$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft File: ficJop5GIOVCf3NfN8A0c-NrWXo.mft (raw, json) Hash identifier: pL1iK/x0sAQtefy1rTUbJeTHqoDbR2T8DtJwjKvd9hU= Subject key identifier: 25:C5:ED:15:66:73:28:5E:B9:0D:80:A6:F2:7B:BF:F8:13:F5:35:BA Authority key identifier: 7E:27:09:A2:9E:46:20:E5:42:7F:73:5F:37:C0:34:73:E3:6B:59:7A Certificate issuer: /CN=A91DD0A4/serialNumber=7E2709A29E4620E5427F735F37C03473E36B597A Certificate serial: 08A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft Manifest number: 08A0 Signing time: Fri 22 Nov 2024 20:18:21 +0000 Manifest this update: Fri 22 Nov 2024 20:18:21 +0000 Manifest next update: Fri 29 Nov 2024 20:18:21 +0000 Files and hashes: 1: ficJop5GIOVCf3NfN8A0c-NrWXo.crl (hash: YRBBtiLVZi9/B6VY9j0MZN7pkbJREQ0K0ssDAO/oFUk=) 2: C8CCE2CCAA7411EA9DF2E685C4F9AE02.roa (hash: 6I+uff1UXsEclScW0pxm4ci886ZY0LDxuI+o7m1iBhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.crl rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2216 (0x8a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD0A4/serialNumber=7E2709A29E4620E5427F735F37C03473E36B597A Validity Not Before: Nov 22 20:18:21 2024 GMT Not After : Nov 29 20:18:21 2024 GMT Subject: CN=6740e70d-76c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:23:15:ac:16:04:14:33:ff:99:c8:4a:b6:83: 73:72:2e:c8:66:56:3f:b5:e3:42:8f:78:2a:5c:b9: c8:86:ca:0a:5a:f8:9b:05:a7:46:b0:64:8b:26:9b: 7e:8d:5b:08:17:a2:3b:93:0d:f3:4a:ac:29:b9:dc: 66:91:78:e0:36:f3:17:d4:e8:9b:fb:c1:d9:3a:12: bf:c7:69:28:47:f2:3c:fa:68:ac:30:7c:e4:ad:7b: 31:57:8d:59:d2:58:19:a5:3d:bc:0a:15:30:85:09: 4b:e9:06:84:d1:b9:c1:13:c3:f3:45:bf:54:ca:77: e7:49:a8:5c:62:74:04:e4:b9:3c:a6:41:cf:f9:61: fa:03:d2:7f:da:2d:8d:13:7f:76:d8:33:0a:a6:eb: aa:0f:c6:09:d5:32:ea:dc:81:3d:2d:43:a0:3d:dd: 3d:5a:47:9c:c0:f9:8e:a5:1f:4d:59:71:64:c3:66: 67:06:a6:57:9c:26:c3:de:b9:b7:69:94:6f:7e:81: dc:e7:be:9b:4e:37:af:88:c5:be:12:33:91:65:94: 96:ba:c1:7f:53:0f:14:92:15:5b:91:6e:27:a4:3e: b0:25:11:b5:17:48:27:46:67:2d:c8:fc:78:ad:3b: 63:35:b0:36:11:38:47:ce:9a:7a:0a:48:c5:ff:5b: 3a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C5:ED:15:66:73:28:5E:B9:0D:80:A6:F2:7B:BF:F8:13:F5:35:BA X509v3 Authority Key Identifier: keyid:7E:27:09:A2:9E:46:20:E5:42:7F:73:5F:37:C0:34:73:E3:6B:59:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:76:c9:53:0b:34:ab:c7:9f:aa:1a:a2:8c:b4:b1:82:9a:f9: