$ rpki-client -vvf rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft File: fLBjBy0uSJJZhhStW6tT4d6v9wE.mft (raw, json) Hash identifier: MYG0O39N4+jE2ARCvGJmqGnfopqmCDae8OQd+rP0drY= Subject key identifier: 60:AD:2E:42:01:56:B6:23:95:BF:50:BA:2B:10:5A:B4:92:A4:B0:00 Authority key identifier: 7C:B0:63:07:2D:2E:48:92:59:86:14:AD:5B:AB:53:E1:DE:AF:F7:01 Certificate issuer: /CN=A91B994F/serialNumber=7CB063072D2E4892598614AD5BAB53E1DEAFF701 Certificate serial: 079F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft Manifest number: 0796 Signing time: Fri 22 Nov 2024 20:50:31 +0000 Manifest this update: Fri 22 Nov 2024 20:50:30 +0000 Manifest next update: Fri 29 Nov 2024 20:50:30 +0000 Files and hashes: 1: fLBjBy0uSJJZhhStW6tT4d6v9wE.crl (hash: znEQ8I4NPJGKvnJyA30kI+Yfv8vdj+Ezu/qPiNB9x5I=) 2: 2B24D5DC854511EB9B57240FC4F9AE02.roa (hash: pddSesMHzjwu6JCf3PlAW1/YPkIYpAu0oAR4eat3olg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.crl rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1951 (0x79f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B994F/serialNumber=7CB063072D2E4892598614AD5BAB53E1DEAFF701 Validity Not Before: Nov 22 20:50:30 2024 GMT Not After : Nov 29 20:50:30 2024 GMT Subject: CN=6740ee96-c203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b6:b3:e3:5d:7b:28:7b:24:a8:ad:71:c9:a2: 2f:e2:fd:da:b4:5d:cc:90:f8:de:bf:95:ca:90:09: 79:30:bd:3e:9b:5f:ee:ee:2b:df:9f:e4:11:d1:dd: 5c:4e:f9:c1:c2:be:8d:de:dc:aa:85:2d:34:3f:0a: 3d:94:63:dd:78:3c:51:57:30:f4:82:5e:97:9e:ec: 83:22:15:3f:50:27:ad:01:7c:fd:64:5e:cf:7a:af: 09:b3:36:ca:6e:06:56:f3:85:e8:e9:e6:3d:51:b9: 4c:60:ee:95:a6:86:a7:b1:d6:cf:5d:19:bb:f1:08: 2b:2a:b1:3d:18:71:57:71:ea:8a:59:0c:5c:2e:35: a1:33:2f:b9:14:3c:d9:64:7c:3d:38:77:b1:af:ff: c2:a3:6e:f4:79:f5:cd:ae:97:65:80:e8:9f:fb:39: bb:33:da:c2:f6:f6:8e:be:f2:30:43:eb:5c:07:59: 97:39:e2:7d:ba:9e:69:aa:f4:7b:ae:17:26:6c:03: 1d:2f:42:8d:d8:92:99:de:0b:0c:55:e4:1b:08:00: d8:65:0c:6d:6d:16:eb:47:32:ce:2d:2b:87:32:10: 57:ba:d5:24:8b:18:93:d5:77:95:48:80:09:6c:8f: c0:6c:72:b8:a0:b9:11:7d:16:7e:7c:3b:51:2c:d5: 95:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:AD:2E:42:01:56:B6:23:95:BF:50:BA:2B:10:5A:B4:92:A4:B0:00 X509v3 Authority Key Identifier: keyid:7C:B0:63:07:2D:2E:48:92:59:86:14:AD:5B:AB:53:E1:DE:AF:F7:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:02:83:c4:bf:16:20:80:af:b6:dd:e1:2a:1a:31:2b:fc:fe: