$ rpki-client -vvf rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/FOUWOGcQb85FUq7s-x8gJmHm310.mft File: FOUWOGcQb85FUq7s-x8gJmHm310.mft (raw, json) Hash identifier: MWbTUoEU3/LDdIVmFJAScgDX7w8aGZ1GaUlSho7Y0EA= Subject key identifier: B8:B8:83:08:CB:04:A3:69:10:DA:9E:60:95:DD:5D:02:F5:A0:9D:A6 Authority key identifier: 14:E5:16:38:67:10:6F:CE:45:52:AE:EC:FB:1F:20:26:61:E6:DF:5D Certificate issuer: /CN=A916F9F6/serialNumber=14E5163867106FCE4552AEECFB1F202661E6DF5D Certificate serial: 062D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOUWOGcQb85FUq7s-x8gJmHm310.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/FOUWOGcQb85FUq7s-x8gJmHm310.mft Manifest number: 0620 Signing time: Fri 22 Nov 2024 22:09:22 +0000 Manifest this update: Fri 22 Nov 2024 22:09:22 +0000 Manifest next update: Fri 29 Nov 2024 22:09:22 +0000 Files and hashes: 1: FOUWOGcQb85FUq7s-x8gJmHm310.crl (hash: E0nCEpRhbn8Z2c7pTGQPx0i1xiaDdudQ9cGiFCp01Qk=) 2: 81D7961ADD9211EDA5A21671C4F9AE02.roa (hash: gNRYTYMwj494RNxbNtDWuzvBMRPNNtKBT2cX5Pzvaas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/FOUWOGcQb85FUq7s-x8gJmHm310.crl rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/FOUWOGcQb85FUq7s-x8gJmHm310.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOUWOGcQb85FUq7s-x8gJmHm310.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1581 (0x62d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F9F6/serialNumber=14E5163867106FCE4552AEECFB1F202661E6DF5D Validity Not Before: Nov 22 22:09:22 2024 GMT Not After : Nov 29 22:09:22 2024 GMT Subject: CN=67410112-3011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6c:e2:be:42:ab:01:ab:ae:01:8d:e3:fc:ae: 67:71:19:da:71:39:24:cf:5e:a3:02:2a:37:0e:e0: 27:1f:8e:72:88:03:c3:65:dc:25:85:73:b7:8b:0a: 60:71:b0:52:23:ef:6c:0a:f0:6c:75:ae:50:6c:5a: 7d:dc:15:e3:00:33:76:47:9b:dd:d6:12:de:c8:a9: 31:4e:c9:53:02:9b:37:c0:be:c6:b4:d4:8c:17:58: 28:22:83:c7:06:3e:d5:d9:4d:5f:c5:45:d3:dc:19: 0e:2d:8c:be:20:d3:17:19:87:d2:40:aa:a3:3f:fb: c7:26:13:e8:d1:01:02:09:a0:eb:f1:6e:f9:1c:f1: bf:56:e4:35:f0:91:6a:5f:fe:2f:dd:c9:7f:ac:85: f1:93:a4:a6:8b:7b:22:6a:5d:b4:8a:a2:2b:e0:34: a7:98:ab:0d:aa:97:ff:9f:4c:52:79:56:bb:42:df: 40:24:4a:fb:20:6e:b9:4e:95:0d:3a:74:97:65:aa: 18:85:67:5d:7b:eb:f3:c5:c4:98:28:06:b4:b0:21: dd:12:b8:de:11:c7:0c:91:65:a8:18:6c:22:da:92: d3:a3:9c:03:3b:c7:02:82:b1:7e:79:6d:07:1c:5e: c6:cc:37:1c:44:1b:fa:c6:c2:85:00:6e:83:4e:91: fd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B8:83:08:CB:04:A3:69:10:DA:9E:60:95:DD:5D:02:F5:A0:9D:A6 X509v3 Authority Key Identifier: keyid:14:E5:16:38:67:10:6F:CE:45:52:AE:EC:FB:1F:20:26:61:E6:DF:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/FOUWOGcQb85FUq7s-x8gJmHm310.