$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft File: FKbKvDAuwePc503pi_VYoEK-rFY.mft (raw, json) Hash identifier: UulUNC8kVVwWYykaqgclt1wV3MvP012qPfYEWs1NKLI= Subject key identifier: EF:5A:51:12:AD:E5:CB:C0:BA:31:0C:E5:9A:6E:08:70:24:74:76:BE Authority key identifier: 14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56 Certificate issuer: /CN=A91409DC/serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56 Certificate serial: 07FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft Manifest number: 13AF Signing time: Fri 22 Nov 2024 18:33:10 +0000 Manifest this update: Fri 22 Nov 2024 18:33:09 +0000 Manifest next update: Fri 29 Nov 2024 18:33:09 +0000 Files and hashes: 1: FKbKvDAuwePc503pi_VYoEK-rFY.crl (hash: FJoocZwRUVwuJED32i1Brj9Lr4II19V3K/bVHCy2sAQ=) 2: 3E35840C523211EE84408677C4F9AE02.roa (hash: odJkbnbFNGEzA/PRiNLIwgSKK/+yDHEM4DmIe+O5Su4=) 3: DB78B2684BCD11EE8F976B7EC4F9AE02.roa (hash: KUS4Ox2gEpezMstwpX1CTC0qzfRNi3wV04onRKW1ycI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:33:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2045 (0x7fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91409DC/serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56 Validity Not Before: Nov 22 18:33:09 2024 GMT Not After : Nov 29 18:33:09 2024 GMT Subject: CN=6740ce66-f7b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cd:1f:85:9a:a8:95:4f:6f:d0:be:d4:33:e5: 17:c1:4f:f0:07:ec:55:2e:17:4e:e6:08:38:de:a2: ac:88:f4:ee:38:39:34:66:c5:66:8b:06:15:ee:95: 44:10:c3:fe:13:54:ff:7e:b5:61:df:e2:f3:32:f0: 19:a9:fa:02:de:aa:51:45:fe:43:9b:67:4b:8a:ad: f8:9c:2b:4a:cb:88:d6:6b:e1:b4:9b:2a:b7:11:c5: e7:d0:c6:88:58:f6:af:1e:01:02:bb:db:f3:31:46: 2e:e0:93:bd:7d:0c:8c:70:c7:b2:ef:74:8c:d1:7e: 6b:a8:c0:ca:80:28:b5:57:76:ac:76:84:b7:e3:61: bc:56:8d:b9:4b:1b:b1:b9:92:85:cf:ee:12:32:40: 92:3e:48:d1:4c:81:19:99:18:8c:22:2c:a7:cf:3f: 6e:76:01:59:34:f5:8e:7f:39:69:d2:8f:41:d1:d6: fa:f6:79:92:08:fe:42:fa:e4:52:69:cb:19:0a:1a: 7f:bb:16:f4:4b:b9:cb:86:f0:33:9a:50:10:08:8f: 80:b2:b2:68:be:1c:c0:7a:b7:5c:ec:fe:0e:cd:74: a5:ba:40:f6:84:a8:09:e0:22:e9:2f:48:14:c2:6d: fe:1c:6b:57:8c:9e:38:49:bc:a8:58:21:43:36:84: ed:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:5A:51:12:AD:E5:CB:C0:BA:31:0C:E5:9A:6E:08:70:24:74:76:BE X509v3 Authority Key Identifier: keyid:14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:97:8c:56:10:8e:23:22:91:26:0b:bb:10:8b:75:92:2f:d7: 99:67:7b:0d:b8:62:4e:f5:ad:eb:89:1e:f8:74:a9:c1:32:a4: 9a:bf:42:cd:80:ee:d4:c7:53:1d:74:ad:1c:d6:54:de:5b:9c: 4e:3b:ba:b5:82:0e:f1:13:41:13:7f:f4:aa:69:69:d2:4d:b5: bc:1c:74:b5:51:64:f5:46:c6:46:c2:e2:a8:c2:12:1c:e7:83: bc:a1:36:9d:a6:a4:b9:a6:22:03:e2:91:03:aa:e2:00:80:cb: 67:8a:84:aa:2b:6e:58:9d:bf:9f:43:2f:a5:35:05:df:75:69: 87:53:62:87:c0:f2:b3:67:a8:b6:d0:20:a2:74:1b:c5:80:4f: 60:18:bd:94:be:e7:69:ba:a6:03:58:c5:86:0b:36:cd:3f:70: 6f:6d:4e:53:60:7a:ec:e7:73:dd:7c:47:b4:64:2c:c8:31:28: b1:10:a9:97:f7:02:9d:01:35:3f:ba:87:66:2f:bb:3d:c5:76: f7:13:8b:2d:31:61:42:5c:11:15:5b:ef:86:a8:f0:89:f3:fe: e0:10:20:2a:9b:53:7b:7f:c2:77:4f:c5:12:1b:01:6c:a7:93: 65:3f:cf:83:a1:91:e7:aa:4a:51:54:98:9f:60:b0:0b:50:27: 4c:ec:55:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA5REMxMTAvBgNVBAUTKDE0QTZDQUJDMzAyRUMxRTNEQ0U3NERFOThCRjU1OEEw NDJCRUFDNTYwHhcNMjQxMTIyMTgzMzA5WhcNMjQxMTI5MTgzMzA5WjAYMRYwFAYD VQQDEw02NzQwY2U2Ni1mN2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyc0fhZqolU9v0L7UM+UXwU/wB+xVLhdO5gg43qKsiPTuODk0ZsVmiwYV7pVE EMP+E1T/frVh3+LzMvAZqfoC3qpRRf5Dm2dLiq34nCtKy4jWa+G0myq3EcXn0MaI WPavHgECu9vzMUYu4JO9fQyMcMey73SM0X5rqMDKgCi1V3asdoS342G8Vo25Sxux uZKFz+4SMkCSPkjRTIEZmRiMIiynzz9udgFZNPWOfzlp0o9B0db69nmSCP5C+uRS acsZChp/uxb0S7nLhvAzmlAQCI+AsrJovhzAerdc7P4OzXSlukD2hKgJ4CLpL0gU wm3+HGtXjJ44SbyoWCFDNoTtkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO9aURKt 5cvAujEM5ZpuCHAkdHa+MB8GA1UdIwQYMBaAFBSmyrwwLsHj3OdN6Yv1WKBCvqxW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDlEQy9BNUJCRkFBNjA5 MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi9GS2JLdkRBdXdlUGM1MDNwaV9WWW9FSy1y RlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZLYkt2REF1d2VQYzUwM3BpX1ZZb0VLLXJGWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDlEQy9BNUJCRkFBNjA5MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi9GS2JLdkRBdXdl UGM1MDNwaV9WWW9FSy1yRlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQl4xWEI4jIpEmC7sQi3WSL9eZZ3sNuGJO9a3riR74dKnBMqSav0LN gO7Ux1MddK0c1lTeW5xOO7q1gg7xE0ETf/SqaWnSTbW8HHS1UWT1RsZGwuKowhIc 54O8oTadpqS5piID4pEDquIAgMtnioSqK25Ynb+fQy+lNQXfdWmHU2KHwPKzZ6i2 0CCidBvFgE9gGL2UvudpuqYDWMWGCzbNP3BvbU5TYHrs53PdfEe0ZCzIMSixEKmX 9wKdATU/uodmL7s9xXb3E4stMWFCXBEVW++GqPCJ8/7gECAqm1N7f8J3T8USGwFs p5NlP8+DoZHnqkpRVJifYLALUCdM7FVq -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:57 2024 by rpki-client on console-fra.rpki-client.org