$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft File: FyftFR9AiSEOw-Nopaae45SE4-Y.mft (raw, json) Hash identifier: 1frCzFb98fpn0uW42dO/FGjVSXcOoPAuMKzyzXBDTS8= Subject key identifier: 8C:7E:6A:88:13:C6:16:8E:F6:A1:49:A7:E8:43:B6:7E:C5:47:20:19 Authority key identifier: 17:27:ED:15:1F:40:89:21:0E:C3:E3:68:A5:A6:9E:E3:94:84:E3:E6 Certificate issuer: /CN=A9145B5E/serialNumber=1727ED151F4089210EC3E368A5A69EE39484E3E6 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft Manifest number: 21 Signing time: Thu 19 Sep 2024 06:07:42 +0000 Manifest this update: Thu 19 Sep 2024 06:07:42 +0000 Manifest next update: Thu 26 Sep 2024 06:07:42 +0000 Files and hashes: 1: FyftFR9AiSEOw-Nopaae45SE4-Y.crl (hash: E3fQOKIaqTRk1/vKzOgChMlrYgYRJQLExbzI3c8dhlk=) 2: F149E6BE45B611EFA10B0632C4F9AE02.roa (hash: h+vGforlKooboxWt0o/ebQfnUR6ElZUs675fxw0zqPU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.crl rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 06:07:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145B5E/serialNumber=1727ED151F4089210EC3E368A5A69EE39484E3E6 Validity Not Before: Sep 19 06:07:42 2024 GMT Not After : Sep 26 06:07:42 2024 GMT Subject: CN=66ebbfae-7df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:61:19:a6:27:74:40:1e:32:fe:85:36:10:1c: 87:27:99:6b:bf:9e:d8:ad:2a:c8:c7:2a:a1:c6:83: cf:ad:3a:11:67:3a:5f:5d:18:08:24:b7:8a:66:6f: 4d:98:4e:59:d1:11:4e:7b:52:ac:d3:bd:f2:45:b0: 44:79:d2:4b:4b:28:92:0e:df:aa:fd:42:9a:06:7e: 7f:89:a3:d8:a6:08:4d:7e:e4:b4:f6:9a:4a:9b:ce: 5e:1d:97:f0:c0:32:7f:e1:ad:67:bf:ac:60:e3:37: a3:7a:73:8d:8d:db:99:9b:dd:e9:1c:0b:ec:5f:09: e4:9f:17:37:fe:0b:0c:1a:52:ff:fa:56:a7:f3:01: 57:11:6a:d3:91:2b:94:54:b9:c9:1e:3b:d1:84:19: c9:0d:67:14:ac:b0:49:2c:58:37:40:3c:49:e2:29: e0:e3:d0:8b:68:d7:ad:66:10:8b:f8:1e:7d:fb:b3: 3d:4e:3c:dd:23:87:97:67:55:ee:c5:dd:a0:93:56: 36:47:18:8f:b8:00:e0:86:81:f9:2c:3e:66:ff:81: d8:b1:ff:b1:0c:ee:23:cc:b0:d3:e9:ac:d7:a8:67: 24:e2:b9:5f:da:19:e0:a4:af:c7:d5:2b:db:98:d6: 30:0a:5f:4e:73:d4:8e:7d:7c:e9:b6:ee:52:7f:07: 9f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7E:6A:88:13:C6:16:8E:F6:A1:49:A7:E8:43:B6:7E:C5:47:20:19 X509v3 Authority Key Identifier: keyid:17:27:ED:15:1F:40:89:21:0E:C3:E3:68:A5:A6:9E:E3:94:84:E3:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:71:87:5e:5b:0c:35:af:14:55:c9:99:5d:ed:f4:55:42:78: af:06:d1:4e:56:70:16:90:d6:11:04:d4:a3:5c:45:09:d0:b9: 0f:1e:18:3d:9d:a2:6f:88:f6:3c:9b:89:88:f3:9c:4b:be:18: b9:fc:ed:a6:8c:fa:47:92:13:16:86:0a:ae:d4:b9:6a:03:8c: a2:a9:f6:b8:f7:f1:8d:d2:96:e7:73:72:4d:9a:75:f7:87:35: aa:bc:2b:66:6b:be:25:f9:ac:48:49:e7:89:83:3e:5c:ef:e3: 41:ca:ab:37:55:40:d3:26:ae:4a:9a:c8:68:b5:2f:c6:e2:90: 1c:1e:49:dc:11:2a:61:45:b2:b7:ec:f3:87:7f:b6:c6:ae:e7: b3:81:2f:24:d3:29:7a:a8:ba:ca:f3:5b:c8:51:4a:4b:82:08: a7:7c:e9:cd:2a:a5:3e:e3:9f:ad:c6:72:e8:21:fa:7c:f1:ec: 7e:e4:86:6c:05:b5:dc:2e:e4:d9:e1:d3:85:e9:71:5a:a0:96: ff:58:83:ae:3d:20:f2:bf:2f:0b:99:3b:2b:09:a3:bf:db:91: ed:20:40:3a:0b:61:1f:17:9b:57:44:36:01:fe:4e:73:04:4d: ad:c4:e6:bf:1a:c1:74:80:ce:4a:1b:41:99:b5:5b:05:3e:c4: d0:c5:a1:a6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NUI1RTExMC8GA1UEBRMoMTcyN0VEMTUxRjQwODkyMTBFQzNFMzY4QTVBNjlFRTM5 NDg0RTNFNjAeFw0yNDA5MTkwNjA3NDJaFw0yNDA5MjYwNjA3NDJaMBgxFjAUBgNV BAMTDTY2ZWJiZmFlLTdkZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/YRmmJ3RAHjL+hTYQHIcnmWu/ntitKsjHKqHGg8+tOhFnOl9dGAgkt4pmb02Y TlnREU57UqzTvfJFsER50ktLKJIO36r9QpoGfn+Jo9imCE1+5LT2mkqbzl4dl/DA Mn/hrWe/rGDjN6N6c42N25mb3ekcC+xfCeSfFzf+CwwaUv/6VqfzAVcRatORK5RU uckeO9GEGckNZxSssEksWDdAPEniKeDj0Ito161mEIv4Hn37sz1OPN0jh5dnVe7F 3aCTVjZHGI+4AOCGgfksPmb/gdix/7EM7iPMsNPprNeoZyTiuV/aGeCkr8fVK9uY 1jAKX05z1I59fOm27lJ/B5+VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjH5qiBPG Fo72oUmn6EO2fsVHIBkwHwYDVR0jBBgwFoAUFyftFR9AiSEOw+Nopaae45SE4+Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1QjVFLzdERDdCQkJDNDVC NTExRUZCQTRBNjIxRUM0RjlBRTAyL0Z5ZnRGUjlBaVNFT3ctTm9wYWFlNDVTRTQt WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRnlmdEZSOUFpU0VPdy1Ob3BhYWU0NVNFNC1ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 QjVFLzdERDdCQkJDNDVCNTExRUZCQTRBNjIxRUM0RjlBRTAyL0Z5ZnRGUjlBaVNF T3ctTm9wYWFlNDVTRTQtWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALlxh15bDDWvFFXJmV3t9FVCeK8G0U5WcBaQ1hEE1KNcRQnQuQ8eGD2d om+I9jybiYjznEu+GLn87aaM+keSExaGCq7UuWoDjKKp9rj38Y3Sludzck2adfeH Naq8K2ZrviX5rEhJ54mDPlzv40HKqzdVQNMmrkqayGi1L8bikBweSdwRKmFFsrfs 84d/tsau57OBLyTTKXqousrzW8hRSkuCCKd86c0qpT7jn63Gcugh+nzx7H7khmwF tdwu5Nnh04XpcVqglv9Yg649IPK/LwuZOysJo7/bke0gQDoLYR8Xm1dENgH+TnME Ta3E5r8awXSAzkobQZm1WwU+xNDFoaY= -----END CERTIFICATE-----Generated at Thu Sep 19 07:13:48 2024 by rpki-client on console-fra.rpki-client.org