$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft File: fgqozSvoYXAaXKfPudRQ09kYJ-g.mft (raw, json) Hash identifier: AObMb6B2ghg0k0OUOk4+kGoXkodBOQ9MBesFykoJuiM= Subject key identifier: BC:03:EC:F8:FD:D5:5A:39:CA:7C:81:70:6C:91:10:D7:07:62:78:0B Authority key identifier: 7E:0A:A8:CD:2B:E8:61:70:1A:5C:A7:CF:B9:D4:50:D3:D9:18:27:E8 Certificate issuer: /CN=A915DB9F/serialNumber=7E0AA8CD2BE861701A5CA7CFB9D450D3D91827E8 Certificate serial: 1EC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft Manifest number: 1EB8 Signing time: Fri 22 Nov 2024 16:02:26 +0000 Manifest this update: Fri 22 Nov 2024 16:02:26 +0000 Manifest next update: Fri 29 Nov 2024 16:02:26 +0000 Files and hashes: 1: fgqozSvoYXAaXKfPudRQ09kYJ-g.crl (hash: Vx7CaQPxi31YlXD2m6UC9o+du96N8zKB3ru8V4lsPDg=) 2: 4D94E0D6545211E6A367BC68C4F9AE02.roa (hash: JPz0ZzHWwFSSfWmaNplpCU4QznJ0G9YXZ66T9hNIZ3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.crl rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7875 (0x1ec3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DB9F/serialNumber=7E0AA8CD2BE861701A5CA7CFB9D450D3D91827E8 Validity Not Before: Nov 22 16:02:26 2024 GMT Not After : Nov 29 16:02:26 2024 GMT Subject: CN=6740ab12-9ca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:86:c1:1a:de:68:d3:77:32:4e:c6:ca:0f:9e: 5e:68:87:59:b9:f8:71:f0:a6:55:63:4d:b6:83:87: 23:01:40:09:76:24:86:52:93:53:ab:af:94:0f:b7: d2:5c:33:86:4b:93:70:51:32:f3:a3:bc:ee:91:81: df:f3:27:a5:94:63:21:35:32:ae:7b:57:5f:03:f0: 8e:44:d8:b4:8a:df:c1:53:4b:83:4d:9d:ae:00:7e: 6a:16:56:70:2d:23:e7:44:07:67:9d:1d:43:e8:97: f5:e0:ba:12:e2:9f:1b:65:50:f4:74:e8:3a:1e:a0: 17:09:1f:f0:f1:e9:a4:09:b8:ba:9b:e2:2b:a9:dd: 1f:37:1d:09:f1:4d:d7:1b:6a:75:23:5f:d4:39:89: 24:35:d1:1f:bb:c9:e0:49:69:d9:3d:25:1e:be:20: fb:ef:f1:7a:bc:ac:bb:78:80:01:a2:53:de:80:de: c7:6c:80:1f:41:2c:55:d1:91:8b:68:d0:a8:bb:04: f7:4a:db:42:2b:30:16:e4:6f:32:45:27:28:de:5d: 65:58:3d:94:46:0d:7a:de:08:7b:7c:64:b9:c8:d9: c0:6d:c1:c4:d5:1f:b4:31:ee:75:a1:b7:f8:4e:bc: 8b:1e:54:94:68:6e:29:76:30:af:65:bb:12:7a:c6: 72:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:03:EC:F8:FD:D5:5A:39:CA:7C:81:70:6C:91:10:D7:07:62:78:0B X509v3 Authority Key Identifier: keyid:7E:0A:A8:CD:2B:E8:61:70:1A:5C:A7:CF:B9:D4:50:D3:D9:18:27:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:c2:4c:64:8c:ed:0e:db:bc:9b:92:4f:17:63:ea:fe:a9:7a: