$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft File: Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft (raw, json) Hash identifier: 2id5sPWdtCcckFmuLZEU5S7WWxM7HboMS++3EO5tdgU= Subject key identifier: 57:69:B1:DA:5D:77:14:FB:08:23:C8:C5:C8:59:8A:74:96:C9:89:3E Authority key identifier: 15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C Certificate issuer: /CN=A91B673B/serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft Manifest number: 34 Signing time: Sat 23 Nov 2024 05:33:16 +0000 Manifest this update: Sat 23 Nov 2024 05:33:16 +0000 Manifest next update: Sat 30 Nov 2024 05:33:16 +0000 Files and hashes: 1: Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl (hash: 8PySj6bJgaUWB9xM4Lfe11gg29dUw4Y22h/aW6NBS0E=) 2: A242BED45E1511EFBBFB911EC4F9AE02.roa (hash: LeRLBY5GVV/98SK5vi8TCaYTzwu/LK8xBT06nPBMuiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B673B/serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C Validity Not Before: Nov 23 05:33:16 2024 GMT Not After : Nov 30 05:33:16 2024 GMT Subject: CN=6741691c-1a89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:21:16:5f:1b:f8:a6:f2:4a:7e:86:8d:0d:16: 8e:76:9d:75:70:66:af:5b:e0:98:fc:d5:de:e3:3e: 7a:4f:b6:22:60:f4:87:17:7f:75:72:bd:75:f4:f5: 65:c9:11:4c:06:48:64:90:c2:80:75:0a:84:3d:57: 68:5b:30:0c:9b:28:a6:43:fd:7f:ff:eb:ce:d7:9a: 60:1e:63:fe:84:9c:b7:f9:28:17:bd:51:f7:ed:de: c1:33:40:53:f3:ef:62:6f:27:dc:01:29:02:17:50: 25:61:69:36:19:b4:c5:18:a9:3d:83:87:fe:0d:94: 68:c8:8f:82:9d:4c:1a:95:3a:47:5a:b6:cc:b6:ca: 1a:ef:8c:33:ed:9e:05:7d:a1:d9:86:32:25:d3:21: 12:01:4b:14:a7:cf:59:e2:51:81:54:65:f3:26:57: 17:1a:e4:cb:6d:3f:b4:e3:1b:f2:4c:e8:7f:51:99: 37:04:8f:fe:c1:5c:6a:dc:92:4b:bc:0e:89:03:32: bd:ca:90:ea:68:9f:78:45:1c:04:40:7e:f7:92:36: 0a:78:05:f2:fb:f3:e4:b1:61:59:e5:a2:b7:e0:bf: 22:7b:69:18:c3:7e:7a:c4:3f:fb:a0:4b:1b:5e:f8: d7:59:04:c8:27:0e:25:57:78:b8:59:ca:2f:fe:8f: 74:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:69:B1:DA:5D:77:14:FB:08:23:C8:C5:C8:59:8A:74:96:C9:89:3E X509v3 Authority Key Identifier: keyid:15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:20:27:3b:fe:14:2a:c9:25:b1:01:82:6f:df:2c:30:89:5e: e1:bf:f8:9a:96:11:ec:7c:10:12:0a:fa:3b:06:6f:a9:00:23: 4f:fc:6d:25:33:cc:26:70:12:3a:df:e5:ce:39:5f:46:2f:7d: 8c:87:f0:10:be:aa:c7:54:e9:ec:4e:fe:36:0c:91:36:1b:78: fd:de:a3:1b:5b:b6:23:1d:30:6c:5c:b9:1f:6b:5e:12:64:07: 7e:5f:ae:30:4c:17:d5:03:4e:e9:b3:94:58:f5:75:a5:78:f0: 66:ef:c8:8d:da:9c:31:a6:c5:25:b1:86:9b:64:d5:57:e2:ff: 3c:d6:6b:39:7c:be:7a:b5:30:72:14:96:65:4b:4b:04:af:f1: 31:03:89:70:f1:94:22:dd:cd:86:20:46:63:d1:ad:ba:48:4c: 73:0f:23:9f:21:d5:d3:93:96:70:c1:7e:c0:cb:58:8d:33:2d: d7:dd:3c:7f:a0:9d:06:21:7d:ee:5e:a4:f0:4b:ed:51:37:ba: 25:67:94:bc:a6:c4:bd:d3:dc:46:18:22:c2:44:2b:0d:cb:c7: ad:fa:c2:69:97:76:7f:e3:a0:27:2a:a2:dc:a4:9b:b3:61:97: d4:6f:df:bd:ff:9f:48:db:a2:35:7e:4b:10:08:2b:f2:ac:60: 11:43:ba:b8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjczQjExMC8GA1UEBRMoMTVDRjUwREI1MkIwRjEyRjFBNkUzQjM5NjMzRDQ4MkUw OUNGRTM1QzAeFw0yNDExMjMwNTMzMTZaFw0yNDExMzAwNTMzMTZaMBgxFjAUBgNV BAMTDTY3NDE2OTFjLTFhODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUIRZfG/im8kp+ho0NFo52nXVwZq9b4Jj81d7jPnpPtiJg9IcXf3VyvXX09WXJ EUwGSGSQwoB1CoQ9V2hbMAybKKZD/X//687XmmAeY/6EnLf5KBe9Ufft3sEzQFPz 72JvJ9wBKQIXUCVhaTYZtMUYqT2Dh/4NlGjIj4KdTBqVOkdatsy2yhrvjDPtngV9 odmGMiXTIRIBSxSnz1niUYFUZfMmVxca5MttP7TjG/JM6H9RmTcEj/7BXGrckku8 DokDMr3KkOpon3hFHARAfveSNgp4BfL78+SxYVnlorfgvyJ7aRjDfnrEP/ugSxte +NdZBMgnDiVXeLhZyi/+j3RLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUV2mx2l13 FPsII8jFyFmKdJbJiT4wHwYDVR0jBBgwFoAUFc9Q21Kw8S8abjs5Yz1ILgnP41ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2NzNCLzgxMkYyMTM2NURG RTExRUY4QzdFODE3QkM0RjlBRTAyL0ZjOVEyMUt3OFM4YWJqczVZejFJTGduUDQx dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRmM5UTIxS3c4UzhhYmpzNVl6MUlMZ25QNDF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 NzNCLzgxMkYyMTM2NURGRTExRUY4QzdFODE3QkM0RjlBRTAyL0ZjOVEyMUt3OFM4 YWJqczVZejFJTGduUDQxdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAwgJzv+FCrJJbEBgm/fLDCJXuG/+JqWEex8EBIK+jsGb6kAI0/8bSUz zCZwEjrf5c45X0YvfYyH8BC+qsdU6exO/jYMkTYbeP3eoxtbtiMdMGxcuR9rXhJk B35frjBMF9UDTumzlFj1daV48GbvyI3anDGmxSWxhptk1Vfi/zzWazl8vnq1MHIU lmVLSwSv8TEDiXDxlCLdzYYgRmPRrbpITHMPI58h1dOTlnDBfsDLWI0zLdfdPH+g nQYhfe5epPBL7VE3uiVnlLymxL3T3EYYIsJEKw3Lx636wmmXdn/joCcqotykm7Nh l9Rv373/n0jbojV+SxAIK/KsYBFDurg= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:04 2024 by rpki-client on console-ams.rpki-client.org