$ rpki-client -vvf rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft File: fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft (raw, json) Hash identifier: lC1XZdZURndZSerLN2cQzEevcxaTa9bVi3/HBIa/x+U= Subject key identifier: 6F:BB:2F:92:0F:43:65:BE:82:5A:CC:8D:CA:FF:39:D1:71:D5:59:2D Authority key identifier: 7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85 Certificate issuer: /CN=A9194D56/serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85 Certificate serial: 230E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft Manifest number: 22ED Signing time: Fri 22 Nov 2024 15:51:06 +0000 Manifest this update: Fri 22 Nov 2024 15:51:05 +0000 Manifest next update: Fri 29 Nov 2024 15:51:05 +0000 Files and hashes: 1: fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl (hash: yaL1J4skz/KHNEHnaMotit574VurpZFyKpwCHUkJQqc=) 2: AD8187A41FF511ED8DD6D661C4F9AE02.roa (hash: hlAH68hEjJH34E2Ep5RK/KWypzVM/kESjdq2XtDtpa0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:51:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8974 (0x230e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194D56/serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85 Validity Not Before: Nov 22 15:51:05 2024 GMT Not After : Nov 29 15:51:05 2024 GMT Subject: CN=6740a86a-9171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ed:34:14:38:b8:71:f4:b4:ef:b1:08:86:6d: 86:e6:ee:68:33:84:03:e9:03:65:34:04:8d:56:19: 6d:1e:14:ea:b1:cf:7f:4c:38:44:89:65:37:70:db: 87:47:8c:73:b5:7d:2e:b7:98:58:b2:53:29:f3:12: 06:9b:1d:47:d0:5d:a9:d3:d8:64:ea:0b:d9:1a:07: 38:fa:af:0e:31:cd:40:27:eb:eb:4d:62:2a:b9:14: e6:e1:3c:5c:77:74:b5:00:52:ca:7d:64:b8:aa:e0: 62:16:30:a1:fc:66:bc:3d:19:7b:c5:32:c1:a8:7e: bc:4a:11:a4:cb:60:ec:4f:37:57:d1:f3:a2:7c:3c: 49:d2:09:37:e7:de:eb:f1:a5:13:cd:8b:06:25:a8: 20:8a:2e:73:76:41:08:a6:9c:0a:0c:1d:f4:af:4f: 3c:5d:68:a6:12:5f:4d:cf:0c:12:5f:02:1b:49:a7: e5:42:5f:22:33:7a:12:47:a4:92:e0:fd:e5:47:c6: 08:23:62:a7:ef:e7:55:3f:43:e6:72:be:cc:20:d0: c5:ce:f4:64:3f:e1:c6:91:20:17:aa:90:8c:e8:c7: 6b:16:90:91:02:f2:b4:e5:68:a4:09:61:dc:e6:8e: b7:89:c8:31:9e:b1:98:99:46:22:f6:32:82:d8:d4: 84:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:BB:2F:92:0F:43:65:BE:82:5A:CC:8D:CA:FF:39:D1:71:D5:59:2D X509v3 Authority Key Identifier: keyid:7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:61:cb:93:e0:37:61:0d:cd:8c:92:30:da:9f:7d:92:c2:44: 9c:54:f5:e1:cf:df:fd:93:37:3b:c4:1a:d5:18:b8:a1:64:6c: 2f:4a:cf:42:d3:33:49:cc:b0:bc:e1:76:2d:07:36:5c:60:28: 2f:8b:ba:31:d0:a9:f9:6a:6f:21:d3:a7:95:08:18:ea:ee:4f: d0:96:e8:36:5a:3a:54:35:d0:f7:02:e0:88:2f:d4:8c:27:8e: 5c:8b:0c:1a:e7:a9:4c:01:89:ee:9f:9a:b0:f5:e9:ba:68:51: 2e:25:c1:8c:8e:dd:ce:7b:83:43:86:d6:1e:9f:d2:9d:ba:cc: 48:c7:73:a6:9f:fc:48:a9:cd:9d:cd:f9:1a:af:a3:aa:42:ec: d1:ff:d9:68:b3:9f:4e:80:87:4c:7a:a8:0e:e8:95:84:5e:a0: 1a:ec:68:6a:dc:1d:25:ed:4b:fd:28:3f:eb:d5:76:63:3d:9d: 51:42:df:7d:00:03:ed:18:5f:f3:65:c9:14:ba:28:ae:97:c9: f5:3f:dd:32:e4:61:5e:8f:90:17:a4:92:3e:90:36:6a:6e:bc: 19:17:7b:d8:4b:cb:f6:3d:82:5d:17:82:84:79:0a:60:8a:17: d8:aa:95:91:8e:70:01:f5:75:3a:6f:f3:bf:2e:06:d5:4f:a5: fe:92:42:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRENTYxMTAvBgNVBAUTKDdDNUI3NDE0RTNDQzgwNDA1OUJDQTg2Q0M1MTYzQTA3 NDNFNDFDODUwHhcNMjQxMTIyMTU1MTA1WhcNMjQxMTI5MTU1MTA1WjAYMRYwFAYD VQQDEw02NzQwYTg2YS05MTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzu00FDi4cfS077EIhm2G5u5oM4QD6QNlNASNVhltHhTqsc9/TDhEiWU3cNuH R4xztX0ut5hYslMp8xIGmx1H0F2p09hk6gvZGgc4+q8OMc1AJ+vrTWIquRTm4Txc d3S1AFLKfWS4quBiFjCh/Ga8PRl7xTLBqH68ShGky2DsTzdX0fOifDxJ0gk3597r 8aUTzYsGJaggii5zdkEIppwKDB30r088XWimEl9NzwwSXwIbSaflQl8iM3oSR6SS 4P3lR8YII2Kn7+dVP0Pmcr7MINDFzvRkP+HGkSAXqpCM6MdrFpCRAvK05WikCWHc 5o63icgxnrGYmUYi9jKC2NSE/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+7L5IP Q2W+glrMjcr/OdFx1VktMB8GA1UdIwQYMBaAFHxbdBTjzIBAWbyobMUWOgdD5ByF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEQ1Ni9FNUQ0MDdGRTg2 QjMxMUU1OThGMzdGMUFDNEY5QUUwMi9mRnQwRk9QTWdFQlp2S2hzeFJZNkIwUGtI SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGdDBGT1BNZ0VCWnZLaHN4Ulk2QjBQa0hJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEQ1Ni9FNUQ0MDdGRTg2QjMxMUU1OThGMzdGMUFDNEY5QUUwMi9mRnQwRk9QTWdF Qlp2S2hzeFJZNkIwUGtISVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOYcuT4DdhDc2MkjDan32SwkScVPXhz9/9kzc7xBrVGLihZGwvSs9C 0zNJzLC84XYtBzZcYCgvi7ox0Kn5am8h06eVCBjq7k/Qlug2WjpUNdD3AuCIL9SM J45ciwwa56lMAYnun5qw9em6aFEuJcGMjt3Oe4NDhtYen9KdusxIx3Omn/xIqc2d zfkar6OqQuzR/9los59OgIdMeqgO6JWEXqAa7Ghq3B0l7Uv9KD/r1XZjPZ1RQt99 AAPtGF/zZckUuiiul8n1P90y5GFej5AXpJI+kDZqbrwZF3vYS8v2PYJdF4KEeQpg ihfYqpWRjnAB9XU6b/O/LgbVT6X+kkIO -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:18 2024 by rpki-client on console-fra.rpki-client.org