c0:f0:44:3d:38:cd:54:e4:a2:e4:da:47:e4:b2:c9:ed:bc:c9: e2:2b:0d:6f:cf:eb:31:17:20:42:34:7d:24:e3:62:1b:1b:27: d0:05:11:82:4a:3e:eb:ad:41:85:87:7f:d3:31:87:e9:ed:0e: 7c:ba:82:b4:51:66:de:83:47:97:2d:41:95:ef:68:a9:e4:dd: fc:4f:ea:20:34:ff:73:f0:1a:e1:52:cf:d4:3a:53:f9:60:c2: a9:b9:95:fb:b9:2b:5e:c6:d6:98:6b:6c:f7:80:0a:67:8c:a4: 00:8a:4a:5d:72:f0:db:00:29:fe:5d:b2:47:82:9f:f0:ab:6e: e0:15:5c:b4:35:2f:d0:95:93:51:7a:e7:9b:d2:83:ce:af:6d: ac:81:f6:a2:72:41:64:fa:d5:0d:5f:19:0b:61:1e:dc:17:f3: eb:4e:3e:bf:e8:50:a7:41:60:6b:34:88:04:5f:f3:22:1a:de: 94:1c:ae:b7:e1:52:15:6d:32:fd:ce:4b:9e:51:d5:07:8e:c1: 77:1d:bd:7e:6b:b7:60:fc:87:a3:ca:ca:08:77:04:f6:30:95: 4d:1a:6c:8d:18:3b:ef:cc:b5:96:df:b2:2c:5a:27:e9:1a:62: 6c:8a:c4:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURCOUYxMTAvBgNVBAUTKDdFMEFBOENEMkJFODYxNzAxQTVDQTdDRkI5RDQ1MEQz RDkxODI3RTgwHhcNMjQxMTIyMTYwMjI2WhcNMjQxMTI5MTYwMjI2WjAYMRYwFAYD VQQDEw02NzQwYWIxMi05Y2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4bBGt5o03cyTsbKD55eaIdZufhx8KZVY022g4cjAUAJdiSGUpNTq6+UD7fS XDOGS5NwUTLzo7zukYHf8yellGMhNTKue1dfA/CORNi0it/BU0uDTZ2uAH5qFlZw LSPnRAdnnR1D6Jf14LoS4p8bZVD0dOg6HqAXCR/w8emkCbi6m+Irqd0fNx0J8U3X G2p1I1/UOYkkNdEfu8ngSWnZPSUeviD77/F6vKy7eIABolPegN7HbIAfQSxV0ZGL aNCouwT3SttCKzAW5G8yRSco3l1lWD2URg163gh7fGS5yNnAbcHE1R+0Me51obf4 TryLHlSUaG4pdjCvZbsSesZyGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwD7Pj9 1Vo5ynyBcGyRENcHYngLMB8GA1UdIwQYMBaAFH4KqM0r6GFwGlynz7nUUNPZGCfo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REI5Ri9CODhGNDI1MjU0 NTAxMUU2QTNBNkQ0NjZDNEY5QUUwMi9mZ3FvelN2b1lYQWFYS2ZQdWRSUTA5a1lK LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZncW96U3ZvWVhBYVhLZlB1ZFJRMDlrWUotZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REI5Ri9CODhGNDI1MjU0NTAxMUU2QTNBNkQ0NjZDNEY5QUUwMi9mZ3FvelN2b1lY QWFYS2ZQdWRSUTA5a1lKLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKwkxkjO0O27ybkk8XY+r+qXrA8EQ9OM1U5KLk2kfkssntvMniKw1v z+sxFyBCNH0k42IbGyfQBRGCSj7rrUGFh3/TMYfp7Q58uoK0UWbeg0eXLUGV72ip 5N38T+ogNP9z8BrhUs/UOlP5YMKpuZX7uStextaYa2z3gApnjKQAikpdcvDbACn+ XbJHgp/wq27gFVy0NS/QlZNReueb0oPOr22sgfaickFk+tUNXxkLYR7cF/PrTj6/ 6FCnQWBrNIgEX/MiGt6UHK634VIVbTL9zkueUdUHjsF3Hb1+a7dg/IejysoIdwT2 MJVNGmyNGDvvzLWW37IsWifpGmJsisT4 -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:47 2024 by rpki-client on console-fra.rpki-client.org