$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft File: Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft (raw, json) Hash identifier: AqC1gMUsALiFR1e69MtaxoX0A19TD8/Z6qXiwhLgAw0= Subject key identifier: B5:14:1D:74:61:D2:30:C5:6C:70:3E:88:51:56:28:F6:67:4A:B9:50 Authority key identifier: 16:7D:6E:C3:2A:D0:B3:58:15:F2:88:47:AD:D7:97:0E:B6:7F:2D:BA Certificate issuer: /CN=A9197CBD/serialNumber=167D6EC32AD0B35815F28847ADD7970EB67F2DBA Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft Manifest number: A2 Signing time: Sat 23 Nov 2024 04:16:59 +0000 Manifest this update: Sat 23 Nov 2024 04:16:59 +0000 Manifest next update: Sat 30 Nov 2024 04:16:59 +0000 Files and hashes: 1: Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.crl (hash: OLwWEtDvetmRlhFyPQx95cIP0AckXQ9rmiGof9wgpmA=) 2: BD16D2BCB11411EE9B803C66C4F9AE02.roa (hash: sbXLUP+ySv876OX4drz/OH3VKKGNMGx7S1G0hlILvsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.crl rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197CBD/serialNumber=167D6EC32AD0B35815F28847ADD7970EB67F2DBA Validity Not Before: Nov 23 04:16:59 2024 GMT Not After : Nov 30 04:16:59 2024 GMT Subject: CN=6741573b-238e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ac:b3:2b:35:c7:4a:07:5e:46:e1:f0:dd:89: c6:ac:7b:be:86:fe:72:af:26:e1:89:6d:32:95:db: c0:4c:b0:89:88:a5:c6:8a:3c:e7:f0:5e:c9:4f:0d: cb:9b:ff:5d:13:c3:a1:b3:92:ab:d1:ee:ce:91:79: b1:7d:17:83:00:f8:8a:72:38:81:ed:80:9d:64:57: ac:b7:f0:9b:77:11:8c:f5:d3:55:0f:8e:58:96:8a: 99:a0:6b:c0:50:a7:f4:ad:6b:2f:d8:9a:cf:26:68: 1d:f6:35:1e:9f:a3:1f:b3:8b:4e:2a:72:07:d9:2c: 01:ce:25:7b:b1:81:82:2c:bb:12:db:39:c0:30:89: 5d:fa:52:64:8d:ed:d4:27:5d:3e:e9:c9:9f:86:2e: 0b:51:10:c7:c4:27:10:50:d4:76:02:46:9a:51:8c: 66:e5:a0:33:f6:48:b0:3b:a9:99:c3:f2:40:4e:1a: 2f:d0:ac:ac:ed:eb:40:4a:11:60:bf:ed:4f:8a:d9: ce:8a:a0:e5:0a:81:2c:63:ff:2f:26:89:c9:14:bc: 02:34:2d:4f:fd:d8:36:27:cf:d9:07:5d:d5:64:2a: f6:81:7f:00:c8:b7:53:03:dc:44:8b:9e:ff:78:66: 4a:96:1b:89:82:51:10:13:0a:85:f9:22:34:b5:7a: ee:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:14:1D:74:61:D2:30:C5:6C:70:3E:88:51:56:28:F6:67:4A:B9:50 X509v3 Authority Key Identifier: keyid:16:7D:6E:C3:2A:D0:B3:58:15:F2:88:47:AD:D7:97:0E:B6:7F:2D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3E400698B11411EE95E74365C4F9AE02/Fn1uwyrQs1gV8ohHrdeXDrZ_Lbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:24:d7:1f:05:7f:52:e1:86:7b:e9:69:cd:1e:14:2f:6c:4b: 