$ rpki-client -vvf rpki.apnic.net/member_repository/A91282C6/9CE3AFB6367411EFADB5201CC4F9AE02/FpJaX5SGv8PxG1GPDfhHOgKruFs.mft File: FpJaX5SGv8PxG1GPDfhHOgKruFs.mft (raw, json) Hash identifier: +xOX5N1JujGwDHz3L7f4HpgoKXNAy0yuTBltP2OmG2s= Subject key identifier: 08:DE:2F:FA:53:93:FC:6B:DA:1D:8C:C2:DD:73:DE:3C:78:0B:21:9F Authority key identifier: 16:92:5A:5F:94:86:BF:C3:F1:1B:51:8F:0D:F8:47:3A:02:AB:B8:5B Certificate issuer: /CN=A91282C6/serialNumber=16925A5F9486BFC3F11B518F0DF8473A02ABB85B Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpJaX5SGv8PxG1GPDfhHOgKruFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91282C6/9CE3AFB6367411EFADB5201CC4F9AE02/FpJaX5SGv8PxG1GPDfhHOgKruFs.mft Manifest number: 2B Signing time: Sun 15 Sep 2024 10:09:59 +0000 Manifest this update: Sun 15 Sep 2024 10:09:58 +0000 Manifest next update: Sun 22 Sep 2024 10:09:58 +0000 Files and hashes: 1: FpJaX5SGv8PxG1GPDfhHOgKruFs.crl (hash: RMN8rV3ZmWqOdRg1M4Opv8EWJ6xhc9TAl4o4wUYOxvQ=) 2: 0F0D45D0373711EF896FCE68C4F9AE02.roa (hash: QaATx9a2f1t4dZsXy1qG6SpmtvwmzNEsizAYNE4ykrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91282C6/9CE3AFB6367411EFADB5201CC4F9AE02/FpJaX5SGv8PxG1GPDfhHOgKruFs.crl rsync://rpki.apnic.net/member_repository/A91282C6/9CE3AFB6367411EFADB5201CC4F9AE02/FpJaX5SGv8PxG1GPDfhHOgKruFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpJaX5SGv8PxG1GPDfhHOgKruFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91282C6/serialNumber=16925A5F9486BFC3F11B518F0DF8473A02ABB85B Validity Not Before: Sep 15 10:09:58 2024 GMT Not After : Sep 22 10:09:58 2024 GMT Subject: CN=66e6b277-9c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:bf:2c:7c:cf:44:52:fe:49:0e:34:ae:15:8f: 2f:e2:2b:e3:4e:af:8b:45:38:1d:8e:93:71:9e:70: b7:85:e3:f6:43:38:24:80:f3:2b:a8:4e:33:af:0e: 65:a3:71:e5:b6:9b:18:72:95:a7:79:dc:f9:29:69: 38:4c:f7:bb:a8:91:00:84:f2:76:2e:e2:9e:b0:be: 3c:34:a9:74:e5:a2:d1:f4:2a:38:18:1e:77:92:e3: 6a:12:f9:a1:57:9d:b1:41:4a:c0:f6:2e:c5:d2:b4: 1f:dc:64:be:76:63:d6:27:65:d4:bb:6b:20:03:3b: 61:dc:a0:5f:8b:79:3e:cb:91:03:d9:e2:41:df:d0: 42:d6:e6:5a:43:59:f5:01:22:ea:be:03:14:0f:28: 7b:78:79:0f:c7:8a:fa:87:4a:67:e1:76:78:66:fb: 17:78:ac:12:88:26:f2:68:ec:1e:4a:8c:4e:c9:69: 66:3a:53:87:2f:63:24:7a:73:c3:c1:c2:c9:b8:88: c5:4f:a6:d2:b5:c8:83:49:09:d8:e4:39:e6:ca:53: bb:10:72:df:6d:c3:8c:e1:19:99:ee:94:24:a0:98: 6c:e6:34:77:b2:11:08:78:ab:03:80:40:db:ad:b7: 38:43:58:9d:71:0b:06:48:96:d7:45:8c:9e:65:9b: 12:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DE:2F:FA:53:93:FC:6B:DA:1D:8C:C2:DD:73:DE:3C:78:0B:21:9F X509v3 Authority Key Identifier: keyid:16:92:5A:5F:94:86:BF:C3:F1:1B:51:8F:0D:F8:47:3A:02:AB:B8:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91282C6/9CE3AFB6367411EFADB5201CC4F9AE02/FpJaX5SGv8PxG1GPDfhHOgKruFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FpJaX5SGv8PxG1GPDfhHOgKruFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91282C6/9CE3AFB6367411EFADB5201CC4F9AE02/FpJaX5SGv8PxG1GPDfhHOgKruFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:2e:fe:96:87:da:c1:f3:a2:93:c9:dd:d8:cd:ad:30:bf:07: 70:28:83:79:47:a5:5d:5b:39:c4:bc:fb:4c:a8:25:d5:0e:46: 55:f0:c7:11:cd:b3:ed:20:58:f4:a6:6b:43:ef:2f:5d:10:39: b8:b7:f3:29:1f:83:75:a1:c6:be:64:72:f2:63:15:d9:c5:ec: 03:83:7a:fa:04:d8:15:f3:50:e6:67:46:4c:0b:5f:e8:59:8c: 49:22:3c:0d:16:ce:4c:25:05:91:de:a4:47:97:ea:42:2e:3b: 04:11:42:78:dc:87:6c:a5:a9:d8:57:63:4d:fa:4c:c7:0e:a1: 98:52:16:6f:ec:94:ef:99:07:f9:51:47:0b:f8:f7:63:71:ca: 72:03:bd:fc:3a:68:67:10:ce:4e:60:5e:eb:10:21:6f:6d:bb: 34:34:cf:4d:95:0e:8a:57:39:eb:fe:a9:a0:d4:9e:54:95:22: de:87:cf:91:63:14:1a:94:1e:8d:4f:2a:1e:d4:a7:1c:80:81: 04:de:df:5b:60:64:6a:86:79:3f:53:25:aa:14:3d:18:b9:2c: 77:d9:35:26:a7:64:e9:07:26:3c:96:13:6e:fe:7f:b4:6b:79: 40:e5:8e:0a:e5:01:6e:5e:0c:5b:1b:8a:04:ea:8b:70:77:67: 21:0b:26:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy ODJDNjExMC8GA1UEBRMoMTY5MjVBNUY5NDg2QkZDM0YxMUI1MThGMERGODQ3M0Ew MkFCQjg1QjAeFw0yNDA5MTUxMDA5NThaFw0yNDA5MjIxMDA5NThaMBgxFjAUBgNV BAMTDTY2ZTZiMjc3LTljNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjvyx8z0RS/kkONK4Vjy/iK+NOr4tFOB2Ok3GecLeF4/ZDOCSA8yuoTjOvDmWj ceW2mxhylad53PkpaThM97uokQCE8nYu4p6wvjw0qXTlotH0KjgYHneS42oS+aFX nbFBSsD2LsXStB/cZL52Y9YnZdS7ayADO2HcoF+LeT7LkQPZ4kHf0ELW5lpDWfUB Iuq+AxQPKHt4eQ/HivqHSmfhdnhm+xd4rBKIJvJo7B5KjE7JaWY6U4cvYyR6c8PB wsm4iMVPptK1yINJCdjkOebKU7sQct9tw4zhGZnulCSgmGzmNHeyEQh4qwOAQNut tzhDWJ1xCwZIltdFjJ5lmxKhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCN4v+lOT /GvaHYzC3XPePHgLIZ8wHwYDVR0jBBgwFoAUFpJaX5SGv8PxG1GPDfhHOgKruFsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4MkM2LzlDRTNBRkI2MzY3 NDExRUZBREI1MjAxQ0M0RjlBRTAyL0ZwSmFYNVNHdjhQeEcxR1BEZmhIT2dLcnVG cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRnBKYVg1U0d2OFB4RzFHUERmaEhPZ0tydUZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4 MkM2LzlDRTNBRkI2MzY3NDExRUZBREI1MjAxQ0M0RjlBRTAyL0ZwSmFYNVNHdjhQ eEcxR1BEZmhIT2dLcnVGcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH4u/paH2sHzopPJ3djNrTC/B3Aog3lHpV1bOcS8+0yoJdUORlXwxxHN s+0gWPSma0PvL10QObi38ykfg3Whxr5kcvJjFdnF7AODevoE2BXzUOZnRkwLX+hZ jEkiPA0WzkwlBZHepEeX6kIuOwQRQnjch2ylqdhXY036TMcOoZhSFm/slO+ZB/lR Rwv492NxynIDvfw6aGcQzk5gXusQIW9tuzQ0z02VDopXOev+qaDUnlSVIt6Hz5Fj FBqUHo1PKh7UpxyAgQTe31tgZGqGeT9TJaoUPRi5LHfZNSanZOkHJjyWE27+f7Rr eUDljgrlAW5eDFsbigTqi3B3ZyELJps= -----END CERTIFICATE-----Generated at Sun Sep 15 12:30:32 2024 by rpki-client on console-ams.rpki-client.org