$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0425/5FC8AADC06A811EBBDFEB970C4F9AE02/FUn5SUcUqKLXBP3poEY7vDS19OA.mft File: FUn5SUcUqKLXBP3poEY7vDS19OA.mft (raw, json) Hash identifier: NPHcZ3AGX95+Jr3+zvHJaNQMC/JOUWRpC4XiiAdvF/M= Subject key identifier: 97:1E:D1:03:D3:61:05:7C:30:82:C8:EE:3D:69:7D:92:1E:41:B3:11 Authority key identifier: 15:49:F9:49:47:14:A8:A2:D7:04:FD:E9:A0:46:3B:BC:34:B5:F4:E0 Certificate issuer: /CN=A91E0425/serialNumber=1549F9494714A8A2D704FDE9A0463BBC34B5F4E0 Certificate serial: 0744 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUn5SUcUqKLXBP3poEY7vDS19OA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0425/5FC8AADC06A811EBBDFEB970C4F9AE02/FUn5SUcUqKLXBP3poEY7vDS19OA.mft Manifest number: 073F Signing time: Fri 22 Nov 2024 21:10:20 +0000 Manifest this update: Fri 22 Nov 2024 21:10:20 +0000 Manifest next update: Fri 29 Nov 2024 21:10:20 +0000 Files and hashes: 1: FUn5SUcUqKLXBP3poEY7vDS19OA.crl (hash: CGmnLvtUldVJnEBQ5nR+6Y7KRC7kTrQwvQbm9Wb9uO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0425/5FC8AADC06A811EBBDFEB970C4F9AE02/FUn5SUcUqKLXBP3poEY7vDS19OA.crl rsync://rpki.apnic.net/member_repository/A91E0425/5FC8AADC06A811EBBDFEB970C4F9AE02/FUn5SUcUqKLXBP3poEY7vDS19OA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUn5SUcUqKLXBP3poEY7vDS19OA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1860 (0x744) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0425/serialNumber=1549F9494714A8A2D704FDE9A0463BBC34B5F4E0 Validity Not Before: Nov 22 21:10:20 2024 GMT Not After : Nov 29 21:10:20 2024 GMT Subject: CN=6740f33c-e489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:68:ec:31:08:e2:3a:1a:1f:a6:c2:b5:78:6a: 97:25:3a:41:59:c1:72:a1:8c:57:2d:02:43:78:c5: f4:da:af:27:96:e3:eb:29:62:40:45:8b:3b:3a:3b: 67:ec:c9:40:78:31:00:b5:46:51:e2:06:dd:75:73: e1:f9:f5:d7:30:9e:44:26:e1:7d:69:9b:c6:84:e6: 02:44:51:d2:a1:8e:a0:53:c1:f3:b2:96:bf:e7:6a: 2d:d1:10:45:39:d2:61:6f:81:a1:8e:49:ce:d1:8b: b1:0a:a8:4b:76:b7:91:b9:b3:28:61:f5:5c:75:0a: 46:89:0f:e6:11:81:1c:aa:26:c9:3c:1f:eb:ea:61: 81:6d:ba:74:31:ea:17:b2:35:59:62:a4:43:78:db: 9a:fa:f6:5d:77:92:d9:b4:45:69:7a:3a:49:4b:b6: f9:7c:db:69:ab:53:42:d6:68:da:5c:73:89:b6:a1: 05:a0:55:31:20:45:a3:eb:7a:cb:ea:a5:ab:6f:2b: 63:61:0c:6b:72:d4:db:ff:b8:e5:c5:5e:66:7e:9c: ff:68:d8:c2:2e:a3:ce:47:27:47:2f:19:fc:6b:59: 25:3a:47:20:c3:af:5d:40:77:f9:c8:23:e7:5b:c6: e5:7b:ed:2e:e8:f5:0d:45:85:ef:36:36:5a:fe:4f: 73:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:1E:D1:03:D3:61:05:7C:30:82:C8:EE:3D:69:7D:92:1E:41:B3:11 X509v3 Authority Key Identifier: keyid:15:49:F9:49:47:14:A8:A2:D7:04:FD:E9:A0:46:3B:BC:34:B5:F4:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0425/5FC8AADC06A811EBBDFEB970C4F9AE02/FUn5SUcUqKLXBP3poEY7vDS19OA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUn5SUcUqKLXBP3poEY7vDS19OA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0425/5FC8AADC06A811EBBDFEB970C4F9AE02/FUn5SUcUqKLXBP3poEY7vDS19OA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:d1:41:07:30:b8:b2:79:5c:73:89:ed:eb:46:d2:52:23:bb: 77:df:ae:32:34:b0:1d:c6:1f:7d:5c:30:6b:ac:4a:6c:c2:a7: 7c:4a:02:7a:fb:65:40:5a:7f:5e:c2:0b:7b:a6:81:94:ed:0d: e9:f4:23:35:f5:6c:b3:a3:8a:b6:df:7e:8d:d4:19:ed:08:c6: 9b:bc:eb:cd:76:1d:66:5e:47:a0:29:31:7a:ad:a2:6e:61:38: 12:06:20:b7:c2:7d:34:cb:8f:9c:67:34:27:96:59:d0:5d:93: 9f:05:bb:d2:a0:61:cd:8a:be:2e:b8:f8:e1:01:41:21:b4:37: 5a:47:71:d1:5f:3c:3e:09:1d:c2:f3:06:4a:ac:3a:5e:ad:29: 49:ed:06:44:5c:89:f7:6f:f5:a8:1a:bb:1d:59:12:12:ad:4e: 5b:47:fe:7c:22:70:59:5d:27:c1:c1:09:c6:c4:cb:ff:72:ab: 0e:f1:bb:23:fb:82:7d:b7:8a:68:be:3b:53:a7:c5:37:94:41: 8c:d6:86:bd:7f:e4:0c:53:38:55:c7:e0:5e:13:5b:29:ca:d5: 9d:cb:b4:3a:38:3e:03:cd:83:29:15:0b:16:fb:73:1e:b6:74: 3a:76:cc:6e:cd:98:8f:d3:a3:a6:60:91:2d:92:db:e7:32:ed: 03:65:e8:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA0MjUxMTAvBgNVBAUTKDE1NDlGOTQ5NDcxNEE4QTJENzA0RkRFOUEwNDYzQkJD MzRCNUY0RTAwHhcNMjQxMTIyMjExMDIwWhcNMjQxMTI5MjExMDIwWjAYMRYwFAYD VQQDEw02NzQwZjMzYy1lNDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWjsMQjiOhofpsK1eGqXJTpBWcFyoYxXLQJDeMX02q8nluPrKWJARYs7Ojtn 7MlAeDEAtUZR4gbddXPh+fXXMJ5EJuF9aZvGhOYCRFHSoY6gU8Hzspa/52ot0RBF OdJhb4GhjknO0YuxCqhLdreRubMoYfVcdQpGiQ/mEYEcqibJPB/r6mGBbbp0MeoX sjVZYqRDeNua+vZdd5LZtEVpejpJS7b5fNtpq1NC1mjaXHOJtqEFoFUxIEWj63rL 6qWrbytjYQxrctTb/7jlxV5mfpz/aNjCLqPORydHLxn8a1klOkcgw69dQHf5yCPn W8ble+0u6PUNRYXvNjZa/k9zVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJce0QPT YQV8MILI7j1pfZIeQbMRMB8GA1UdIwQYMBaAFBVJ+UlHFKii1wT96aBGO7w0tfTg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDQyNS81RkM4QUFEQzA2 QTgxMUVCQkRGRUI5NzBDNEY5QUUwMi9GVW41U1VjVXFLTFhCUDNwb0VZN3ZEUzE5 T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZVbjVTVWNVcUtMWEJQM3BvRVk3dkRTMTlPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDQyNS81RkM4QUFEQzA2QTgxMUVCQkRGRUI5NzBDNEY5QUUwMi9GVW41U1VjVXFL TFhCUDNwb0VZN3ZEUzE5T0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC60UEHMLiyeVxzie3rRtJSI7t3364yNLAdxh99XDBrrEpswqd8SgJ6 +2VAWn9ewgt7poGU7Q3p9CM19Wyzo4q2336N1BntCMabvOvNdh1mXkegKTF6raJu YTgSBiC3wn00y4+cZzQnllnQXZOfBbvSoGHNir4uuPjhAUEhtDdaR3HRXzw+CR3C 8wZKrDperSlJ7QZEXIn3b/WoGrsdWRISrU5bR/58InBZXSfBwQnGxMv/cqsO8bsj +4J9t4povjtTp8U3lEGM1oa9f+QMUzhVx+BeE1spytWdy7Q6OD4DzYMpFQsW+3Me tnQ6dsxuzZiP06OmYJEtktvnMu0DZej1 -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:13 2024 by rpki-client on console-fra.rpki-client.org