8b:e2:7c:8d:1c:c9:a7:d6:f2:2e:b3:3d:3e:ff:91:5b:f3:20: 72:f0:fc:df:d6:d9:09:af:f1:e7:92:c5:ef:49:bd:5a:b7:ff: e0:01:65:72:ca:f2:b7:f7:77:88:e9:fb:a6:16:81:c6:a1:4c: 07:a9:fd:2f:62:65:29:1f:24:4b:83:36:a0:8b:4e:fe:cb:ff: e0:d0:66:c8:e9:c2:2e:ee:21:f1:4c:56:3e:6b:e4:a6:a8:07: 4a:9a:1f:7f:14:ef:79:7b:fc:49:84:2d:d5:b0:bf:0e:2a:77: be:1e:13:f5:c8:68:a1:98:0a:7a:3f:e0:52:bf:fc:0e:06:52: 17:4a:ba:3f:27:cc:99:74:2e:29:d3:c5:3f:62:6e:27:1f:6c: 3a:a1:d8:f6:62:5f:74:78:b2:d6:ed:bc:fa:19:c6:1a:58:ad: f9:c6:f6:b8:79:96:15:7c:94:27:92:7c:52:ea:c1:df:fb:2a: 22:78:15:b1:41:be:4a:fd:3e:7c:e9:a7:c0:21:1a:c0:67:ca: fe:28:d6:71:07:88:2f:f4:67:c5:35:da:e1:3a:28:91:9c:df: 0b:0f:20:3e:8d:f7:46:16:fb:66:69:43:c2:ce:ec:e1:5b:93: ac:d9:e2:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdDQkQxMTAvBgNVBAUTKDE2N0Q2RUMzMkFEMEIzNTgxNUYyODg0N0FERDc5NzBF QjY3RjJEQkEwHhcNMjQxMTIzMDQxNjU5WhcNMjQxMTMwMDQxNjU5WjAYMRYwFAYD VQQDEw02NzQxNTczYi0yMzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6yzKzXHSgdeRuHw3YnGrHu+hv5yrybhiW0yldvATLCJiKXGijzn8F7JTw3L m/9dE8Ohs5Kr0e7OkXmxfReDAPiKcjiB7YCdZFest/CbdxGM9dNVD45YloqZoGvA UKf0rWsv2JrPJmgd9jUen6Mfs4tOKnIH2SwBziV7sYGCLLsS2znAMIld+lJkje3U J10+6cmfhi4LURDHxCcQUNR2AkaaUYxm5aAz9kiwO6mZw/JAThov0Kys7etAShFg v+1PitnOiqDlCoEsY/8vJonJFLwCNC1P/dg2J8/ZB13VZCr2gX8AyLdTA9xEi57/ eGZKlhuJglEQEwqF+SI0tXru2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUUHXRh 0jDFbHA+iFFWKPZnSrlQMB8GA1UdIwQYMBaAFBZ9bsMq0LNYFfKIR63Xlw62fy26 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0NCRC8zRTQwMDY5OEIx MTQxMUVFOTVFNzQzNjVDNEY5QUUwMi9GbjF1d3lyUXMxZ1Y4b2hIcmRlWERyWl9M Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZuMXV3eXJRczFnVjhvaEhyZGVYRHJaX0xiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0NCRC8zRTQwMDY5OEIxMTQxMUVFOTVFNzQzNjVDNEY5QUUwMi9GbjF1d3lyUXMx Z1Y4b2hIcmRlWERyWl9MYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPJNcfBX9S4YZ76WnNHhQvbEuL4nyNHMmn1vIusz0+/5Fb8yBy8Pzf 1tkJr/HnksXvSb1at//gAWVyyvK393eI6fumFoHGoUwHqf0vYmUpHyRLgzagi07+ y//g0GbI6cIu7iHxTFY+a+SmqAdKmh9/FO95e/xJhC3VsL8OKne+HhP1yGihmAp6 P+BSv/wOBlIXSro/J8yZdC4p08U/Ym4nH2w6odj2Yl90eLLW7bz6GcYaWK35xva4 eZYVfJQnknxS6sHf+yoieBWxQb5K/T586afAIRrAZ8r+KNZxB4gv9GfFNdrhOiiR nN8LDyA+jfdGFvtmaUPCzuzhW5Os2eLC -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:16 2024 by rpki-client on console-ams.rpki-client.org