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOUWOGcQb85FUq7s-x8gJmHm310.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/FOUWOGcQb85FUq7s-x8gJmHm310.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:fa:aa:51:fa:9f:bc:ff:99:e8:ec:0c:30:14:01:63:e6:06: 59:69:b6:ee:7f:1d:b0:b3:96:a8:99:ff:1a:07:28:93:88:01: 8f:93:77:d5:b0:d9:3c:a9:c7:eb:de:7d:c0:f2:a9:7d:7b:fa: b6:5e:ee:ac:72:9c:e0:c7:1b:08:a0:dc:3f:7b:73:57:cb:a1: 6c:b6:a5:6f:be:68:27:e8:64:18:fe:4c:c0:6a:7a:6a:e1:3f: b5:8b:4f:a0:14:6c:70:bd:06:4b:ad:bc:e3:4a:10:7a:3f:b1: ff:12:b0:50:e0:e6:31:a6:32:ec:e0:53:91:36:15:a7:50:53: de:91:ce:6c:1f:5e:05:46:ac:c3:53:0e:39:f7:ec:56:b0:0e: 06:84:be:90:2d:3d:6a:5d:d6:29:8e:b9:e4:da:4e:a5:4e:3c: 3c:94:a9:6d:76:66:96:9d:7b:60:2a:fa:52:1e:d5:63:39:27: 6e:d8:5e:56:1c:1d:84:c6:c1:5f:fd:fd:bf:a3:3a:53:89:2e: f6:5c:85:fd:19:ca:a3:b9:d0:63:e4:a4:c2:7a:45:49:9b:bc: ae:10:7c:e1:6a:11:a4:9d:33:bd:15:2e:98:49:21:3c:9d:90: 80:76:3c:8c:54:58:cd:8a:fa:f4:ce:3f:e4:f7:d6:f3:cb:33: be:49:76:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY5RjYxMTAvBgNVBAUTKDE0RTUxNjM4NjcxMDZGQ0U0NTUyQUVFQ0ZCMUYyMDI2 NjFFNkRGNUQwHhcNMjQxMTIyMjIwOTIyWhcNMjQxMTI5MjIwOTIyWjAYMRYwFAYD VQQDEw02NzQxMDExMi0zMDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2zivkKrAauuAY3j/K5ncRnacTkkz16jAio3DuAnH45yiAPDZdwlhXO3iwpg cbBSI+9sCvBsda5QbFp93BXjADN2R5vd1hLeyKkxTslTAps3wL7GtNSMF1goIoPH Bj7V2U1fxUXT3BkOLYy+INMXGYfSQKqjP/vHJhPo0QECCaDr8W75HPG/VuQ18JFq X/4v3cl/rIXxk6Smi3sial20iqIr4DSnmKsNqpf/n0xSeVa7Qt9AJEr7IG65TpUN OnSXZaoYhWdde+vzxcSYKAa0sCHdErjeEccMkWWoGGwi2pLTo5wDO8cCgrF+eW0H HF7GzDccRBv6xsKFAG6DTpH9HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLi4gwjL BKNpENqeYJXdXQL1oJ2mMB8GA1UdIwQYMBaAFBTlFjhnEG/ORVKu7PsfICZh5t9d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjlGNi9GNjU1RjdGNjdB NjcxMUVCQkNGNzZDNkZDNEY5QUUwMi9GT1VXT0djUWI4NUZVcTdzLXg4Z0ptSG0z MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZPVVdPR2NRYjg1RlVxN3MteDhnSm1IbTMxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjlGNi9GNjU1RjdGNjdBNjcxMUVCQkNGNzZDNkZDNEY5QUUwMi9GT1VXT0djUWI4 NUZVcTdzLXg4Z0ptSG0zMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt+qpR+p+8/5no7AwwFAFj5gZZabbufx2ws5aomf8aByiTiAGPk3fV sNk8qcfr3n3A8ql9e/q2Xu6scpzgxxsIoNw/e3NXy6FstqVvvmgn6GQY/kzAanpq 4T+1i0+gFGxwvQZLrbzjShB6P7H/ErBQ4OYxpjLs4FORNhWnUFPekc5sH14FRqzD Uw459+xWsA4GhL6QLT1qXdYpjrnk2k6lTjw8lKltdmaWnXtgKvpSHtVjOSdu2F5W HB2ExsFf/f2/ozpTiS72XIX9GcqjudBj5KTCekVJm7yuEHzhahGknTO9FS6YSSE8 nZCAdjyMVFjNivr0zj/k99bzyzO+SXbn -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:28 2024 by rpki-client on console-fra.rpki-client.org