$ rpki-client -vvf rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.mft File: fvtg2-isjcfDKzQJTcvj-mYiH6E.mft (raw, json) Hash identifier: TpAah4iXBpTL3oWfCLmNuxcH4eigs55po+6+2V1XLy4= Subject key identifier: D0:89:F6:E5:8C:AA:50:49:3C:15:DA:AC:E4:7A:D2:66:F3:C5:CB:63 Authority key identifier: 7E:FB:60:DB:E8:AC:8D:C7:C3:2B:34:09:4D:CB:E3:FA:66:22:1F:A1 Certificate issuer: /CN=A9166CD3/serialNumber=7EFB60DBE8AC8DC7C32B34094DCBE3FA66221FA1 Certificate serial: 0339 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvtg2-isjcfDKzQJTcvj-mYiH6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.mft Manifest number: 0331 Signing time: Thu 21 Nov 2024 00:40:57 +0000 Manifest this update: Thu 21 Nov 2024 00:40:56 +0000 Manifest next update: Thu 28 Nov 2024 00:40:56 +0000 Files and hashes: 1: fvtg2-isjcfDKzQJTcvj-mYiH6E.crl (hash: +p6zLu/AjzTCzvDWRNTjn7C3bhIQyKZWyHQhw+WkyGI=) 2: 49B77AF49F8911EC8270CE39C4F9AE02.roa (hash: A4cA8YN7jcZngdZa3tpI+IpUHK4WS+VtSTZQ60gb8Cc=) 3: 52EBB7524AE611EEB1E51972C4F9AE02.roa (hash: wld/ogIBPh3DW/laqIddglVEpnzlKpHA4pEqwL9PJOE=) 4: 465066A44AD811EEB55E2071C4F9AE02.roa (hash: rooAY+QwHq+MWUAdb5diehizwCwb4BdEaaA2+5EIoQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.crl rsync://rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvtg2-isjcfDKzQJTcvj-mYiH6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 825 (0x339) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166CD3/serialNumber=7EFB60DBE8AC8DC7C32B34094DCBE3FA66221FA1 Validity Not Before: Nov 21 00:40:56 2024 GMT Not After : Nov 28 00:40:56 2024 GMT Subject: CN=673e8199-e240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9a:82:5c:04:c5:b5:36:54:bc:2a:56:9e:b8: 6e:4e:ff:76:43:f5:d6:c5:7a:6c:66:9f:5f:8c:f8: be:f0:87:d0:b6:9d:09:d8:c4:76:42:49:09:68:a0: 4b:38:0f:e7:4c:9d:b4:c5:d5:f5:63:14:60:a1:73: ba:e2:4c:db:f7:53:e3:d2:8c:70:a1:b2:de:ba:5c: 31:3c:1b:0f:22:55:2c:a4:eb:c0:a2:da:c2:17:87: 88:02:73:3c:04:3e:1f:7e:d7:ca:1b:45:eb:c7:f2: 41:9b:27:94:7e:68:84:97:57:50:c6:fc:2b:c3:4a: 1c:49:eb:dd:b6:6f:14:e1:a9:64:2c:ad:dd:34:03: 42:a1:51:00:17:d1:42:c4:fa:f5:8f:32:95:fd:ed: 8a:64:ad:02:b5:7c:0a:0b:f2:87:6b:3d:1d:c6:ff: 82:14:24:aa:81:68:cd:8f:d9:47:ef:1f:39:cc:82: 15:7b:98:fd:01:16:53:a1:6b:ef:94:cf:e1:b5:70: 06:f2:e9:c4:b3:a4:cd:a5:e6:d5:f3:43:7a:0f:ad: 3f:f7:12:d9:94:dd:c7:0e:a5:b7:76:34:3c:0e:8f: 6e:32:e4:6a:c0:a8:04:71:9f:a3:93:6d:38:bc:a9: 48:e3:57:69:27:76:ad:f2:0b:22:f4:23:20:40:0c: 27:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:89:F6:E5:8C:AA:50:49:3C:15:DA:AC:E4:7A:D2:66:F3:C5:CB:63 X509v3 Authority Key Identifier: