$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft File: FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft (raw, json) Hash identifier: ZVRUEF2vCZa01z+oEe3b47ZZ1hDO20Wtv1vjclaNeOY= Subject key identifier: 60:BB:0B:FF:CD:7F:40:D0:4A:A5:34:D3:2F:6E:DC:CF:DA:6F:5A:CA Authority key identifier: 14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45 Certificate issuer: /CN=A9173CF2/serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745 Certificate serial: 0607 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft Manifest number: 0602 Signing time: Sun 24 Nov 2024 22:07:38 +0000 Manifest this update: Sun 24 Nov 2024 22:07:37 +0000 Manifest next update: Sun 01 Dec 2024 22:07:37 +0000 Files and hashes: 1: FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl (hash: YWzIA61kIimojG6rhrYGyhPLtN7KfjTM4VdnDuST9D4=) 2: D9E7CFF681EF11EBAEE9D17AC4F9AE02.roa (hash: ZbglDjurwe6qJhjv9yc/alHsSUDwI/+N2E8sYgdY/Mk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1543 (0x607) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CF2/serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745 Validity Not Before: Nov 24 22:07:37 2024 GMT Not After : Dec 1 22:07:37 2024 GMT Subject: CN=6743a3a9-99a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:67:44:a2:08:43:c5:02:9e:3c:71:f1:6a:15: ec:af:07:65:28:c9:22:b4:e7:8a:9b:dc:b6:f2:9b: 5a:14:ae:56:f4:67:22:0a:57:b2:f4:b8:f6:4f:11: 42:fd:c2:e8:7c:8a:f9:71:60:11:ed:d7:c0:aa:f7: cb:8c:33:eb:18:11:de:70:1c:f9:06:41:0d:e8:0a: 9c:c1:4b:84:66:a3:40:33:d6:4a:15:50:b7:b5:3f: 9a:ab:40:4c:48:a0:90:53:db:af:20:05:98:6f:8d: 33:e9:56:99:70:49:c9:f7:db:cf:3d:ab:87:60:54: 43:3d:67:70:ea:da:4a:ca:9f:62:ff:5b:a3:cb:5a: a1:b8:35:33:04:af:7d:fa:fd:b9:29:5f:16:d7:73: 1f:a1:a8:2c:c5:1e:2e:6c:c1:5c:e0:f4:74:aa:b0: ea:28:72:29:2c:54:27:78:28:f1:b1:d9:ba:56:eb: 86:4b:6d:df:c9:92:52:0b:7f:da:4e:51:ae:23:42: 6d:cf:84:9f:57:67:ee:25:45:13:8c:a6:e1:2e:e1: aa:95:9f:81:57:c2:51:26:ec:03:55:91:61:0d:56: ef:59:b1:ac:ee:ef:61:12:9e:ab:5d:da:e4:00:1f: 10:d1:47:74:84:7f:61:f9:d7:db:b8:a0:a4:e9:bf: 71:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:BB:0B:FF:CD:7F:40:D0:4A:A5:34:D3:2F:6E:DC:CF:DA:6F:5A:CA X509v3 Authority Key Identifier: keyid:14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:65:3d:97:a3:12:dc:0a:67:ed:ae:68:ac:2a:24:ab:99:08: 3c:c5:ef:a5:8c:ca:ad:46:7d:f2:69:89:7f:9c:51:cc:75:e3: 87:a3:fb:85:4b:6b:63:4a:04:67:e9:6b:67:85:3f:00:da:ac: 18:3b:88:26:f9:fb:03:97:1e:30:49:ad:96:8b:a5:08:cd:20: c5:5a:1a:cd:5a:1e:d6:25:bd:58:94:54:ac:c1:3e:0e:2e:6b: ea:79:89:35:51:62:35:7e:99:cb:cd:69:3f:9b:1f:48:17:58: 42:2d:77:da:35:81:63:d6:07:35:e4:9b:1e:73:26:0a:e6:98: 12:aa:da:94:eb:71:ab:53:e5:09:80:41:52:27:87:52:da:57: a5:ef:37:f3:15:49:8e:67:ef:c7:fa:2a:62:96:1d:fa:d7:80: e1:07:88:9c:3e:14:ff:f5:c4:ed:76:e1:14:30:98:8e:8c:50: 8b:64:5a:8b:37:07:c2:f6:08:c2:b2:0e:df:2f:61:40:aa:d1: 1a:f0:b9:92:bf:b8:f1:de:1c:b8:78:a8:ad:16:52:e0:e6:f9: c6:a9:f0:58:4b:bd:93:03:9f:1e:d4:fc:b7:d9:13:f9:57:44: 49:7f:0d:85:a1:f7:5f:53:28:eb:8e:ac:e9:a1:4c:d2:2b:a3: bb:fa:0c:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDRjIxMTAvBgNVBAUTKDE0NDdENDRCNDlGNzkwNkRDNjM3MzFBNUQ5OEQ4NTJF QzEwQjc3NDUwHhcNMjQxMTI0MjIwNzM3WhcNMjQxMjAxMjIwNzM3WjAYMRYwFAYD VQQDEw02NzQzYTNhOS05OWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0WdEoghDxQKePHHxahXsrwdlKMkitOeKm9y28ptaFK5W9GciCley9Lj2TxFC /cLofIr5cWAR7dfAqvfLjDPrGBHecBz5BkEN6AqcwUuEZqNAM9ZKFVC3tT+aq0BM SKCQU9uvIAWYb40z6VaZcEnJ99vPPauHYFRDPWdw6tpKyp9i/1ujy1qhuDUzBK99 +v25KV8W13MfoagsxR4ubMFc4PR0qrDqKHIpLFQneCjxsdm6VuuGS23fyZJSC3/a TlGuI0Jtz4SfV2fuJUUTjKbhLuGqlZ+BV8JRJuwDVZFhDVbvWbGs7u9hEp6rXdrk AB8Q0Ud0hH9h+dfbuKCk6b9xlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGC7C//N f0DQSqU00y9u3M/ab1rKMB8GA1UdIwQYMBaAFBRH1EtJ95BtxjcxpdmNhS7BC3dF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NGMi8xQUU5MDM0Njgx RUUxMUVCQkUzNTQ5NUZDNEY5QUUwMi9GRWZVUzBuM2tHM0dOekdsMlkyRkxzRUxk MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZFZlVTMG4za0czR056R2wyWTJGTHNFTGQwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0NGMi8xQUU5MDM0NjgxRUUxMUVCQkUzNTQ5NUZDNEY5QUUwMi9GRWZVUzBuM2tH M0dOekdsMlkyRkxzRUxkMFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIZT2XoxLcCmftrmisKiSrmQg8xe+ljMqtRn3yaYl/nFHMdeOHo/uF S2tjSgRn6WtnhT8A2qwYO4gm+fsDlx4wSa2Wi6UIzSDFWhrNWh7WJb1YlFSswT4O LmvqeYk1UWI1fpnLzWk/mx9IF1hCLXfaNYFj1gc15JsecyYK5pgSqtqU63GrU+UJ gEFSJ4dS2lel7zfzFUmOZ+/H+ipilh3614DhB4icPhT/9cTtduEUMJiOjFCLZFqL NwfC9gjCsg7fL2FAqtEa8LmSv7jx3hy4eKitFlLg5vnGqfBYS72TA58e1Py32RP5 V0RJfw2FofdfUyjrjqzpoUzSK6O7+gy9 -----END CERTIFICATE-----Generated at Sun Nov 24 23:07:53 2024 by rpki-client on console-ams.rpki-client.org