$ rpki-client -vvf rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft File: fBMe4KgLg01I0X1pZVpbx75mi2o.mft (raw, json) Hash identifier: WYdcLUoPtfs/R/QBXupnXETJNmc1ZAdY0n1xXaDtdJc= Subject key identifier: D9:81:77:FA:94:11:4C:BB:CA:9A:CD:85:6B:19:6E:EB:C2:67:84:89 Authority key identifier: 7C:13:1E:E0:A8:0B:83:4D:48:D1:7D:69:65:5A:5B:C7:BE:66:8B:6A Certificate issuer: /CN=A91637DD/serialNumber=7C131EE0A80B834D48D17D69655A5BC7BE668B6A Certificate serial: 03EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft Manifest number: 03E1 Signing time: Sat 23 Nov 2024 00:11:18 +0000 Manifest this update: Sat 23 Nov 2024 00:11:17 +0000 Manifest next update: Sat 30 Nov 2024 00:11:17 +0000 Files and hashes: 1: fBMe4KgLg01I0X1pZVpbx75mi2o.crl (hash: ZIKXJpg/Ow3+zt14hQ73ftmo/P7w1dl1cFJVsXl1Rzk=) 2: CA95FB0EA1E611EDABFD7D7FC4F9AE02.roa (hash: OEnucU7WB79BgWJcZIYtLK91Wx7xdFzqVYUne1/YDjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.crl rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1002 (0x3ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91637DD/serialNumber=7C131EE0A80B834D48D17D69655A5BC7BE668B6A Validity Not Before: Nov 23 00:11:17 2024 GMT Not After : Nov 30 00:11:17 2024 GMT Subject: CN=67411da5-60bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c6:e5:d5:16:8a:f8:5a:c1:ec:2a:52:94:10: be:a5:51:aa:ef:56:df:a7:c7:6b:8d:58:91:88:01: ff:46:75:df:6e:3c:c7:7e:60:f5:7b:05:4e:c7:30: bc:0b:72:06:01:3a:bd:11:7f:45:1e:11:ce:d6:09: cd:23:f9:12:4c:9e:55:8e:c7:f5:ae:57:6e:2d:c3: ee:52:26:42:f3:9a:de:ee:fb:b3:4c:94:f9:8b:fe: 05:57:5f:6e:2d:f2:c6:b9:d7:4a:bf:f1:7f:6c:1f: 2b:45:f8:f2:e5:40:eb:4a:fc:e9:ef:a5:f5:cd:16: 4c:2e:95:3a:ed:3e:32:05:ea:2c:2b:ab:8f:c7:bc: 37:c8:cb:a8:75:3c:05:d0:2a:08:35:0f:a4:ff:a5: 11:e5:68:d7:43:6a:09:ec:30:62:c6:5f:68:20:5e: 6f:7f:8e:a1:6f:93:66:98:0b:a6:3b:e1:43:0c:14: eb:b0:ee:ce:58:be:47:33:9c:5d:78:74:79:60:9a: 44:72:e7:04:6d:01:0a:f2:fd:d8:03:65:7e:66:3a: fb:98:fb:8f:17:5a:9c:96:78:a1:14:5d:f1:0b:29: 13:59:b0:c8:7d:d2:bf:f9:da:35:42:fb:54:b1:bf: a9:ac:1a:81:a4:57:18:f4:15:5d:1b:71:0c:ee:35: 2b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:81:77:FA:94:11:4C:BB:CA:9A:CD:85:6B:19:6E:EB:C2:67:84:89 X509v3 Authority Key Identifier: keyid:7C:13:1E:E0:A8:0B:83:4D:48:D1:7D:69:65:5A:5B:C7:BE:66:8B:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:99:7a:d2:be:38:87:67:9c:cb:9f:73:a8:36:62:71:62:1a: 