$ rpki-client -vvf rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft File: FxesrAU_Ex4iYUUnNlE-To9ibNs.mft (raw, json) Hash identifier: kIDCuezTBUouf7brlEcQbA0o4BmaMoado/YZpXgsUNM= Subject key identifier: 70:3F:97:93:18:9F:DA:D1:56:A6:1D:47:92:28:19:C6:B7:36:35:9D Authority key identifier: 17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB Certificate issuer: /CN=A912986D/serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB Certificate serial: 0A65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft Manifest number: 0A53 Signing time: Wed 20 Nov 2024 19:26:05 +0000 Manifest this update: Wed 20 Nov 2024 19:26:04 +0000 Manifest next update: Wed 27 Nov 2024 19:26:04 +0000 Files and hashes: 1: FxesrAU_Ex4iYUUnNlE-To9ibNs.crl (hash: s5rUMJEkGxxzBRXQ4Uhxqrq7iFc+voCIHs4Ed2aI7zo=) 2: 13321D24572211EA88CE445FC4F9AE02.roa (hash: xXSQwBPCYruuGyQsKTjHM9n/RD09yi8k8z8wgJzm9aU=) 3: 090D807E05F511EEBB8E1062C4F9AE02.roa (hash: ZAAiXs8Yo5BnQ7gh48TENV41rzsIW/WMFRgJN6n/qck=) 4: 0878844205F511EEBB8E1062C4F9AE02.roa (hash: X82qAyT8/61wVP2kDNOcBKWAMfutmgdSPtnosWaKfos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:26:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2661 (0xa65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912986D/serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB Validity Not Before: Nov 20 19:26:04 2024 GMT Not After : Nov 27 19:26:04 2024 GMT Subject: CN=673e37cd-febd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:aa:67:f6:f0:ed:06:83:63:3b:d1:c9:5f:90: 97:74:d8:8b:99:8a:29:f8:74:14:ae:7e:bb:03:f7: cc:67:a2:0f:b3:06:e2:04:78:77:82:09:75:d5:c6: b0:78:2d:a2:9b:fd:fa:05:10:b5:f8:09:95:50:99: 64:3d:fc:06:d5:8b:ee:c3:2b:9b:75:41:01:46:2d: aa:c5:ac:76:58:20:c2:73:c2:83:1c:75:88:ff:7c: 9f:5b:16:e2:b8:62:a0:82:81:7b:4c:b7:60:4f:4b: 86:91:51:31:64:47:a5:93:7b:71:86:da:f3:69:5d: 07:40:93:bb:ac:da:f4:2d:ad:96:04:2d:4d:45:96: f0:76:2c:46:f9:b7:1c:6d:e1:46:d0:87:36:b1:51: 1d:a1:96:6b:8b:ec:1b:15:e4:b9:74:07:85:3b:73: 9c:15:c9:6f:2a:66:b7:53:c2:47:09:50:7f:de:02: 4d:d3:1e:83:28:ff:6f:ea:9d:18:6f:22:72:a8:1f: df:5b:cc:be:c7:8e:56:92:6a:f6:12:53:43:b1:ef: d9:d3:c7:0e:26:08:39:ea:fd:97:3c:59:21:be:73: 03:ab:4e:a1:91:07:28:71:b6:43:8e:60:72:03:f8: 0e:5c:52:ee:e7:08:63:40:5a:82:23:93:98:aa:95: be:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:3F:97:93:18:9F:DA:D1:56:A6:1D:47:92:28:19:C6:B7:36:35:9D X509v3 Authority Key Identifier: