$ rpki-client -vvf rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.mft File: FMR1z9KLd-wRUsLvM-XkPhdawiE.mft (raw, json) Hash identifier: XtkAUsr1iy+2OLIkB6Hki1Y54TNEnsNABNodD8NkQgk= Subject key identifier: 4F:B9:96:B0:54:1A:4B:9F:83:87:B6:34:11:16:2C:11:02:ED:00:0A Authority key identifier: 14:C4:75:CF:D2:8B:77:EC:11:52:C2:EF:33:E5:E4:3E:17:5A:C2:21 Certificate issuer: /CN=A9180542/serialNumber=14C475CFD28B77EC1152C2EF33E5E43E175AC221 Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMR1z9KLd-wRUsLvM-XkPhdawiE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.mft Manifest number: 11D8 Signing time: Fri 22 Nov 2024 17:59:30 +0000 Manifest this update: Fri 22 Nov 2024 17:59:30 +0000 Manifest next update: Fri 29 Nov 2024 17:59:30 +0000 Files and hashes: 1: FMR1z9KLd-wRUsLvM-XkPhdawiE.crl (hash: 7lxTeHZfMEQ2t0EaDQZ6sSC8ISBGsdUHKdZ+5ARLKuU=) 2: 07F7821E890011EEB1D8307EC4F9AE02.roa (hash: Ex+6JUYUT1fn58MXzUbTsKkSfKCLrTn1oSCE194tkqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.crl rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMR1z9KLd-wRUsLvM-XkPhdawiE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180542/serialNumber=14C475CFD28B77EC1152C2EF33E5E43E175AC221 Validity Not Before: Nov 22 17:59:30 2024 GMT Not After : Nov 29 17:59:30 2024 GMT Subject: CN=6740c682-3474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8f:8b:6b:f3:1e:7f:1a:f5:40:93:90:76:f1: 3a:7f:2b:e8:4e:c5:a4:da:89:c6:52:1a:c5:7b:a7: 06:ae:d6:00:8d:ca:b5:fe:2a:91:dc:da:c8:71:53: 3e:72:f1:68:63:87:30:99:56:40:b0:5d:43:9f:c4: 75:6a:11:a6:07:05:89:d0:a7:be:5f:3a:0f:41:d2: 0d:26:6d:e0:c8:f8:3f:87:69:22:d9:fd:71:f0:75: 69:2c:33:08:5f:7c:e7:a4:cf:f4:40:66:1a:dd:74: 1b:fd:6c:e2:38:c3:87:da:46:2a:e9:2a:2f:94:dd: 97:5c:11:1e:7b:e6:ee:b9:10:a2:2a:e8:74:ff:86: 17:d5:96:2e:46:38:f2:99:15:a0:8c:9a:09:34:df: 7d:83:f0:98:a8:79:a0:7c:8c:96:c6:d7:cf:1f:c1: a2:e1:64:a9:33:a8:b6:3b:7d:7f:43:0d:96:ff:90: ae:91:04:b6:c7:df:60:60:32:9a:fe:cf:09:24:a2: 3c:cb:28:82:d2:23:67:62:29:2e:a1:1c:39:18:c9: e1:db:d1:cb:0c:df:e4:0a:0b:0f:4f:02:86:75:20: 5b:30:1e:36:3d:0b:00:6b:1e:de:d5:0e:6d:b3:00: 1a:f7:e2:d9:fa:0c:96:97:0e:27:cc:3b:b6:4a:f7: 1a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B9:96:B0:54:1A:4B:9F:83:87:B6:34:11:16:2C:11:02:ED:00:0A X509v3 Authority Key Identifier: keyid:14:C4:75:CF:D2:8B:77:EC:11:52:C2:EF:33:E5:E4:3E:17:5A:C2:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMR1z9KLd-wRUsLvM-XkPhdawiE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:6c:7e:8b:ab:34:20:a1:81:bc:b3:6c:72:d2:0f:83:af:ad: f8:1a:52:f1:ea:14:38:12:da:ca:8a:81:c6:e7:98:da:f5:af: 58:60:45:68:24:00:2d:41:cc:83:0e:e6:25:3d:aa:ec:49:88: fe:25:f5:3e:fc:1a:98:a8:29:0d:c9:7e:ea:28:46:81:3e:72: 52:6b:89:83:be:47:77:c8:c1:f3:03:50:13:2f:93:71:e7:71: 94:ec:75:f1:71:2e:66:a6:2d:ea:ee:c3:07:6b:20:2e:12:f5: 90:2d:20:a6:dc:60:63:3f:31:bc:fd:b5:47:48:40:75:aa:72: 8f:3a:55:a2:72:7a:09:ea:82:9a:2f:ec:4b:18:b9:65:9a:72: 72:57:7c:75:72:7e:31:ad:c0:5a:48:18:ca:3c:e7:cd:99:4b: aa:e0:77:3e:a0:64:ea:19:2c:89:2e:dd:75:e0:2f:7b:29:73: 60:95:8c:2f:28:7a:d9:4b:a8:1e:8c:05:5c:35:53:86:77:bc: b7:81:3e:94:f3:d0:51:4d:5d:e0:e3:d0:ee:46:ab:5a:b9:87: 34:b2:6b:14:c0:40:49:f3:9d:78:f7:6f:6a:dc:82:96:5d:42: a4:5f:00:76:60:71:a0:ec:e6:54:78:11:0c:d8:61:85:f7:6c: f0:70:12:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1NDIxMTAvBgNVBAUTKDE0QzQ3NUNGRDI4Qjc3RUMxMTUyQzJFRjMzRTVFNDNF MTc1QUMyMjEwHhcNMjQxMTIyMTc1OTMwWhcNMjQxMTI5MTc1OTMwWjAYMRYwFAYD VQQDEw02NzQwYzY4Mi0zNDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxo+La/Mefxr1QJOQdvE6fyvoTsWk2onGUhrFe6cGrtYAjcq1/iqR3NrIcVM+ cvFoY4cwmVZAsF1Dn8R1ahGmBwWJ0Ke+XzoPQdINJm3gyPg/h2ki2f1x8HVpLDMI X3znpM/0QGYa3XQb/WziOMOH2kYq6SovlN2XXBEee+buuRCiKuh0/4YX1ZYuRjjy mRWgjJoJNN99g/CYqHmgfIyWxtfPH8Gi4WSpM6i2O31/Qw2W/5CukQS2x99gYDKa /s8JJKI8yyiC0iNnYikuoRw5GMnh29HLDN/kCgsPTwKGdSBbMB42PQsAax7e1Q5t swAa9+LZ+gyWlw4nzDu2SvcatQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+5lrBU Gkufg4e2NBEWLBEC7QAKMB8GA1UdIwQYMBaAFBTEdc/Si3fsEVLC7zPl5D4XWsIh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDU0Mi8wQTQ3OUM5MENB RTkxMUU5QkJFOTIxODNDNEY5QUUwMi9GTVIxejlLTGQtd1JVc0x2TS1Ya1BoZGF3 aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZNUjF6OUtMZC13UlVzTHZNLVhrUGhkYXdpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDU0Mi8wQTQ3OUM5MENBRTkxMUU5QkJFOTIxODNDNEY5QUUwMi9GTVIxejlLTGQt d1JVc0x2TS1Ya1BoZGF3aUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGbH6LqzQgoYG8s2xy0g+Dr634GlLx6hQ4EtrKioHG55ja9a9YYEVo JAAtQcyDDuYlParsSYj+JfU+/BqYqCkNyX7qKEaBPnJSa4mDvkd3yMHzA1ATL5Nx 53GU7HXxcS5mpi3q7sMHayAuEvWQLSCm3GBjPzG8/bVHSEB1qnKPOlWicnoJ6oKa L+xLGLllmnJyV3x1cn4xrcBaSBjKPOfNmUuq4Hc+oGTqGSyJLt114C97KXNglYwv KHrZS6gejAVcNVOGd7y3gT6U89BRTV3g49DuRqtauYc0smsUwEBJ8514929q3IKW XUKkXwB2YHGg7OZUeBEM2GGF92zwcBLm -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:00 2024 by rpki-client on console-fra.rpki-client.org