9f:9e:77:ec:ca:22:fb:0e:fd:7e:2e:f0:7e:1b:14:49:7c:78: f1:6f:2d:50:89:8f:be:dd:7d:fc:2b:2c:b5:02:6c:5d:03:97: 84:5b:66:ac:62:c9:f9:fd:e7:93:0d:0f:b6:d0:0a:55:0f:79: e5:83:13:49:2a:09:97:21:b5:80:58:03:b7:61:06:cc:93:41: ea:07:7c:02:0b:66:d9:b2:49:7d:96:ba:a1:91:26:51:87:58: 9c:f5:6c:7f:39:b2:2e:a9:fd:ce:bf:d4:a7:d2:d5:5f:2c:26: e9:91:cc:59:f4:96:b0:ac:a1:9e:0f:9e:63:04:6e:c1:72:73: 93:1a:58:be:39:82:7d:68:ad:83:f9:ba:09:20:1d:bf:43:8e: 0a:83:d5:1a:f3:ee:2d:b3:50:fd:47:03:86:36:1c:33:52:c8: a7:5f:b0:a5:b9:e3:75:73:22:1a:88:41:80:a2:7e:00:c5:f9: 48:00:57:d6:38:d4:51:bb:8c:d8:11:e7:34:77:39:07:ae:19: d0:b7:be:0f:28:d2:44:9c:31:44:8c:ca:ef:34:a8:fc:99:a0: df:00:39:89:4c:b8:3c:e4:fc:02:bd:ca:4d:ce:07:37:80:6c: 8e:e4:41:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM3REQxMTAvBgNVBAUTKDdDMTMxRUUwQTgwQjgzNEQ0OEQxN0Q2OTY1NUE1QkM3 QkU2NjhCNkEwHhcNMjQxMTIzMDAxMTE3WhcNMjQxMTMwMDAxMTE3WjAYMRYwFAYD VQQDEw02NzQxMWRhNS02MGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8bl1RaK+FrB7CpSlBC+pVGq71bfp8drjViRiAH/RnXfbjzHfmD1ewVOxzC8 C3IGATq9EX9FHhHO1gnNI/kSTJ5Vjsf1rlduLcPuUiZC85re7vuzTJT5i/4FV19u LfLGuddKv/F/bB8rRfjy5UDrSvzp76X1zRZMLpU67T4yBeosK6uPx7w3yMuodTwF 0CoINQ+k/6UR5WjXQ2oJ7DBixl9oIF5vf46hb5NmmAumO+FDDBTrsO7OWL5HM5xd eHR5YJpEcucEbQEK8v3YA2V+Zjr7mPuPF1qclnihFF3xCykTWbDIfdK/+do1QvtU sb+prBqBpFcY9BVdG3EM7jUrPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmBd/qU EUy7yprNhWsZbuvCZ4SJMB8GA1UdIwQYMBaAFHwTHuCoC4NNSNF9aWVaW8e+Zotq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzdERC9ERTU5RjYwMjVF NzMxMUVDOEJFNENDNEVDNEY5QUUwMi9mQk1lNEtnTGcwMUkwWDFwWlZwYng3NW1p Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZCTWU0S2dMZzAxSTBYMXBaVnBieDc1bWkyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzdERC9ERTU5RjYwMjVFNzMxMUVDOEJFNENDNEVDNEY5QUUwMi9mQk1lNEtnTGcw MUkwWDFwWlZwYng3NW1pMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdmXrSvjiHZ5zLn3OoNmJxYhqfnnfsyiL7Dv1+LvB+GxRJfHjxby1Q iY++3X38Kyy1AmxdA5eEW2asYsn5/eeTDQ+20ApVD3nlgxNJKgmXIbWAWAO3YQbM k0HqB3wCC2bZskl9lrqhkSZRh1ic9Wx/ObIuqf3Ov9Sn0tVfLCbpkcxZ9JawrKGe D55jBG7BcnOTGli+OYJ9aK2D+boJIB2/Q44Kg9Ua8+4ts1D9RwOGNhwzUsinX7Cl ueN1cyIaiEGAon4AxflIAFfWONRRu4zYEec0dzkHrhnQt74PKNJEnDFEjMrvNKj8 maDfADmJTLg85PwCvcpNzgc3gGyO5EFA -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:22 2024 by rpki-client on console-ams.rpki-client.org