$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft File: fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft (raw, json) Hash identifier: JLXY0u0hSX9D+jibnO/FP5v9llbZAp0uqzadrXhUOL8= Subject key identifier: A2:E1:3B:E2:95:19:8C:AB:3E:46:FA:AC:F3:06:BD:83:9C:A9:4E:D1 Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Certificate serial: 0BA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft Manifest number: 0AFB Signing time: Wed 20 Nov 2024 19:26:54 +0000 Manifest this update: Wed 20 Nov 2024 19:26:53 +0000 Manifest next update: Wed 27 Nov 2024 19:26:53 +0000 Files and hashes: 1: fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl (hash: 2w2bdYTsdnEqKdNZ5rFHB9zPX6VtFxjXHzbaj5IvFfQ=) 2: E8819018178811EC876F5F50C4F9AE02.roa (hash: ge8K5AgiBYS0lt2aIlXaRuN/s03ejKC5FFeDiKonxYg=) 3: DBD7C87C8D2411EF999C6C64C4F9AE02.roa (hash: bGktU9AE3SwaFQKzwhkhkLix1kJ6RLeBuIbARxeGwnA=) 4: 52863B4C9DBA11EB83364624C4F9AE02.roa (hash: 4VRZP8qTlcQa1n8bJBhtrpNFnhAJ9oHxbObRyMSUUQ0=) 5: 958CC8DA1C2611ECB416AA68C4F9AE02.roa (hash: 8mVeA+SIv0Xg6q5R2kTn0B3EzwQb0xwk0GGq0XOtjBM=) 6: 8008F5CA620C11ECAFF5941AC4F9AE02.roa (hash: hcz8bi79veRCEwuC1ZyFgL8wsxYbSaWcsZHG1CCz/KQ=) 7: CB67A9DC8D1311EF9895E61CC4F9AE02.roa (hash: tp1tt+Dtvf110840P/Kz9iQzXzN2YXtDdeUW5fYofag=) 8: 1605F9B6169E11EC9D259855C4F9AE02.roa (hash: naxs7ew7s0PkoZdXBSG0ypM8gV7BBZM5t7A8Bm0sDT4=) 9: 065A717E9B6E11EFBCAB692BC4F9AE02.roa (hash: gY1J7cieU4Bsylm5Vte+4cLJIhwXOeU9STopBRqUalg=) 10: 206969823B9411EB9F059D7EC4F9AE02.roa (hash: bCnEGwf5LD7neGa0atn1Npn9cznKZ5NMSfgS5ShjKiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2977 (0xba1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Validity Not Before: Nov 20 19:26:53 2024 GMT Not After : Nov 27 19:26:53 2024 GMT Subject: CN=673e37fd-04f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f3:66:9c:d9:7b:52:15:7b:22:d5:35:8b:2b: 54:1e:40:09:52:d7:09:c5:62:6b:16:2d:92:e1:cd: d7:3c:70:d3:a5:41:3e:b7:ab:da:72:63:83:9b:bb: 3f:e1:c3:70:cf:06:54:0c:6b:a8:a4:e1:45:d7:c6: c4:d2:05:ca:09:6d:08:f6:4b:69:71:8c:8e:34:ad: 30:9c:a1:ba:20:f7:01:fb:b8:3b:d5:72:a2:ad:af: df:ef:6c:15:c6:9e:f6:19:4b:7e:24:88:98:ce:81: 23:a4:d7:26:84:61:b1:87:0b:80:22:98:94:c4:a9: d1:0b:a0:75:ff:bf:83:19:61:91:1f:d7:c5:53:24: 26:33:12:eb:33:c5:81:d2:48:7e:3c:17:a0:0d:42: 16:c9:93:da:73:0f:67:7d:a4:39:7b:6e:84:04:44: 9d:08:fc:9f:17:cc:2b:ff:f4:fb:0f:ec:8f:5f:b5: 58:35:84:fb:8c:cd:64:3f:5e:59:4f:69:52:70:ca: d6:e8:e4:8b:19:75:5b:a7:dd:e8:ab:64:bc:dd:ba: