$ rpki-client -vvf rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft File: FYOTMKge2Jkgc6I4BMn1kFOPudI.mft (raw, json) Hash identifier: h6NSHeiGd/gZGTmKIAHYDyzl9ghmj3chxtwUQq0Ek2w= Subject key identifier: BF:65:EF:D5:48:0A:AD:F0:78:39:23:B2:67:95:78:CB:24:77:61:27 Authority key identifier: 15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2 Certificate issuer: /CN=A9159B6F/serialNumber=15839330A81ED8992073A23804C9F590538FB9D2 Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft Manifest number: 8B Signing time: Thu 21 Nov 2024 04:38:58 +0000 Manifest this update: Thu 21 Nov 2024 04:38:57 +0000 Manifest next update: Thu 28 Nov 2024 04:38:57 +0000 Files and hashes: 1: FYOTMKge2Jkgc6I4BMn1kFOPudI.crl (hash: htBMqwQus+QyTZT4e/cXXJdXBuWUorWeKTF0sHaO0gk=) 2: F4F785D0D09C11EE94431F80C4F9AE02.roa (hash: gAmtnMhOAhK0fAuYmhp1IcpgWCw5DClF8kvOob2UxoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.crl rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159B6F/serialNumber=15839330A81ED8992073A23804C9F590538FB9D2 Validity Not Before: Nov 21 04:38:57 2024 GMT Not After : Nov 28 04:38:57 2024 GMT Subject: CN=673eb961-376b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:97:0e:8e:ba:56:c6:53:60:d9:c8:e4:c9:21: fb:fd:36:c8:46:1b:2f:72:12:05:dc:c3:21:6f:6c: f9:40:fc:83:6a:5a:ab:b0:ca:ce:19:f6:14:af:12: a1:ea:94:96:07:3a:de:13:64:af:38:56:3b:15:73: 0b:06:64:34:cb:00:ef:a0:49:77:fa:0d:e4:cf:d0: 09:36:5a:3e:d0:d1:ca:75:cd:76:6a:14:49:45:d8: b4:69:1c:8b:97:8d:61:ec:52:b5:50:ed:50:03:37: 59:f8:b9:0c:a1:84:af:18:72:e9:aa:56:a7:81:c0: a1:e3:20:1d:40:24:92:1f:ce:ef:cb:3a:01:dd:64: 8a:38:a5:b1:1b:da:98:dc:67:68:97:ad:3f:4c:e5: cc:aa:57:cc:c7:7b:3b:76:2f:85:4b:13:fd:75:92: 0a:b8:e9:09:55:02:79:16:eb:e6:f6:f4:e2:4e:f6: 8d:c6:1b:f6:4d:e8:63:91:0b:69:34:8e:a6:32:a0: b5:d7:a2:df:19:3d:23:9e:4e:ea:56:83:c1:1d:50: 4f:7c:1d:54:49:34:8a:56:ca:c4:0f:a2:83:06:c3: c0:a8:34:68:ce:34:33:5f:ac:ce:fe:2e:5d:07:24: 0c:21:ac:2b:94:6d:30:8e:44:43:cb:10:12:c1:34: fe:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:65:EF:D5:48:0A:AD:F0:78:39:23:B2:67:95:78:CB:24:77:61:27 X509v3 Authority Key Identifier: keyid:15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:7c:51:71:d8:af:2e:16:91:40:c9:9f:fc:0d:97:15:04:b1: a0:8c:62:61:ec:72:93:a2:6d:44:b5:4f:d8:09:37:54:f6:96: df:6b:74:a5:94:54:08:7a:2e:8c:34:5e:c2:e7:7b:41:a7:e3: 86:f1:c5:c9:0c:0b:30:9a:cf:be:df:64:2f:eb:70:c8:89:fb: 48:16:cc:79:0c:3d:8f:fc:1e:bb:06:42:fe:b6:86:de:e7:4d: 15:7c:2e:84:16:6f:a0:71:07:8a:30:de:d1:39:26:36:59:25: 12:8a:32:9e:04:c4:1c:5c:04:31:43:12:67:78:54:27:49:d2: d3:0c:d2:cd:6b:cb:41:31:f4:db:7a:91:35:25:7a:67:3a:8e: a5:cd:34:0e:a0:dd:73:a4:04:ec:4b:c2:de:39:bd:b5:2a:2b: 0b:db:c7:24:41:9c:72:3a:67:ed:0b:c4:90:28:80:4a:de:ee: 2d:eb:d9:50:07:4d:f2:6e:09:f2:62:8e:29:a1:59:c9:71:c7: 9d:db:2a:17:19:81:65:ae:4c:a5:eb:40:be:a4:04:66:ef:a8: 52:6f:38:aa:2f:16:5f:d2:eb:8a:b6:78:5c:68:31:e6:f9:b7: 36:33:8e:2f:aa:ac:13:1d:97:ba:23:6a:57:1e:33:02:93:a8: 20:39:d6:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlCNkYxMTAvBgNVBAUTKDE1ODM5MzMwQTgxRUQ4OTkyMDczQTIzODA0QzlGNTkw NTM4RkI5RDIwHhcNMjQxMTIxMDQzODU3WhcNMjQxMTI4MDQzODU3WjAYMRYwFAYD VQQDEw02NzNlYjk2MS0zNzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJcOjrpWxlNg2cjkySH7/TbIRhsvchIF3MMhb2z5QPyDalqrsMrOGfYUrxKh 6pSWBzreE2SvOFY7FXMLBmQ0ywDvoEl3+g3kz9AJNlo+0NHKdc12ahRJRdi0aRyL l41h7FK1UO1QAzdZ+LkMoYSvGHLpqlangcCh4yAdQCSSH87vyzoB3WSKOKWxG9qY 3Gdol60/TOXMqlfMx3s7di+FSxP9dZIKuOkJVQJ5Fuvm9vTiTvaNxhv2TehjkQtp NI6mMqC116LfGT0jnk7qVoPBHVBPfB1USTSKVsrED6KDBsPAqDRozjQzX6zO/i5d ByQMIawrlG0wjkRDyxASwTT+zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9l79VI Cq3weDkjsmeVeMskd2EnMB8GA1UdIwQYMBaAFBWDkzCoHtiZIHOiOATJ9ZBTj7nS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUI2Ri8yQUQ1RjZEOEQw OUMxMUVFODBBQjhEN0VDNEY5QUUwMi9GWU9UTUtnZTJKa2djNkk0Qk1uMWtGT1B1 ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZZT1RNS2dlMkprZ2M2STRCTW4xa0ZPUHVkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUI2Ri8yQUQ1RjZEOEQwOUMxMUVFODBBQjhEN0VDNEY5QUUwMi9GWU9UTUtnZTJK a2djNkk0Qk1uMWtGT1B1ZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhfFFx2K8uFpFAyZ/8DZcVBLGgjGJh7HKTom1EtU/YCTdU9pbfa3Sl lFQIei6MNF7C53tBp+OG8cXJDAswms++32Qv63DIiftIFsx5DD2P/B67BkL+tobe 500VfC6EFm+gcQeKMN7ROSY2WSUSijKeBMQcXAQxQxJneFQnSdLTDNLNa8tBMfTb epE1JXpnOo6lzTQOoN1zpATsS8LeOb21KisL28ckQZxyOmftC8SQKIBK3u4t69lQ B03ybgnyYo4poVnJcced2yoXGYFlrkyl60C+pARm76hSbziqLxZf0uuKtnhcaDHm +bc2M44vqqwTHZe6I2pXHjMCk6ggOdaM -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:05 2024 by rpki-client on console-ams.rpki-client.org