keyid:17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:91:4d:7d:d3:07:06:a5:54:3a:0a:32:f3:bf:3a:b3:26:56: 2a:a9:4a:9c:64:62:57:cd:dd:78:76:08:39:d6:6d:bd:7e:70: 45:8f:78:4b:02:cf:68:ca:7e:af:39:0e:84:08:17:a1:dd:50: 7c:e7:58:96:b1:a9:de:06:d4:8d:5b:68:05:77:27:34:0a:3c: e2:14:ec:1a:e0:e8:7e:79:f3:4b:a8:ed:77:ed:8e:63:f7:76: 29:c3:ee:14:f2:c8:02:09:8a:80:37:3e:bc:c3:f0:7b:d9:bf: 6a:13:ac:56:89:96:3f:68:ba:3b:17:dd:ce:02:53:5e:d6:d9: 10:77:82:18:41:4a:90:64:6e:ab:94:46:c9:9e:b9:91:e0:06: 0c:4f:c2:01:a2:a1:01:ee:ea:e8:12:e0:e3:2b:5d:e4:1c:b7: 3b:60:51:54:3a:7f:79:b8:df:d4:ef:cc:b5:7a:8f:1c:f7:97: ff:c4:ef:08:f2:71:3d:02:be:b3:fe:52:ad:bf:77:1d:21:bd: 59:5e:a4:c6:97:1e:64:01:b2:fb:4e:a7:a0:f3:67:27:82:34: 7f:f5:62:83:0a:92:b6:45:ed:87:2d:21:fc:91:31:32:96:ea: a2:25:3e:32:d2:98:d3:36:96:b1:55:51:dc:25:bb:27:82:2c: c3:ce:19:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk4NkQxMTAvBgNVBAUTKDE3MTdBQ0FDMDUzRjEzMUUyMjYxNDUyNzM2NTEzRTRF OEY2MjZDREIwHhcNMjQxMTIwMTkyNjA0WhcNMjQxMTI3MTkyNjA0WjAYMRYwFAYD VQQDEw02NzNlMzdjZC1mZWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmqpn9vDtBoNjO9HJX5CXdNiLmYop+HQUrn67A/fMZ6IPswbiBHh3ggl11caw eC2im/36BRC1+AmVUJlkPfwG1YvuwyubdUEBRi2qxax2WCDCc8KDHHWI/3yfWxbi uGKggoF7TLdgT0uGkVExZEelk3txhtrzaV0HQJO7rNr0La2WBC1NRZbwdixG+bcc beFG0Ic2sVEdoZZri+wbFeS5dAeFO3OcFclvKma3U8JHCVB/3gJN0x6DKP9v6p0Y byJyqB/fW8y+x45Wkmr2ElNDse/Z08cOJgg56v2XPFkhvnMDq06hkQcocbZDjmBy A/gOXFLu5whjQFqCI5OYqpW+PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHA/l5MY n9rRVqYdR5IoGca3NjWdMB8GA1UdIwQYMBaAFBcXrKwFPxMeImFFJzZRPk6PYmzb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTg2RC9BMDA3NEQxODUz M0IxMUVBQkFBNzVCM0FDNEY5QUUwMi9GeGVzckFVX0V4NGlZVVVuTmxFLVRvOWli TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z4ZXNyQVVfRXg0aVlVVW5ObEUtVG85aWJOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTg2RC9BMDA3NEQxODUzM0IxMUVBQkFBNzVCM0FDNEY5QUUwMi9GeGVzckFVX0V4 NGlZVVVuTmxFLVRvOWliTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYkU190wcGpVQ6CjLzvzqzJlYqqUqcZGJXzd14dgg51m29fnBFj3hL As9oyn6vOQ6ECBeh3VB851iWsaneBtSNW2gFdyc0CjziFOwa4Oh+efNLqO137Y5j 93Ypw+4U8sgCCYqANz68w/B72b9qE6xWiZY/aLo7F93OAlNe1tkQd4IYQUqQZG6r lEbJnrmR4AYMT8IBoqEB7uroEuDjK13kHLc7YFFUOn95uN/U78y1eo8c95f/xO8I 8nE9Ar6z/lKtv3cdIb1ZXqTGlx5kAbL7Tqeg82cngjR/9WKDCpK2Re2HLSH8kTEy luqiJT4y0pjTNpaxVVHcJbsngizDzhmQ -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:45 2024 by rpki-client on console-ams.rpki-client.org