$ rpki-client -vvf rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft File: _fz0IvXEZi3h5GQ6JxwEax4hxK0.mft (raw, json) Hash identifier: LEwyL0GWRv3rZ+nu/HX2T5t76Bz71DgVftnVfditUYQ= Subject key identifier: FC:66:E3:24:8C:CC:63:3E:0B:D9:A4:9E:43:34:78:46:79:2E:01:BA Authority key identifier: FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD Certificate issuer: /CN=A9125A95/serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD Certificate serial: 03D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft Manifest number: 03CD Signing time: Sat 23 Nov 2024 00:12:48 +0000 Manifest this update: Sat 23 Nov 2024 00:12:48 +0000 Manifest next update: Sat 30 Nov 2024 00:12:48 +0000 Files and hashes: 1: _fz0IvXEZi3h5GQ6JxwEax4hxK0.crl (hash: 6jg9J6F0TGRbWFAN7yyzOC9One1mJB9xMmA/2O7PSOQ=) 2: AF506F14630811EC97879243C4F9AE02.roa (hash: ADZe52n7KpNwXGtA9lVaGhND4dnFjDyI/3kJIZzzGgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 976 (0x3d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125A95/serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD Validity Not Before: Nov 23 00:12:48 2024 GMT Not After : Nov 30 00:12:48 2024 GMT Subject: CN=67411e00-93dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ab:28:ef:57:86:6f:d8:bb:22:2b:4e:93:31: 5c:27:0e:30:fb:f5:92:8c:da:c3:ec:cc:63:88:a4: 00:21:b6:c4:e5:de:56:1b:84:56:49:92:93:c2:4e: 5f:77:b4:2e:15:d6:d3:08:de:6c:b9:a9:60:ae:7f: 1d:ba:e8:1e:de:2b:30:56:47:34:1a:af:a5:45:d1: c3:37:85:26:bf:ae:ed:04:6a:7e:71:0c:4b:be:13: 37:1c:6b:0a:dc:e7:fa:6d:4a:4b:75:6e:40:bd:35: bc:3b:3b:93:62:46:c3:66:a0:9f:1f:ec:44:7c:2c: 33:3c:7e:45:01:14:c3:c8:42:0d:9c:1a:79:51:55: c3:86:7b:dc:58:2c:27:2b:25:4c:68:47:0d:67:db: 2d:0f:0e:72:1b:c9:31:1d:38:d8:85:f8:fa:eb:ab: 93:ef:e4:3f:c9:6e:bc:71:e0:12:0e:c2:43:ca:a4: fe:26:3e:82:62:5d:5d:8a:1d:86:db:5c:b8:ec:08: 49:19:d5:18:4d:04:cc:a6:68:ca:42:02:f4:72:5d: 2d:16:01:e7:3c:31:93:e2:dd:d8:9a:c8:6f:e9:b6: 0c:b4:46:f4:6e:7e:44:ca:c8:09:53:42:95:8e:64: 24:1d:65:9a:c5:5b:2c:fb:97:13:b6:98:51:96:bb: 28:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:66:E3:24:8C:CC:63:3E:0B:D9:A4:9E:43:34:78:46:79:2E:01:BA X509v3 Authority Key Identifier: keyid:FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:6f:c6:73:3d:44:26:fc:d9:fb:8c:db:a1:75:06:ad:9f:1c: 0e:76:e1:ad:4a:68:98:c2:48:2a:79:b3:97:9c:ab:d5:23:d9: 3a:c9:b3:f5:da:f8:c1:4c:36:df:f3:d7:02:d0:47:42:81:1b: 64:7f:a7:d2:13:97:1c:cd:01:f2:93:a2:2e:9e:85:03:b7:f4: 00:52:7e:41:56:ae:00:78:87:0a:64:74:eb:8e:2d:1b:03:d1: 18:2a:17:32:bb:2b:f0:c4:e4:5c:3d:ae:2f:f1:3b:58:cc:d4: a3:76:77:5b:27:ec:2c:b2:d3:b4:43:fd:9c:b5:9d:bf:1d:66: 83:a3:a6:8d:6f:a1:40:4e:d4:f6:ff:08:5a:98:5c:98:3b:e3: e2:7b:6b:19:51:d6:b5:a2:3b:cd:cb:3c:48:7e:d3:da:b2:14: 73:31:ef:be:e3:99:8c:93:2b:a8:df:70:8a:e1:eb:db:92:52: ab:3a:c2:e9:72:2a:eb:b0:39:83:44:3b:7d:7d:e0:a9:0c:2f: 64:50:52:86:f4:3e:0d:94:4a:a7:fe:4f:6a:48:a2:88:a6:d9: 7f:88:74:1e:3b:14:ea:62:56:78:b4:72:f4:0c:5a:ff:93:a1: 21:18:31:74:22:2c:27:b9:ec:10:60:13:0b:18:7d:0c:43:80: 50:85:4d:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVBOTUxMTAvBgNVBAUTKEZERkNGNDIyRjVDNDY2MkRFMUU0NjQzQTI3MUMwNDZC MUUyMUM0QUQwHhcNMjQxMTIzMDAxMjQ4WhcNMjQxMTMwMDAxMjQ4WjAYMRYwFAYD VQQDEw02NzQxMWUwMC05M2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxaso71eGb9i7IitOkzFcJw4w+/WSjNrD7MxjiKQAIbbE5d5WG4RWSZKTwk5f d7QuFdbTCN5sualgrn8duuge3iswVkc0Gq+lRdHDN4Umv67tBGp+cQxLvhM3HGsK 3Of6bUpLdW5AvTW8OzuTYkbDZqCfH+xEfCwzPH5FARTDyEINnBp5UVXDhnvcWCwn KyVMaEcNZ9stDw5yG8kxHTjYhfj666uT7+Q/yW68ceASDsJDyqT+Jj6CYl1dih2G 21y47AhJGdUYTQTMpmjKQgL0cl0tFgHnPDGT4t3Ymshv6bYMtEb0bn5EysgJU0KV jmQkHWWaxVss+5cTtphRlrsoGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPxm4ySM zGM+C9mknkM0eEZ5LgG6MB8GA1UdIwQYMBaAFP389CL1xGYt4eRkOiccBGseIcSt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUE5NS9BQTYwQzhFQzYx NzIxMUVDQTMxNzIwODZDNEY5QUUwMi9fZnowSXZYRVppM2g1R1E2Snh3RWF4NGh4 SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19mejBJdlhFWmkzaDVHUTZKeHdFYXg0aHhLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUE5NS9BQTYwQzhFQzYxNzIxMUVDQTMxNzIwODZDNEY5QUUwMi9fZnowSXZYRVpp M2g1R1E2Snh3RWF4NGh4SzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZb8ZzPUQm/Nn7jNuhdQatnxwOduGtSmiYwkgqebOXnKvVI9k6ybP1 2vjBTDbf89cC0EdCgRtkf6fSE5cczQHyk6IunoUDt/QAUn5BVq4AeIcKZHTrji0b A9EYKhcyuyvwxORcPa4v8TtYzNSjdndbJ+wsstO0Q/2ctZ2/HWaDo6aNb6FATtT2 /whamFyYO+Pie2sZUda1ojvNyzxIftPashRzMe++45mMkyuo33CK4evbklKrOsLp cirrsDmDRDt9feCpDC9kUFKG9D4NlEqn/k9qSKKIptl/iHQeOxTqYlZ4tHL0DFr/ k6EhGDF0IiwnuewQYBMLGH0MQ4BQhU3T -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:20 2024 by rpki-client on console-ams.rpki-client.org