$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft File: fd08hfmnH2JfzMEMqDHld3CbTz8.mft (raw, json) Hash identifier: 1cJL7WFGoUNK7VYr60NZjmkwHiYbxUQ4VGy7XKHbmMk= Subject key identifier: 7E:0D:0E:CD:33:F8:55:7C:B3:4C:DA:66:B5:B9:B2:DE:6F:9C:9C:3B Authority key identifier: 7D:DD:3C:85:F9:A7:1F:62:5F:CC:C1:0C:A8:31:E5:77:70:9B:4F:3F Certificate issuer: /CN=A9167B41/serialNumber=7DDD3C85F9A71F625FCCC10CA831E577709B4F3F Certificate serial: 0291 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft Manifest number: 028E Signing time: Sat 23 Nov 2024 01:08:32 +0000 Manifest this update: Sat 23 Nov 2024 01:08:32 +0000 Manifest next update: Sat 30 Nov 2024 01:08:32 +0000 Files and hashes: 1: fd08hfmnH2JfzMEMqDHld3CbTz8.crl (hash: qKySMyCcY12kIq19UHfvJSLR5V+Qcogiq0wv1Ze3ymM=) 2: D24B4D42DF3E11EC83CCFE1EC4F9AE02.roa (hash: kgM5o3dXNIi7eIMjv0bZ11gFzEgmzlkUXlFL5nbPJ3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.crl rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 657 (0x291) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B41/serialNumber=7DDD3C85F9A71F625FCCC10CA831E577709B4F3F Validity Not Before: Nov 23 01:08:32 2024 GMT Not After : Nov 30 01:08:32 2024 GMT Subject: CN=67412b10-5ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:30:5c:ee:d5:75:08:93:72:9f:61:44:c3:19: be:ea:8c:a1:9c:f0:94:cd:39:b1:99:03:e6:da:bf: 7e:24:59:b1:24:38:25:d2:25:1d:52:9f:a2:42:27: 13:03:4e:a7:71:bf:72:53:bd:d8:a9:92:99:ee:21: ce:03:15:63:d8:54:14:df:d7:f5:dd:2a:53:80:45: a3:50:d6:66:3d:87:de:96:0d:f9:b8:4a:7d:97:69: 74:5b:a7:f3:58:2c:03:1a:0d:65:90:db:48:0f:88: 25:fb:45:94:53:b5:51:48:8e:af:18:75:a0:7d:82: 53:67:82:e3:6a:98:09:b0:51:60:46:5f:29:21:0f: 04:64:b9:72:54:db:d2:ad:62:8d:2a:fd:11:c3:26: ea:1d:dd:34:9c:fe:ed:5c:01:9c:49:61:fa:8b:0a: 20:c0:f0:c5:be:76:96:b5:40:b4:f7:81:21:1f:5c: b0:be:be:5b:89:35:fe:ee:e4:5f:01:81:2d:53:ea: 3c:50:f9:57:cd:97:f0:78:61:79:05:b7:2d:c9:ca: 65:48:0a:78:59:34:8d:2b:cb:6d:77:ae:ee:e1:79: a2:38:9e:11:80:65:53:6e:f2:28:13:d7:ff:f5:9b: 46:96:c0:0e:47:00:4a:34:86:3f:4d:03:69:db:d0: ac:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:0D:0E:CD:33:F8:55:7C:B3:4C:DA:66:B5:B9:B2:DE:6F:9C:9C:3B X509v3 Authority Key Identifier: keyid:7D:DD:3C:85:F9:A7:1F:62:5F:CC:C1:0C:A8:31:E5:77:70:9B:4F:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:1b:5d:82:50:27:c1:ce:da:91:dd:c3:6e:93:40:5f:7a:e4: 