$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft File: FyftFR9AiSEOw-Nopaae45SE4-Y.mft (raw, json) Hash identifier: +EleC/rpSpg8qwGy1C3NIZF7iAap5aMhiY1aFrKuryI= Subject key identifier: D7:9E:09:15:11:89:F4:34:85:FF:92:99:71:2B:FB:51:DA:DC:62:EF Authority key identifier: 17:27:ED:15:1F:40:89:21:0E:C3:E3:68:A5:A6:9E:E3:94:84:E3:E6 Certificate issuer: /CN=A9145B5E/serialNumber=1727ED151F4089210EC3E368A5A69EE39484E3E6 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft Manifest number: 41 Signing time: Thu 21 Nov 2024 05:29:45 +0000 Manifest this update: Thu 21 Nov 2024 05:29:44 +0000 Manifest next update: Thu 28 Nov 2024 05:29:44 +0000 Files and hashes: 1: FyftFR9AiSEOw-Nopaae45SE4-Y.crl (hash: sBIuz0HTvXtkIfNKMNdZcPxopsUWheLPFReFNeaZRnw=) 2: F149E6BE45B611EFA10B0632C4F9AE02.roa (hash: h+vGforlKooboxWt0o/ebQfnUR6ElZUs675fxw0zqPU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.crl rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145B5E/serialNumber=1727ED151F4089210EC3E368A5A69EE39484E3E6 Validity Not Before: Nov 21 05:29:44 2024 GMT Not After : Nov 28 05:29:44 2024 GMT Subject: CN=673ec549-e71d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:01:9d:e2:e9:ff:d1:5e:9c:72:86:5a:21:18: 8b:e0:18:a9:2f:16:4b:6e:5c:39:97:47:e3:e4:14: 87:3a:18:21:7a:cc:85:cb:54:cb:39:a6:22:99:cb: e3:06:cc:46:13:2a:13:7e:a4:a9:2f:0b:5f:fc:ea: 16:23:e2:c0:a5:4d:88:10:bf:85:2e:2c:64:63:6c: af:11:4d:27:ce:41:19:34:f3:7e:38:c8:6b:96:c0: 0c:39:28:d6:0a:66:53:d5:f1:9a:68:87:67:8a:42: 19:b6:7f:85:48:14:00:58:a3:94:b7:30:3a:df:fe: 38:90:18:f5:6a:6c:55:23:6f:80:35:bc:94:b2:a8: a3:d8:d8:9c:de:52:60:35:e9:ab:04:e2:39:0c:e3: 87:a9:10:d5:21:ad:0b:1e:f2:ac:3a:87:63:53:41: d7:20:56:a4:21:61:c9:4f:dc:43:c6:19:11:6a:08: a6:7a:82:cb:0e:10:9f:a5:72:33:82:92:28:99:68: f7:82:f7:8c:54:86:7d:b8:07:fb:97:4a:36:6b:9e: 80:11:30:0d:30:4c:96:b5:ba:db:31:66:7d:5b:7d: 6f:1d:d4:7b:1b:1e:fa:e9:6c:9f:0e:49:e9:e0:5d: c0:95:12:10:34:14:9f:be:64:f5:a5:19:66:c1:3a: 43:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:9E:09:15:11:89:F4:34:85:FF:92:99:71:2B:FB:51:DA:DC:62:EF X509v3 Authority Key Identifier: keyid:17:27:ED:15:1F:40:89:21:0E:C3:E3:68:A5:A6:9E:E3:94:84:E3:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:bb:e3:25:96:53:8a:42:92:7f:4f:7b:c0:7c:98:7c:a7:fd: ce:2e:98:82:7c:8b:ad:3b:6d:94:7d:b6:30:ac:64:ed:b3:d6: 