ed:46:f8:04:1a:d5:95:12:9a:e7:ea:55:69:73:b4: f3:08:78:1d:a6:18:bf:1b:52:1e:34:89:08:1c:ec: 60:ae:8e:5a:3b:fa:e5:da:33:ec:55:25:0b:86:fe: 6d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E1:3B:E2:95:19:8C:AB:3E:46:FA:AC:F3:06:BD:83:9C:A9:4E:D1 X509v3 Authority Key Identifier: keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:41:11:57:9b:67:d1:90:c9:a6:82:b5:5b:c2:e6:e2:a2:26: ce:2c:6d:4f:b4:bd:6e:e3:3c:6c:23:b7:7d:1a:3a:42:99:77: 18:31:04:19:23:2a:bd:e7:7d:a6:a4:d9:f6:59:21:af:ab:7c: 86:5c:98:40:45:32:e2:03:cd:57:ff:60:8b:62:cf:bb:f2:e1: 1c:26:06:95:d9:e5:49:46:87:7f:e9:fe:14:57:f2:65:d5:31: da:0a:93:40:80:93:4b:37:8d:7b:51:31:29:cf:00:64:8e:ed: 2b:38:b4:9c:d5:3e:94:db:01:c7:c0:2b:76:7c:40:75:f7:81: be:5f:b9:1a:06:42:fe:32:b9:87:08:c4:ec:34:82:59:f3:3e: 4a:50:7e:0e:a0:c0:54:7a:8e:f7:09:85:d6:41:21:7c:34:6c: 59:c0:3d:d7:18:b7:29:3d:9f:9d:45:6c:94:d1:67:b3:be:fa: 22:c5:79:a5:b1:d3:eb:c3:9b:21:c5:da:51:3c:2a:5e:eb:da: 08:4f:ed:70:64:18:9d:89:e3:c9:8b:64:07:c6:f8:5e:8d:16: dd:37:0a:79:c9:40:9b:c6:0e:0a:46:76:6c:92:e3:66:b7:a3: 9c:42:6d:88:3b:95:99:12:66:b1:88:12:16:ae:a2:57:ad:fd: 8e:b1:8d:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4 ODFBRTQ5MTgwHhcNMjQxMTIwMTkyNjUzWhcNMjQxMTI3MTkyNjUzWjAYMRYwFAYD VQQDEw02NzNlMzdmZC0wNGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvNmnNl7UhV7ItU1iytUHkAJUtcJxWJrFi2S4c3XPHDTpUE+t6vacmODm7s/ 4cNwzwZUDGuopOFF18bE0gXKCW0I9ktpcYyONK0wnKG6IPcB+7g71XKira/f72wV xp72GUt+JIiYzoEjpNcmhGGxhwuAIpiUxKnRC6B1/7+DGWGRH9fFUyQmMxLrM8WB 0kh+PBegDUIWyZPacw9nfaQ5e26EBESdCPyfF8wr//T7D+yPX7VYNYT7jM1kP15Z T2lScMrW6OSLGXVbp93oq2S83brtRvgEGtWVEprn6lVpc7TzCHgdphi/G1IeNIkI HOxgro5aO/rl2jPsVSULhv5tswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKLhO+KV GYyrPkb6rPMGvYOcqU7RMB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0 NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEUzRi9DMjQzMjJCQTU0NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0 UGdQQWVGRmhKMUdJR3VTUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaQRFXm2fRkMmmgrVbwubioibOLG1PtL1u4zxsI7d9GjpCmXcYMQQZ Iyq9532mpNn2WSGvq3yGXJhARTLiA81X/2CLYs+78uEcJgaV2eVJRod/6f4UV/Jl 1THaCpNAgJNLN417UTEpzwBkju0rOLSc1T6U2wHHwCt2fEB194G+X7kaBkL+MrmH CMTsNIJZ8z5KUH4OoMBUeo73CYXWQSF8NGxZwD3XGLcpPZ+dRWyU0WezvvoixXml sdPrw5shxdpRPCpe69oIT+1wZBidiePJi2QHxvhejRbdNwp5yUCbxg4KRnZskuNm t6OcQm2IO5WZEmaxiBIWrqJXrf2OsY33 -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:49 2024 by rpki-client on console-ams.rpki-client.org