$ rpki-client -vvf rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft File: fBoPSOpDIx-jND1ZKCHvKejSsxs.mft (raw, json) Hash identifier: o/Ou3o+lwEvn+oSEbdXBXjPuE4JV0YJYFrQ+du25Wo4= Subject key identifier: D9:AC:7F:38:08:1C:68:A7:2E:88:01:FE:C2:54:D4:29:F5:3F:37:E1 Authority key identifier: 7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B Certificate issuer: /CN=A91798AD/serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B Certificate serial: 1BDA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft Manifest number: 1B96 Signing time: Wed 20 Nov 2024 16:14:54 +0000 Manifest this update: Wed 20 Nov 2024 16:14:53 +0000 Manifest next update: Wed 27 Nov 2024 16:14:53 +0000 Files and hashes: 1: fBoPSOpDIx-jND1ZKCHvKejSsxs.crl (hash: 5chUe0DdOTLG7z2iDNh9EDEN2nUJhnjqCkZcjTx1NT0=) 2: AD3B2582EF9A11EDA4E50366C4F9AE02.roa (hash: PYYCavuhAA+f/ueVXIOx+Y7Qa/9Rk10a4dCrxkGb3ko=) 3: 98E30C12DCE411EDB446D65DC4F9AE02.roa (hash: 5LMPCnmgpvXAYsKyuhBhkB3oiO6C+fnzS1hbGMCTiQQ=) 4: 398B3186FE5111E6BCEC6E72C4F9AE02.roa (hash: Lee0UxrUp18WPeigcCSZbHFswfN4jnUwW80ZCAROV3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 16:14:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7130 (0x1bda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91798AD/serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B Validity Not Before: Nov 20 16:14:53 2024 GMT Not After : Nov 27 16:14:53 2024 GMT Subject: CN=673e0afe-873e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6b:12:8f:13:7f:6b:ef:5e:56:82:e4:da:b2: 7e:62:96:77:43:b1:39:5a:01:e6:52:d9:65:4e:c9: bc:7c:2e:51:c3:fe:5e:40:73:dd:c0:45:bc:46:61: f3:75:89:5c:e9:b0:ee:5b:51:38:72:23:6c:80:19: ea:b8:33:46:75:ff:22:f0:a0:73:97:5e:7a:69:b3: e7:b5:3e:8f:76:c3:a5:83:53:4d:3d:3d:72:cd:2e: c2:65:ab:c2:fd:21:be:0a:80:7a:08:01:0f:98:06: 44:0e:5a:ee:42:46:2a:3f:ab:a7:6c:85:af:be:2d: 10:92:6e:8c:8a:66:d5:ed:f2:54:9a:32:a5:b2:a5: 79:07:74:2e:a1:4e:1e:46:8a:f0:54:38:d5:c0:08: c4:ac:e7:7d:66:b0:77:00:fd:03:b2:41:af:9e:32: e0:4a:05:3d:70:c9:f2:f1:1d:06:d9:b8:22:f7:a8: aa:8c:a1:47:5a:ff:12:b0:07:05:be:bd:dc:bd:41: b5:2c:c9:55:8a:a8:59:58:a7:e6:8e:f1:4b:63:dd: 33:b9:48:b5:3f:6e:dd:4c:9f:0f:07:53:17:0b:fe: 2c:ff:1f:90:7f:7a:39:97:03:c9:50:d5:31:5f:2d: cc:40:2c:6b:76:a0:8d:80:b7:bc:27:f7:2d:f0:b6: 2d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AC:7F:38:08:1C:68:A7:2E:88:01:FE:C2:54:D4:29:F5:3F:37:E1 X509v3 Authority Key Identifier: