$ rpki-client -vvf rpki.apnic.net/member_repository/A91658B1/47763BAA553D11EBA269FB73C4F9AE02/fDLmbzXAO8J74Nz3yka5ZhYJnuk.mft File: fDLmbzXAO8J74Nz3yka5ZhYJnuk.mft (raw, json) Hash identifier: 6P/4NGHIhisNYoBvX9DRHZCh3/BP7EKx7MWcYTMtH/k= Subject key identifier: 46:35:75:03:77:D1:CC:1E:74:15:30:29:D5:50:06:6F:0A:26:A9:34 Authority key identifier: 7C:32:E6:6F:35:C0:3B:C2:7B:E0:DC:F7:CA:46:B9:66:16:09:9E:E9 Certificate issuer: /CN=A91658B1/serialNumber=7C32E66F35C03BC27BE0DCF7CA46B96616099EE9 Certificate serial: 0677 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDLmbzXAO8J74Nz3yka5ZhYJnuk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91658B1/47763BAA553D11EBA269FB73C4F9AE02/fDLmbzXAO8J74Nz3yka5ZhYJnuk.mft Manifest number: 0672 Signing time: Fri 22 Nov 2024 21:53:20 +0000 Manifest this update: Fri 22 Nov 2024 21:53:19 +0000 Manifest next update: Fri 29 Nov 2024 21:53:19 +0000 Files and hashes: 1: fDLmbzXAO8J74Nz3yka5ZhYJnuk.crl (hash: 6akpX/Hv/89tC9cWZNYLHZu2jqNM+IC1UaEAw/NIYQc=) 2: 5AE4C7E2554C11EB87AB9070C4F9AE02.roa (hash: Or89czDxEvOmVhZzxW4eIqJ6wfH1q8wTK3ZnGTOYBjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91658B1/47763BAA553D11EBA269FB73C4F9AE02/fDLmbzXAO8J74Nz3yka5ZhYJnuk.crl rsync://rpki.apnic.net/member_repository/A91658B1/47763BAA553D11EBA269FB73C4F9AE02/fDLmbzXAO8J74Nz3yka5ZhYJnuk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDLmbzXAO8J74Nz3yka5ZhYJnuk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1655 (0x677) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91658B1/serialNumber=7C32E66F35C03BC27BE0DCF7CA46B96616099EE9 Validity Not Before: Nov 22 21:53:19 2024 GMT Not After : Nov 29 21:53:19 2024 GMT Subject: CN=6740fd50-f774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:48:69:46:8e:2c:89:ed:0c:07:b0:0e:79:fc: 92:e2:70:fd:1e:b5:ed:eb:fa:e5:6f:55:36:26:9e: 1f:ae:c2:d9:a2:0d:ff:35:df:8b:67:38:d9:9a:f4: 12:92:b0:62:be:56:ca:3e:1c:06:df:66:63:38:87: 12:fe:c8:f1:3d:20:24:de:1c:96:d2:8e:0d:1e:00: 95:ad:2d:61:2c:ce:28:a6:13:14:e6:c8:b4:12:8f: 70:32:ce:91:85:1e:74:de:70:0e:82:c5:87:bf:b9: 7f:82:3f:53:c7:af:2f:e3:40:11:97:6b:f6:ed:da: 3a:9c:c1:e6:f9:df:0c:0b:7c:1a:96:91:a9:22:4d: d1:b1:f9:67:1f:61:73:6b:58:0c:f9:08:75:63:e7: 80:33:4f:9b:c9:4d:64:16:5f:1f:08:ab:89:47:04: 4a:c5:ff:2b:77:5a:f0:6d:e4:0a:7c:17:f2:a6:f2: b9:df:73:d2:f9:57:c3:8c:cf:09:02:6f:1c:39:ec: 64:bc:fd:2b:d5:5b:1b:fc:13:8c:f0:1e:0b:ba:65: 37:87:96:2c:88:eb:f8:8b:85:c9:ba:4b:c8:9e:50: b5:e2:4d:76:7d:da:02:f5:c3:cf:1b:0d:69:78:8c: e8:59:ef:7c:b9:5e:27:59:e2:e1:02:7a:3a:d2:cd: 2d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:35:75:03:77:D1:CC:1E:74:15:30:29:D5:50:06:6F:0A:26:A9:34 X509v3 Authority Key Identifier: keyid:7C:32:E6:6F:35:C0:3B:C2:7B:E0:DC:F7:CA:46:B9:66:16:09:9E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91658B1/47763BAA553D11EBA269FB73C4F9AE02/fDLmbzXAO8J74Nz3yka5ZhYJnuk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDLmbzXAO8J74Nz3yka5ZhYJnuk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658B1/47763BAA553D11EBA269FB73C4F9AE02/fDLmbzXAO8J74Nz3yka5ZhYJnuk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:dc:31:d2:84:21:9b:75:cc:6a:75:e6:cb:63:5b:c9:eb:0c: 79:d0:9e:cb:7d:6b:2c:a5:c6:e7:e9:18:06:74:cb:01:52:9e: ab:d1:ee:6c:ca:e2:a2:7d:e0:7f:94:c7:7d:b5:0b:14:e6:ad: eb:4d:33:d9:48:d1:f3:bc:13:e0:81:7b:90:aa:1c:89:1d:be: cb:85:58:85:7f:d6:05:d4:2f:10:2f:6d:95:2f:7f:35:d2:a3: 97:4f:08:34:6e:6f:7c:62:d9:72:4d:86:c2:63:6f:a5:04:b8: 73:43:9d:da:e4:5a:c3:e5:2f:cc:c0:d9:54:43:ed:e1:56:04: 2f:b2:43:88:ab:7f:51:a6:c2:e1:17:cb:a0:b4:fa:69:65:36: 2b:ee:0f:05:b1:b7:cd:ae:ef:ad:11:a1:7c:62:c6:68:30:37: 71:58:1b:29:bb:94:1a:af:00:51:00:c8:1f:86:06:9c:dd:2c: 35:78:b8:ed:1f:f2:bf:ea:30:2c:0e:35:63:93:15:84:0d:03: f3:03:e4:84:f7:31:0c:80:a9:6f:23:ce:2c:f8:54:3c:40:dc: a4:81:75:6b:a3:e6:f0:0a:66:26:33:ee:a8:26:75:5b:7c:b0: 5c:52:df:ab:a5:0f:c3:28:42:14:e7:21:89:a3:78:2d:6c:3d: f2:76:3e:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU4QjExMTAvBgNVBAUTKDdDMzJFNjZGMzVDMDNCQzI3QkUwRENGN0NBNDZCOTY2 MTYwOTlFRTkwHhcNMjQxMTIyMjE1MzE5WhcNMjQxMTI5MjE1MzE5WjAYMRYwFAYD VQQDEw02NzQwZmQ1MC1mNzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0hpRo4sie0MB7AOefyS4nD9HrXt6/rlb1U2Jp4frsLZog3/Nd+LZzjZmvQS krBivlbKPhwG32ZjOIcS/sjxPSAk3hyW0o4NHgCVrS1hLM4ophMU5si0Eo9wMs6R hR503nAOgsWHv7l/gj9Tx68v40ARl2v27do6nMHm+d8MC3walpGpIk3RsflnH2Fz a1gM+Qh1Y+eAM0+byU1kFl8fCKuJRwRKxf8rd1rwbeQKfBfypvK533PS+VfDjM8J Am8cOexkvP0r1Vsb/BOM8B4LumU3h5YsiOv4i4XJukvInlC14k12fdoC9cPPGw1p eIzoWe98uV4nWeLhAno60s0tHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEY1dQN3 0cwedBUwKdVQBm8KJqk0MB8GA1UdIwQYMBaAFHwy5m81wDvCe+Dc98pGuWYWCZ7p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NThCMS80Nzc2M0JBQTU1 M0QxMUVCQTI2OUZCNzNDNEY5QUUwMi9mRExtYnpYQU84Sjc0TnozeWthNVpoWUpu dWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZETG1ielhBTzhKNzROejN5a2E1WmhZSm51ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NThCMS80Nzc2M0JBQTU1M0QxMUVCQTI2OUZCNzNDNEY5QUUwMi9mRExtYnpYQU84 Sjc0TnozeWthNVpoWUpudWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz3DHShCGbdcxqdebLY1vJ6wx50J7LfWsspcbn6RgGdMsBUp6r0e5s yuKifeB/lMd9tQsU5q3rTTPZSNHzvBPggXuQqhyJHb7LhViFf9YF1C8QL22VL381 0qOXTwg0bm98YtlyTYbCY2+lBLhzQ53a5FrD5S/MwNlUQ+3hVgQvskOIq39RpsLh F8ugtPppZTYr7g8FsbfNru+tEaF8YsZoMDdxWBspu5QarwBRAMgfhgac3Sw1eLjt H/K/6jAsDjVjkxWEDQPzA+SE9zEMgKlvI84s+FQ8QNykgXVro+bwCmYmM+6oJnVb fLBcUt+rpQ/DKEIU5yGJo3gtbD3ydj6Z -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:26 2024 by rpki-client on console-fra.rpki-client.org