$ rpki-client -vvf rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft File: FX3bMj02U1BOMIJOaeDbA3U6aM4.mft (raw, json) Hash identifier: vcagCGG/ED3kqR/CDN9acoBbLtOg3vf761i4ctfwAGc= Subject key identifier: F0:CD:F5:B9:A4:93:70:6A:B4:D1:EA:AA:1F:FE:97:EB:11:47:9A:3B Authority key identifier: 15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE Certificate issuer: /CN=A91480B2/serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft Manifest number: D3 Signing time: Sat 23 Nov 2024 03:45:47 +0000 Manifest this update: Sat 23 Nov 2024 03:45:46 +0000 Manifest next update: Sat 30 Nov 2024 03:45:46 +0000 Files and hashes: 1: FX3bMj02U1BOMIJOaeDbA3U6aM4.crl (hash: IKa/w+xoX6YKYP/WBpiNPIb7owbG2ZYzX977KXndqBs=) 2: 93151D5668F911EE9916D146C4F9AE02.roa (hash: 0qsmBJg5UUGr6e1w6S/R56pfS95Y3X7V8TkVGk6lD/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91480B2/serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE Validity Not Before: Nov 23 03:45:46 2024 GMT Not After : Nov 30 03:45:46 2024 GMT Subject: CN=67414fea-f98e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:02:51:63:65:70:a6:46:df:10:af:2c:ef:80: da:47:ae:8b:88:fa:65:96:bf:28:18:26:d5:37:1a: ac:cf:f5:23:74:9a:a1:5c:b6:e5:5b:4d:1e:c1:95: fa:91:c0:6b:6d:5e:96:df:f1:59:51:d8:15:5d:cc: 9f:59:22:6c:a9:71:10:89:ea:7f:af:e6:80:79:10: 6b:44:3d:05:80:fd:db:06:19:e5:bb:06:e5:f3:17: fb:bd:44:d4:36:42:13:18:12:86:41:86:82:b5:b3: 02:3d:45:d2:d6:4e:c8:54:dc:7d:e8:82:71:0d:83: 43:e6:d9:d2:8a:1b:c0:19:0f:e5:6f:d3:61:c5:1f: 68:4b:a0:1e:1a:c0:6a:fc:60:b3:32:70:18:c0:bc: 1d:3c:0f:f2:c7:46:7e:9d:60:9a:f5:0c:1d:f4:69: 10:d7:fc:fb:84:34:5b:e7:3d:5b:9f:55:98:82:26: 94:f4:7b:6d:ef:de:58:61:ad:d1:20:04:3f:4b:1e: a3:c6:af:ca:8d:bd:23:11:0b:08:40:57:a6:6d:69: 4c:68:7a:6f:61:0e:05:43:a5:36:a2:b4:12:2c:50: 75:39:df:7b:23:30:14:ff:3a:68:8d:73:7d:7a:38: af:fc:f0:fa:77:87:63:6c:b9:de:5d:87:1d:d6:35: bb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:CD:F5:B9:A4:93:70:6A:B4:D1:EA:AA:1F:FE:97:EB:11:47:9A:3B X509v3 Authority Key Identifier: keyid:15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:11:cf:8a:ec:fd:b0:0e:57:3c:ba:4a:d9:04:f6:f7:fe:88: eb:77:42:c7:89:33:30:c7:7d:b4:75:6e:b5:b3:2c:04:d1:c4: a5:24:5a:8f:da:a4:41:a6:f6:8e:45:30:76:f8:dc:0a:0d:d6: d5:ed:15:b8:4e:dc:d4:53:60:3a:c0:8c:0a:07:cd:53:42:46: 6e:2e:49:e5:8c:26:1e:f1:f3:c1:d6:a1:4d:10:a6:d6:43:9e: a3:c1:ce:c4:86:ba:8c:9d:15:c7:9f:60:4c:2e:9b:e5:df:94: 97:e5:25:22:1f:41:c4:53:37:62:88:ee:03:35:2a:97:ac:e5: 9c:57:0f:6f:e8:16:ff:6d:3e:1d:50:2c:ef:1f:1f:1c:12:3c: 9d:2f:26:76:9c:90:0d:f8:a1:cd:12:4f:07:1c:62:62:aa:a9: 56:82:a8:93:07:c3:12:87:4c:10:c1:94:57:81:d6:12:d6:da: e6:85:8d:d7:45:f5:32:cc:97:42:a0:fb:b0:ba:12:69:6b:4c: 53:0b:70:b1:53:22:87:65:a9:11:15:ea:f6:b6:51:52:bb:b9: af:fc:f0:25:b9:7e:e4:5c:23:04:30:a2:91:ab:45:fe:d5:21: 3f:c2:6f:7e:e7:5c:68:f4:9b:e5:04:11:56:9b:ef:ba:fb:f1: 82:e2:7a:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDgwQjIxMTAvBgNVBAUTKDE1N0REQjMyM0QzNjUzNTA0RTMwODI0RTY5RTBEQjAz NzUzQTY4Q0UwHhcNMjQxMTIzMDM0NTQ2WhcNMjQxMTMwMDM0NTQ2WjAYMRYwFAYD VQQDEw02NzQxNGZlYS1mOThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgJRY2VwpkbfEK8s74DaR66LiPpllr8oGCbVNxqsz/UjdJqhXLblW00ewZX6 kcBrbV6W3/FZUdgVXcyfWSJsqXEQiep/r+aAeRBrRD0FgP3bBhnluwbl8xf7vUTU NkITGBKGQYaCtbMCPUXS1k7IVNx96IJxDYND5tnSihvAGQ/lb9NhxR9oS6AeGsBq /GCzMnAYwLwdPA/yx0Z+nWCa9Qwd9GkQ1/z7hDRb5z1bn1WYgiaU9Htt795YYa3R IAQ/Sx6jxq/Kjb0jEQsIQFembWlMaHpvYQ4FQ6U2orQSLFB1Od97IzAU/zpojXN9 ejiv/PD6d4djbLneXYcd1jW78wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDN9bmk k3BqtNHqqh/+l+sRR5o7MB8GA1UdIwQYMBaAFBV92zI9NlNQTjCCTmng2wN1OmjO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODBCMi80MUNCQjY0RTY4 RjkxMUVFQUQ2Q0Y2MkVDNEY5QUUwMi9GWDNiTWowMlUxQk9NSUpPYWVEYkEzVTZh TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYM2JNajAyVTFCT01JSk9hZURiQTNVNmFNNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODBCMi80MUNCQjY0RTY4RjkxMUVFQUQ2Q0Y2MkVDNEY5QUUwMi9GWDNiTWowMlUx Qk9NSUpPYWVEYkEzVTZhTTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6Ec+K7P2wDlc8ukrZBPb3/ojrd0LHiTMwx320dW61sywE0cSlJFqP 2qRBpvaORTB2+NwKDdbV7RW4TtzUU2A6wIwKB81TQkZuLknljCYe8fPB1qFNEKbW Q56jwc7EhrqMnRXHn2BMLpvl35SX5SUiH0HEUzdiiO4DNSqXrOWcVw9v6Bb/bT4d UCzvHx8cEjydLyZ2nJAN+KHNEk8HHGJiqqlWgqiTB8MSh0wQwZRXgdYS1trmhY3X RfUyzJdCoPuwuhJpa0xTC3CxUyKHZakRFer2tlFSu7mv/PAluX7kXCMEMKKRq0X+ 1SE/wm9+51xo9JvlBBFWm++6+/GC4nq2 -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:06 2024 by rpki-client on console-ams.rpki-client.org