$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft File: FsAdnKD_vvrguwEOUURQeupBDQM.mft (raw, json) Hash identifier: uxMcfwxKvDsKjgX97XegttSaPgyOwS1hPOb4aW7PwZU= Subject key identifier: 15:C1:FD:A0:21:57:74:81:7B:EA:A8:85:27:AE:5B:0B:58:DB:64:D1 Authority key identifier: 16:C0:1D:9C:A0:FF:BE:FA:E0:BB:01:0E:51:44:50:7A:EA:41:0D:03 Certificate issuer: /CN=A91415AA/serialNumber=16C01D9CA0FFBEFAE0BB010E5144507AEA410D03 Certificate serial: 0823 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft Manifest number: 1220 Signing time: Fri 22 Nov 2024 19:36:16 +0000 Manifest this update: Fri 22 Nov 2024 19:36:15 +0000 Manifest next update: Fri 29 Nov 2024 19:36:15 +0000 Files and hashes: 1: FsAdnKD_vvrguwEOUURQeupBDQM.crl (hash: VluzTqOLy8ldhVYQFmle26uYQxAlLf+ifkTVEB1qBO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.crl rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:36:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2083 (0x823) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415AA/serialNumber=16C01D9CA0FFBEFAE0BB010E5144507AEA410D03 Validity Not Before: Nov 22 19:36:15 2024 GMT Not After : Nov 29 19:36:15 2024 GMT Subject: CN=6740dd2f-abce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:64:87:e3:fd:66:14:3e:cd:ee:f8:41:f1:a1: 4f:bd:10:50:9d:d8:1b:f2:d6:4a:b0:57:4d:4a:4d: 2e:97:8f:07:24:4f:19:29:53:4c:12:bd:eb:2f:05: 58:c2:57:d2:8f:2f:43:9b:c8:91:6a:0a:8c:b0:f3: ba:df:6d:0b:82:57:96:21:69:d3:1d:68:e7:0d:c5: 9d:d3:6d:b9:c6:34:52:03:a8:60:72:6f:2f:5a:1b: b7:a9:71:4c:b6:38:3d:44:4e:eb:79:63:40:23:4c: e1:a8:5d:fb:48:3e:2f:6f:90:c5:6f:e0:32:dc:19: c5:75:41:f5:c8:22:26:ef:4c:28:ce:ae:d5:c3:34: f7:b7:63:45:f1:d3:42:20:b7:d1:8d:c4:43:f1:80: e9:56:5a:b6:d2:1e:84:00:4c:81:bb:71:20:75:2c: fa:a6:db:71:e5:42:af:40:0b:81:1b:df:ae:a3:3e: fe:ef:d6:f1:76:c8:05:6f:ad:98:95:8e:30:3c:2d: fe:8e:70:30:2d:7f:83:04:e5:ac:ae:43:66:bb:72: d6:a8:01:71:db:d5:8e:38:93:2f:f0:87:b9:7f:7c: 45:0a:30:5b:99:ec:cc:d6:37:47:13:0e:db:18:2e: f1:c4:ea:b4:be:0b:e9:c8:39:64:ae:03:b4:54:1a: e4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C1:FD:A0:21:57:74:81:7B:EA:A8:85:27:AE:5B:0B:58:DB:64:D1 X509v3 Authority Key Identifier: keyid:16:C0:1D:9C:A0:FF:BE:FA:E0:BB:01:0E:51:44:50:7A:EA:41:0D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsAdnKD_vvrguwEOUURQeupBDQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/FsAdnKD_vvrguwEOUURQeupBDQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:03:69:ba:a5:c9:11:51:37:17:66:b5:fa:84:57:da:1b:56: 