$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft File: FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft (raw, json) Hash identifier: gnbTu/fy4xloyPsnha+pgaq07qnysZ/P7zymGsqEETo= Subject key identifier: 53:26:EE:9E:C6:6D:D0:AB:CA:A9:A8:2A:11:6D:4C:B7:9E:F9:80:9F Authority key identifier: 16:13:D1:15:ED:83:A0:6E:97:A7:3D:AE:55:16:BA:1B:68:4E:EC:09 Certificate issuer: /CN=A9158F08/serialNumber=1613D115ED83A06E97A73DAE5516BA1B684EEC09 Certificate serial: 0BD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft Manifest number: 1495 Signing time: Fri 22 Nov 2024 18:30:52 +0000 Manifest this update: Fri 22 Nov 2024 18:30:52 +0000 Manifest next update: Fri 29 Nov 2024 18:30:52 +0000 Files and hashes: 1: FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl (hash: 6QZJYtq2iKqZP1f9u2FjB8AyWReJXC4HeGjfQBpCbS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3033 (0xbd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158F08/serialNumber=1613D115ED83A06E97A73DAE5516BA1B684EEC09 Validity Not Before: Nov 22 18:30:52 2024 GMT Not After : Nov 29 18:30:52 2024 GMT Subject: CN=6740cddc-50d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:01:35:20:e9:47:22:b5:76:58:db:aa:94:15: db:bf:3b:5c:36:a8:5d:f5:59:93:3f:f5:5b:2d:2f: 90:da:6f:2c:ce:15:6e:d2:01:87:09:0c:a5:6a:4d: 98:9c:17:d2:79:0c:76:75:18:68:df:5d:d2:f2:ec: f4:bd:31:0a:cc:99:1f:82:7e:05:2d:d4:0d:f1:4d: ed:84:fb:24:7c:e9:fb:33:38:c0:9d:36:e6:79:47: 9c:bc:38:ec:5f:7f:90:7a:07:2a:0b:f1:91:c9:7d: d1:1f:53:31:34:65:39:67:4e:ed:6b:05:41:35:14: b9:84:5b:b8:2d:c3:86:76:8f:2d:b0:49:6d:13:95: 09:e2:36:31:f0:ec:74:02:f8:22:bd:4b:78:d1:5e: 0d:50:b0:08:27:91:9e:c9:57:a8:6f:45:b3:ee:9e: 83:6f:ec:35:a4:35:7f:5e:29:bb:7b:dc:63:3e:d3: 3f:aa:ba:02:f8:9a:f7:5b:83:d8:54:ce:e5:dc:97: e6:e6:b5:cd:bb:3b:1a:10:f1:f3:a6:a6:ed:d3:0e: 3d:e1:b3:05:c9:34:de:9c:9d:45:de:a9:2e:6b:44: 95:a9:e0:33:51:1c:0b:e3:f9:65:6f:c9:8b:84:81: 7d:04:db:e6:8c:97:27:0e:8e:23:b4:35:57:60:be: af:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:26:EE:9E:C6:6D:D0:AB:CA:A9:A8:2A:11:6D:4C:B7:9E:F9:80:9F X509v3 Authority Key Identifier: keyid:16:13:D1:15:ED:83:A0:6E:97:A7:3D:AE:55:16:BA:1B:68:4E:EC:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:1a:9a:89:32:cc:ee:98:a7:8c:b2:33:65:0b:bb:5f:5c:51: fa:ca:cb:e6:63:77:b8:bf:85:30:56:3f:f1:ef:42:54:8e:f8: 80:ee:b2:ad:b9:19:92:3c:a8:c6:b4:08:78:d0:78:71:be:ba: 43:cb:f8:7a:a0:45:87:9c:83:63:41:70:d3:41:a9:a6:7b:18: 72:9b:64:8c:06:02:3e:7e:e3:ce:05:d2:23:d1:d1:f6:84:6a: b2:51:87:b2:02:f3:bc:a2:d0:2d:c0:7e:ee:92:fd:91:1c:71: a2:4b:77:8e:f5:53:c9:b9:82:22:6e:19:fc:28:1b:41:c0:77: 91:d1:58:45:fb:7d:d1:3d:aa:58:0e:a4:74:5a:56:0e:c6:56: 21:37:5f:3d:1d:ae:29:be:dd:ab:bb:d1:97:1d:a2:42:07:fb: da:29:b8:11:2a:45:2a:e2:68:df:1c:98:1a:03:70:9f:7c:1b: 2b:de:68:df:07:45:e8:2f:02:6c:9c:d4:fb:3f:09:a5:ff:43: 57:4e:d4:b2:72:fa:16:df:9c:c2:d4:50:33:57:8a:29:ed:2a: f7:e3:81:21:be:33:e6:04:b0:cb:4a:c2:32:78:5c:ea:07:82: 72:cd:15:04:44:f4:35:96:b1:85:a6:54:7b:2a:5f:2c:9b:01: 54:2c:74:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThGMDgxMTAvBgNVBAUTKDE2MTNEMTE1RUQ4M0EwNkU5N0E3M0RBRTU1MTZCQTFC Njg0RUVDMDkwHhcNMjQxMTIyMTgzMDUyWhcNMjQxMTI5MTgzMDUyWjAYMRYwFAYD VQQDEw02NzQwY2RkYy01MGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwE1IOlHIrV2WNuqlBXbvztcNqhd9VmTP/VbLS+Q2m8szhVu0gGHCQylak2Y nBfSeQx2dRho313S8uz0vTEKzJkfgn4FLdQN8U3thPskfOn7MzjAnTbmeUecvDjs X3+QegcqC/GRyX3RH1MxNGU5Z07tawVBNRS5hFu4LcOGdo8tsEltE5UJ4jYx8Ox0 AvgivUt40V4NULAIJ5GeyVeob0Wz7p6Db+w1pDV/Xim7e9xjPtM/qroC+Jr3W4PY VM7l3Jfm5rXNuzsaEPHzpqbt0w494bMFyTTenJ1F3qkua0SVqeAzURwL4/llb8mL hIF9BNvmjJcnDo4jtDVXYL6vEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMm7p7G bdCryqmoKhFtTLee+YCfMB8GA1UdIwQYMBaAFBYT0RXtg6Bul6c9rlUWuhtoTuwJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEYwOC81QjE3RjZEMjA3 RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9GaFBSRmUyRG9HNlhwejJ1VlJhNkcyaE83 QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoUFJGZTJEb0c2WHB6MnVWUmE2RzJoTzdBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEYwOC81QjE3RjZEMjA3RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9GaFBSRmUyRG9H NlhwejJ1VlJhNkcyaE83QWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7GpqJMszumKeMsjNlC7tfXFH6ysvmY3e4v4UwVj/x70JUjviA7rKt uRmSPKjGtAh40HhxvrpDy/h6oEWHnINjQXDTQammexhym2SMBgI+fuPOBdIj0dH2 hGqyUYeyAvO8otAtwH7ukv2RHHGiS3eO9VPJuYIibhn8KBtBwHeR0VhF+33RPapY DqR0WlYOxlYhN189Ha4pvt2ru9GXHaJCB/vaKbgRKkUq4mjfHJgaA3CffBsr3mjf B0XoLwJsnNT7Pwml/0NXTtSycvoW35zC1FAzV4op7Sr344EhvjPmBLDLSsIyeFzq B4JyzRUERPQ1lrGFplR7Kl8smwFULHR6 -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:03 2024 by rpki-client on console-ams.rpki-client.org