$ rpki-client -vvf rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft File: FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft (raw, json) Hash identifier: Y1Ejqpk3T8+JOswxBhlQ0DjyroM37zpIcZyfYOgX/Wc= Subject key identifier: FD:ED:52:BE:A3:DA:A9:88:43:B7:6A:36:6C:5E:4A:A6:62:AC:FB:38 Authority key identifier: 14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29 Certificate issuer: /CN=A9121188/serialNumber=1466407758A8D7B935694896D50275280679AF29 Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft Manifest number: C0 Signing time: Sat 23 Nov 2024 03:57:07 +0000 Manifest this update: Sat 23 Nov 2024 03:57:06 +0000 Manifest next update: Sat 30 Nov 2024 03:57:06 +0000 Files and hashes: 1: FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl (hash: PA6oul8x5HO2RVUqhC0OsgaVRJU9+6LTE0AEVdLh7xw=) 2: 91FC411C836411EE80C08641C4F9AE02.roa (hash: Ig/coMPIPbPWfq5557ThCTPPOBkbOYZiHHJV9OEcZtI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121188/serialNumber=1466407758A8D7B935694896D50275280679AF29 Validity Not Before: Nov 23 03:57:06 2024 GMT Not After : Nov 30 03:57:06 2024 GMT Subject: CN=67415293-3bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:14:b7:58:98:9c:d9:80:99:f7:13:d5:19:f9: a9:a0:de:5f:6b:3c:4d:aa:ae:94:95:24:89:00:1b: e3:2d:bd:dc:5f:c2:8b:33:58:9c:5a:86:8f:f3:63: 55:77:25:e7:f7:8d:99:8f:61:ef:25:b6:b2:2d:66: ab:aa:d1:6c:55:f9:8a:b4:e3:4f:9f:42:31:cd:7f: ab:17:9d:13:01:d4:c5:a0:03:e2:66:14:51:d7:1c: 47:21:3e:c2:6a:b4:b6:fd:cb:ab:a2:d7:94:7e:93: 53:d7:52:77:6d:40:f8:22:26:e0:ed:2e:00:d2:40: 2f:0f:d2:66:77:b7:ae:7f:14:84:5f:b1:ad:8d:17: 09:24:9c:fa:00:3e:49:7e:a2:23:24:f2:8a:c4:97: 29:e0:11:01:9f:22:68:bc:70:61:7b:d8:12:1e:2c: 78:f9:87:cb:b2:d8:a4:a3:28:3a:2b:0b:ce:18:6c: c2:f7:5e:e7:3a:30:2e:e1:f6:19:2e:8b:3e:4d:c8: c7:2b:ec:34:b9:00:2a:85:ad:46:b7:e5:f1:af:0c: 05:4a:ad:4e:78:dd:81:9d:7a:0a:55:6b:5f:fb:e6: 93:8c:5f:02:3e:46:d6:2e:1f:ec:78:1d:f0:fb:3f: a9:3e:b4:54:b3:c7:13:39:f4:05:f3:30:7d:9c:fb: 92:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:ED:52:BE:A3:DA:A9:88:43:B7:6A:36:6C:5E:4A:A6:62:AC:FB:38 X509v3 Authority Key Identifier: keyid:14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:51:16:39:f3:f5:56:40:38:b0:1e:f3:b1:09:1a:d1:f0:4e: a0:d6:ae:61:e8:b4:60:42:11:62:8c:52:0a:a5:98:9d:a4:4f: 2b:5a:08:eb:25:e2:6d:8f:47:b2:61:ec:e5:0c:e6:30:b8:29: 14:fe:5b:0c:a3:bc:13:bf:49:35:70:96:8e:48:f6:66:57:d4: 99:5f:59:5d:f5:af:e4:a0:7a:1a:d1:27:32:49:b0:ec:48:ec: 23:9d:53:16:1b:e7:71:b8:6f:ee:77:d2:a8:1b:a6:6c:22:21: e8:c5:8a:71:45:96:03:f9:86:5c:92:87:52:60:6f:6a:76:fa: 3e:94:36:58:06:ae:51:91:ee:f3:b7:17:e0:c2:b3:d6:72:a1: 88:d5:c9:b8:ec:2c:aa:5d:19:09:ab:40:06:05:5b:01:61:a2: 54:21:d8:83:ca:b3:6e:1e:2a:bc:37:c6:a2:4f:79:a0:b4:97: 38:65:05:55:61:7a:8e:04:fb:ac:c8:3c:ec:f6:42:c9:ef:29: 60:11:be:b1:9f:46:12:9c:f2:51:16:f8:c2:33:49:5d:9d:dc: 42:94:50:58:3d:4e:b8:cf:cb:24:bd:b0:9f:f2:1b:cb:a4:d9: 24:e5:0c:94:fd:19:66:4f:83:d1:91:c5:bd:e8:70:df:ed:50: 7f:70:70:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjExODgxMTAvBgNVBAUTKDE0NjY0MDc3NThBOEQ3QjkzNTY5NDg5NkQ1MDI3NTI4 MDY3OUFGMjkwHhcNMjQxMTIzMDM1NzA2WhcNMjQxMTMwMDM1NzA2WjAYMRYwFAYD VQQDEw02NzQxNTI5My0zYmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRS3WJic2YCZ9xPVGfmpoN5fazxNqq6UlSSJABvjLb3cX8KLM1icWoaP82NV dyXn942Zj2HvJbayLWarqtFsVfmKtONPn0IxzX+rF50TAdTFoAPiZhRR1xxHIT7C arS2/curoteUfpNT11J3bUD4Iibg7S4A0kAvD9Jmd7eufxSEX7GtjRcJJJz6AD5J fqIjJPKKxJcp4BEBnyJovHBhe9gSHix4+YfLstikoyg6KwvOGGzC917nOjAu4fYZ Los+TcjHK+w0uQAqha1Gt+XxrwwFSq1OeN2BnXoKVWtf++aTjF8CPkbWLh/seB3w +z+pPrRUs8cTOfQF8zB9nPuSsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3tUr6j 2qmIQ7dqNmxeSqZirPs4MB8GA1UdIwQYMBaAFBRmQHdYqNe5NWlIltUCdSgGea8p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTE4OC84NEJBQTA2Qzgz NjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3azFhVWlXMVFKMUtBWjVy eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZHWkFkMWlvMTdrMWFVaVcxUUoxS0FaNXJ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTE4OC84NEJBQTA2QzgzNjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3 azFhVWlXMVFKMUtBWjVyeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABURY58/VWQDiwHvOxCRrR8E6g1q5h6LRgQhFijFIKpZidpE8rWgjr JeJtj0eyYezlDOYwuCkU/lsMo7wTv0k1cJaOSPZmV9SZX1ld9a/koHoa0ScySbDs SOwjnVMWG+dxuG/ud9KoG6ZsIiHoxYpxRZYD+YZckodSYG9qdvo+lDZYBq5Rke7z txfgwrPWcqGI1cm47CyqXRkJq0AGBVsBYaJUIdiDyrNuHiq8N8aiT3mgtJc4ZQVV YXqOBPusyDzs9kLJ7ylgEb6xn0YSnPJRFvjCM0ldndxClFBYPU64z8skvbCf8hvL pNkk5QyU/RlmT4PRkcW96HDf7VB/cHDc -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:44 2024 by rpki-client on console-fra.rpki-client.org