$ rpki-client -vvf rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft File: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft (raw, json) Hash identifier: 94MrtxN7iuzr48cUwG7v+/MtiH8q3fz7Jf0tEchu/GI= Subject key identifier: 21:C1:AF:8F:B3:B6:B5:44:D8:A3:CA:9F:AB:0A:AE:49:42:BF:EB:4B Authority key identifier: 70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36 Certificate issuer: /CN=A91983E5/serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536 Certificate serial: 0C3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft Manifest number: 0C35 Signing time: Fri 22 Nov 2024 18:12:11 +0000 Manifest this update: Fri 22 Nov 2024 18:12:11 +0000 Manifest next update: Fri 29 Nov 2024 18:12:11 +0000 Files and hashes: 1: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl (hash: 509Nki3dv3+S55JRlx3R5G+dXyovLt4c2GSyZ2XtwVE=) 2: 430E6130F4B011E99BB3425CC4F9AE02.roa (hash: srN4MybkybSjP5c+l2pI3OXFvu05+GspG1m/SkxGd6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:12:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3131 (0xc3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983E5/serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536 Validity Not Before: Nov 22 18:12:11 2024 GMT Not After : Nov 29 18:12:11 2024 GMT Subject: CN=6740c97b-887d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7f:8d:75:a3:52:31:53:64:ba:76:9a:7f:ec: 24:8c:e3:9b:21:87:b1:5c:dd:02:08:63:79:24:de: d5:c8:85:60:10:0d:3e:42:cd:55:98:66:e0:95:a1: db:34:d1:16:c9:05:a7:69:6d:b7:41:83:31:96:dc: 29:f0:2e:a1:12:fd:22:40:c2:14:ca:2b:3b:4c:79: 72:1b:f3:a8:16:97:83:8e:c1:3e:23:e0:01:2c:73: 80:b1:07:79:4a:b1:01:e5:c5:a0:61:fc:21:ea:8b: 0c:fd:ea:fe:b8:a5:fe:bc:66:37:b1:b7:3e:e7:5d: a0:06:d6:ec:a3:4e:31:48:f6:6d:d8:91:5c:60:4e: 87:2e:8f:66:82:b3:c8:40:a1:92:47:c5:1c:cf:0f: 1d:85:24:7b:b8:5c:12:19:b6:d7:b2:74:10:4c:93: b7:d4:5c:aa:ff:82:42:b5:cb:ff:f1:ae:06:30:80: 4e:25:c1:a6:60:53:0e:c5:4b:e1:39:58:29:9d:b0: 16:10:ef:6a:41:11:22:d5:ff:16:28:4a:68:5a:75: ab:49:20:cd:89:4a:3f:ee:f9:bd:05:f3:24:7c:80: f6:5d:14:f5:9d:3c:0f:a6:a5:ad:1c:21:f2:d3:30: ad:e7:a0:f2:27:7a:15:26:d2:bf:28:95:25:44:11: 82:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C1:AF:8F:B3:B6:B5:44:D8:A3:CA:9F:AB:0A:AE:49:42:BF:EB:4B X509v3 Authority Key Identifier: keyid:70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ce:af:1e:99:d8:dd:6b:66:30:71:47:34:e0:18:6b:2a:00: 02:13:8c:59:28:dd:ea:09:96:84:e7:34:4c:38:d9:ec:9b:4c: 70:fb:ff:6b:7d:2e:33:b4:54:3d:40:49:73:00:0d:af:dc:2b: 01:cf:3a:46:6e:cf:bf:63:cd:e1:d9:0e:5d:13:98:9b:7c:7b: 06:39:38:7c:02:55:8d:3d:62:da:8a:b4:1b:d0:f9:ba:e5:f0: f8:70:9a:64:68:4c:fa:43:cf:75:e0:48:95:9c:54:bd:f8:ba: 18:17:c6:b6:d7:c4:31:d5:a3:4d:37:83:e0:53:92:c8:fd:e9: fc:ff:3b:e1:1b:2a:32:36:1f:a4:09:9e:18:75:82:27:82:9b: b0:0c:ae:0c:0b:61:3f:c3:33:95:ac:e2:af:4c:f9:d9:dd:c6: 4b:e0:ff:ec:9a:b6:c5:01:92:a9:73:7d:61:76:e0:86:ef:73: b5:64:d4:26:05:c5:98:fd:78:8e:5b:f0:da:a0:cf:63:44:0a: 36:ef:ed:08:c2:f1:ee:1b:50:e7:ca:fd:dd:ed:50:0e:ea:e9: 27:2c:c3:41:b4:af:e7:2b:a8:90:5d:df:9b:7a:01:9e:15:fd: 2f:e2:c1:20:3f:2e:ef:cd:f4:f6:b6:9a:c2:eb:57:96:cc:80: 1a:08:ac:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzRTUxMTAvBgNVBAUTKDcwNTNGRjgxRkVDRjA1OUEzRThCRDcwRjg1RDY0OTQz RDExNEU1MzYwHhcNMjQxMTIyMTgxMjExWhcNMjQxMTI5MTgxMjExWjAYMRYwFAYD VQQDEw02NzQwYzk3Yi04ODdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvX+NdaNSMVNkunaaf+wkjOObIYexXN0CCGN5JN7VyIVgEA0+Qs1VmGbglaHb NNEWyQWnaW23QYMxltwp8C6hEv0iQMIUyis7THlyG/OoFpeDjsE+I+ABLHOAsQd5 SrEB5cWgYfwh6osM/er+uKX+vGY3sbc+512gBtbso04xSPZt2JFcYE6HLo9mgrPI QKGSR8Uczw8dhSR7uFwSGbbXsnQQTJO31Fyq/4JCtcv/8a4GMIBOJcGmYFMOxUvh OVgpnbAWEO9qQREi1f8WKEpoWnWrSSDNiUo/7vm9BfMkfID2XRT1nTwPpqWtHCHy 0zCt56DyJ3oVJtK/KJUlRBGC6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHBr4+z trVE2KPKn6sKrklCv+tLMB8GA1UdIwQYMBaAFHBT/4H+zwWaPovXD4XWSUPRFOU2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNFNS83MDM4Mzg2Q0Y0 QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJaby1pOWNQaGRaSlE5RVU1 VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGUF9nZjdQQlpvLWk5Y1BoZFpKUTlFVTVUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNFNS83MDM4Mzg2Q0Y0QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJa by1pOWNQaGRaSlE5RVU1VFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLzq8emdjda2YwcUc04BhrKgACE4xZKN3qCZaE5zRMONnsm0xw+/9r fS4ztFQ9QElzAA2v3CsBzzpGbs+/Y83h2Q5dE5ibfHsGOTh8AlWNPWLairQb0Pm6 5fD4cJpkaEz6Q8914EiVnFS9+LoYF8a218Qx1aNNN4PgU5LI/en8/zvhGyoyNh+k CZ4YdYIngpuwDK4MC2E/wzOVrOKvTPnZ3cZL4P/smrbFAZKpc31hduCG73O1ZNQm BcWY/XiOW/DaoM9jRAo27+0IwvHuG1Dnyv3d7VAO6uknLMNBtK/nK6iQXd+begGe Ff0v4sEgPy7vzfT2tprC61eWzIAaCKw5 -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:01 2024 by rpki-client on console-fra.rpki-client.org