4e:c6:5e:28:01:2f:5f:ba:6c:48:10:c1:66:34:47:24:30:5a: 38:5f:a3:c0:95:11:c9:04:1f:b6:d7:a1:c5:2a:be:48:8b:71: 6e:82:a6:af:70:f3:0d:f9:e4:6c:da:d7:44:e2:eb:de:e3:33: 75:fd:f4:43:20:9d:9f:ec:7f:d3:b4:da:db:1b:e6:ae:8b:dc: 89:ef:d6:3f:bb:82:e2:a6:84:b1:03:4d:5e:a8:c4:16:cd:d9: 47:0d:f8:5a:b9:9b:a6:19:9e:0c:b2:b1:5b:c0:79:75:9b:d8: 47:4d:72:58:ab:b3:56:de:10:d9:47:9e:2e:1e:ef:d4:34:7c: 29:9d:01:63:1d:53:0a:79:86:10:f5:aa:aa:64:01:09:3a:5c: 59:f3:d1:a7:34:d2:c3:0f:42:a0:b3:2a:70:44:74:b0:c2:bf: 43:e4:09:fb:48:54:6b:60:82:fa:a4:b2:3e:2a:3f:2f:48:d7: 0f:86:07:ac:76:ba:8a:06:e5:77:5d:b4:56:0d:46:d0:7b:9b: 4b:d4:31:26:ea:78:9d:73:5b:84:2d:4b:50:66:5a:48:45:17: 68:55:94:7c:85:3f:45:b4:d6:7f:47:8e:ad:11:99:fc:e3:00: 6f:08:c0:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1QUExMTAvBgNVBAUTKDE2QzAxRDlDQTBGRkJFRkFFMEJCMDEwRTUxNDQ1MDdB RUE0MTBEMDMwHhcNMjQxMTIyMTkzNjE1WhcNMjQxMTI5MTkzNjE1WjAYMRYwFAYD VQQDEw02NzQwZGQyZi1hYmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWSH4/1mFD7N7vhB8aFPvRBQndgb8tZKsFdNSk0ul48HJE8ZKVNMEr3rLwVY wlfSjy9Dm8iRagqMsPO6320LgleWIWnTHWjnDcWd0225xjRSA6hgcm8vWhu3qXFM tjg9RE7reWNAI0zhqF37SD4vb5DFb+Ay3BnFdUH1yCIm70wozq7VwzT3t2NF8dNC ILfRjcRD8YDpVlq20h6EAEyBu3EgdSz6pttx5UKvQAuBG9+uoz7+79bxdsgFb62Y lY4wPC3+jnAwLX+DBOWsrkNmu3LWqAFx29WOOJMv8Ie5f3xFCjBbmezM1jdHEw7b GC7xxOq0vgvpyDlkrgO0VBrkowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXB/aAh V3SBe+qohSeuWwtY22TRMB8GA1UdIwQYMBaAFBbAHZyg/7764LsBDlFEUHrqQQ0D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVBQS8zRUZBMjQxNDYy RTAxMUVBQTZENTlBMkNDNEY5QUUwMi9Gc0FkbktEX3Z2cmd1d0VPVVVSUWV1cEJE UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZzQWRuS0RfdnZyZ3V3RU9VVVJRZXVwQkRRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTVBQS8zRUZBMjQxNDYyRTAxMUVBQTZENTlBMkNDNEY5QUUwMi9Gc0FkbktEX3Z2 cmd1d0VPVVVSUWV1cEJEUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5A2m6pckRUTcXZrX6hFfaG1ZOxl4oAS9fumxIEMFmNEckMFo4X6PA lRHJBB+216HFKr5Ii3FugqavcPMN+eRs2tdE4uve4zN1/fRDIJ2f7H/TtNrbG+au i9yJ79Y/u4LipoSxA01eqMQWzdlHDfhauZumGZ4MsrFbwHl1m9hHTXJYq7NW3hDZ R54uHu/UNHwpnQFjHVMKeYYQ9aqqZAEJOlxZ89GnNNLDD0KgsypwRHSwwr9D5An7 SFRrYIL6pLI+Kj8vSNcPhgesdrqKBuV3XbRWDUbQe5tL1DEm6nidc1uELUtQZlpI RRdoVZR8hT9FtNZ/R46tEZn84wBvCMAA -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:25 2024 by rpki-client on console-ams.rpki-client.org