$ rpki-client -vvf rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.mft File: Fa9eqD_fKJoNZhz127iziIvHWOs.mft (raw, json) Hash identifier: RpML8IZhXao274FLl73zM6RW6LLwzZbVib88emvL3j0= Subject key identifier: 8D:75:72:09:F2:42:22:4E:0D:49:1F:0B:AA:91:11:B5:0B:6A:33:FA Authority key identifier: 15:AF:5E:A8:3F:DF:28:9A:0D:66:1C:F5:DB:B8:B3:88:8B:C7:58:EB Certificate issuer: /CN=A91C66D4/serialNumber=15AF5EA83FDF289A0D661CF5DBB8B3888BC758EB Certificate serial: 061E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fa9eqD_fKJoNZhz127iziIvHWOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.mft Manifest number: 0617 Signing time: Fri 22 Nov 2024 22:09:55 +0000 Manifest this update: Fri 22 Nov 2024 22:09:55 +0000 Manifest next update: Fri 29 Nov 2024 22:09:55 +0000 Files and hashes: 1: Fa9eqD_fKJoNZhz127iziIvHWOs.crl (hash: oBxR9zIKbeUEqQ6bZ0AlRqB0GTfaOyTZkU/kBQC3SLI=) 2: A33A3E10755611ED9BD81B73C4F9AE02.roa (hash: 7IOJI4hAFKwjxkzmC8riezJXoYygnlaloMbPjQm5zHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.crl rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fa9eqD_fKJoNZhz127iziIvHWOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1566 (0x61e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C66D4/serialNumber=15AF5EA83FDF289A0D661CF5DBB8B3888BC758EB Validity Not Before: Nov 22 22:09:55 2024 GMT Not After : Nov 29 22:09:55 2024 GMT Subject: CN=67410133-d82e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4c:e3:0a:d8:ef:5b:7c:21:08:4f:57:1d:0a: b4:88:79:32:ae:e9:31:74:ee:07:64:48:94:69:0e: b3:a4:74:be:0c:ae:48:3e:bb:59:7b:44:4c:5e:15: a2:12:40:1b:8c:a3:5e:8b:b5:a5:ec:1a:bf:8e:b4: 83:15:6c:0a:5d:08:69:b9:b5:d2:cc:2d:90:ba:ba: 5b:29:c8:1f:35:75:25:88:8b:4e:11:ea:b7:85:9e: a1:f4:06:10:5c:c8:48:55:f6:a4:2c:cc:22:b9:62: 4a:f8:da:05:a5:cd:33:f4:fe:51:71:9f:a0:24:d8: 0b:ad:1d:b8:71:71:a6:4b:fd:68:4f:af:d5:86:4a: 90:d1:f9:ec:71:3a:68:2d:13:60:95:2b:fe:20:e8: 8e:de:f1:12:a2:7b:64:9b:e7:52:1f:79:36:33:89: ea:85:55:d1:9a:6b:81:9e:cf:9d:a0:ba:fc:b7:5b: b3:c3:88:59:16:d0:7c:14:1e:19:0f:f3:1d:7e:dd: 9b:07:6c:e5:85:9c:18:2d:85:45:10:41:5c:74:23: f5:c5:db:e4:93:33:1e:93:e6:ed:d2:d1:ea:18:92: 43:e9:af:c7:ff:73:8a:d0:ee:9a:1d:74:df:e8:85: 0c:7d:55:14:b0:cb:4a:70:c9:3b:06:4e:f3:17:7c: 5d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:75:72:09:F2:42:22:4E:0D:49:1F:0B:AA:91:11:B5:0B:6A:33:FA X509v3 Authority Key Identifier: keyid:15:AF:5E:A8:3F:DF:28:9A:0D:66:1C:F5:DB:B8:B3:88:8B:C7:58:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fa9eqD_fKJoNZhz127iziIvHWOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:73:3e:79:65:20:9a:76:99:c6:7e:b2:80:4c:e3:86:58:bf: a8:0d:ab:29:3f:b0:f6:ea:1d:7c:42:6e:76:b8:3d:39:58:72: db:16:76:05:c2:07:50:83:2e:49:b9:ab:0a:41:80:ae:9c:ec: e7:9d:be:c8:d3:b0:f9:d4:08:b6:97:4e:60:37:17:e4:4b:7b: 8a:ac:81:b3:bf:0c:de:ad:02:f7:a2:af:46:cb:d4:33:47:91: 77:d8:46:3f:b3:36:87:c4:c0:dd:cd:f5:2f:0a:7c:39:db:71: 6e:4c:4f:41:14:e7:02:db:18:f4:65:a9:e6:b3:3c:ed:cd:b2: 5f:53:14:2a:96:ee:07:5d:94:57:f9:8d:46:8e:91:a4:05:ba: d4:ce:44:de:07:e6:6b:61:ca:cc:f5:e9:2e:2b:2e:11:47:7a: 19:6e:0d:3e:55:4c:4f:80:cf:17:da:f4:5c:21:71:31:8c:f0: 7a:c2:90:d7:92:63:d5:6b:af:f7:d4:7f:fb:a8:64:75:2e:ea: ab:37:ff:4e:ac:7e:88:0e:c0:6f:ab:f4:01:27:b0:49:59:a6: 43:2b:2f:37:a8:13:9f:30:da:b0:fe:b8:71:70:10:01:a3:96: e7:66:1b:d2:9a:c8:3e:9c:31:be:9b:e8:1a:0e:2c:1a:88:93: 93:8d:d8:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY2RDQxMTAvBgNVBAUTKDE1QUY1RUE4M0ZERjI4OUEwRDY2MUNGNURCQjhCMzg4 OEJDNzU4RUIwHhcNMjQxMTIyMjIwOTU1WhcNMjQxMTI5MjIwOTU1WjAYMRYwFAYD VQQDEw02NzQxMDEzMy1kODJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10zjCtjvW3whCE9XHQq0iHkyrukxdO4HZEiUaQ6zpHS+DK5IPrtZe0RMXhWi EkAbjKNei7Wl7Bq/jrSDFWwKXQhpubXSzC2QurpbKcgfNXUliItOEeq3hZ6h9AYQ XMhIVfakLMwiuWJK+NoFpc0z9P5RcZ+gJNgLrR24cXGmS/1oT6/VhkqQ0fnscTpo LRNglSv+IOiO3vESontkm+dSH3k2M4nqhVXRmmuBns+doLr8t1uzw4hZFtB8FB4Z D/Mdft2bB2zlhZwYLYVFEEFcdCP1xdvkkzMek+bt0tHqGJJD6a/H/3OK0O6aHXTf 6IUMfVUUsMtKcMk7Bk7zF3xdhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI11cgny QiJODUkfC6qREbULajP6MB8GA1UdIwQYMBaAFBWvXqg/3yiaDWYc9du4s4iLx1jr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjZENC9CRDk4NzUwMjdB OEUxMUVCQTkwQ0NFMjJDNEY5QUUwMi9GYTllcURfZktKb05aaHoxMjdpemlJdkhX T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZhOWVxRF9mS0pvTlpoejEyN2l6aUl2SFdPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjZENC9CRDk4NzUwMjdBOEUxMUVCQTkwQ0NFMjJDNEY5QUUwMi9GYTllcURfZktK b05aaHoxMjdpemlJdkhXT3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFcz55ZSCadpnGfrKATOOGWL+oDaspP7D26h18Qm52uD05WHLbFnYF wgdQgy5JuasKQYCunOznnb7I07D51Ai2l05gNxfkS3uKrIGzvwzerQL3oq9Gy9Qz R5F32EY/szaHxMDdzfUvCnw523FuTE9BFOcC2xj0ZanmszztzbJfUxQqlu4HXZRX +Y1GjpGkBbrUzkTeB+ZrYcrM9ekuKy4RR3oZbg0+VUxPgM8X2vRcIXExjPB6wpDX kmPVa6/31H/7qGR1LuqrN/9OrH6IDsBvq/QBJ7BJWaZDKy83qBOfMNqw/rhxcBAB o5bnZhvSmsg+nDG+m+gaDiwaiJOTjdin -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:50 2024 by rpki-client on console-ams.rpki-client.org