15:7d:7c:5c:53:ab:5a:2c:f5:f1:d9:6c:c6:4d:6f:cb:90:ab: 2a:2d:a3:39:0a:d1:f7:30:5c:28:29:9b:e0:b6:76:b9:92:7d: 00:46:df:4a:57:2c:2d:0b:b6:40:87:95:49:f3:ed:af:bf:33: ec:75:8a:e0:c6:89:06:bf:6b:bd:62:d0:7a:51:61:b1:1b:06: 8f:b7:a3:d9:b9:02:bd:8b:3d:be:f4:1a:ba:c5:9d:c7:2a:03: 9c:ee:7d:17:64:ba:73:b3:3d:d2:af:e3:f7:ad:d4:8b:bc:93: 0c:32:1b:f7:fb:0c:17:e9:3f:cf:d4:ae:08:f5:ba:25:60:f8: 09:51:7d:f3:5b:2c:04:7c:41:29:2a:3e:82:1b:df:18:de:28: 4f:97:3f:30:8b:15:33:f4:2b:f4:b0:5d:eb:c3:bd:ca:36:18: 33:f0:95:1c:2d:99:c5:39:19:99:48:cb:99:76:d4:ac:ea:de: 1e:0c:03:62:3b:36:7f:2a:60:16:74:64:5e:79:b7:f1:cb:ee: ea:a4:e8:ef:5f:b7:9d:7f:9d:af:62:2c:73:e5:48:c2:e2:13: 4d:94:0a:9b:71:a3:c4:72:b2:0d:77:67:51:49:8c:0c:72:d3: a5:51:5a:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCNDExMTAvBgNVBAUTKDdEREQzQzg1RjlBNzFGNjI1RkNDQzEwQ0E4MzFFNTc3 NzA5QjRGM0YwHhcNMjQxMTIzMDEwODMyWhcNMjQxMTMwMDEwODMyWjAYMRYwFAYD VQQDEw02NzQxMmIxMC01ZWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4TBc7tV1CJNyn2FEwxm+6oyhnPCUzTmxmQPm2r9+JFmxJDgl0iUdUp+iQicT A06ncb9yU73YqZKZ7iHOAxVj2FQU39f13SpTgEWjUNZmPYfelg35uEp9l2l0W6fz WCwDGg1lkNtID4gl+0WUU7VRSI6vGHWgfYJTZ4LjapgJsFFgRl8pIQ8EZLlyVNvS rWKNKv0RwybqHd00nP7tXAGcSWH6iwogwPDFvnaWtUC094EhH1ywvr5biTX+7uRf AYEtU+o8UPlXzZfweGF5BbctycplSAp4WTSNK8ttd67u4XmiOJ4RgGVTbvIoE9f/ 9ZtGlsAORwBKNIY/TQNp29CsJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH4NDs0z +FV8s0zaZrW5st5vnJw7MB8GA1UdIwQYMBaAFH3dPIX5px9iX8zBDKgx5Xdwm08/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I0MS9FNzkwRjlBQURG MzgxMUVDQkM4QzlBN0ZDNEY5QUUwMi9mZDA4aGZtbkgySmZ6TUVNcURIbGQzQ2JU ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZkMDhoZm1uSDJKZnpNRU1xREhsZDNDYlR6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I0MS9FNzkwRjlBQURGMzgxMUVDQkM4QzlBN0ZDNEY5QUUwMi9mZDA4aGZtbkgy SmZ6TUVNcURIbGQzQ2JUejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWG12CUCfBztqR3cNuk0BfeuQVfXxcU6taLPXx2WzGTW/LkKsqLaM5 CtH3MFwoKZvgtna5kn0ARt9KVywtC7ZAh5VJ8+2vvzPsdYrgxokGv2u9YtB6UWGx GwaPt6PZuQK9iz2+9Bq6xZ3HKgOc7n0XZLpzsz3Sr+P3rdSLvJMMMhv3+wwX6T/P 1K4I9bolYPgJUX3zWywEfEEpKj6CG98Y3ihPlz8wixUz9Cv0sF3rw73KNhgz8JUc LZnFORmZSMuZdtSs6t4eDANiOzZ/KmAWdGReebfxy+7qpOjvX7edf52vYixz5UjC 4hNNlAqbcaPEcrINd2dRSYwMctOlUVoC -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:38 2024 by rpki-client on console-fra.rpki-client.org