$ rpki-client -vvf rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft File: f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft (raw, json) Hash identifier: mmt1F8wHa58vhPl1JWUFGHCG861ujSEMKFlEScSZu9A= Subject key identifier: 3E:03:7D:7A:A9:20:88:BB:60:E6:08:D6:AF:E9:F3:DD:F9:B8:A0:15 Authority key identifier: 7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF Certificate issuer: /CN=A9190992/serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF Certificate serial: 03F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft Manifest number: 03E6 Signing time: Sat 23 Nov 2024 00:08:57 +0000 Manifest this update: Sat 23 Nov 2024 00:08:57 +0000 Manifest next update: Sat 30 Nov 2024 00:08:57 +0000 Files and hashes: 1: f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl (hash: bolhwD0eYCGGJeiZq/v62TIO97oIp+42g+ua085Tktw=) 2: 5B24C51A60ED11EC874B903BC4F9AE02.roa (hash: 5KlVV40dnTtpT7Iu2PhBylpIj/RTeJ/3JQqia5d4j2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1009 (0x3f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190992/serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF Validity Not Before: Nov 23 00:08:57 2024 GMT Not After : Nov 30 00:08:57 2024 GMT Subject: CN=67411d19-9bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a2:d6:be:2c:c5:26:c3:36:a4:45:9e:ed:d4: f4:41:17:b7:a5:3e:99:c3:83:82:b6:22:35:c1:f3: ee:e1:95:1a:89:e9:97:c3:cd:92:7c:6f:cc:a2:98: 87:ff:79:87:ed:5a:79:57:1a:e8:f8:b4:7d:51:21: 5a:5f:c7:36:da:2f:04:2c:8d:2a:33:ef:9e:6d:9a: 84:f6:d5:e0:7e:ce:7c:ee:a9:81:c3:d5:73:db:25: c5:e8:8b:4c:cc:b6:52:32:92:66:01:43:52:f6:2e: 2a:37:03:c6:06:f4:78:9f:53:eb:32:91:ec:39:22: 47:52:7d:51:a1:99:c3:af:70:d9:73:f5:71:21:dd: f0:f5:50:95:64:f4:e1:d1:ee:41:f8:68:35:c8:f7: 1f:c1:67:85:a1:83:a9:71:0d:7c:3b:5f:a5:14:ed: bf:1b:d0:4f:66:b3:20:22:5f:50:1a:f3:e2:eb:ce: 9a:67:cf:f4:5b:c3:cc:e3:e7:5d:c1:89:25:7a:b9: 7e:87:a5:1c:8c:93:5b:a3:d1:3f:79:23:f6:0a:ea: 0d:8a:53:26:d4:fa:13:22:37:c5:35:e2:91:be:44: 4e:5e:1a:3b:de:78:7e:ad:d4:c8:d3:02:2e:e2:6e: ac:56:ad:ae:81:00:02:c4:cd:1a:db:b4:c4:f8:ea: fe:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:03:7D:7A:A9:20:88:BB:60:E6:08:D6:AF:E9:F3:DD:F9:B8:A0:15 X509v3 Authority Key Identifier: keyid:7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b1:cf:cf:a4:20:2c:9e:78:e7:c9:ad:d6:12:26:8e:52:be: 3f:98:76:c0:29:eb:da:b0:37:65:d2:6b:23:00:9c:8e:4b:16: 0c:fc:b2:03:03:a0:7a:35:5f:d6:09:e3:11:6b:2c:53:60:c7: a9:79:eb:97:24:73:90:97:8b:74:e4:32:71:f3:bb:0f:3b:b3: a1:bf:f5:42:42:55:42:16:53:ba:25:26:f9:0a:ff:9b:e6:ad: ec:9e:6b:fd:17:40:24:6e:b3:21:f6:69:14:38:91:65:db:d5: 33:77:63:82:80:69:b2:81:9d:f8:73:f7:12:fe:49:9a:b5:b9: a6:11:b2:ff:85:9c:0d:d2:be:3b:ef:80:83:23:ac:b1:57:1c: 8e:91:1b:8f:11:18:dc:06:13:b8:2b:a2:e2:17:2c:b6:36:22: 9e:6a:0e:83:9b:82:36:12:cc:a6:ea:27:86:6b:0e:8c:d8:72: 29:9f:55:76:d0:b6:e8:e5:53:3e:47:43:ef:9d:bc:20:ca:fd: 76:89:aa:68:f2:79:dc:a9:60:21:40:99:ab:55:e7:2f:9f:56: 95:05:c7:28:7b:f2:8a:e7:d7:b9:28:42:66:fd:e5:52:3d:b4: f2:45:22:86:14:e1:c6:83:cd:cd:27:60:0e:ab:24:58:c0:c3: 5c:89:0e:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5OTIxMTAvBgNVBAUTKDdGNjVDMTEwRTJBMTdFNDFENzcwRkMyREZBNDAzRDE2 QTMzRTVDQUYwHhcNMjQxMTIzMDAwODU3WhcNMjQxMTMwMDAwODU3WjAYMRYwFAYD VQQDEw02NzQxMWQxOS05YmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA36LWvizFJsM2pEWe7dT0QRe3pT6Zw4OCtiI1wfPu4ZUaiemXw82SfG/MopiH /3mH7Vp5Vxro+LR9USFaX8c22i8ELI0qM++ebZqE9tXgfs587qmBw9Vz2yXF6ItM zLZSMpJmAUNS9i4qNwPGBvR4n1PrMpHsOSJHUn1RoZnDr3DZc/VxId3w9VCVZPTh 0e5B+Gg1yPcfwWeFoYOpcQ18O1+lFO2/G9BPZrMgIl9QGvPi686aZ8/0W8PM4+dd wYklerl+h6UcjJNbo9E/eSP2CuoNilMm1PoTIjfFNeKRvkROXho73nh+rdTI0wIu 4m6sVq2ugQACxM0a27TE+Or+BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD4DfXqp IIi7YOYI1q/p8935uKAVMB8GA1UdIwQYMBaAFH9lwRDioX5B13D8LfpAPRajPlyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDk5Mi81QjNEMDgwMjVD MEUxMUVDOTc2MDM2MTdDNEY5QUUwMi9mMlhCRU9LaGZrSFhjUHd0LWtBOUZxTS1Y SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YyWEJFT0toZmtIWGNQd3Qta0E5RnFNLVhLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDk5Mi81QjNEMDgwMjVDMEUxMUVDOTc2MDM2MTdDNEY5QUUwMi9mMlhCRU9LaGZr SFhjUHd0LWtBOUZxTS1YSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArsc/PpCAsnnjnya3WEiaOUr4/mHbAKevasDdl0msjAJyOSxYM/LID A6B6NV/WCeMRayxTYMepeeuXJHOQl4t05DJx87sPO7Ohv/VCQlVCFlO6JSb5Cv+b 5q3snmv9F0AkbrMh9mkUOJFl29Uzd2OCgGmygZ34c/cS/kmatbmmEbL/hZwN0r47 74CDI6yxVxyOkRuPERjcBhO4K6LiFyy2NiKeag6Dm4I2Esym6ieGaw6M2HIpn1V2 0Lbo5VM+R0Pvnbwgyv12iapo8nncqWAhQJmrVecvn1aVBccoe/KK59e5KEJm/eVS PbTyRSKGFOHGg83NJ2AOqyRYwMNciQ6x -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:36 2024 by rpki-client on console-fra.rpki-client.org