$ rpki-client -vvf rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft File: fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft (raw, json) Hash identifier: h5KvyujP4ksfVCYaRnwSp2j6eVzcxpvl1dX1P/KCESY= Subject key identifier: 23:66:41:FA:57:43:43:83:4B:A7:67:C2:B6:B5:C9:A2:22:DD:D4:FC Authority key identifier: 7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D Certificate issuer: /CN=A918753F/serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D Certificate serial: 0842 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft Manifest number: 0839 Signing time: Wed 20 Nov 2024 20:25:47 +0000 Manifest this update: Wed 20 Nov 2024 20:25:47 +0000 Manifest next update: Wed 27 Nov 2024 20:25:47 +0000 Files and hashes: 1: fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl (hash: F7wJ98rL8OBCHgp9rgcOpXmVqOqdtOqZwGkpkH0CoEk=) 2: 10A6E062B70A11EDB851464EC4F9AE02.roa (hash: XquIDLjEhOAmQqmF0eFe890gPbqlxjKM1c1+XdvRXFE=) 3: 38B92F54E17D11EDBCAFC081C4F9AE02.roa (hash: tWyNWbcGvommNE54pGTBI9V0mq0dDaX2rOT4IeoLLOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2114 (0x842) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918753F/serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D Validity Not Before: Nov 20 20:25:47 2024 GMT Not After : Nov 27 20:25:47 2024 GMT Subject: CN=673e45cb-6e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:41:5a:88:f0:3b:fa:00:63:4f:cc:64:24:92: 44:86:d7:95:48:89:88:ab:f8:2e:a6:27:cb:86:1b: 68:65:bf:93:ab:79:57:1b:90:95:fb:ab:a5:1f:7d: 4c:4a:10:93:7d:b0:96:7a:d8:aa:78:99:f8:9a:3c: 76:e9:30:83:7d:ab:e9:f0:65:7d:da:c0:a8:20:83: f4:d7:ff:3d:3e:00:df:cd:bd:1a:58:eb:a8:46:97: 13:3e:2c:fd:b7:4b:4c:c3:8b:aa:6e:4c:17:b0:7c: 78:65:2f:3f:90:11:f8:c7:5a:65:b7:60:d5:fb:b5: 08:31:ec:a6:2e:f8:a9:95:aa:cc:68:c2:8c:c5:1a: f0:15:fa:36:3f:86:fb:e0:82:5f:c5:21:3c:bd:16: 99:c2:08:70:fa:be:af:f7:63:de:d1:f0:df:db:bc: 21:21:2b:20:10:f6:e5:2c:07:87:22:04:a6:39:68: 31:e8:16:46:76:5c:22:54:e8:8e:a5:e5:8c:93:a9: 5e:f2:f2:b8:ef:39:c7:6e:d4:27:01:1a:30:30:1e: 1d:7e:d6:52:3f:cb:05:ad:5f:ff:f0:dc:d4:4a:02: d4:d2:73:28:ef:7b:6d:8f:9f:f6:c2:e2:4a:fa:73: df:9d:ef:f7:1e:64:b9:a1:11:6e:07:a1:a0:4f:68: da:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:66:41:FA:57:43:43:83:4B:A7:67:C2:B6:B5:C9:A2:22:DD:D4:FC X509v3 Authority Key Identifier: keyid:7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:36:20:25:f7:d6:86:a4:b4:49:95:3e:64:79:d0:c0:c4:bc: a7:7a:a4:0a:30:5b:f2:ea:17:02:ab:7b:24:05:7e:22:8d:a1: 62:26:9a:d0:f7:89:64:a5:53:a3:e1:51:42:f3:96:69:b7:e1: 44:4e:99:11:11:c3:0c:a0:59:4d:ee:b9:33:6c:a4:ea:90:ba: 74:de:e5:7e:f4:21:f2:71:ef:4a:4b:63:00:bc:1d:2b:48:eb: f3:64:6f:f9:ae:c7:fe:c3:63:9b:66:b5:11:1e:4f:e6:98:60: b9:c2:f8:b5:11:1c:a9:e1:4f:39:7b:4c:d6:93:55:a6:11:4a: 85:0a:76:e6:1c:2d:37:fb:1e:69:81:09:34:50:f0:df:33:58: 13:0a:31:ad:11:07:5a:5e:d0:36:7f:94:ee:c0:be:f3:0f:16: 88:08:c3:cf:41:6b:d0:30:7d:3d:e3:b0:59:f4:e5:af:4b:49: 78:9d:4b:2a:0c:3b:14:11:d3:a8:0f:7e:b6:4f:31:3b:02:56: 53:15:f4:64:4d:b3:00:2e:78:0d:56:f3:14:b8:0c:a9:20:e4: 31:f5:ae:2c:08:a7:23:12:8e:62:d9:d0:30:c6:2b:04:83:49: 96:21:4b:f9:5e:b9:23:e9:e5:42:44:36:77:ef:ad:72:77:36: e3:54:25:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc1M0YxMTAvBgNVBAUTKDdFNzJEODAxQjM4QTcyQUI0QjAzNzZFMTJDOTU0MTI0 QUFFNDNDNkQwHhcNMjQxMTIwMjAyNTQ3WhcNMjQxMTI3MjAyNTQ3WjAYMRYwFAYD VQQDEw02NzNlNDVjYi02ZTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUFaiPA7+gBjT8xkJJJEhteVSImIq/gupifLhhtoZb+Tq3lXG5CV+6ulH31M ShCTfbCWetiqeJn4mjx26TCDfavp8GV92sCoIIP01/89PgDfzb0aWOuoRpcTPiz9 t0tMw4uqbkwXsHx4ZS8/kBH4x1plt2DV+7UIMeymLviplarMaMKMxRrwFfo2P4b7 4IJfxSE8vRaZwghw+r6v92Pe0fDf27whISsgEPblLAeHIgSmOWgx6BZGdlwiVOiO peWMk6le8vK47znHbtQnARowMB4dftZSP8sFrV//8NzUSgLU0nMo73ttj5/2wuJK +nPfne/3HmS5oRFuB6GgT2jaqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNmQfpX Q0ODS6dnwra1yaIi3dT8MB8GA1UdIwQYMBaAFH5y2AGzinKrSwN24SyVQSSq5Dxt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzUzRi9CREE1N0ZGRUJD MTYxMUVBOUYyQjc0MTJDNEY5QUUwMi9mbkxZQWJPS2NxdExBM2JoTEpWQkpLcmtQ RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZuTFlBYk9LY3F0TEEzYmhMSlZCSktya1BHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzUzRi9CREE1N0ZGRUJDMTYxMUVBOUYyQjc0MTJDNEY5QUUwMi9mbkxZQWJPS2Nx dExBM2JoTEpWQkpLcmtQRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpNiAl99aGpLRJlT5kedDAxLyneqQKMFvy6hcCq3skBX4ijaFiJprQ 94lkpVOj4VFC85Zpt+FETpkREcMMoFlN7rkzbKTqkLp03uV+9CHyce9KS2MAvB0r SOvzZG/5rsf+w2ObZrURHk/mmGC5wvi1ERyp4U85e0zWk1WmEUqFCnbmHC03+x5p gQk0UPDfM1gTCjGtEQdaXtA2f5TuwL7zDxaICMPPQWvQMH0947BZ9OWvS0l4nUsq DDsUEdOoD362TzE7AlZTFfRkTbMALngNVvMUuAypIOQx9a4sCKcjEo5i2dAwxisE g0mWIUv5Xrkj6eVCRDZ3761ydzbjVCWR -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:55 2024 by rpki-client on console-ams.rpki-client.org