keyid:7E:FB:60:DB:E8:AC:8D:C7:C3:2B:34:09:4D:CB:E3:FA:66:22:1F:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvtg2-isjcfDKzQJTcvj-mYiH6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:52:97:51:6b:6f:fa:11:74:3b:4d:40:ac:e6:e3:02:7e:07: 30:28:82:18:f2:1a:7a:1a:a2:6b:52:66:89:5a:1b:f5:c5:05: 10:79:04:1c:22:fd:1c:67:2d:f2:2d:a0:e2:52:32:7a:83:a3: 26:3a:45:a1:25:a3:dd:c7:42:ed:05:9d:3e:e5:31:73:4b:a7: 63:af:18:dc:43:5d:cc:f5:7a:94:8c:25:13:78:1e:6c:69:71: 88:0b:c9:c1:e8:46:92:ba:d3:c6:20:6a:14:65:b7:47:af:ec: 79:d4:f6:78:b9:28:37:79:98:35:ad:0f:e2:e0:3b:c7:40:23: fc:38:a3:25:c5:7c:62:e2:0d:c7:e8:a1:a8:33:ed:f2:3b:aa: 0a:fe:05:78:92:f8:50:f8:de:67:20:75:87:a0:b6:3d:fb:17: 4e:bd:28:cd:3c:49:27:1f:85:35:26:c0:46:84:27:37:ec:9e: ae:93:92:61:2b:0e:7f:a2:21:0b:28:87:8f:1d:be:b8:c8:61: d3:29:81:6e:04:db:7a:91:86:88:1c:c6:6a:a4:92:c4:77:76: a8:ec:ea:ed:a6:18:48:d9:ae:54:e6:72:11:a0:1f:dc:32:3d: 5a:cc:2c:5a:72:5e:73:4c:46:9c:1d:d5:b5:02:80:da:0b:1a: fa:00:4c:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjZDRDMxMTAvBgNVBAUTKDdFRkI2MERCRThBQzhEQzdDMzJCMzQwOTREQ0JFM0ZB NjYyMjFGQTEwHhcNMjQxMTIxMDA0MDU2WhcNMjQxMTI4MDA0MDU2WjAYMRYwFAYD VQQDEw02NzNlODE5OS1lMjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZqCXATFtTZUvCpWnrhuTv92Q/XWxXpsZp9fjPi+8IfQtp0J2MR2QkkJaKBL OA/nTJ20xdX1YxRgoXO64kzb91Pj0oxwobLeulwxPBsPIlUspOvAotrCF4eIAnM8 BD4fftfKG0Xrx/JBmyeUfmiEl1dQxvwrw0ocSevdtm8U4alkLK3dNANCoVEAF9FC xPr1jzKV/e2KZK0CtXwKC/KHaz0dxv+CFCSqgWjNj9lH7x85zIIVe5j9ARZToWvv lM/htXAG8unEs6TNpebV80N6D60/9xLZlN3HDqW3djQ8Do9uMuRqwKgEcZ+jk204 vKlI41dpJ3at8gsi9CMgQAwnlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNCJ9uWM qlBJPBXarOR60mbzxctjMB8GA1UdIwQYMBaAFH77YNvorI3Hwys0CU3L4/pmIh+h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkNEMy9GNjlCQ0Q0QzlG ODQxMUVDOTM2OTU1MzFDNEY5QUUwMi9mdnRnMi1pc2pjZkRLelFKVGN2ai1tWWlI NkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z2dGcyLWlzamNmREt6UUpUY3ZqLW1ZaUg2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NkNEMy9GNjlCQ0Q0QzlGODQxMUVDOTM2OTU1MzFDNEY5QUUwMi9mdnRnMi1pc2pj ZkRLelFKVGN2ai1tWWlINkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnUpdRa2/6EXQ7TUCs5uMCfgcwKIIY8hp6GqJrUmaJWhv1xQUQeQQc Iv0cZy3yLaDiUjJ6g6MmOkWhJaPdx0LtBZ0+5TFzS6djrxjcQ13M9XqUjCUTeB5s aXGIC8nB6EaSutPGIGoUZbdHr+x51PZ4uSg3eZg1rQ/i4DvHQCP8OKMlxXxi4g3H 6KGoM+3yO6oK/gV4kvhQ+N5nIHWHoLY9+xdOvSjNPEknH4U1JsBGhCc37J6uk5Jh Kw5/oiELKIePHb64yGHTKYFuBNt6kYaIHMZqpJLEd3ao7OrtphhI2a5U5nIRoB/c Mj1azCxacl5zTEacHdW1AoDaCxr6AExF -----END CERTIFICATE-----Generated at Thu Nov 21 01:31:54 2024 by rpki-client on console-fra.rpki-client.org