$ rpki-client -vvf rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft File: FWV3K3tOvoUEnSr5syrMh4AxGl0.mft (raw, json) Hash identifier: znHLdeZgdZkGagMtXxh/smQclVxmazvm/FEoDc4S22A= Subject key identifier: 28:44:8E:DD:BB:6A:25:28:F9:53:41:92:A5:F7:C9:01:92:3A:8E:CD Authority key identifier: 15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D Certificate issuer: /CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D Certificate serial: 0343 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft Manifest number: 033F Signing time: Thu 21 Nov 2024 00:35:47 +0000 Manifest this update: Thu 21 Nov 2024 00:35:47 +0000 Manifest next update: Thu 28 Nov 2024 00:35:47 +0000 Files and hashes: 1: FWV3K3tOvoUEnSr5syrMh4AxGl0.crl (hash: 1gUJf+j9ccwjvOK7z/wfUPa2P0VMk4xgt5p7nbII4qA=) 2: 2106E428992111EC99E0095AC4F9AE02.roa (hash: PcKJkGwaK4o171v3EBWrcFnHzSRmJYq7ZGQ7KxepW58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 835 (0x343) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D Validity Not Before: Nov 21 00:35:47 2024 GMT Not After : Nov 28 00:35:47 2024 GMT Subject: CN=673e8063-c1ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:06:30:d1:be:cf:81:e5:06:a0:4d:84:87:38: 8e:e8:06:b6:ca:33:81:d3:73:db:d6:3c:7c:28:3f: 9e:1c:d6:d2:07:5b:2e:57:cb:19:9e:d3:af:d2:59: 1a:6d:e4:cd:fb:9f:63:31:fd:e7:be:bd:87:a4:62: 1a:bc:b4:69:11:10:d5:83:89:c7:c4:d6:e9:6f:4f: 45:fd:20:77:22:86:3c:33:98:45:6c:d9:0b:dd:e5: 78:1e:39:2e:8b:67:b7:84:98:1a:0b:73:d5:24:d1: c2:cc:1f:bd:ef:d1:0d:d5:e7:a0:69:83:08:37:eb: d8:3b:65:39:d2:fa:3c:36:50:71:14:7e:e7:f8:d0: c1:e4:45:be:f7:35:c1:e3:d8:66:ec:bf:96:41:fb: 34:aa:f5:ea:8b:6f:60:ec:3e:3f:4f:22:69:0a:a6: cf:3c:8b:c3:2c:ee:a4:8d:83:8c:3b:0d:9d:e4:24: 8a:fe:a0:a7:42:c2:9d:6d:0c:5e:a0:1b:1c:7b:9c: 1f:85:c3:20:4a:9d:b9:fc:29:d9:2a:94:cd:19:36: c2:20:e2:88:15:42:2a:f5:24:95:b7:57:cc:eb:57: bb:94:8f:a6:0f:54:fd:d9:02:30:72:df:f8:72:8a: fd:a0:73:57:ed:5f:25:6c:b7:01:60:fa:53:bb:67: df:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:44:8E:DD:BB:6A:25:28:F9:53:41:92:A5:F7:C9:01:92:3A:8E:CD X509v3 Authority Key Identifier: keyid:15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:9f:63:04:4d:04:17:a9:cb:e9:04:1e:70:8b:fd:f5:a2:ca: 77:2a:e7:82:04:46:ac:6e:b8:69:9f:02:90:6c:dc:32:99:38: 90:99:25:2a:0c:ff:69:bb:69:9f:cb:15:1d:07:d9:71:7c:29: f4:5e:51:f5:5d:0e:4e:e6:9c:a0:c7:d1:0b:7a:75:90:e8:5b: e9:5b:47:02:ea:b5:c1:c9:83:e0:1f:66:75:2b:33:c7:c8:f3: 00:36:c6:2a:ca:6c:19:b7:87:c8:fb:f7:cf:15:91:c6:39:b9: a0:93:81:aa:66:33:10:41:80:57:93:59:91:1a:1c:e3:57:cb: f2:60:7e:0b:d2:81:d3:00:d3:17:c6:9d:a2:59:60:98:f6:88: a5:f1:86:f7:6d:2d:bd:08:51:34:bc:a3:b3:de:b8:15:e9:e9: 5c:8d:0b:4c:e2:29:e4:7c:96:d6:83:1f:a4:00:34:86:2a:29: f3:e7:79:9b:20:b2:29:de:31:76:7c:e0:8a:21:9d:f0:2a:80: fb:c1:41:2d:81:af:8c:3a:6f:38:9f:1f:42:17:2d:98:85:ef: a0:68:2a:0b:7e:d5:f9:c7:9f:bc:6b:21:67:61:20:ad:43:da: ea:77:9c:36:00:9c:7d:aa:40:06:16:63:8b:0e:b2:82:41:00: a5:ec:bb:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxQUQxMTAvBgNVBAUTKDE1NjU3NzJCN0I0RUJFODUwNDlEMkFGOUIzMkFDQzg3 ODAzMTFBNUQwHhcNMjQxMTIxMDAzNTQ3WhcNMjQxMTI4MDAzNTQ3WjAYMRYwFAYD VQQDEw02NzNlODA2My1jMWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoAYw0b7PgeUGoE2EhziO6Aa2yjOB03Pb1jx8KD+eHNbSB1suV8sZntOv0lka beTN+59jMf3nvr2HpGIavLRpERDVg4nHxNbpb09F/SB3IoY8M5hFbNkL3eV4Hjku i2e3hJgaC3PVJNHCzB+979EN1eegaYMIN+vYO2U50vo8NlBxFH7n+NDB5EW+9zXB 49hm7L+WQfs0qvXqi29g7D4/TyJpCqbPPIvDLO6kjYOMOw2d5CSK/qCnQsKdbQxe oBsce5wfhcMgSp25/CnZKpTNGTbCIOKIFUIq9SSVt1fM61e7lI+mD1T92QIwct/4 cor9oHNX7V8lbLcBYPpTu2ffCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChEjt27 aiUo+VNBkqX3yQGSOo7NMB8GA1UdIwQYMBaAFBVldyt7Tr6FBJ0q+bMqzIeAMRpd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTFBRC84RkRERjVFODk5 MUQxMUVDODA5MzlBNTRDNEY5QUUwMi9GV1YzSzN0T3ZvVUVuU3I1c3lyTWg0QXhH bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXVjNLM3RPdm9VRW5TcjVzeXJNaDRBeEdsMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTFBRC84RkRERjVFODk5MUQxMUVDODA5MzlBNTRDNEY5QUUwMi9GV1YzSzN0T3Zv VUVuU3I1c3lyTWg0QXhHbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFn2METQQXqcvpBB5wi/31osp3KueCBEasbrhpnwKQbNwymTiQmSUq DP9pu2mfyxUdB9lxfCn0XlH1XQ5O5pygx9ELenWQ6FvpW0cC6rXByYPgH2Z1KzPH yPMANsYqymwZt4fI+/fPFZHGObmgk4GqZjMQQYBXk1mRGhzjV8vyYH4L0oHTANMX xp2iWWCY9oil8Yb3bS29CFE0vKOz3rgV6elcjQtM4inkfJbWgx+kADSGKinz53mb ILIp3jF2fOCKIZ3wKoD7wUEtga+MOm84nx9CFy2Yhe+gaCoLftX5x5+8ayFnYSCt Q9rqd5w2AJx9qkAGFmOLDrKCQQCl7Lua -----END CERTIFICATE-----Generated at Thu Nov 21 01:25:55 2024 by rpki-client on console-ams.rpki-client.org