b8:04:ed:2b:d4:8b:64:1a:1e:4c:81:63:94:61:20:f4:b6:49: 58:95:e4:a4:20:75:c2:95:7d:ef:06:fa:80:03:17:06:01:b8: cb:65:75:9f:2a:e7:62:54:be:8f:b2:a5:87:57:bd:24:cf:1b: b4:49:ac:21:55:59:92:24:67:6f:97:4c:ce:eb:5d:69:c7:79: 8e:08:ad:06:ab:5a:8d:31:77:4e:4b:65:36:3c:21:ca:87:2b: 7c:1b:6d:d6:16:0e:fa:ad:23:09:4d:e9:97:24:51:ac:fe:e2: 0a:28:cd:78:91:f0:f6:2e:8a:56:81:fe:8e:f2:ff:38:ab:3a: db:40:d5:71:bf:5f:ad:8a:70:03:49:e1:f8:06:1a:e9:41:2e: 0b:75:b0:8f:41:f0:be:08:38:09:c6:39:d3:ab:4f:9f:02:f9: 27:65:4d:76:ce:42:d4:6a:e3:38:21:0f:98:4b:d0:e9:f2:ec: 08:02:04:1b:81:c8:1b:6a:be:f3:f9:c5:94:07:25:a4:db:fd: c1:76:e7:99:b5:fc:37:92:30:36:b9:a4:04:33:d7:8b:be:18: b7:27:7a:7a:28:24:bf:cc:97:5f:05:6e:c3:19:d9:23:a3:dd: 53:ad:62:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk5NEYxMTAvBgNVBAUTKDdDQjA2MzA3MkQyRTQ4OTI1OTg2MTRBRDVCQUI1M0Ux REVBRkY3MDEwHhcNMjQxMTIyMjA1MDMwWhcNMjQxMTI5MjA1MDMwWjAYMRYwFAYD VQQDEw02NzQwZWU5Ni1jMjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAobaz4117KHskqK1xyaIv4v3atF3MkPjev5XKkAl5ML0+m1/u7ivfn+QR0d1c TvnBwr6N3tyqhS00Pwo9lGPdeDxRVzD0gl6XnuyDIhU/UCetAXz9ZF7Peq8JszbK bgZW84Xo6eY9UblMYO6VpoansdbPXRm78QgrKrE9GHFXceqKWQxcLjWhMy+5FDzZ ZHw9OHexr//Co270efXNrpdlgOif+zm7M9rC9vaOvvIwQ+tcB1mXOeJ9up5pqvR7 rhcmbAMdL0KN2JKZ3gsMVeQbCADYZQxtbRbrRzLOLSuHMhBXutUkixiT1XeVSIAJ bI/AbHK4oLkRfRZ+fDtRLNWViQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGCtLkIB VrYjlb9QuisQWrSSpLAAMB8GA1UdIwQYMBaAFHywYwctLkiSWYYUrVurU+Her/cB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTk0Ri9BQUZEMTRFQ0U1 QTIxMUVBODlBMzYwNkRDNEY5QUUwMi9mTEJqQnkwdVNKSlpoaFN0VzZ0VDRkNnY5 d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZMQmpCeTB1U0pKWmhoU3RXNnRUNGQ2djl3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTk0Ri9BQUZEMTRFQ0U1QTIxMUVBODlBMzYwNkRDNEY5QUUwMi9mTEJqQnkwdVNK SlpoaFN0VzZ0VDRkNnY5d0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzAoPEvxYggK+23eEqGjEr/P64BO0r1ItkGh5MgWOUYSD0tklYleSk IHXClX3vBvqAAxcGAbjLZXWfKudiVL6PsqWHV70kzxu0SawhVVmSJGdvl0zO611p x3mOCK0Gq1qNMXdOS2U2PCHKhyt8G23WFg76rSMJTemXJFGs/uIKKM14kfD2LopW gf6O8v84qzrbQNVxv1+tinADSeH4BhrpQS4LdbCPQfC+CDgJxjnTq0+fAvknZU12 zkLUauM4IQ+YS9Dp8uwIAgQbgcgbar7z+cWUByWk2/3BdueZtfw3kjA2uaQEM9eL vhi3J3p6KCS/zJdfBW7DGdkjo91TrWIZ -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:39 2024 by rpki-client on console-ams.rpki-client.org