$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft File: FSDys0q93K6U-pIu9HV802FA8lQ.mft (raw, json) Hash identifier: sm50nS5cB9U5kOp+MSreLsfbONIDuYukfa6onvu3yzE= Subject key identifier: 48:4F:79:E0:99:D3:BE:8D:7A:C7:79:12:AF:12:D8:52:06:FE:B8:34 Authority key identifier: 15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54 Certificate issuer: /CN=A9143FE9/serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254 Certificate serial: 06B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft Manifest number: 06A4 Signing time: Fri 22 Nov 2024 21:47:35 +0000 Manifest this update: Fri 22 Nov 2024 21:47:35 +0000 Manifest next update: Fri 29 Nov 2024 21:47:35 +0000 Files and hashes: 1: FSDys0q93K6U-pIu9HV802FA8lQ.crl (hash: M+eD3o3MWBc1GJtAJ3AM4iGShZSqPx5gob/fgz7yYZI=) 2: A6864ACE7BA911EDB41A851EC4F9AE02.roa (hash: kYULKBF0f+X2lym6gobBhgJLTHESp77NMJYuJ7TqmJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1712 (0x6b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143FE9/serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254 Validity Not Before: Nov 22 21:47:35 2024 GMT Not After : Nov 29 21:47:35 2024 GMT Subject: CN=6740fbf7-7d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:29:85:f6:f0:6c:69:97:3c:b7:c3:90:7d:a5: f4:74:04:c0:1e:40:e1:4a:68:1f:18:8b:18:29:bf: b9:52:0e:73:b1:a9:36:da:75:42:4a:92:00:bf:36: 23:cf:f2:7c:f0:4c:d9:fe:3c:7e:92:1a:b3:84:20: f9:af:95:9c:74:57:68:d0:99:dd:8a:cc:c4:27:4b: 22:af:10:97:b0:e2:72:78:7f:81:09:3b:eb:07:84: 98:8a:de:0c:4c:be:f7:58:cf:0d:f6:35:f8:97:ef: 0d:09:8c:50:7a:bc:46:ac:82:3d:4c:ec:b2:a7:d4: c9:e9:0f:77:8b:2b:c6:27:37:59:67:3a:6e:5a:e5: 6d:4b:f7:11:7d:6e:e5:5a:32:df:27:9d:93:db:88: 52:25:7b:a8:a3:58:16:a7:88:d9:17:ae:32:54:bc: cb:e4:c7:35:45:81:bf:7d:06:b5:d8:14:2f:1e:51: b4:b2:39:94:62:9b:f3:52:31:cd:6a:83:34:2d:fe: 40:a5:99:c6:c4:54:ff:74:5c:4d:10:4f:99:c1:3f: 4c:86:ec:43:dc:ef:44:96:86:92:1a:af:38:b3:6a: 83:1b:df:3d:5a:82:e5:47:78:8d:a6:66:0e:1d:71: 63:1c:b0:69:8e:c5:e3:97:f9:a6:3a:62:72:b4:f0: 45:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4F:79:E0:99:D3:BE:8D:7A:C7:79:12:AF:12:D8:52:06:FE:B8:34 X509v3 Authority Key Identifier: keyid:15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:9a:68:38:19:62:7b:6f:e1:d1:20:fe:fc:98:f8:72:97:65: d4:a6:d4:0e:79:2b:6b:f5:81:b9:ce:46:22:e2:f8:75:a4:45: 18:a8:29:49:34:ae:c6:f0:51:52:d8:51:5a:cd:b2:37:6f:8a: d2:92:66:93:29:79:33:0d:43:e3:10:21:cf:6f:8b:07:90:26: a3:15:66:ff:3f:67:a0:dd:66:f8:e0:a4:62:c0:59:43:4a:b5: 59:c0:96:0a:6b:f5:9c:fc:a3:46:cd:b9:b5:fb:4e:93:37:a3: e3:3f:45:48:23:5b:3d:d4:58:fc:d6:d0:fe:9c:2b:84:00:ab: 1f:7b:35:8b:e5:b2:fd:af:68:6a:c5:59:2f:b5:f6:86:9d:d9: 21:0c:17:9f:6e:eb:09:82:a0:25:c2:ff:3d:ed:5b:d6:d7:2b: 62:63:65:f3:73:f6:09:20:90:84:2e:3b:0b:64:fb:85:e4:3f: 33:86:db:d3:c6:bf:30:d5:19:a4:66:9b:92:21:83:95:f5:fa: 31:7f:22:4e:cf:45:04:87:17:ef:62:a4:f9:dc:30:bc:fd:9a: 3d:c2:67:f6:e0:07:31:b4:60:3a:2f:21:f9:03:29:00:9c:c2: 26:d3:b3:d8:ae:45:7d:e7:bf:14:fb:f8:13:ec:69:84:43:1e: 5d:b5:39:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGRTkxMTAvBgNVBAUTKDE1MjBGMkIzNEFCRERDQUU5NEZBOTIyRUY0NzU3Q0Qz NjE0MEYyNTQwHhcNMjQxMTIyMjE0NzM1WhcNMjQxMTI5MjE0NzM1WjAYMRYwFAYD VQQDEw02NzQwZmJmNy03ZDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsCmF9vBsaZc8t8OQfaX0dATAHkDhSmgfGIsYKb+5Ug5zsak22nVCSpIAvzYj z/J88EzZ/jx+khqzhCD5r5WcdFdo0JndiszEJ0sirxCXsOJyeH+BCTvrB4SYit4M TL73WM8N9jX4l+8NCYxQerxGrII9TOyyp9TJ6Q93iyvGJzdZZzpuWuVtS/cRfW7l WjLfJ52T24hSJXuoo1gWp4jZF64yVLzL5Mc1RYG/fQa12BQvHlG0sjmUYpvzUjHN aoM0Lf5ApZnGxFT/dFxNEE+ZwT9MhuxD3O9EloaSGq84s2qDG989WoLlR3iNpmYO HXFjHLBpjsXjl/mmOmJytPBFYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhPeeCZ 076Nesd5Eq8S2FIG/rg0MB8GA1UdIwQYMBaAFBUg8rNKvdyulPqSLvR1fNNhQPJU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0ZFOS9GOUU2NUUyMDQ0 MzgxMUVCQUQ0NDNGNzRDNEY5QUUwMi9GU0R5czBxOTNLNlUtcEl1OUhWODAyRkE4 bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTRHlzMHE5M0s2VS1wSXU5SFY4MDJGQThsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0ZFOS9GOUU2NUUyMDQ0MzgxMUVCQUQ0NDNGNzRDNEY5QUUwMi9GU0R5czBxOTNL NlUtcEl1OUhWODAyRkE4bFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMmmg4GWJ7b+HRIP78mPhyl2XUptQOeStr9YG5zkYi4vh1pEUYqClJ NK7G8FFS2FFazbI3b4rSkmaTKXkzDUPjECHPb4sHkCajFWb/P2eg3Wb44KRiwFlD SrVZwJYKa/Wc/KNGzbm1+06TN6PjP0VII1s91Fj81tD+nCuEAKsfezWL5bL9r2hq xVkvtfaGndkhDBefbusJgqAlwv897VvW1ytiY2Xzc/YJIJCELjsLZPuF5D8zhtvT xr8w1RmkZpuSIYOV9foxfyJOz0UEhxfvYqT53DC8/Zo9wmf24AcxtGA6LyH5AykA nMIm07PYrkV9578U+/gT7GmEQx5dtTmn -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:38 2024 by rpki-client on console-ams.rpki-client.org