cc:df:31:c6:3b:c0:94:e9:6c:b5:0b:e4:23:c2:71:de:10:5e: 27:97:c6:38:cb:31:69:2e:c2:b0:ea:bc:72:1f:fd:cf:70:7b: ae:0d:0c:7c:f0:20:ef:2b:ba:26:d5:87:04:e7:68:fd:12:a7: 05:d4:ea:a9:50:86:59:09:5a:5c:65:88:9e:bd:77:f7:74:ff: fb:43:cb:49:fb:95:31:9f:6c:aa:53:96:36:96:1e:6f:16:8d: e7:ea:c7:c7:89:d6:2b:b2:fe:73:84:a5:b6:0c:20:ca:8f:6f: 4b:b4:75:34:56:9e:f9:6b:9a:11:9c:be:bb:a9:86:d8:4c:2d: 4c:22:53:1f:b0:41:34:70:7b:01:d6:7c:51:42:93:77:5a:4c: f5:fc:0c:18:e0:20:67:57:b4:76:63:82:3e:3b:43:f7:bb:64: e5:c6:28:1e:52:26:02:04:00:04:ef:69:ab:55:61:30:39:e7: a8:7b:e1:f3:b8:85:3e:c3:c8:75:53:b6:d3:dd:f2:7b:05:12: 68:6f:4a:56:b0:9c:d7:d5:83:fb:c8:d5:8f:62:86:13:dd:7d: f6:52:6c:c4:29:56:95:2a:e1:ab:a6:f9:3d:c0:24:81:74:99: 48:6a:b1:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQwQTQxMTAvBgNVBAUTKDdFMjcwOUEyOUU0NjIwRTU0MjdGNzM1RjM3QzAzNDcz RTM2QjU5N0EwHhcNMjQxMTIyMjAxODIxWhcNMjQxMTI5MjAxODIxWjAYMRYwFAYD VQQDEw02NzQwZTcwZC03NmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSMVrBYEFDP/mchKtoNzci7IZlY/teNCj3gqXLnIhsoKWvibBadGsGSLJpt+ jVsIF6I7kw3zSqwpudxmkXjgNvMX1Oib+8HZOhK/x2koR/I8+misMHzkrXsxV41Z 0lgZpT28ChUwhQlL6QaE0bnBE8PzRb9UynfnSahcYnQE5Lk8pkHP+WH6A9J/2i2N E3922DMKpuuqD8YJ1TLq3IE9LUOgPd09WkecwPmOpR9NWXFkw2ZnBqZXnCbD3rm3 aZRvfoHc576bTjeviMW+EjORZZSWusF/Uw8UkhVbkW4npD6wJRG1F0gnRmctyPx4 rTtjNbA2EThHzpp6CkjF/1s6BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXF7RVm cyheuQ2ApvJ7v/gT9TW6MB8GA1UdIwQYMBaAFH4nCaKeRiDlQn9zXzfANHPja1l6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDBBNC85NUQ1RTM5MkFB NzMxMUVBQTEwQUNDODRDNEY5QUUwMi9maWNKb3A1R0lPVkNmM05mTjhBMGMtTnJX WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZpY0pvcDVHSU9WQ2YzTmZOOEEwYy1OcldYby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDBBNC85NUQ1RTM5MkFBNzMxMUVBQTEwQUNDODRDNEY5QUUwMi9maWNKb3A1R0lP VkNmM05mTjhBMGMtTnJXWG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjdslTCzSrx5+qGqKMtLGCmvnM3zHGO8CU6Wy1C+QjwnHeEF4nl8Y4 yzFpLsKw6rxyH/3PcHuuDQx88CDvK7om1YcE52j9EqcF1OqpUIZZCVpcZYievXf3 dP/7Q8tJ+5Uxn2yqU5Y2lh5vFo3n6sfHidYrsv5zhKW2DCDKj29LtHU0Vp75a5oR nL67qYbYTC1MIlMfsEE0cHsB1nxRQpN3Wkz1/AwY4CBnV7R2Y4I+O0P3u2Tlxige UiYCBAAE72mrVWEwOeeoe+HzuIU+w8h1U7bT3fJ7BRJob0pWsJzX1YP7yNWPYoYT 3X32UmzEKVaVKuGrpvk9wCSBdJlIarH1 -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:33 2024 by rpki-client on console-fra.rpki-client.org