$ rpki-client -vvf rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft File: ftznGSWL7fkKqGya6wjN0x7vV3o.mft (raw, json) Hash identifier: gMfMcc7LxMBgjh5rAUuT6TuOVuhUFuWb7Ka+gzXnM4M= Subject key identifier: 50:8A:5F:7A:5F:66:A6:E2:C8:FC:8C:C2:43:DA:D4:48:2F:A3:30:AB Authority key identifier: 7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A Certificate issuer: /CN=A912E53C/serialNumber=7EDCE719258BEDF90AA86C9AEB08CDD31EEF577A Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft Manifest number: 8C Signing time: Sat 23 Nov 2024 04:33:58 +0000 Manifest this update: Sat 23 Nov 2024 04:33:58 +0000 Manifest next update: Sat 30 Nov 2024 04:33:58 +0000 Files and hashes: 1: ftznGSWL7fkKqGya6wjN0x7vV3o.crl (hash: mZ92sLmFOz9vS3bVnGuuOeTu0cw+W72jM9azImDNM1s=) 2: 44CA7E22F0D811EEA8D08633C4F9AE02.roa (hash: BgGoHCl2iTsuBLT+ayqXCo0W6SSb3rjCMeP23JW82+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.crl rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E53C/serialNumber=7EDCE719258BEDF90AA86C9AEB08CDD31EEF577A Validity Not Before: Nov 23 04:33:58 2024 GMT Not After : Nov 30 04:33:58 2024 GMT Subject: CN=67415b36-4879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:28:20:92:81:a5:4c:30:90:e5:f5:3d:e7:a0: a9:52:95:2d:85:19:24:f2:80:15:48:e9:9d:80:f9: 58:96:4b:da:ce:9e:55:94:c5:ec:a1:44:24:d0:a8: 46:40:af:0c:de:09:03:e9:f9:64:e1:6b:7b:07:1e: c5:95:70:38:e6:b7:51:73:53:e0:61:7c:8c:8f:cc: da:7d:b2:ca:0c:6e:47:9c:86:c7:11:90:d7:f7:99: 94:0e:8f:cc:06:b0:1b:11:7f:8b:81:ee:a8:93:34: 0b:e1:67:49:41:19:5c:9a:38:54:85:4e:be:8b:15: c7:81:30:21:64:23:7c:83:ae:b1:d3:2c:df:b8:67: df:21:c7:78:a2:d6:60:ab:f5:08:fa:07:e2:7b:ac: fe:ec:a6:2b:89:2d:0d:81:21:8c:67:ff:37:b5:f0: 1f:57:b3:8c:4a:b1:33:09:93:8d:76:8c:b0:4a:e2: c0:f2:f8:c8:fa:1c:7f:15:28:52:13:1d:ff:58:bf: 60:5b:a4:02:b9:8d:7d:c2:3c:a5:3a:ce:5d:87:7b: 79:64:46:58:35:ec:5c:31:13:11:d5:95:0d:c9:0b: d1:88:a7:2c:b2:fc:60:b6:34:45:33:ce:3e:63:d6: 95:21:d6:53:bf:90:08:ea:20:ff:0a:2d:40:d1:84: 5f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:8A:5F:7A:5F:66:A6:E2:C8:FC:8C:C2:43:DA:D4:48:2F:A3:30:AB X509v3 Authority Key Identifier: keyid:7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:15:84:bc:e4:2f:7c:92:f6:66:74:c0:4b:4d:f0:70:55:2f: a2:4e:aa:43:5a:18:61:3b:31:fe:3f:9e:b4:6b:69:43:97:dc: f2:41:6e:ff:2c:51:f2:cf:3c:b3:53:46:08:4d:4f:a0:00:27: 93:02:02:a3:7f:a8:75:fd:d8:02:e1:24:f0:73:11:14:6e:b1: 53:e9:ff:77:02:06:9d:5a:85:f9:93:d6:99:06:e9:8d:01:86: b5:9c:3c:58:d2:ba:db:6e:50:9b:a5:e4:1d:68:3b:0c:3e:a3: dc:29:72:43:2a:80:0a:cd:4e:24:f8:7b:73:41:64:fa:89:fa: 27:cf:cc:69:50:22:80:60:08:dd:34:29:2a:d9:4a:9a:11:a1: 8c:fb:de:71:c0:91:c6:dc:7a:8d:18:41:d1:70:f2:fb:14:70: 63:50:97:5f:24:c4:28:54:fd:71:ed:5a:4d:78:33:dc:ac:16: b2:a0:ae:ed:e2:c2:e3:4a:8e:1c:ef:9c:03:48:1e:64:8a:b0: be:5c:75:f1:74:a7:d9:ff:b0:73:07:5a:14:48:30:94:2c:a5: af:b8:54:cd:68:7c:4a:39:96:2e:2f:15:1f:8f:a6:cd:07:d7: 5d:a3:0f:59:23:db:89:b3:05:50:a6:13:f9:98:9b:be:89:d6: 59:ec:cb:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU1M0MxMTAvBgNVBAUTKDdFRENFNzE5MjU4QkVERjkwQUE4NkM5QUVCMDhDREQz MUVFRjU3N0EwHhcNMjQxMTIzMDQzMzU4WhcNMjQxMTMwMDQzMzU4WjAYMRYwFAYD VQQDEw02NzQxNWIzNi00ODc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCggkoGlTDCQ5fU956CpUpUthRkk8oAVSOmdgPlYlkvazp5VlMXsoUQk0KhG QK8M3gkD6flk4Wt7Bx7FlXA45rdRc1PgYXyMj8zafbLKDG5HnIbHEZDX95mUDo/M BrAbEX+Lge6okzQL4WdJQRlcmjhUhU6+ixXHgTAhZCN8g66x0yzfuGffIcd4otZg q/UI+gfie6z+7KYriS0NgSGMZ/83tfAfV7OMSrEzCZONdoywSuLA8vjI+hx/FShS Ex3/WL9gW6QCuY19wjylOs5dh3t5ZEZYNexcMRMR1ZUNyQvRiKcssvxgtjRFM84+ Y9aVIdZTv5AI6iD/Ci1A0YRfKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCKX3pf ZqbiyPyMwkPa1EgvozCrMB8GA1UdIwQYMBaAFH7c5xkli+35CqhsmusIzdMe71d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTUzQy80QkQwRTVGOEQz N0QxMUVFQkEwNUJEMTZDNEY5QUUwMi9mdHpuR1NXTDdma0txR3lhNndqTjB4N3ZW M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0em5HU1dMN2ZrS3FHeWE2d2pOMHg3dlYzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTUzQy80QkQwRTVGOEQzN0QxMUVFQkEwNUJEMTZDNEY5QUUwMi9mdHpuR1NXTDdm a0txR3lhNndqTjB4N3ZWM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzFYS85C98kvZmdMBLTfBwVS+iTqpDWhhhOzH+P560a2lDl9zyQW7/ LFHyzzyzU0YITU+gACeTAgKjf6h1/dgC4STwcxEUbrFT6f93AgadWoX5k9aZBumN AYa1nDxY0rrbblCbpeQdaDsMPqPcKXJDKoAKzU4k+HtzQWT6ifonz8xpUCKAYAjd NCkq2UqaEaGM+95xwJHG3HqNGEHRcPL7FHBjUJdfJMQoVP1x7VpNeDPcrBayoK7t 4sLjSo4c75wDSB5kirC+XHXxdKfZ/7BzB1oUSDCULKWvuFTNaHxKOZYuLxUfj6bN B9ddow9ZI9uJswVQphP5mJu+idZZ7Mv2 -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:04 2024 by rpki-client on console-ams.rpki-client.org