$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft File: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft (raw, json) Hash identifier: Qz7KoMgxalCYrrVrxfFkbFYYR9xun7FVB7KrtEexrjg= Subject key identifier: 70:6F:4D:F5:42:CB:62:16:22:2F:07:3D:EF:62:FD:11:B2:EC:DA:C6 Authority key identifier: 15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4 Certificate issuer: /CN=A9189BB3/serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4 Certificate serial: 0533 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft Manifest number: 0526 Signing time: Fri 22 Nov 2024 23:10:23 +0000 Manifest this update: Fri 22 Nov 2024 23:10:22 +0000 Manifest next update: Fri 29 Nov 2024 23:10:22 +0000 Files and hashes: 1: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl (hash: +zLF+245Bpeup4fjXM0FYrMskE2QQPvaHBk9MvU6+K0=) 2: AB532852B38911ED825BDC70C4F9AE02.roa (hash: ANHxtKugodgoKSgnFI0z3Q5CTPRRYAMndCAFyQe7v1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1331 (0x533) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189BB3/serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4 Validity Not Before: Nov 22 23:10:22 2024 GMT Not After : Nov 29 23:10:22 2024 GMT Subject: CN=67410f5e-c16f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:18:d5:8b:e2:8c:23:22:29:cd:97:ff:29:d3: eb:86:ce:d6:cb:a3:cc:82:0d:cd:ab:00:44:db:27: 7d:9a:ee:77:4c:38:f4:0f:83:15:71:d0:ab:8d:96: 87:6d:1e:a6:14:1b:61:40:ef:a7:01:54:0b:d2:2c: 17:2a:9e:79:20:80:ce:1f:3b:32:60:f3:59:4d:b5: f3:d1:b5:41:a9:f5:e5:e3:e0:b4:70:5a:28:42:28: 6a:cf:cd:dc:65:bd:dd:db:3b:e7:69:83:f4:a1:a9: 49:69:b1:f8:d8:3c:61:d5:21:fc:fc:4d:5c:c9:84: 29:d4:66:a4:e5:5c:a4:1b:d0:c0:a8:3f:88:0b:ea: 29:9c:0e:dd:0e:6e:35:84:e8:11:83:65:11:8b:38: 9a:25:c7:40:ea:a0:07:a6:af:0c:30:8e:8d:27:d3: cd:3a:89:95:d2:b7:11:cd:65:29:7f:bb:42:f8:31: d6:83:7b:59:04:b3:b3:c9:85:ba:b4:87:15:36:5f: 53:3f:cd:ec:f4:3f:7a:cf:d1:30:e8:ba:a8:eb:92: bf:02:b9:2a:49:10:3d:f9:d2:c4:7e:76:3e:60:f7: eb:93:09:b7:e8:ff:f7:c0:71:6b:5e:dc:08:42:dc: 1d:b8:5e:8e:5f:2e:52:be:58:4b:f6:18:e6:d4:01: 13:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6F:4D:F5:42:CB:62:16:22:2F:07:3D:EF:62:FD:11:B2:EC:DA:C6 X509v3 Authority Key Identifier: keyid:15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:c7:12:98:72:53:fa:16:5d:6c:7e:74:92:48:04:a3:41:ed: a1:6b:11:6c:90:f0:d0:aa:19:a2:0f:23:c6:0b:5b:8b:c6:5e: 6a:10:d8:9a:d1:44:b3:8a:b2:a6:ae:fb:78:36:d6:a0:a8:cc: 70:b9:98:08:8b:d1:27:5d:3d:1d:9a:8f:92:a4:05:c2:39:39: f1:35:85:eb:18:cd:d4:c1:c3:9c:c5:36:f4:75:39:41:21:39: ef:e6:f2:1e:ee:35:d4:94:cc:b6:70:19:01:20:4d:76:4e:f6: 7f:92:85:e9:04:26:5f:5d:ed:b3:65:9d:82:6c:1d:8a:04:78: ad:73:49:0b:20:71:f4:60:7d:ab:47:e4:0c:b1:14:03:fc:72: 0b:b4:07:f0:9b:11:96:ca:36:2a:b5:77:4c:21:04:7a:bc:d0: 5d:25:ca:f6:6d:fd:03:5b:21:ec:71:df:08:ec:bd:0f:8c:cf: 5e:6a:1e:df:9d:c1:8d:39:e9:86:7a:78:0f:7e:63:4c:9e:dc: 85:ab:d3:53:9f:3f:8b:34:ac:64:a7:b5:de:14:24:ea:ca:f8: ae:16:d2:20:55:91:0b:97:a1:b2:b9:38:29:28:e0:17:b2:6c: 59:39:93:60:ab:5b:fd:70:f8:05:57:1a:5d:94:d5:a8:cb:c0: d5:56:ce:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCQjMxMTAvBgNVBAUTKDE1MjhGNjNEMjhGM0UxMzY2OTAyQzZCNjRBRjU4NjZD Q0JBOERBQzQwHhcNMjQxMTIyMjMxMDIyWhcNMjQxMTI5MjMxMDIyWjAYMRYwFAYD VQQDEw02NzQxMGY1ZS1jMTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAphjVi+KMIyIpzZf/KdPrhs7Wy6PMgg3NqwBE2yd9mu53TDj0D4MVcdCrjZaH bR6mFBthQO+nAVQL0iwXKp55IIDOHzsyYPNZTbXz0bVBqfXl4+C0cFooQihqz83c Zb3d2zvnaYP0oalJabH42Dxh1SH8/E1cyYQp1Gak5VykG9DAqD+IC+opnA7dDm41 hOgRg2URiziaJcdA6qAHpq8MMI6NJ9PNOomV0rcRzWUpf7tC+DHWg3tZBLOzyYW6 tIcVNl9TP83s9D96z9Ew6Lqo65K/ArkqSRA9+dLEfnY+YPfrkwm36P/3wHFrXtwI QtwduF6OXy5SvlhL9hjm1AEThwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHBvTfVC y2IWIi8HPe9i/RGy7NrGMB8GA1UdIwQYMBaAFBUo9j0o8+E2aQLGtkr1hmzLqNrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUJCMy9BNDQ3ODY3NERG Q0UxMUVCOTU5QjUwMUZDNEY5QUUwMi9GU2oyUFNqejRUWnBBc2EyU3ZXR2JNdW8y c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTajJQU2p6NFRacEFzYTJTdldHYk11bzJzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUJCMy9BNDQ3ODY3NERGQ0UxMUVCOTU5QjUwMUZDNEY5QUUwMi9GU2oyUFNqejRU WnBBc2EyU3ZXR2JNdW8yc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjxxKYclP6Fl1sfnSSSASjQe2haxFskPDQqhmiDyPGC1uLxl5qENia 0USzirKmrvt4NtagqMxwuZgIi9EnXT0dmo+SpAXCOTnxNYXrGM3UwcOcxTb0dTlB ITnv5vIe7jXUlMy2cBkBIE12TvZ/koXpBCZfXe2zZZ2CbB2KBHitc0kLIHH0YH2r R+QMsRQD/HILtAfwmxGWyjYqtXdMIQR6vNBdJcr2bf0DWyHscd8I7L0PjM9eah7f ncGNOemGengPfmNMntyFq9NTnz+LNKxkp7XeFCTqyviuFtIgVZELl6GyuTgpKOAX smxZOZNgq1v9cPgFVxpdlNWoy8DVVs4n -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:44 2024 by rpki-client on console-ams.rpki-client.org