6f:4b:94:dc:ab:22:95:da:3a:70:a9:bf:14:9f:24:92:33:f1: 69:0f:92:c6:e5:ca:56:a0:2b:3a:31:19:27:0d:79:60:4c:9b: 07:6a:ac:87:0a:5d:29:7d:72:3e:cb:5c:93:85:01:91:0c:24: 26:3a:17:31:44:94:7d:1f:64:b0:41:eb:63:59:da:66:ee:d9: e9:1d:8c:b0:be:33:85:74:df:61:66:d3:21:88:97:b9:45:a8: 9d:e7:02:1d:72:6b:14:48:d0:8f:4b:50:7f:62:06:be:70:b5: 53:97:3e:72:d1:9d:fe:dd:27:b8:66:8c:05:b8:f2:05:35:0b: db:c0:b2:56:dd:61:7b:31:4c:da:cc:2b:8f:e7:62:0d:9c:ad: e9:a7:b8:60:b0:2f:77:53:18:aa:fe:cb:4d:4c:4e:4e:21:ad: 7e:7d:27:13:b3:79:60:39:f6:97:1c:f1:9e:c9:f0:52:95:1f: f2:5d:c5:87:f5:24:c1:3f:4c:e0:f1:21:91:0c:f7:cb:75:8f: af:a8:c0:29:bd:07:4c:05:76:6c:f2:87:74:96:d0:a5:ed:20: 50:86:19:68 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NUI1RTExMC8GA1UEBRMoMTcyN0VEMTUxRjQwODkyMTBFQzNFMzY4QTVBNjlFRTM5 NDg0RTNFNjAeFw0yNDExMjEwNTI5NDRaFw0yNDExMjgwNTI5NDRaMBgxFjAUBgNV BAMTDTY3M2VjNTQ5LWU3MWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD1AZ3i6f/RXpxyhlohGIvgGKkvFktuXDmXR+PkFIc6GCF6zIXLVMs5piKZy+MG zEYTKhN+pKkvC1/86hYj4sClTYgQv4UuLGRjbK8RTSfOQRk08344yGuWwAw5KNYK ZlPV8Zpoh2eKQhm2f4VIFABYo5S3MDrf/jiQGPVqbFUjb4A1vJSyqKPY2JzeUmA1 6asE4jkM44epENUhrQse8qw6h2NTQdcgVqQhYclP3EPGGRFqCKZ6gssOEJ+lcjOC kiiZaPeC94xUhn24B/uXSjZrnoARMA0wTJa1utsxZn1bfW8d1HsbHvrpbJ8OSeng XcCVEhA0FJ++ZPWlGWbBOkNhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU154JFRGJ 9DSF/5KZcSv7UdrcYu8wHwYDVR0jBBgwFoAUFyftFR9AiSEOw+Nopaae45SE4+Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1QjVFLzdERDdCQkJDNDVC NTExRUZCQTRBNjIxRUM0RjlBRTAyL0Z5ZnRGUjlBaVNFT3ctTm9wYWFlNDVTRTQt WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRnlmdEZSOUFpU0VPdy1Ob3BhYWU0NVNFNC1ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 QjVFLzdERDdCQkJDNDVCNTExRUZCQTRBNjIxRUM0RjlBRTAyL0Z5ZnRGUjlBaVNF T3ctTm9wYWFlNDVTRTQtWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEa74yWWU4pCkn9Pe8B8mHyn/c4umIJ8i607bZR9tjCsZO2z1m9LlNyr IpXaOnCpvxSfJJIz8WkPksblylagKzoxGScNeWBMmwdqrIcKXSl9cj7LXJOFAZEM JCY6FzFElH0fZLBB62NZ2mbu2ekdjLC+M4V032Fm0yGIl7lFqJ3nAh1yaxRI0I9L UH9iBr5wtVOXPnLRnf7dJ7hmjAW48gU1C9vAslbdYXsxTNrMK4/nYg2cremnuGCw L3dTGKr+y01MTk4hrX59JxOzeWA59pcc8Z7J8FKVH/JdxYf1JME/TODxIZEM98t1 j6+owCm9B0wFdmzyh3SW0KXtIFCGGWg= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:02 2024 by rpki-client on console-ams.rpki-client.org