$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft File: 8MOq6RfojmgUGpayJuBGAJqBlIM.mft (raw, json) Hash identifier: eTOLhUNwdEFSYVnoC/IGOrsV63Fr8gdV8gibaWocOUs= Subject key identifier: 35:82:90:74:4D:BF:5E:46:76:E9:DE:C0:A2:73:5F:C8:96:03:19:B8 Authority key identifier: F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 Certificate issuer: /CN=A91F48F3/serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft Manifest number: FE Signing time: Sat 23 Nov 2024 03:16:17 +0000 Manifest this update: Sat 23 Nov 2024 03:16:16 +0000 Manifest next update: Sat 30 Nov 2024 03:16:16 +0000 Files and hashes: 1: 8MOq6RfojmgUGpayJuBGAJqBlIM.crl (hash: FxtsZQ+Avj/rP192Loc8JuxCwrF5nMn4U7rhpYZwYME=) 2: 0366729A251511EEACA5881FC4F9AE02.roa (hash: 61dFCpFb3ek9f8W7MGjus+wVQMOYkxnO6WKnJYsH5TI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F48F3/serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Validity Not Before: Nov 23 03:16:16 2024 GMT Not After : Nov 30 03:16:16 2024 GMT Subject: CN=67414901-a7d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:51:57:24:dc:9d:30:21:d1:41:13:e8:1c:17: 03:19:1a:e0:ad:a8:7d:8d:51:27:c4:fe:07:95:58: 77:78:05:5f:91:b8:19:52:24:d1:c6:44:92:08:a3: dc:f7:43:73:af:07:4f:fe:8c:7e:b1:c0:ac:08:62: a6:d4:82:74:53:e0:a3:b9:21:6f:2a:36:94:5b:09: 65:c9:91:e7:5e:03:df:8c:8a:25:b1:e2:e2:90:92: 41:90:fc:54:93:81:0d:bc:b0:aa:79:d1:8c:0f:05: 53:49:a2:c2:6d:13:a7:e4:e0:3b:06:06:98:cf:ea: fe:53:a4:a8:95:80:b3:a3:4c:c3:ee:85:ff:c8:a5: 59:f6:5e:89:a4:fb:70:16:f9:b0:aa:bf:0d:28:de: 4e:5d:76:f8:44:b9:06:cd:fb:51:ed:ef:c8:e1:3c: 9f:ca:9f:4a:29:b1:17:f1:01:cd:8f:ae:e8:ca:05: 0c:bf:1f:2b:08:bf:f7:f5:a1:28:8a:9a:00:35:92: a3:c3:1f:e6:da:b4:b5:f9:c1:26:ab:3d:8f:09:bd: e0:ec:b6:74:3f:39:f0:02:8d:bd:df:9d:a9:a1:fe: 0b:a4:74:df:81:7a:31:cf:02:36:78:d7:a0:fc:c9: 3f:9a:43:33:08:86:23:f1:ce:08:85:98:85:01:25: d7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:82:90:74:4D:BF:5E:46:76:E9:DE:C0:A2:73:5F:C8:96:03:19:B8 X509v3 Authority Key Identifier: keyid:F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:b1:60:3b:7d:37:a4:9c:5e:a3:51:39:b3:e7:88:f3:9f:18: c1:c3:15:2f:68:ae:d2:70:85:bc:2d:e1:80:20:af:77:b0:12: 76:58:cd:d9:45:26:ce:0f:fa:91:cf:cf:45:71:0d:ce:0c:9e: 9e:15:ee:57:5b:35:72:4a:48:59:3a:af:dc:27:83:c9:6f:00: 27:5c:11:00:8c:5c:98:58:0c:f3:59:01:4f:a6:e1:9b:05:dc: ad:c8:b7:ec:4a:00:58:e5:89:6c:d0:e6:7c:71:01:9e:65:46: 01:73:8f:3b:70:01:f0:c5:d6:d9:17:ea:15:7c:ff:28:52:3e: bc:46:e2:8d:43:41:8e:56:0a:65:38:53:61:6c:77:b2:4e:58: 7f:07:2f:eb:b4:85:21:13:bd:0f:1e:63:9b:00:62:4e:26:21: c4:64:ef:6a:6b:42:22:e7:36:d9:ed:44:ea:9e:7f:d2:1a:77: 9a:d4:7d:cb:bf:62:9c:6e:72:61:9b:af:3d:35:91:c2:b8:66: e8:27:38:3f:d4:08:b0:d1:51:0e:6a:2a:15:7a:38:98:a2:1f: f2:fb:37:4d:73:37:ff:8d:0b:86:73:f8:f5:e1:d9:e7:a6:41: 74:de:9e:ae:fb:7a:c2:e7:ec:8c:7f:1d:bf:0d:ca:68:f5:dc: c0:e0:6e:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ4RjMxMTAvBgNVBAUTKEYwQzNBQUU5MTdFODhFNjgxNDFBOTZCMjI2RTA0NjAw OUE4MTk0ODMwHhcNMjQxMTIzMDMxNjE2WhcNMjQxMTMwMDMxNjE2WjAYMRYwFAYD VQQDEw02NzQxNDkwMS1hN2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVFXJNydMCHRQRPoHBcDGRrgrah9jVEnxP4HlVh3eAVfkbgZUiTRxkSSCKPc 90NzrwdP/ox+scCsCGKm1IJ0U+CjuSFvKjaUWwllyZHnXgPfjIolseLikJJBkPxU k4ENvLCqedGMDwVTSaLCbROn5OA7BgaYz+r+U6SolYCzo0zD7oX/yKVZ9l6JpPtw Fvmwqr8NKN5OXXb4RLkGzftR7e/I4Tyfyp9KKbEX8QHNj67oygUMvx8rCL/39aEo ipoANZKjwx/m2rS1+cEmqz2PCb3g7LZ0PznwAo29352pof4LpHTfgXoxzwI2eNeg /Mk/mkMzCIYj8c4IhZiFASXXWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWCkHRN v15GdunewKJzX8iWAxm4MB8GA1UdIwQYMBaAFPDDqukX6I5oFBqWsibgRgCagZSD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMy9CNzIzNUUyQTI1 MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2ptZ1VHcGF5SnVCR0FKcUJs SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhNT3E2UmZvam1nVUdwYXlKdUJHQUpxQmxJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDhGMy9CNzIzNUUyQTI1MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2pt Z1VHcGF5SnVCR0FKcUJsSU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqsWA7fTeknF6jUTmz54jznxjBwxUvaK7ScIW8LeGAIK93sBJ2WM3Z RSbOD/qRz89FcQ3ODJ6eFe5XWzVySkhZOq/cJ4PJbwAnXBEAjFyYWAzzWQFPpuGb BdytyLfsSgBY5Yls0OZ8cQGeZUYBc487cAHwxdbZF+oVfP8oUj68RuKNQ0GOVgpl OFNhbHeyTlh/By/rtIUhE70PHmObAGJOJiHEZO9qa0Ii5zbZ7UTqnn/SGnea1H3L v2KcbnJhm689NZHCuGboJzg/1Aiw0VEOaioVejiYoh/y+zdNczf/jQuGc/j14dnn pkF03p6u+3rC5+yMfx2/Dcpo9dzA4G7v -----END CERTIFICATE-----Generated at Sat Nov 23 05:03:00 2024 by rpki-client on console-fra.rpki-client.org