtUmJ1b1lTe7BmgPQUiVHW2i24U18vlNqmPxp8Zh1xUPx5Kvq 7TVGpJ9BKk3YiIfXgu8pw40qy7tMlQt4tgwcY2eog2ToBwUmlQ9WDCEDoWIweyGQ UH4lseIQx4y2c++3XpGkb5Rmc/xs8RvKv6E0eLVJlgO6cxEgIuHPw5Kx3behcT+p D/7baTJh+b06yuZ8i01irHmr1cL/CiAX -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:42 2024 by rpki-client on console-fra.rpki-client.org