keyid:7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:81:a9:c9:d7:ef:a4:f4:d2:82:de:81:b4:e9:39:a5:7a:1a: b0:60:4d:e6:e5:b5:2f:b5:3f:78:93:f9:ba:8c:cc:1e:ae:3b: 12:12:3d:b8:79:6a:2a:40:a6:82:56:0b:da:90:fe:6d:63:9a: 40:31:f5:8b:a0:b6:fc:a8:44:5e:6b:1d:4b:9e:a1:f7:91:a8: 96:fc:7a:fe:6e:82:67:9d:46:6b:3d:ce:67:f7:2b:9c:58:d2: 24:ef:f9:a2:5a:00:6c:a7:25:fd:ef:76:9c:8c:51:8e:e6:cb: 84:ea:bc:3f:ec:ac:80:93:1b:5a:f6:eb:bf:50:f6:ed:7f:5a: e0:69:57:7a:d8:f6:c7:20:09:a0:87:06:0c:41:7d:f0:be:56: 9c:a6:67:76:c1:d9:e1:8a:a7:ea:7b:72:af:87:9a:8a:a3:cb: b4:26:3e:03:e2:65:cc:73:4d:7b:47:ef:4a:30:11:6e:43:a1: 93:16:3b:b5:60:b6:f3:69:64:ad:37:a1:b9:9f:a1:32:6b:40: 60:66:6e:89:00:2d:da:ce:1b:ad:56:b9:51:2e:4c:a1:f2:1e: 72:2c:a6:bb:05:14:21:36:6c:03:4b:e6:63:ab:28:5e:5e:ec: 72:12:4d:05:1c:b3:a8:2f:de:47:47:24:f5:ab:46:6d:aa:cb: 6b:76:ee:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk4QUQxMTAvBgNVBAUTKDdDMUEwRjQ4RUE0MzIzMUZBMzM0M0Q1OTI4MjFFRjI5 RThEMkIzMUIwHhcNMjQxMTIwMTYxNDUzWhcNMjQxMTI3MTYxNDUzWjAYMRYwFAYD VQQDEw02NzNlMGFmZS04NzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2sSjxN/a+9eVoLk2rJ+YpZ3Q7E5WgHmUtllTsm8fC5Rw/5eQHPdwEW8RmHz dYlc6bDuW1E4ciNsgBnquDNGdf8i8KBzl156abPntT6PdsOlg1NNPT1yzS7CZavC /SG+CoB6CAEPmAZEDlruQkYqP6unbIWvvi0Qkm6MimbV7fJUmjKlsqV5B3QuoU4e RorwVDjVwAjErOd9ZrB3AP0DskGvnjLgSgU9cMny8R0G2bgi96iqjKFHWv8SsAcF vr3cvUG1LMlViqhZWKfmjvFLY90zuUi1P27dTJ8PB1MXC/4s/x+Qf3o5lwPJUNUx Xy3MQCxrdqCNgLe8J/ct8LYthQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmsfzgI HGinLogB/sJU1Cn1PzfhMB8GA1UdIwQYMBaAFHwaD0jqQyMfozQ9WSgh7yno0rMb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OThBRC83MEVGQjRBQ0ZF MkExMUU2OEYyQzVBMTNDNEY5QUUwMi9mQm9QU09wREl4LWpORDFaS0NIdktlalNz eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZCb1BTT3BESXgtak5EMVpLQ0h2S2VqU3N4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OThBRC83MEVGQjRBQ0ZFMkExMUU2OEYyQzVBMTNDNEY5QUUwMi9mQm9QU09wREl4 LWpORDFaS0NIdktlalNzeHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYganJ1++k9NKC3oG06TmlehqwYE3m5bUvtT94k/m6jMwerjsSEj24 eWoqQKaCVgvakP5tY5pAMfWLoLb8qEReax1LnqH3kaiW/Hr+boJnnUZrPc5n9yuc WNIk7/miWgBspyX973acjFGO5suE6rw/7KyAkxta9uu/UPbtf1rgaVd62PbHIAmg hwYMQX3wvlacpmd2wdnhiqfqe3Kvh5qKo8u0Jj4D4mXMc017R+9KMBFuQ6GTFju1 YLbzaWStN6G5n6Eya0BgZm6JAC3azhutVrlRLkyh8h5yLKa7BRQhNmwDS+Zjqyhe XuxyEk0FHLOoL95HRyT1q0Ztqstrdu5K -----END CERTIFICATE-----Generated at Wed Nov 20 18:45:00 2024 by rpki-client on console-fra.rpki-client.org